last executing test programs: 4.474288709s ago: executing program 4 (id=262): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x7, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xffffffffffffffff}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x2000, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@empty, 0x0, 0x2, 0x1, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r1, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x725e65a6, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvfrom$inet6(r7, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r9 = getpgid(0x0) syz_open_procfs(r9, &(0x7f0000000140)='net/vlan/vlan1\x00') keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x1) 4.1130968s ago: executing program 0 (id=269): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20020000000000000000000080000000"}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) 3.562904377s ago: executing program 4 (id=272): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) pread64(r3, &(0x7f0000000240)=""/81, 0x51, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bc090000000000005509010000"], 0x0, 0x2}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) r8 = socket$inet6(0x10, 0x3, 0x0) close_range(r7, r8, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.324441625s ago: executing program 4 (id=273): brk(0x55555ede6001) syz_usb_connect$cdc_ecm(0x0, 0xed, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x1, 0x1, 0x3, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x59, {{0x8, 0x24, 0x6, 0x0, 0x0, "0ba688"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5a, 0x4, 0x6, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x3b}, @dmm={0x7, 0x24, 0x14, 0x74, 0x9}, @mdlm_detail={0x78, 0x24, 0x13, 0x0, "7582cfecc432d54cfb51e2c87de9e17973cc79a40f1c25822c0ab2019d8955b967453ba008c41c078c1c1499d2ca8d772d809f3b366024a45b2fc924ae55d9b5d1ab1c0dd820fc96ea86ac57021f35f74df724a3cf539020a007ade7691d9a41b6a186942fb34025e4570db382f999093195cc4d"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xaa}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x7ff, 0x0, 0xc0, 0x6, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xaf, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8, 0xb}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x8, 0x5, 0x5, 0xff, 0x95}, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="05039c758f87428105608f00000000000000c400000000000400303f00003000000000000000000000000710020207020017100108880002010700f720100a060500000006ff0100ff3fff0000c000000f0000"], 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x423}}, {0x8, &(0x7f0000000540)=@string={0x8, 0x3, "4064cf2e8a5c"}}, {0x18, &(0x7f0000000580)=@string={0x18, 0x3, "6714012178288103efadac1c72a5f555ae615626500f"}}, {0xe7, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$midi(0x0, 0xe8, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x1, 0x1, 0x3, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0xd, 0x24, 0x3, 0x3, 0xd, 0x3, [{0x80, 0xf7}, {0xff, 0x1}, {0x3, 0x2}], 0x3}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x9, 0x1, [{0x0, 0x5}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0xd, 0x2, [{0x8, 0x4}, {0x9, 0x7}], 0x81}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0x9}, @midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x8, 0x0, [], 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0xe4}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xc2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x80, 0x6f, 0xcf, {0xa, 0x25, 0x1, 0x6, "8e2f02ab1fb9"}}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x40, 0x6, 0x8, {0xf, 0x25, 0x1, 0xb, "90fdc5a9c8ceefe7594fb4"}}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x9, 0x6, 0x4, {0x14, 0x25, 0x1, 0x10, "50ba45ef9979e5fc7fca3c61888aba91"}}}, {{0x9, 0x5, 0x7acdf7ae38a267de, 0x1, 0x10, 0x4, 0x80, 0x3, {0x10, 0x25, 0x1, 0xc, "e266b30457117cccb289795e"}}}, {{0x9, 0x5, 0x7, 0x0, 0xe3cbe98be1e55d2e, 0x0, 0x8, 0x3, {0x8, 0x25, 0x1, 0x4, "d26f2e14"}}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0xe3, 0xbb, 0x35, {0x9, 0x25, 0x1, 0x5, "f426af3aad"}}}]}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x6, 0xb8, 0x7, 0x40, 0x2}, 0x1c, &(0x7f0000000940)={0x5, 0xf, 0x1c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x31, 0x2, 0x525c}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x7, 0x3}]}}) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pidfd_send_signal(r0, 0x21, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001200)) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @thr={&(0x7f00000007c0)="f69d5fe5ff0147323a0746bd6cc0ee47ac3a6f98c5e10faed8f215e27f118d9d44758e8cf845e8b8f6bac07d0bfad31f8b13b85bea902c9c2b4fc33e877b6515edbc46ed32f894e03830c7ad23902a1162ce6b8c1e58ce177446f71766ddcfa25316e96e1b9c64214f8a0c4750f9d286a9c0dcb78623cfc47c3e6d7fc976b453cd1a391e4b363d37fa1dabf9a31fd0fb1164db085c40f6fd28dd38c45a3e08fa5359f5cf2bf4af978f7bb713915046b7f82917c268da0be4423e99b0861e8317c0", &(0x7f00000008c0)="dfdd3166283ddddb4910643ee428dba5b141776006dab11613ae4a45f532920d6812e3adef1580661d51e66bb32ca1c968be1d8cbcaa247f31605757e456e919e70c814b09e998fd1909f47a"}}, &(0x7f0000bbdffc)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x10, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000940)) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x5, "00f400", 0x9, 0x8}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000100)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x3, 0x2, 0x4, {0xa, 0x4e22, 0x181f, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x3a) 2.206490041s ago: executing program 3 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x27, 0x37, 0x2, {0x2, 0x3, 0x6, 0xffffffffffffffff, 0x9, '/dev/kvm\x00'}}, 0x27) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x181) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128830807, 0x0, {[0x2a, 0xffffffffff7fff00, 0x80000001, 0x5, 0x1, 0xd, 0x2200000000000f, 0x6]}}) timer_create(0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.998506647s ago: executing program 3 (id=294): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) pread64(r3, &(0x7f0000000240)=""/81, 0x51, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bc090000000000005509010000"], 0x0, 0x2}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) r8 = socket$inet6(0x10, 0x3, 0x0) close_range(r7, r8, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.715993896s ago: executing program 3 (id=299): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x10001, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0x80, 0x20}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x7c6, 0x80000001, 0x4, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x68, 0x0, 0x43, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @local, {[@generic={0x82, 0x7, "57a77898d1"}, @ssrr={0x89, 0xf, 0xf2, [@multicast2, @empty, @local]}, @generic={0x44, 0xa, "eb588a85e38934c2"}, @ssrr={0x89, 0x1b, 0xe7, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x17, 0x23, [@multicast1, @private=0xa010100, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', r1, 0x8, 0x8000, 0x1, 0x12, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x67, 0x0, 0xc, 0x29, 0x0, @local, @remote, {[@rr={0x7, 0x1f, 0xf9, [@rand_addr=0x64010101, @remote, @local, @private=0xa010102, @loopback, @multicast1, @remote]}, @ssrr={0x89, 0x27, 0xc3, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000300)={@local, @private=0xa010101, 0xffffffffffffffff, "f85ab77f2feafc033e565068a16160427174dd3a22f1e8fd084a551c2bda9eb8", 0x1, 0x5, 0x101, 0x8}, 0x3c) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x440c1}, 0x4000000) r4 = openat$cgroup_ro(r0, &(0x7f0000000480)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f8, 0x65}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000640)=0x8) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000680)=0x1, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8) mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x2002, &(0x7f0000000880)={[{@redirect_dir_off}, {@uuid_off}, {@uuid_null}, {@verity_on}, {@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'nl80211\x00'}}, {@fowner_gt={'fowner>', r6}}, {@appraise}]}) close_range(r4, r4, 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x101000, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000980)=0x4) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000b80)='bpf_lsm_inode_getsecid\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1c, 0x1b, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1000}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x91}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000b00), 0x40f00, 0x8, '\x00', r1, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x3, 0xb, 0xe960, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x5, &(0x7f0000000bc0)=[r0], &(0x7f0000000c00)=[{0x4, 0x4, 0xe, 0x1}, {0x1, 0x1, 0xd, 0x6}, {0x3, 0x3, 0x2, 0x2}, {0x0, 0x4, 0x5, 0x2}, {0x0, 0x5, 0x1, 0x1}], 0x10, 0xa}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000d40)) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000002240)={0x6, 0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000e40)=""/181, 0xb5}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/117, 0x75}, {&(0x7f0000002040)=""/178, 0xb2}, {&(0x7f0000002100)=""/94, 0x5e}], &(0x7f0000002200)=[0x9, 0x0, 0x5, 0x87, 0x81]}, 0x20) ppoll(&(0x7f0000002280)=[{r0, 0x8029}, {r0, 0x4083}, {r4, 0x13}], 0x3, &(0x7f00000022c0)={0x0, 0x989680}, &(0x7f0000002300)={[0x5]}, 0x8) fsopen(&(0x7f0000002340)='cgroup\x00', 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002380)={r9, r4}, 0xc) 1.551525472s ago: executing program 3 (id=303): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x7, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xffffffffffffffff}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x2000, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@empty, 0x0, 0x2, 0x1, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r1, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x725e65a6, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvfrom$inet6(r7, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r9 = getpgid(0x0) syz_open_procfs(r9, &(0x7f0000000140)='net/vlan/vlan1\x00') keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x1) 1.351988987s ago: executing program 2 (id=306): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r0, @ANYBLOB="0900000000000000000001"], 0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa100, 0xd8) mkdir(&(0x7f00000003c0)='./file0\x00', 0x181) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0x3a4d, 0x100, 0x43, 0x1be}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000c62000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00005b6000/0x3000)=nil) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f00000000c0)=0x9, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) close_range(r5, r6, 0x2) getpeername$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) 1.334162898s ago: executing program 2 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c4b5}, 0x802) (async) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_mount_image$f2fs(&(0x7f00000068c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5539, &(0x7f0000000100)="$eJzs3M1rI2UYAPA3/dwv1yIevO3AIrSwCU0/Fr1V3cUP7FL8OHhy0yQN2U0ypUnT2pMLHsWD/4koePLo3+DBszfxoHgTKpl3Klt1F5Zkm378fjB9Zt5588zzDqXlmYEE4MKaS/78vRCuh8shhMkQwrUQsv1CvmXWYnglhHAjhDDx2FbIx/8ZmAkhXAkhXB8kjzkL+amvb/Vvrv723h8//DQ7dfWb738e36qBcXs1hNDejvt77RjTRowP8vFKv5nF9ko/j/FE+2F+nMa4V9/MMuxVjuZVsrjciPPT7d3uIG61KtVBbDS3svHtTrxgt984ypN94EFlJzuu1Tez2OymWWwcxLr2D+LftoNuL+ap5fk+y9KHXu8oxvH6fj2uZ/thFqudXj4e86a1+v4g9vOYXy5U01Ytq2NzmDt9ur3f7OzuJ/36TreZdpLVUvm1Uvl2sbyT1uq9+kqx0q7dXknmG63BtGKvXmmvNdK00aqXqml7IZlvVKvFcjmZv1PfbFY6SblcWi4tFlcX8r1bydv3Pk5atWR+EN9sdnZ7zVY32Up3kviJhWSptPz6QnKznHy4vpFsfHD37vrGR5/e+eTeG+vvvpVP+k9ZyfzS4tJSsbxYXCovnN31D/7XP9P6v8iLHuH6YSiFp528f3J1AJwh+n9gHE60/58OI+//g/5/JPT/F3b9h5lHh8PdQC62p/b/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcZ79Mf/tOtjMXj6/m4y/kQy/lx4UQwkQI4fB/TIaZYzkn8zzTT5g//a8afiyELMPgGrP5diWEsJZvf734vO8CAAAAnF/ffX7jq9itxx9z4y6IkxQf2kxcuz+ifIUQwvTcryPIEvKHTeHl4auKBr/fU2F/RNmyB1iXRpQsPnKbGjbLo2eZPHksXHosFGKYOJo5M2xdAADAqXG8Exi6CwEAAODU+nLcBTAe2ZvWw8NsP3/NNxtD/kLw8rEjAAAA4AwqjLsAAAAA4LnL+n/f/wcAAADnW/z+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5m525y0waiAAA/G1xo6Q+quu9VuoNj9AhddhlxFY5ArpALcAayyza7CCLboyigQCAYE6Lvk+zJ2KOXZwSLNx4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKd0Ws/H11e/+fqO3D1uujtPcEwEAAACbFsVsXP0xrPuDdP1buvQz9bOIyCPipdq9E5/WYnZSnGLL+GIjh5uIKkL5P3rp+BIRf9Lx8OPUnwIAAAB8XPPJdFRX6/VpeO6EaFM9aZN//dtQvCwiiuFdQ9Hy8vRrr6Gr1+eHyu93N/5vuZsdllo1sbVjLcyBBtEtk2tNJ/3cn5r+syarm7y9dAAAgLasVwItViEAAAC07N+5E+A8qreeaS1+WsDfq5v0QvDzWg8AAAC4QIeuegYAAADeo8HOu1X9fwH7/32/t/8fAAAAvFm9/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntChm4/lkOjo2znJ1nGaeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK48jpfnGa/GTLbR60zy7nkl+XRqfDs1fp0b/yRj3f0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADg3zufr6SACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqAmVhQ5m7IBgRQgKFrf9D51bqUrYOGYrExACyz05ejyIORbGvyecjPb+vLcfv+5woytfPOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLbz9l6cFZv5cdytjt15eGOt6O9O9IVbW/eWilbEnX+5/lcHlfjseznd6Sy2lwgAAABHR1bX9xH9yLdXiqA7X9b/eX1OUfN/9+w4ruv5ybq/7uvav2i//vLgxd2B5sfjFBe9uD4anvpnKr3sAOfZuLnpT33uP8/olXe+fPaSld+Q7nubL+zk5f3sfHP79jv9Mjy2r4wBgAN0su6roP57qOgHbSYGwJHRq1rhflX/Z/Pt5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQhP5mPF3HnYhY6u3FhbsPb6yV/cT+ra17S3U7d/PmVnrN4hJ5RFxcHw1PNTWRJ8DVa9c/Xh2NhleaD16JiPZGr4IPpjgnos0MBfsNutXP+nRfdSIi2s+5/aDlX0wAABw6edWKuv5+vr1SHOssRPz1/aP1/2tJHGn9P9Gn9f+DD8/dScdK6/9BYzOcfcsblz9bvnrt+hvrl1cvDS8NP3nz9OCtwZnzZ8+eXy6flSx7YgIAAMD+9KuW1v/dhYidifX/40kcU9b/n387+DIdK1P/P9beol/bmQAAABxtz5/44/fOY453+v34YnVj48pgvN3dPz3etpDq/3asamn9ny20nRUAAADQhJ3NziPr/xeSOKZc/3/mh5d+Sq+ZRcRctf5/cu3T0YXmptOSP6c6q4l/Jz7wqQIAADDT5qqWrv/n5fv/3d1XHroR8fqr47j6GMCp6v/s3a9/TMdK3/8/09wUZ1J3cXw/yn4xorfYdkYAAAAcZk9VrSj2f8u3Vz76+fj7fe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTt7wAAAP//J8lGwg==") r2 = open(&(0x7f0000000040)='./file1\x00', 0x80840, 0x112) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, 0x0) 1.211650792s ago: executing program 1 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) io_setup(0x6, &(0x7f00000000c0)=0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='mnt\x00', &(0x7f0000000180), &(0x7f0000000580), 0x2, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x12d) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000108}]) 1.089486296s ago: executing program 2 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400000000000000971db03ed3fd3cecaba03eec6c751ce8ed45", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES16=r2, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) syz_mount_image$exfat(&(0x7f0000005700), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000005900)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c616c6c6f8e5f7574696d653d30303030303030303030303030303030303030303135332c646973636172642c7569643deab675d37c21a749ca0c09761df171334bdfdfb9cde5b826868ca014e4ef9df87a6af6e1911e4057beeab1fc43aad796688765fb87ede3fb12062cccf64c710f551ca98cacab69500893bb61826169c342c8cba5d963989ed1be2a089217bc895a4664b70864e473cc5ccf0fd332c67c7506fd40117d78ea1bf4724676490fbddfbee7d45ca865db31", @ANYRESHEX=r4, @ANYBLOB="2c696f636861727365743d69736f383835392d31332c653e5686e2c85aca36e672726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c00"], 0x42, 0x152b, &(0x7f0000001dc0)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r7, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r6, 0x0}]) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sched_yield() 893.512402ms ago: executing program 0 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400000000000000971db03ed3fd3cecaba03eec6c751ce8ed45", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES16=r2, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) syz_mount_image$exfat(&(0x7f0000005700), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000005900)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c616c6c6f8e5f7574696d653d30303030303030303030303030303030303030303135332c646973636172642c7569643deab675d37c21a749ca0c09761df171334bdfdfb9cde5b826868ca014e4ef9df87a6af6e1911e4057beeab1fc43aad796688765fb87ede3fb12062cccf64c710f551ca98cacab69500893bb61826169c342c8cba5d963989ed1be2a089217bc895a4664b70864e473cc5ccf0fd332c67c7506fd40117d78ea1bf4724676490fbddfbee7d45ca865db31", @ANYRESHEX=r4, @ANYBLOB="2c696f636861727365743d69736f383835392d31332c653e5686e2c85aca36e672726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c00"], 0x42, 0x152b, &(0x7f0000001dc0)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r7, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r6, 0x0}]) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sched_yield() 808.467764ms ago: executing program 2 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x2, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xd2, &(0x7f0000000340)=ANY=[], 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x9, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0xa, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0xabba, 0x40000) r6 = dup(r5) ioctl$sock_TIOCINQ(r6, 0x9204, 0x0) write$binfmt_elf32(r6, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xf6, 0x8d, 0x1e, 0x8, 0x3, 0x3, 0x101, 0x35, 0x38, 0xb3, 0x5, 0x3b, 0x20, 0x3, 0x6, 0x2, 0x6}, [{0x1, 0x4, 0x34, 0xbb3, 0x8, 0xffffffff, 0xfffffffb, 0x79f62f4a}, {0x2, 0x80000001, 0x4, 0x6, 0x1, 0xf8f, 0x42, 0x401}, {0x6474e551, 0x80000001, 0x1, 0xc, 0x2, 0x4, 0xd9, 0x401}], "a70cb0e4dfc32afc7cf636f5753ea5d839379fdbe3e846496d7746e7ca630f8d44d55ebb7133298d43e73cf5f4827b163837a3945197480720012fdeb6c3d0d2395b51518ac7e4880b53d7e8c7318d7ffe318ed23646319e0c83c5572fc97c8f798ac0ef718b"}, 0xfe) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xf, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x200, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 747.747257ms ago: executing program 2 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 701.480998ms ago: executing program 2 (id=313): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r0, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x725e65a6, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) 687.536608ms ago: executing program 3 (id=314): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x0, 0x2af, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffffb]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r4, &(0x7f0000000180)=""/100, 0x64, 0x10000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000080)=0x100000001) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x64, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe315}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf87}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x840) 467.030135ms ago: executing program 0 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x88481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000d000000000000000000040000800800", @ANYRES64=r2], 0x1c}], 0x1, 0x0, 0x0, 0x40804}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000040)='syz0\x00') ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000001380)={&(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, 0x5f26, 0x0, 0xa3, 0x200, 0xc0a, 0x7, 0x200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)=@arm64={0xff, 0x5, 0x3, '\x00', 0x2}) socket(0x1, 0x1, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 441.966056ms ago: executing program 0 (id=316): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 441.149796ms ago: executing program 1 (id=317): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a015}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x40400) select(0x40, &(0x7f0000000040)={0x1, 0xf, 0x10001, 0x1, 0x4, 0x1, 0x3, 0x6}, 0x0, &(0x7f00000000c0)={0x9, 0x5, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, &(0x7f0000000100)={0x0, 0xea60}) 363.231269ms ago: executing program 1 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b40)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 302.42286ms ago: executing program 0 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) getpriority(0x0, r3) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 232.377783ms ago: executing program 0 (id=320): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20020000000000000000000080000000"}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) 231.867843ms ago: executing program 3 (id=321): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040004) socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x2d, &(0x7f0000000840)={0x7, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 229.237213ms ago: executing program 1 (id=322): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r0, @ANYBLOB="0900000000000000000001"], 0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa100, 0xd8) mkdir(&(0x7f00000003c0)='./file0\x00', 0x181) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0x3a4d, 0x100, 0x43, 0x1be}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000c62000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00005b6000/0x3000)=nil) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r5, r6, 0x2) getpeername$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) 175.808735ms ago: executing program 1 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400000000000000971db03ed3fd3cecaba03eec6c751ce8ed45", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES16=r2, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) syz_mount_image$exfat(&(0x7f0000005700), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000005900)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c616c6c6f8e5f7574696d653d30303030303030303030303030303030303030303135332c646973636172642c7569643deab675d37c21a749ca0c09761df171334bdfdfb9cde5b826868ca014e4ef9df87a6af6e1911e4057beeab1fc43aad796688765fb87ede3fb12062cccf64c710f551ca98cacab69500893bb61826169c342c8cba5d963989ed1be2a089217bc895a4664b70864e473cc5ccf0fd332c67c7506fd40117d78ea1bf4724676490fbddfbee7d45ca865db31", @ANYRESHEX=r4, @ANYBLOB="2c696f636861727365743d69736f383835392d31332c653e5686e2c85aca36e672726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c00"], 0x42, 0x152b, &(0x7f0000001dc0)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r7, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r6, 0x0}]) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sched_yield() 112.154617ms ago: executing program 4 (id=324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_read_part_table(0x1064, &(0x7f0000002580)="$eJzsz79twlAcBOBLLDtxovwp0gbRIzEMiFGQ6GALdqCBijEQa9CwgpFtGhYAiu8r3jvprvmFh/s9rpOXpEzeyo+bapnXPkzqJE3V5f130hTvaZJ8XoeDov//D6mzHX4l2c2T6d/oPK6SKqe2XdXJT9lNF+0729zxTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4WpcAAAD//8d6DiA=") (async) open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000aff000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ftruncate(r4, 0x4a8e) (async) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x13, r0, 0x8cee000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x66}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) (async) sendmsg$nl_route(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=@RTM_NEWMDB={0x18, 0x1e, 0x52f224f8e8c66371}, 0x18}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x20008000) 70.053688ms ago: executing program 4 (id=325): close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa911}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000080)='bpf_lsm_ib_pkey_access\x00') 12.57456ms ago: executing program 4 (id=326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="14", 0x1}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) 0s ago: executing program 1 (id=327): chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x4041}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) (fail_nth: 4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 19.033312][ T28] audit: type=1400 audit(1779249116.191:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.034564][ T279] cgroup: Unknown subsys name 'net' [ 19.037063][ T28] audit: type=1400 audit(1779249116.191:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.041920][ T28] audit: type=1400 audit(1779249116.201:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.042066][ T279] cgroup: Unknown subsys name 'devices' [ 19.162737][ T279] cgroup: Unknown subsys name 'hugetlb' [ 19.168700][ T279] cgroup: Unknown subsys name 'rlimit' [ 19.271369][ T28] audit: type=1400 audit(1779249116.431:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.294825][ T28] audit: type=1400 audit(1779249116.431:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.319890][ T28] audit: type=1400 audit(1779249116.431:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.329014][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.352774][ T28] audit: type=1400 audit(1779249116.511:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.378650][ T28] audit: type=1400 audit(1779249116.511:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.414659][ T28] audit: type=1400 audit(1779249116.571:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.415105][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.440710][ T28] audit: type=1400 audit(1779249116.571:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.547404][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.554760][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.562377][ T287] device bridge_slave_0 entered promiscuous mode [ 20.569276][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.576457][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.583885][ T287] device bridge_slave_1 entered promiscuous mode [ 20.661876][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.668947][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.676529][ T288] device bridge_slave_0 entered promiscuous mode [ 20.704054][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.711184][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.718742][ T288] device bridge_slave_1 entered promiscuous mode [ 20.825722][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.833026][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.840599][ T290] device bridge_slave_0 entered promiscuous mode [ 20.847968][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.855068][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.862585][ T290] device bridge_slave_1 entered promiscuous mode [ 20.908147][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.915255][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.922701][ T289] device bridge_slave_0 entered promiscuous mode [ 20.946846][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.953985][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.961506][ T289] device bridge_slave_1 entered promiscuous mode [ 20.968136][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.975282][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.982878][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.990192][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.998249][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.005630][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.013452][ T292] device bridge_slave_0 entered promiscuous mode [ 21.021007][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.028067][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.035796][ T292] device bridge_slave_1 entered promiscuous mode [ 21.049615][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.056866][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.064158][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.071199][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.188002][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.195096][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.202478][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.209722][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.224191][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.231548][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.238651][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.247151][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.254613][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.262556][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.269868][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.314427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.322726][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.329753][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.337447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.346229][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.353306][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.368472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.381788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.397053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.405432][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.412692][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.420624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.442534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.450418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.458783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.467179][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.474267][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.482392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.489900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.497797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.506390][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.513655][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.521294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.529530][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.536619][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.575137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.584077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.592553][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.599696][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.607538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.616554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.624885][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.631930][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.639270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.647530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.655599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.663947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.671961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.679935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.688369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.696714][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.714320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.722911][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.732166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.740523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.749193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.757887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.766495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.774676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.782932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.790474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.798576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.806932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.820405][ T288] device veth0_vlan entered promiscuous mode [ 21.827241][ T289] device veth0_vlan entered promiscuous mode [ 21.842011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.849549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.857216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.866126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.874326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.882426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.890315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.898798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.907253][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.914308][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.921733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.929984][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.938386][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.945550][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.952963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.960596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.968184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.983371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.995012][ T289] device veth1_macvtap entered promiscuous mode [ 22.006378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.015077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.024938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.034026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.052535][ T287] device veth0_vlan entered promiscuous mode [ 22.061288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.069768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.078615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.087084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.095860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.104084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.112610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.120119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.130166][ T288] device veth1_macvtap entered promiscuous mode [ 22.139978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.148467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.157098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.175314][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 22.185007][ T287] device veth1_macvtap entered promiscuous mode [ 22.193077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.202195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.210346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.218252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.226190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.234879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.243486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.251965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.260223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.272936][ T290] device veth0_vlan entered promiscuous mode [ 22.283484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.292043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.300563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.308991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.317659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.326185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.341199][ T292] device veth0_vlan entered promiscuous mode [ 22.363826][ T309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.366201][ T290] device veth1_macvtap entered promiscuous mode [ 22.390427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.399047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.407880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.416581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.425361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.433639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.449438][ T292] device veth1_macvtap entered promiscuous mode [ 22.516800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.560950][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.577451][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.586021][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.597504][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.606162][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.614832][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.813346][ T325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 22.830905][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.839394][ T330] loop2: detected capacity change from 0 to 512 [ 22.846500][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.847776][ T325] loop1: detected capacity change from 0 to 256 [ 22.855510][ T330] ext3: Unknown parameter 'subj_user' [ 22.896839][ T325] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 22.963505][ T325] serio: Serial port ptm0 [ 22.969709][ T336] loop3: detected capacity change from 0 to 128 [ 22.976677][ T336] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 22.991857][ T336] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.018015][ T332] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7'. [ 23.142115][ T311] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.238187][ T334] loop0: detected capacity change from 0 to 40427 [ 23.257254][ T334] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64) [ 23.273146][ T334] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 23.282234][ T334] F2FS-fs (loop0): invalid crc value [ 23.289215][ T334] F2FS-fs (loop0): Found nat_bits in checkpoint [ 23.351700][ T334] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 23.361501][ T334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 23.431525][ T290] syz-executor: attempt to access beyond end of device [ 23.431525][ T290] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 23.480929][ T298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.510925][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.538281][ T348] loop0: detected capacity change from 0 to 128 [ 23.545063][ T348] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 23.557483][ T348] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.631330][ T311] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.671975][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.686009][ T351] Zero length message leads to an empty skb [ 23.691999][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.700877][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 23.709560][ T298] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 23.709698][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.738371][ T354] loop0: detected capacity change from 0 to 1024 [ 23.745250][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.756617][ T298] usb 4-1: config 0 descriptor?? [ 23.810859][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.812339][ T358] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13'. [ 23.820674][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 23.820709][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 23.820730][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.831658][ T354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.861496][ T24] usb 2-1: config 0 descriptor?? [ 23.912763][ T290] EXT4-fs (loop0): unmounting filesystem. [ 23.980105][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.999403][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.021638][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.051197][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.093209][ T358] loop4: detected capacity change from 0 to 256 [ 24.116842][ T358] exfat: Unknown parameter '' [ 24.151955][ T366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15'. [ 24.161027][ T329] syz.2.6 (329) used greatest stack depth: 20640 bytes left [ 24.168583][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 24.168598][ T28] audit: type=1326 audit(1779249121.321:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=341 