last executing test programs: 16m54.792592993s ago: executing program 32 (id=40): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'hsr0\x00', 0x1000}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@mblk_io_submit}, {}, {@block_validity}, {@data_writeback}, {@stripe={'stripe', 0x3d, 0x4}}, {@oldalloc}, {@oldalloc}, {@init_itable}, {@dioread_nolock}, {@noacl}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc4002103, 0x0) dup(0xffffffffffffffff) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x67b8, 0x4) sendmmsg$inet(r8, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) 16m49.311826107s ago: executing program 33 (id=50): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000005b40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xf6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x87}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x1d, 0x8, 0x1, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x728d9debdaa4f37e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync_file_range(r6, 0x6, 0x9fd, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 16m39.39732636s ago: executing program 34 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x148}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c010}, 0x8000) 16m30.515720927s ago: executing program 3 (id=134): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) writev(r0, &(0x7f0000000780)=[{&(0x7f00000005c0)='d', 0x18}], 0x1) 16m30.456351139s ago: executing program 3 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) 16m30.286326143s ago: executing program 3 (id=138): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0xc00) 16m28.77130779s ago: executing program 3 (id=142): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="4000000010003904faffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001007369457961b3f9108e7438c53b54c0306600ffff2f8dab4450b28090294939fffffffffffb3500000005000a65191351000a54d57a9e1316905700000000"], 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0/file1\x00', 0x0, 0x4008, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x87, 0x77, &(0x7f00000003c0)="448da237ce984830185a0f17872c884d2b9fd8efb448ee6df37396f1de6b821ae486a906cf45511a0ca7d306ceabc571f7986e15a641c9036df60a1b23e272380a1dc31988b4bee6f0f76408a84e3147dec0e7b58772909fd9abd740d9811791a1c0d83713a1db14f204ebd29df1b7555c0c5436c2400255ca2068aab6da6c490c04e7b3061ac5", &(0x7f00000004c0)=""/119, 0x7, 0x0, 0x44, 0xc6, &(0x7f0000000540)="18745a1ff93f3488db61f687cd1203b080218c0575ebbae1e2c32629c0d511f24cf41c3c462a1bc43b8001c6c6496b24f5bd1