comm="syz.1.9" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x0 [ 24.282025][ T28] audit: type=1400 audit(1779249121.431:126): avc: denied { read } for pid=339 comm="syz.3.8" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.323916][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 24.331420][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 24.340380][ T24] usb 2-1: USB disconnect, device number 2 [ 24.367032][ T28] audit: type=1400 audit(1779249121.431:127): avc: denied { open } for pid=339 comm="syz.3.8" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.379369][ T373] mmap: syz.2.17 (373): VmData 29073408 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 24.459547][ T28] audit: type=1400 audit(1779249121.441:128): avc: denied { ioctl } for pid=339 comm="syz.3.8" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.459679][ T368] loop0: detected capacity change from 0 to 256 [ 24.489208][ T28] audit: type=1400 audit(1779249121.471:129): avc: denied { create } for pid=339 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.536764][ T28] audit: type=1400 audit(1779249121.481:130): avc: denied { write } for pid=341 comm="syz.1.9" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 24.562641][ T379] loop2: detected capacity change from 0 to 512 [ 24.569596][ T379] ext3: Unknown parameter 'subj_user' [ 24.586094][ T381] loop1: detected capacity change from 0 to 512 [ 24.592938][ T381] ext3: Unknown parameter 'subj_user' [ 24.656471][ T28] audit: type=1326 audit(1779249121.481:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=341 comm="syz.1.9" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x0 [ 24.673897][ T382] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 24.681090][ T28] audit: type=1400 audit(1779249121.511:132): avc: denied { create } for pid=372 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.687046][ T371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.706513][ T28] audit: type=1400 audit(1779249121.511:133): avc: denied { write } for pid=372 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.752899][ T368] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 24.821380][ T28] audit: type=1400 audit(1779249121.511:134): avc: denied { read } for pid=372 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.058737][ T386] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21'. [ 25.156626][ T388] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 25.278416][ T390] exfat: Unknown parameter '' [ 25.419869][ T320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.930171][ T396] ======================================================= [ 25.930171][ T396] WARNING: The mand mount option has been deprecated and [ 25.930171][ T396] and is ignored by this kernel. Remove the mand [ 25.930171][ T396] option from the mount to silence this warning. [ 25.930171][ T396] ======================================================= [ 25.966389][ T396] EXT4-fs (loop2): Test dummy encryption mode enabled [ 25.988608][ T396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.013004][ T396] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.047559][ T398] netlink: 3 bytes leftover after parsing attributes in process `syz.1.24'. [ 26.110467][ T289] EXT4-fs (loop2): unmounting filesystem. [ 26.126190][ T407] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.140079][ T407] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.162037][ T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.180757][ T298] usbhid 4-1:0.0: can't add hid device: -71 [ 26.193473][ T298] usbhid: probe of 4-1:0.0 failed with error -71 [ 26.208695][ T298] usb 4-1: USB disconnect, device number 2 [ 26.300979][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.480891][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 26.487495][ T6] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.498814][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.506577][ T6] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.516407][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.523165][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 26.532372][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.541260][ T6] usb 1-1: config 0 descriptor?? [ 26.571143][ T298] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.580937][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.711966][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.723117][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.733618][ T312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 26.743056][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.754912][ T312] usb 3-1: config 0 descriptor?? [ 26.760872][ T298] usb 4-1: Using ep0 maxpacket: 16 [ 26.761528][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 26.772754][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.779179][ T298] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.793111][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.794756][ T298] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.814868][ T298] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.822246][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 26.829016][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 26.829714][ T298] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 26.838317][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.857530][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.863479][ T24] usb 5-1: config 0 descriptor?? [ 26.873328][ T298] usb 4-1: config 0 descriptor?? [ 26.926266][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 26.932349][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 26.939767][ T6] usb 1-1: USB disconnect, device number 2 [ 26.962714][ T415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.972143][ T415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.982406][ T415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.992130][ T415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.057364][ T428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'. [ 27.150955][ T416] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.182312][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 27.188404][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 27.201529][ T24] usb 5-1: USB disconnect, device number 2 [ 27.242945][ T298] usbhid 4-1:0.0: can't add hid device: -71 [ 27.253808][ T298] usbhid: probe of 4-1:0.0 failed with error -71 [ 27.262837][ T298] usb 4-1: USB disconnect, device number 3 [ 27.360880][ T416] usb 2-1: Using ep0 maxpacket: 16 [ 27.367199][ T416] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.378741][ T416] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.389311][ T416] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.396180][ T416] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.405667][ T416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.415266][ T416] usb 2-1: config 0 descriptor?? [ 27.480905][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.700931][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.702115][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.719621][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.729442][ T6] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 27.738623][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.748112][ T6] usb 1-1: config 0 descriptor?? [ 27.757594][ T416] usbhid 2-1:0.0: can't add hid device: -71 [ 27.764475][ T416] usbhid: probe of 2-1:0.0 failed with error -71 [ 27.772170][ T416] usb 2-1: USB disconnect, device number 3 [ 27.820906][ T40] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.890910][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 27.897302][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.912209][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.924595][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 27.940200][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.951012][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.964179][ T430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.973140][ T24] usb 5-1: config 0 descriptor?? [ 27.977169][ T430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.002039][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.013551][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.023692][ T40] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 28.033144][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.045757][ T40] usb 4-1: config 0 descriptor?? [ 28.254101][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.264473][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.277611][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.288851][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.342117][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 28.348226][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 28.365623][ T24] usb 5-1: USB disconnect, device number 3 [ 28.544065][ T454] netlink: 3 bytes leftover after parsing attributes in process `syz.4.39'. [ 29.154243][ T457] netlink: 3 bytes leftover after parsing attributes in process `syz.1.40'. [ 29.225039][ T40] usbhid 4-1:0.0: can't add hid device: -71 [ 29.237688][ T40] usbhid: probe of 4-1:0.0 failed with error -71 [ 29.240554][ T312] usbhid 3-1:0.0: can't add hid device: -71 [ 29.245511][ T40] usb 4-1: USB disconnect, device number 4 [ 29.264466][ T312] usbhid: probe of 3-1:0.0 failed with error -71 [ 29.272954][ T312] usb 3-1: USB disconnect, device number 2 [ 29.311319][ T463] set_capacity_and_notify: 3 callbacks suppressed [ 29.311339][ T463] loop2: detected capacity change from 0 to 128 [ 29.324970][ T463] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.338076][ T463] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.400675][ T465] netlink: 3 bytes leftover after parsing attributes in process `syz.4.43'. [ 29.680890][ T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.862134][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.873368][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.883341][ T40] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 29.892533][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.901731][ T40] usb 4-1: config 0 descriptor?? [ 30.000581][ T468] netlink: 3 bytes leftover after parsing attributes in process `syz.1.44'. [ 30.087097][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 30.106042][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 30.106454][ T311] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.113923][ T6] usb 1-1: USB disconnect, device number 3 [ 30.124087][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.137273][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.156739][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 30.156754][ T28] audit: type=1400 audit(1779249127.311:160): avc: denied { append } for pid=472 comm="syz.2.46" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.169228][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.200519][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.347142][ T28] audit: type=1400 audit(1779249127.501:161): avc: denied { validate_trans } for pid=479 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 30.510864][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.527885][ T28] audit: type=1400 audit(1779249127.681:162): avc: denied { create } for pid=485 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.552653][ T28] audit: type=1400 audit(1779249127.681:163): avc: denied { append } for pid=485 comm="syz.4.49" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 30.690866][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 30.697239][ T6] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.708223][ T6] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.718012][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.724686][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 30.733819][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.743063][ T6] usb 1-1: config 0 descriptor?? [ 30.997590][ T28] audit: type=1326 audit(1779249128.151:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.45" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741f9ce59 code=0x0 [ 31.101403][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 31.103766][ T28] audit: type=1326 audit(1779249128.261:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.45" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741f9ce59 code=0x0 [ 31.107541][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 31.144043][ T6] usb 1-1: USB disconnect, device number 4 [ 31.160648][ T40] usbhid 4-1:0.0: can't add hid device: -71 [ 31.169911][ T40] usbhid: probe of 4-1:0.0 failed with error -71 [ 31.170884][ T298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.188199][ T40] usb 4-1: USB disconnect, device number 5 [ 31.320152][ T499] loop0: detected capacity change from 0 to 512 [ 31.328760][ T499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.340294][ T499] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.354345][ T499] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 31.364652][ T499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a80ec01c, mo2=0002] [ 31.373339][ T499] System zones: 0-2, 18-18, 34-34 [ 31.384434][ T499] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.53: bad orphan inode 15 [ 31.396547][ T499] ext4_test_bit(bit=14, block=18) = 1 [ 31.402120][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 31.402180][ T499] is_bad_inode(inode)=0 [ 31.411784][ T499] NEXT_ORPHAN(inode)=2264924160 [ 31.412564][ T298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.416734][ T499] max_ino=32 [ 31.416745][ T499] i_nlink=0 [ 31.434205][ T298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.443809][ T499] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #15: comm syz.0.53: corrupted inode contents [ 31.447387][ T298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.463650][ T499] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #15: comm syz.0.53: mark_inode_dirty error [ 31.481795][ T499] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #15: comm syz.0.53: corrupted inode contents [ 31.505163][ T506] loop3: detected capacity change from 0 to 512 [ 31.508092][ T499] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2945: inode #15: comm syz.0.53: mark_inode_dirty error [ 31.511899][ T506] ext3: Unknown parameter 'subj_user' [ 31.531490][ T298] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 31.533783][ T499] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2948: inode #15: comm syz.0.53: mark inode dirty (error -117) [ 31.540549][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.544160][ T298] usb 2-1: config 0 descriptor?? [ 31.566299][ T499] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 31.576723][ T499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.588352][ T423] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.655104][ T499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.53'. [ 31.666021][ T499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=499 comm=syz.0.53 [ 31.707912][ T28] audit: type=1400 audit(1779249128.861:166): avc: denied { connect } for pid=498 comm="syz.0.53" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.756608][ T28] audit: type=1400 audit(1779249128.881:167): avc: denied { bind } for pid=498 comm="syz.0.53" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.800072][ T28] audit: type=1400 audit(1779249128.881:168): avc: denied { name_bind } for pid=498 comm="syz.0.53" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 31.840913][ T28] audit: type=1400 audit(1779249128.881:169): avc: denied { node_bind } for pid=498 comm="syz.0.53" saddr=fc01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 31.899720][ T290] EXT4-fs (loop0): unmounting filesystem. [ 31.929688][ T298] usbhid 2-1:0.0: can't add hid device: -71 [ 31.965181][ T298] usbhid: probe of 2-1:0.0 failed with error -71 [ 31.975761][ T298] usb 2-1: USB disconnect, device number 4 [ 32.893840][ T524] loop0: detected capacity change from 0 to 512 [ 32.900567][ T524] ext3: Unknown parameter 'subj_user' [ 32.927467][ T423] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.050929][ T298] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.084047][ T526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.60'. [ 33.230858][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 33.237589][ T298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.249994][ T298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.261127][ T298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.320325][ T298] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 33.330004][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.342762][ T298] usb 2-1: config 0 descriptor?? [ 33.723363][ T298] usbhid 2-1:0.0: can't add hid device: -71 [ 33.812855][ T298] usbhid: probe of 2-1:0.0 failed with error -71 [ 33.828513][ T298] usb 2-1: USB disconnect, device number 5 [ 34.640830][ T556] loop3: detected capacity change from 0 to 128 [ 34.655510][ T556] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.671149][ T556] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.973915][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.543926][ C0] sched: RT throttling activated [ 35.626580][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 35.640956][ T40] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.661860][ T40] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.671635][ T40] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.689269][ T40] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 35.732329][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.761678][ T40] usb 1-1: config 0 descriptor?? [ 35.822249][ T567] loop2: detected capacity change from 0 to 512 [ 35.830335][ T567] ext3: Unknown parameter 'subj_user' [ 35.843326][ T558] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.876242][ T321] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.087098][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.087115][ T28] audit: type=1326 audit(1779249133.084:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.65" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741f9ce59 code=0x0 [ 36.212899][ T40] usbhid 1-1:0.0: can't add hid device: -71 [ 36.225993][ T40] usbhid: probe of 1-1:0.0 failed with error -71 [ 36.234088][ T28] audit: type=1326 audit(1779249133.224:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.65" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741f9ce59 code=0x0 [ 36.236715][ T40] usb 1-1: USB disconnect, device number 5 [ 36.436589][ T581] netlink: 3 bytes leftover after parsing attributes in process `syz.0.74'. [ 36.634242][ T60] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.830235][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.916598][ T586] netlink: 68 bytes leftover after parsing attributes in process `syz.3.75'. [ 36.973162][ T588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.76'. [ 37.029361][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 37.035943][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.050701][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 37.057195][ T60] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.064004][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.078593][ T60] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.093514][ T589] serio: Serial port ptm0 [ 37.112550][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 37.127358][ T60] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.142780][ T591] serio: Serial port ptm1 [ 37.158761][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.172230][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 37.177576][ T60] usb 2-1: config 0 descriptor?? [ 37.181074][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.293991][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.303300][ T6] usb 5-1: config 0 descriptor?? [ 37.387380][ T594] netlink: 3 bytes leftover after parsing attributes in process `syz.0.77'. [ 37.463011][ T28] audit: type=1326 audit(1779249134.375:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.1.73" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x0 [ 37.556273][ T28] audit: type=1326 audit(1779249134.459:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=575 comm="syz.4.72" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd93799ce59 code=0x0 [ 37.581334][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 37.587521][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 37.594743][ T60] usb 2-1: USB disconnect, device number 6 [ 37.666489][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 37.668268][ T28] audit: type=1326 audit(1779249134.562:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=575 comm="syz.4.72" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd93799ce59 code=0x0 [ 37.672601][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 37.707985][ T6] usb 5-1: USB disconnect, device number 4 [ 37.713902][ T312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.905626][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 37.912211][ T312] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.923508][ T312] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.933366][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 37.940178][ T312] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.949269][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.957808][ T312] usb 4-1: config 0 descriptor?? [ 37.977507][ T608] loop4: detected capacity change from 0 to 128 [ 37.984258][ T608] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.996890][ T608] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.070158][ T507] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.205673][ T28] audit: type=1326 audit(1779249135.077:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.3.78" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869f59ce59 code=0x0 [ 38.242933][ T613] netlink: 68 bytes leftover after parsing attributes in process `syz.0.83'. [ 38.316591][ T28] audit: type=1326 audit(1779249135.170:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.3.78" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869f59ce59 code=0x0 [ 38.341155][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 38.362293][ T312] usbhid: probe of 4-1:0.0 failed with error -71 [ 38.363511][ T616] loop2: detected capacity change from 0 to 1024 [ 38.369658][ T312] usb 4-1: USB disconnect, device number 6 [ 38.406748][ T617] serio: Serial port ptm0 [ 38.421656][ T616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.430503][ T28] audit: type=1400 audit(1779249135.283:187): avc: denied { mount } for pid=615 comm="syz.2.84" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.479295][ T623] loop3: detected capacity change from 0 to 512 [ 38.486187][ T623] ext3: Unknown parameter 'subj_user' [ 38.494780][ T289] EXT4-fs (loop2): unmounting filesystem. [ 38.507976][ T321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.161758][ T312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.341247][ T636] loop4: detected capacity change from 0 to 1024 [ 39.369606][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 39.376213][ T312] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.387748][ T312] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.397793][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.400597][ T636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.441154][ T312] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 39.451075][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.475374][ T288] EXT4-fs (loop4): unmounting filesystem. [ 39.502529][ T312] usb 1-1: config 0 descriptor?? [ 39.522695][ T647] loop4: detected capacity change from 0 to 128 [ 39.529529][ T647] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.545451][ T647] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.633399][ T43] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.655856][ T649] loop4: detected capacity change from 0 to 128 [ 39.676049][ T651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.95'. [ 39.686921][ T649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.706554][ T649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.715698][ T649] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.786372][ T313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.794065][ T40] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.817455][ T28] audit: type=1326 audit(1779249136.546:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=626 comm="syz.0.87" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741f9ce59 code=0x0 [ 39.847358][ T288] EXT4-fs (loop4): unmounting filesystem. [ 39.850705][ T312] usbhid 1-1:0.0: can't add hid device: -71 [ 39.860279][ T312] usbhid: probe of 1-1:0.0 failed with error -71 [ 39.868349][ T28] audit: type=1326 audit(1779249136.621:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=626 comm="syz.0.87" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741f9ce59 code=0x0 [ 39.871857][ T312] usb 1-1: USB disconnect, device number 6 [ 39.900849][ T653] loop2: detected capacity change from 0 to 256 [ 39.908988][ T653] exfat: Unknown parameter '' [ 39.989406][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 39.994631][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 40.001134][ T313] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.012204][ T40] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.025989][ T313] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.039452][ T659] loop0: detected capacity change from 0 to 512 [ 40.040855][ T40] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.047316][ T659] ext3: Unknown parameter 'subj_user' [ 40.059647][ T313] usb 2-1: config 0 interface 0 has no altsetting 0 [ 40.080257][ T40] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.093471][ T313] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 40.103057][ T40] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 40.112554][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.121259][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.153218][ T313] usb 2-1: config 0 descriptor?? [ 40.162314][ T40] usb 4-1: config 0 descriptor?? [ 40.331392][ T60] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.527695][ T40] usbhid 4-1:0.0: can't add hid device: -71 [ 40.533713][ T40] usbhid: probe of 4-1:0.0 failed with error -71 [ 40.541595][ T40] usb 4-1: USB disconnect, device number 7 [ 40.555775][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 40.565407][ T60] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.574096][ T60] usb 5-1: config 0 has no interface number 0 [ 40.582125][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 40.588354][ T313] usbhid: probe of 2-1:0.0 failed with error -71 [ 40.596064][ T60] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.606103][ T313] usb 2-1: USB disconnect, device number 7 [ 40.613359][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.629138][ T60] usb 5-1: Product: syz [ 40.633452][ T60] usb 5-1: Manufacturer: syz [ 40.638087][ T60] usb 5-1: SerialNumber: syz [ 40.646652][ T60] usb 5-1: config 0 descriptor?? [ 40.708235][ T60] smsc95xx v2.0.0 [ 41.021804][ T675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.101'. [ 41.079544][ T677] netlink: 68 bytes leftover after parsing attributes in process `syz.0.102'. [ 41.269347][ T678] loop1: detected capacity change from 0 to 256 [ 41.278793][ T678] exfat: Unknown parameter '' [ 41.330840][ T668] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.340108][ T60] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 41.355385][ T677] loop0: detected capacity change from 0 to 256 [ 41.361780][ T60] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.372524][ T677] exfat: Unknown parameter '' [ 41.380913][ T60] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 41.381438][ T423] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.395077][ T60] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 41.411669][ T678] serio: Serial port ptm0 [ 41.423177][ T60] usb 5-1: USB disconnect, device number 5 [ 41.520658][ T685] loop0: detected capacity change from 0 to 1024 [ 41.540028][ T685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.559992][ T290] EXT4-fs (loop0): unmounting filesystem. [ 41.565896][ T668] usb 4-1: Using ep0 maxpacket: 16 [ 41.573987][ T668] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.585261][ T668] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.609970][ T668] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.611178][ T689] loop0: detected capacity change from 0 to 512 [ 41.622475][ T668] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 41.623419][ T689] ext3: Unknown parameter 'subj_user' [ 41.640689][ T668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.654054][ T668] usb 4-1: config 0 descriptor?? [ 41.679302][ T423] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.920612][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 41.920626][ T28] audit: type=1326 audit(1779249138.539:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=671 comm="syz.3.100" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869f59ce59 code=0x0 [ 41.959020][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.972906][ T693] netlink: 68 bytes leftover after parsing attributes in process `syz.4.107'. [ 42.107370][ T696] loop4: detected capacity change from 0 to 256 [ 42.114029][ T696] exfat: Unknown parameter '' [ 42.147784][ T668] usbhid 4-1:0.0: can't add hid device: -71 [ 42.153817][ T668] usbhid: probe of 4-1:0.0 failed with error -71 [ 42.174019][ T668] usb 4-1: USB disconnect, device number 8 [ 42.390248][ T700] loop2: detected capacity change from 0 to 1024 [ 42.460197][ T700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.566776][ T423] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.596774][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 42.605500][ T6] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.608543][ T289] EXT4-fs (loop2): unmounting filesystem. [ 42.648828][ T6] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.652341][ T705] netlink: 68 bytes leftover after parsing attributes in process `syz.0.109'. [ 42.669479][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.676176][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 42.692921][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.724225][ T708] loop2: detected capacity change from 0 to 512 [ 42.725413][ T6] usb 2-1: config 0 descriptor?? [ 42.765778][ T708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.777130][ T708] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.823160][ T28] audit: type=1400 audit(1779249139.391:197): avc: denied { append } for pid=707 comm="syz.2.110" path="/22/file0/blkio.throttle.io_serviced_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.884802][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.905785][ T712] loop0: detected capacity change from 0 to 256 [ 42.914027][ T712] exfat: Unknown parameter '' [ 42.935822][ T28] audit: type=1400 audit(1779249139.438:198): avc: denied { create } for pid=707 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.972997][ T321] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.043220][ T28] audit: type=1326 audit(1779249139.587:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.1.106" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x0 [ 43.104107][ T289] EXT4-fs (loop2): unmounting filesystem. [ 43.117432][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 43.126423][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 43.136274][ T28] audit: type=1326 audit(1779249139.672:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=690 comm="syz.1.106" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x0 [ 43.208925][ T6] usb 2-1: USB disconnect, device number 8 [ 43.211741][ T718] netlink: 68 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.279145][ T721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.113'. [ 43.397056][ T722] loop2: detected capacity change from 0 to 256 [ 43.406430][ T722] exfat: Unknown parameter '' [ 43.468018][ T726] exfat: Unknown parameter '' [ 43.495669][ T423] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.509397][ T722] serio: Serial port ptm0 [ 43.526529][ T321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.549725][ T28] audit: type=1400 audit(1779249140.074:201): avc: denied { create } for pid=727 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.616908][ T28] audit: type=1400 audit(1779249140.093:202): avc: denied { setopt } for pid=727 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.679293][ T28] audit: type=1400 audit(1779249140.196:203): avc: denied { append } for pid=727 comm="syz.0.115" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.805603][ T732] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 43.885804][ T734] ext3: Unknown parameter 'subj_user' [ 43.923158][ T423] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.975330][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.197137][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 44.203806][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.232520][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.304282][ T6] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 44.335013][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.382274][ T6] usb 1-1: config 0 descriptor?? [ 44.528572][ T740] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 44.540168][ T740] overlayfs: missing 'lowerdir' [ 44.919430][ T743] process 'syz.3.120' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 44.971154][ T6] hid-multitouch 0003:1FD2:6007.0001: unbalanced collection at end of report description [ 45.001744][ T6] hid-multitouch: probe of 0003:1FD2:6007.0001 failed with error -22 [ 45.003482][ T28] audit: type=1400 audit(1779249141.431:204): avc: denied { name_bind } for pid=742 comm="syz.3.120" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.194917][ T728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.204682][ T728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.592681][ T753] set_capacity_and_notify: 2 callbacks suppressed [ 45.592713][ T753] loop3: detected capacity change from 0 to 512 [ 45.607917][ T753] EXT4-fs: Ignoring removed i_version option [ 45.689126][ T750] netlink: 3 bytes leftover after parsing attributes in process `syz.4.123'. [ 45.798085][ T753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.807523][ T753] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.216270][ T60] usb 1-1: USB disconnect, device number 7 [ 46.268703][ T764] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 46.302513][ T762] netlink: 3 bytes leftover after parsing attributes in process `syz.0.124'. [ 46.382364][ T767] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 46.392357][ T28] audit: type=1326 audit(1779249142.732:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz.2.127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2f9ce59 code=0x7ffc0000 [ 46.450655][ T292] EXT4-fs (loop3): unmounting filesystem. [ 46.526207][ T769] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 47.276162][ T791] loop2: detected capacity change from 0 to 512 [ 47.283446][ T791] ext3: Unknown parameter 'subj_user' [ 47.332123][ T423] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.749186][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 47.804588][ T796] netlink: 68 bytes leftover after parsing attributes in process `syz.1.135'. [ 47.921129][ T798] loop4: detected capacity change from 0 to 512 [ 47.939833][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 47.963381][ T60] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.980798][ T798] ext3: Unknown parameter 'subj_user' [ 47.999850][ T60] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.011768][ T60] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.019044][ T60] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 48.153224][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.243941][ T60] usb 4-1: config 0 descriptor?? [ 48.303938][ T796] loop1: detected capacity change from 0 to 256 [ 48.320607][ T796] exfat: Unknown parameter '' [ 48.347396][ T796] serio: Serial port ptm0 [ 48.503062][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 48.503079][ T28] audit: type=1326 audit(1779249144.706:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=792 comm="syz.3.134" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869f59ce59 code=0x0 [ 48.623737][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 48.632813][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 48.636004][ T28] audit: type=1326 audit(1779249144.828:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=792 comm="syz.3.134" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869f59ce59 code=0x0 [ 48.645089][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 48.675192][ T60] usb 4-1: USB disconnect, device number 9 [ 48.861014][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.879288][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.909642][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 48.919281][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.943205][ T6] usb 3-1: config 0 descriptor?? [ 48.944720][ T798] syz.4.136 (798) used greatest stack depth: 20496 bytes left [ 49.008014][ T821] loop1: detected capacity change from 0 to 512 [ 49.015195][ T821] ext3: Unknown parameter 'subj_user' [ 49.165912][ T803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.175097][ T803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.194578][ T803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.205120][ T803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.767970][ T832] netlink: 3 bytes leftover after parsing attributes in process `syz.0.144'. [ 50.035606][ T839] loop3: detected capacity change from 0 to 512 [ 50.042448][ T839] ext3: Unknown parameter 'subj_user' [ 50.067648][ T321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.071128][ T841] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 50.353802][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.568560][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 50.575533][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.588679][ T844] netlink: 68 bytes leftover after parsing attributes in process `syz.0.149'. [ 50.600293][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.647106][ T60] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 50.710359][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.819520][ T60] usb 5-1: config 0 descriptor?? [ 51.089858][ T844] loop0: detected capacity change from 0 to 256 [ 51.112530][ T844] exfat: Unknown parameter '' [ 51.135395][ T850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.151'. [ 51.263089][ T60] hid-multitouch 0003:1FD2:6007.0002: unbalanced collection at end of report description [ 51.276491][ T60] hid-multitouch: probe of 0003:1FD2:6007.0002 failed with error -22 [ 51.287223][ T850] loop3: detected capacity change from 0 to 256 [ 51.296152][ T850] exfat: Unknown parameter '' [ 51.310167][ T850] serio: Serial port ptm0 [ 51.487606][ T836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.512376][ T836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.526619][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 51.536000][ T857] netlink: 68 bytes leftover after parsing attributes in process `syz.3.154'. [ 51.545143][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 51.558261][ T6] usb 3-1: USB disconnect, device number 3 [ 51.669300][ T859] netlink: 3 bytes leftover after parsing attributes in process `syz.2.155'. [ 51.717317][ T861] loop3: detected capacity change from 0 to 256 [ 51.723990][ T861] exfat: Unknown parameter '' [ 51.766774][ T423] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.780330][ T861] serio: Serial port ptm0 [ 52.088334][ T40] usb 5-1: USB disconnect, device number 6 [ 52.104979][ T865] netlink: 68 bytes leftover after parsing attributes in process `syz.4.157'. [ 52.240081][ T868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.158'. [ 52.278375][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.288078][ T866] loop4: detected capacity change from 0 to 256 [ 52.294721][ T866] exfat: Unknown parameter '' [ 52.353945][ T423] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.402509][ T865] serio: Serial port ptm0 [ 52.492039][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 52.512291][ T6] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 52.525708][ T869] loop0: detected capacity change from 0 to 256 [ 52.531402][ T6] usb 4-1: config 0 has no interface number 0 [ 52.532285][ T869] exfat: Unknown parameter '' [ 52.543680][ T6] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 52.567645][ T871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.159'. [ 52.576485][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.589979][ T6] usb 4-1: Product: syz [ 52.594173][ T6] usb 4-1: Manufacturer: syz [ 52.605480][ T6] usb 4-1: SerialNumber: syz [ 52.617546][ T423] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.677708][ T868] serio: Serial port ptm0 [ 52.681146][ T6] usb 4-1: config 0 descriptor?? [ 52.695509][ T6] smsc95xx v2.0.0 [ 52.734430][ T874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.337742][ T28] audit: type=1404 audit(1779249149.226:296): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 53.338831][ T6] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 53.365655][ T6] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.378918][ T6] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 53.391415][ T6] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 53.399137][ T6] usb 4-1: USB disconnect, device number 10 [ 53.416254][ T28] audit: type=1400 audit(1779249149.301:297): avc: denied { read write } for pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.445813][ T28] audit: type=1400 audit(1779249149.329:298): avc: denied { read write } for pid=881 comm="syz.2.163" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.550610][ T28] audit: type=1400 audit(1779249149.432:299): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.584255][ T884] netlink: 68 bytes leftover after parsing attributes in process `syz.4.164'. [ 53.624777][ T28] audit: type=1400 audit(1779249149.498:300): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.670492][ T28] audit: type=1400 audit(1779249149.526:301): avc: denied { read write } for pid=885 comm="syz.1.165" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 53.720972][ T28] audit: type=1400 audit(1779249149.582:302): avc: denied { mount } for pid=885 comm="syz.1.165" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 53.763679][ T28] audit: type=1326 audit(1779249149.582:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=885 comm="syz.1.165" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x0 [ 53.937545][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 53.937561][ T28] audit: type=1400 audit(1779249149.797:309): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.030941][ T28] audit: type=1400 audit(1779249149.825:310): avc: denied { write } for pid=889 comm="syz.3.166" name="unix" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 54.108308][ T28] audit: type=1400 audit(1779249149.844:311): avc: denied { read write } for pid=883 comm="syz.4.164" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.162681][ T28] audit: type=1400 audit(1779249149.844:312): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.230062][ T28] audit: type=1400 audit(1779249149.853:313): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.282051][ T28] audit: type=1400 audit(1779249149.900:314): avc: denied { create } for pid=892 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 54.316293][ T28] audit: type=1400 audit(1779249149.900:315): avc: denied { read } for pid=892 comm="syz.1.167" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 54.381149][ T28] audit: type=1400 audit(1779249149.900:316): avc: denied { bpf } for pid=892 comm="syz.1.167" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 54.402846][ T900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.180'. [ 54.424989][ T28] audit: type=1400 audit(1779249149.900:317): avc: denied { map_create } for pid=892 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.488913][ T28] audit: type=1400 audit(1779249149.965:318): avc: denied { bpf } for pid=892 comm="syz.1.167" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 54.599378][ T906] netlink: 68 bytes leftover after parsing attributes in process `syz.2.171'. [ 54.681037][ T904] serio: Serial port ptm0 [ 54.925754][ T907] serio: Serial port ptm0 [ 55.020985][ T913] netlink: 68 bytes leftover after parsing attributes in process `syz.4.173'. [ 55.029881][ T911] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 55.252889][ T913] serio: Serial port ptm0 [ 56.201459][ T942] netlink: 3 bytes leftover after parsing attributes in process `syz.2.184'. [ 56.334257][ T951] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 56.992959][ T966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.191'. [ 57.180247][ T966] serio: Serial port ptm0 [ 57.669361][ T979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.195'. [ 57.723854][ T979] serio: Serial port ptm0 [ 57.940205][ T982] netlink: 3 bytes leftover after parsing attributes in process `syz.0.196'. [ 59.290372][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 59.290387][ T28] audit: type=1400 audit(1779249154.804:462): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.321216][ T28] audit: type=1326 audit(1779249154.804:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.346263][ T28] audit: type=1326 audit(1779249154.804:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.372284][ T28] audit: type=1326 audit(1779249154.804:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.398201][ T28] audit: type=1326 audit(1779249154.804:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.414068][ T999] xt_l2tp: invalid flags combination: 4 [ 59.423095][ T28] audit: type=1326 audit(1779249154.804:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.453261][ T28] audit: type=1326 audit(1779249154.804:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.478742][ T28] audit: type=1326 audit(1779249154.804:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.503800][ T28] audit: type=1326 audit(1779249154.804:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.1.200" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fadc239ce59 code=0x7ffc0000 [ 59.528796][ T28] audit: type=1400 audit(1779249154.804:471): avc: denied { mounton } for pid=991 comm="syz.1.200" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 59.568665][ T1005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.206'. [ 59.657370][ T1005] serio: Serial port ptm0 [ 59.909342][ T1025] FAULT_INJECTION: forcing a failure. [ 59.909342][ T1025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.951169][ T1025] CPU: 1 PID: 1025 Comm: syz.3.213 Not tainted syzkaller #0 [ 59.958519][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 59.968693][ T1025] Call Trace: [ 59.971999][ T1025] [ 59.974949][ T1025] __dump_stack+0x21/0x24 [ 59.979305][ T1025] dump_stack_lvl+0x110/0x170 [ 59.984005][ T1025] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.989065][ T1025] dump_stack+0x15/0x24 [ 59.993241][ T1025] should_fail_ex+0x3d4/0x520 [ 59.997941][ T1025] should_fail+0xb/0x10 [ 60.002112][ T1025] should_fail_usercopy+0x1a/0x20 [ 60.007160][ T1025] _copy_to_user+0x1e/0x90 [ 60.011691][ T1025] simple_read_from_buffer+0xe9/0x160 [ 60.017112][ T1025] proc_fail_nth_read+0x1a6/0x220 [ 60.022160][ T1025] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.027824][ T1025] ? security_file_permission+0x94/0xb0 [ 60.033400][ T1025] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.038962][ T1025] vfs_read+0x27a/0x910 [ 60.043132][ T1025] ? __cfi_vfs_read+0x10/0x10 [ 60.047819][ T1025] ? __kasan_check_write+0x14/0x20 [ 60.052944][ T1025] ? mutex_lock+0x93/0x1b0 [ 60.057463][ T1025] ? __cfi_mutex_lock+0x10/0x10 [ 60.062340][ T1025] ? __fdget_pos+0x2cd/0x380 [ 60.066948][ T1025] ? ksys_read+0x71/0x250 [ 60.071294][ T1025] ksys_read+0x149/0x250 [ 60.075550][ T1025] ? __cfi_ksys_read+0x10/0x10 [ 60.080332][ T1025] ? fput+0x154/0x1a0 [ 60.084333][ T1025] ? debug_smp_processor_id+0x17/0x20 [ 60.089726][ T1025] __x64_sys_read+0x7b/0x90 [ 60.094338][ T1025] x64_sys_call+0x2f/0x9a0 [ 60.098981][ T1025] do_syscall_64+0x4c/0xa0 [ 60.103440][ T1025] ? clear_bhb_loop+0x30/0x80 [ 60.108150][ T1025] ? clear_bhb_loop+0x30/0x80 [ 60.112857][ T1025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.118783][ T1025] RIP: 0033:0x7f869f55d68e [ 60.123244][ T1025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.143235][ T1025] RSP: 002b:00007f86a0451fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.151775][ T1025] RAX: ffffffffffffffda RBX: 00007f86a04526c0 RCX: 00007f869f55d68e [ 60.160034][ T1025] RDX: 000000000000000f RSI: 00007f86a04520a0 RDI: 0000000000000005 [ 60.168029][ T1025] RBP: 00007f86a0452090 R08: 0000000000000000 R09: 0000000000000000 [ 60.176078][ T1025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.184075][ T1025] R13: 00007f869f816038 R14: 00007f869f815fa0 R15: 00007ffe37be6e88 [ 60.192114][ T1025] [ 60.222741][ T1027] xt_l2tp: invalid flags combination: 4 [ 60.314253][ T1037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.217'. [ 60.467711][ T1038] serio: Serial port ptm0 [ 60.580489][ T1046] netlink: 68 bytes leftover after parsing attributes in process `syz.2.220'. [ 60.694983][ T1051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.222'. [ 60.782262][ T1050] serio: Serial port ptm0 [ 60.801408][ T1051] serio: Serial port ptm1 [ 60.935882][ T1064] xt_l2tp: invalid flags combination: 4 [ 61.026679][ T1077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64216 sclass=netlink_route_socket pid=1077 comm=syz.4.231 [ 61.035981][ T1079] netlink: 68 bytes leftover after parsing attributes in process `syz.1.232'. [ 61.090293][ T1081] netlink: 'syz.0.233': attribute type 46 has an invalid length. [ 61.102024][ T1081] netlink: 'syz.0.233': attribute type 46 has an invalid length. [ 61.133182][ T1082] serio: Serial port ptm0 [ 61.296020][ T1091] serio: Serial port ptm0 [ 61.389263][ T1095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.238'. [ 61.445408][ T1095] serio: Serial port ptm0 [ 61.626060][ T1112] FAULT_INJECTION: forcing a failure. [ 61.626060][ T1112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.639191][ T1112] CPU: 1 PID: 1112 Comm: syz.0.245 Not tainted syzkaller #0 [ 61.646558][ T1112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 61.656793][ T1112] Call Trace: [ 61.660085][ T1112] [ 61.663016][ T1112] __dump_stack+0x21/0x24 [ 61.667361][ T1112] dump_stack_lvl+0x110/0x170 [ 61.672030][ T1112] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.677060][ T1112] dump_stack+0x15/0x24 [ 61.681317][ T1112] should_fail_ex+0x3d4/0x520 [ 61.685990][ T1112] should_fail+0xb/0x10 [ 61.690164][ T1112] should_fail_usercopy+0x1a/0x20 [ 61.695299][ T1112] _copy_to_user+0x1e/0x90 [ 61.699720][ T1112] simple_read_from_buffer+0xe9/0x160 [ 61.705091][ T1112] proc_fail_nth_read+0x1a6/0x220 [ 61.710122][ T1112] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 61.715673][ T1112] ? security_file_permission+0x94/0xb0 [ 61.721223][ T1112] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 61.726765][ T1112] vfs_read+0x27a/0x910 [ 61.730924][ T1112] ? __cfi_vfs_read+0x10/0x10 [ 61.735615][ T1112] ? __kasan_check_write+0x14/0x20 [ 61.740925][ T1112] ? mutex_lock+0x93/0x1b0 [ 61.745451][ T1112] ? __cfi_mutex_lock+0x10/0x10 [ 61.750334][ T1112] ? __fdget_pos+0x2cd/0x380 [ 61.754930][ T1112] ? ksys_read+0x71/0x250 [ 61.759290][ T1112] ksys_read+0x149/0x250 [ 61.763592][ T1112] ? __cfi_ksys_read+0x10/0x10 [ 61.768352][ T1112] ? debug_smp_processor_id+0x17/0x20 [ 61.773806][ T1112] __x64_sys_read+0x7b/0x90 [ 61.778303][ T1112] x64_sys_call+0x2f/0x9a0 [ 61.782800][ T1112] do_syscall_64+0x4c/0xa0 [ 61.787242][ T1112] ? clear_bhb_loop+0x30/0x80 [ 61.791931][ T1112] ? clear_bhb_loop+0x30/0x80 [ 61.796707][ T1112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.802605][ T1112] RIP: 0033:0x7fb741f5d68e [ 61.807023][ T1112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.826620][ T1112] RSP: 002b:00007fb742ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.835057][ T1112] RAX: ffffffffffffffda RBX: 00007fb742ea66c0 RCX: 00007fb741f5d68e [ 61.843126][ T1112] RDX: 000000000000000f RSI: 00007fb742ea60a0 RDI: 0000000000000005 [ 61.851096][ T1112] RBP: 00007fb742ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.859061][ T1112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.867027][ T1112] R13: 00007fb742216038 R14: 00007fb742215fa0 R15: 00007fff1e861708 [ 61.875088][ T1112] [ 62.495493][ T1134] netlink: 68 bytes leftover after parsing attributes in process `syz.2.254'. [ 62.633758][ T1134] serio: Serial port ptm0 [ 63.326646][ T1157] netlink: 68 bytes leftover after parsing attributes in process `syz.0.260'. [ 63.409717][ T1159] serio: Serial port ptm0 [ 63.533705][ T1166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'. [ 63.570821][ T1170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.267'. [ 63.640425][ T1170] serio: Serial port ptm0 [ 63.666416][ T1175] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 64.664257][ T28] kauditd_printk_skb: 399 callbacks suppressed [ 64.664275][ T28] audit: type=1400 audit(1779249159.829:871): avc: denied { read } for pid=1186 comm="syz.4.273" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 64.700069][ T28] audit: type=1400 audit(1779249159.829:872): avc: denied { read } for pid=1186 comm="syz.4.273" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 64.721677][ T28] audit: type=1400 audit(1779249159.866:873): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.746462][ T28] audit: type=1400 audit(1779249159.866:874): avc: denied { read write } for pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.770835][ T28] audit: type=1400 audit(1779249159.904:875): avc: denied { create } for pid=1186 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 64.792372][ T28] audit: type=1400 audit(1779249159.904:876): avc: denied { create } for pid=1209 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 64.813403][ T28] audit: type=1400 audit(1779249159.941:877): avc: denied { read write } for pid=1207 comm="syz.1.281" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 64.837277][ T28] audit: type=1400 audit(1779249159.941:878): avc: denied { mounton } for pid=1207 comm="syz.1.281" path="/54/file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 64.859736][ T28] audit: type=1400 audit(1779249159.969:879): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.884220][ T28] audit: type=1400 audit(1779249159.969:880): avc: denied { read write } for pid=1213 comm="syz.1.283" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 65.219969][ T1227] FAULT_INJECTION: forcing a failure. [ 65.219969][ T1227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.233116][ T1227] CPU: 1 PID: 1227 Comm: syz.1.287 Not tainted syzkaller #0 [ 65.240430][ T1227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.250542][ T1227] Call Trace: [ 65.253901][ T1227] [ 65.256825][ T1227] __dump_stack+0x21/0x24 [ 65.261158][ T1227] dump_stack_lvl+0x110/0x170 [ 65.265857][ T1227] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.270873][ T1227] dump_stack+0x15/0x24 [ 65.275101][ T1227] should_fail_ex+0x3d4/0x520 [ 65.279778][ T1227] should_fail+0xb/0x10 [ 65.283922][ T1227] should_fail_usercopy+0x1a/0x20 [ 65.288931][ T1227] _copy_from_user+0x1e/0xc0 [ 65.293512][ T1227] do_sys_poll+0x2c1/0x11e0 [ 65.298016][ T1227] ? is_bpf_text_address+0x177/0x190 [ 65.303305][ T1227] ? kernel_text_address+0xa0/0xd0 [ 65.308494][ T1227] ? unwind_get_return_address+0x4d/0x90 [ 65.314132][ T1227] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 65.320276][ T1227] ? poll_select_finish+0x620/0x620 [ 65.325473][ T1227] ? __kasan_check_write+0x14/0x20 [ 65.330576][ T1227] ? proc_fail_nth_write+0x180/0x200 [ 65.336058][ T1227] ? set_user_sigmask+0xca/0x1c0 [ 65.341006][ T1227] ? __cfi_set_user_sigmask+0x10/0x10 [ 65.346396][ T1227] ? putname+0x111/0x160 [ 65.350670][ T1227] __se_sys_ppoll+0x206/0x2a0 [ 65.355357][ T1227] ? __kasan_check_read+0x11/0x20 [ 65.360741][ T1227] ? __fdget_pos+0x2d4/0x380 [ 65.365341][ T1227] ? __x64_sys_ppoll+0xd0/0xd0 [ 65.370291][ T1227] ? ksys_write+0x1e4/0x250 [ 65.374891][ T1227] ? __cfi_ksys_write+0x10/0x10 [ 65.379917][ T1227] __x64_sys_ppoll+0xbf/0xd0 [ 65.384610][ T1227] x64_sys_call+0x29e/0x9a0 [ 65.389130][ T1227] do_syscall_64+0x4c/0xa0 [ 65.393549][ T1227] ? clear_bhb_loop+0x30/0x80 [ 65.398224][ T1227] ? clear_bhb_loop+0x30/0x80 [ 65.402899][ T1227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.408874][ T1227] RIP: 0033:0x7fadc239ce59 [ 65.413802][ T1227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.433452][ T1227] RSP: 002b:00007fadc3252028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 65.441862][ T1227] RAX: ffffffffffffffda RBX: 00007fadc2615fa0 RCX: 00007fadc239ce59 [ 65.449829][ T1227] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 65.457800][ T1227] RBP: 00007fadc3252090 R08: 0000000000000000 R09: 0000000000000000 [ 65.465784][ T1227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.473820][ T1227] R13: 00007fadc2616038 R14: 00007fadc2615fa0 R15: 00007ffc5cabf5c8 [ 65.481926][ T1227] [ 65.520707][ T1235] device sit0 entered promiscuous mode [ 65.528312][ T1235] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 65.536662][ T1235] __nla_validate_parse: 3 callbacks suppressed [ 65.536677][ T1235] netlink: 1 bytes leftover after parsing attributes in process `syz.3.290'. [ 65.584593][ T1241] netlink: 68 bytes leftover after parsing attributes in process `syz.1.292'. [ 65.653868][ T1243] netlink: 68 bytes leftover after parsing attributes in process `syz.2.293'. [ 65.747593][ T1245] serio: Serial port ptm0 [ 65.800159][ T1243] serio: Serial port ptm1 [ 66.238002][ T1270] netlink: 3 bytes leftover after parsing attributes in process `syz.3.303'. [ 66.685012][ T1287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.309'. [ 66.774748][ T1287] serio: Serial port ptm0 [ 66.883287][ T1290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.310'. [ 66.999143][ T1294] device syzkaller0 entered promiscuous mode [ 67.098313][ T1290] serio: Serial port ptm0 [ 67.143393][ T1297] netlink: 3 bytes leftover after parsing attributes in process `syz.2.313'. [ 67.421749][ T1309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1309 comm=syz.1.318 [ 67.498686][ T1314] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 67.549818][ T1321] netlink: 68 bytes leftover after parsing attributes in process `syz.1.323'. [ 67.624027][ T1323] serio: Serial port ptm0 [ 67.836356][ T1333] FAULT_INJECTION: forcing a failure. [ 67.836356][ T1333] name failslab, interval 1, probability 0, space 0, times 0 [ 67.849246][ T1333] CPU: 0 PID: 1333 Comm: syz.1.327 Not tainted syzkaller #0 [ 67.856552][ T1333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.866624][ T1333] Call Trace: [ 67.870088][ T1333] [ 67.873046][ T1333] __dump_stack+0x21/0x24 [ 67.877389][ T1333] dump_stack_lvl+0x110/0x170 [ 67.882076][ T1333] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.887113][ T1333] ? get_page_from_freelist+0x2d12/0x2d80 [ 67.892830][ T1333] dump_stack+0x15/0x24 [ 67.897011][ T1333] should_fail_ex+0x3d4/0x520 [ 67.901679][ T1333] ? mas_alloc_nodes+0x2d8/0x850 [ 67.906606][ T1333] __should_failslab+0xac/0xf0 [ 67.911499][ T1333] should_failslab+0x9/0x20 [ 67.916191][ T1333] kmem_cache_alloc+0x3b/0x330 [ 67.920972][ T1333] mas_alloc_nodes+0x2d8/0x850 [ 67.925749][ T1333] mas_preallocate+0xe13/0x1440 [ 67.930608][ T1333] ? __cfi_mas_preallocate+0x10/0x10 [ 67.935999][ T1333] ? rwsem_write_trylock+0x136/0x300 [ 67.941302][ T1333] vma_expand+0x3b7/0xa10 [ 67.945636][ T1333] mmap_region+0xf61/0x21f0 [ 67.950176][ T1333] ? __cfi_mmap_region+0x10/0x10 [ 67.955122][ T1333] ? cap_mmap_addr+0x165/0x2e0 [ 67.959891][ T1333] ? __kasan_check_write+0x14/0x20 [ 67.965010][ T1333] ? get_unmapped_area+0x313/0x380 [ 67.970226][ T1333] do_mmap+0x856/0xdd0 [ 67.980841][ T1333] ? __count_memcg_events+0x8f/0xe0 [ 67.987324][ T1333] ? __cfi_do_mmap+0x10/0x10 [ 67.991925][ T1333] vm_mmap_pgoff+0x224/0x410 [ 67.996518][ T1333] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 68.001621][ T1333] ? xfd_validate_state+0x70/0x150 [ 68.006731][ T1333] ksys_mmap_pgoff+0xf6/0x1d0 [ 68.011429][ T1333] ? __kasan_check_write+0x14/0x20 [ 68.016534][ T1333] __x64_sys_mmap+0xfa/0x110 [ 68.021116][ T1333] x64_sys_call+0x8fd/0x9a0 [ 68.025634][ T1333] do_syscall_64+0x4c/0xa0 [ 68.030056][ T1333] ? clear_bhb_loop+0x30/0x80 [ 68.034832][ T1333] ? clear_bhb_loop+0x30/0x80 [ 68.039500][ T1333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.045382][ T1333] RIP: 0033:0x7fadc239cbc2 [ 68.049875][ T1333] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 68.069797][ T1333] RSP: 002b:00007fadc322fd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.078450][ T1333] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadc239cbc2 [ 68.086585][ T1333] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 68.094573][ T1333] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 68.102651][ T1333] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 68.110623][ T1333] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fadc24500e0 [ 68.119301][ T1333] [ 68.123095][ T1333] ------------[ cut here ]------------ [ 68.128778][ T1333] kernel BUG at mm/mmap.c:2854! [ 68.134143][ T1333] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 68.140326][ T1333] CPU: 0 PID: 1333 Comm: syz.1.327 Not tainted syzkaller #0 [ 68.147633][ T1333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.158196][ T1333] RIP: 0010:mmap_region+0x2098/0x21f0 [ 68.163612][ T1333] Code: 80 c1 03 38 c1 0f 8c 01 fa ff ff 4c 89 ff 49 89 d5 e8 ac 47 09 00 4c 89 ea e9 ee f9 ff ff e8 2f aa c3 ff 0f 0b e8 28 aa c3 ff <0f> 0b 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 e6 ff ff 4c 89 e7 [ 68.183744][ T1333] RSP: 0018:ffffc90013487a40 EFLAGS: 00010293 [ 68.189824][ T1333] RAX: ffffffff81adcd48 RBX: 00007fadc0df8000 RCX: ffff88811f7e2880 [ 68.197832][ T1333] RDX: 0000000000000000 RSI: 00007fadc0df7fff RDI: 00007fadc0df8000 [ 68.205809][ T1333] RBP: ffffc90013487c30 R08: ffff88811f7e2880 R09: 0000000000000003 [ 68.213790][ T1333] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92002690f60 [ 68.221881][ T1333] R13: 0000000000000070 R14: 00007fadc0df8000 R15: 00007fadc0df7fff [ 68.229970][ T1333] FS: 00007fadc32316c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.238935][ T1333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.245543][ T1333] CR2: 00007fadc3147e20 CR3: 000000011e96d000 CR4: 00000000003506b0 [ 68.253697][ T1333] DR0: 000000000000002a DR1: ffffffffff7fff00 DR2: 0000000080000001 [ 68.261761][ T1333] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.269732][ T1333] Call Trace: [ 68.273031][ T1333] [ 68.275967][ T1333] ? __cfi_mmap_region+0x10/0x10 [ 68.280917][ T1333] ? cap_mmap_addr+0x165/0x2e0 [ 68.285671][ T1333] ? __kasan_check_write+0x14/0x20 [ 68.290775][ T1333] ? get_unmapped_area+0x313/0x380 [ 68.295879][ T1333] do_mmap+0x856/0xdd0 [ 68.299937][ T1333] ? __count_memcg_events+0x8f/0xe0 [ 68.305129][ T1333] ? __cfi_do_mmap+0x10/0x10 [ 68.309713][ T1333] vm_mmap_pgoff+0x224/0x410 [ 68.314294][ T1333] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 68.319397][ T1333] ? xfd_validate_state+0x70/0x150 [ 68.324512][ T1333] ksys_mmap_pgoff+0xf6/0x1d0 [ 68.329177][ T1333] ? __kasan_check_write+0x14/0x20 [ 68.334288][ T1333] __x64_sys_mmap+0xfa/0x110 [ 68.339061][ T1333] x64_sys_call+0x8fd/0x9a0 [ 68.343567][ T1333] do_syscall_64+0x4c/0xa0 [ 68.347970][ T1333] ? clear_bhb_loop+0x30/0x80 [ 68.352647][ T1333] ? clear_bhb_loop+0x30/0x80 [ 68.357484][ T1333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.363370][ T1333] RIP: 0033:0x7fadc239cbc2 [ 68.367775][ T1333] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 68.387372][ T1333] RSP: 002b:00007fadc322fd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.395776][ T1333] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadc239cbc2 [ 68.403757][ T1333] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 68.411749][ T1333] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 68.419718][ T1333] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 68.427696][ T1333] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fadc24500e0 [ 68.435695][ T1333] [ 68.438712][ T1333] Modules linked in: [ 68.445358][ T1333] ---[ end trace 0000000000000000 ]--- [ 68.451001][ T1333] RIP: 0010:mmap_region+0x2098/0x21f0 [ 68.456536][ T1333] Code: 80 c1 03 38 c1 0f 8c 01 fa ff ff 4c 89 ff 49 89 d5 e8 ac 47 09 00 4c 89 ea e9 ee f9 ff ff e8 2f aa c3 ff 0f 0b e8 28 aa c3 ff <0f> 0b 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 e6 ff ff 4c 89 e7 [ 68.476416][ T1333] RSP: 0018:ffffc90013487a40 EFLAGS: 00010293 [ 68.482640][ T1333] RAX: ffffffff81adcd48 RBX: 00007fadc0df8000 RCX: ffff88811f7e2880 [ 68.490729][ T1333] RDX: 0000000000000000 RSI: 00007fadc0df7fff RDI: 00007fadc0df8000 [ 68.498720][ T1333] RBP: ffffc90013487c30 R08: ffff88811f7e2880 R09: 0000000000000003 [ 68.506807][ T1333] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92002690f60 [ 68.514816][ T1333] R13: 0000000000000070 R14: 00007fadc0df8000 R15: 00007fadc0df7fff [ 68.523000][ T1333] FS: 00007fadc32316c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.531978][ T1333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.538565][ T1333] CR2: 00007fadc3147e20 CR3: 000000011e96d000 CR4: 00000000003506b0 [ 68.546599][ T1333] DR0: 000000000000002a DR1: ffffffffff7fff00 DR2: 0000000080000001 [ 68.554650][ T1333] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.562789][ T1333] Kernel panic - not syncing: Fatal exception [ 68.569240][ T1333] Kernel Offset: disabled [ 68.573574][ T1333] Rebooting in 86400 seconds..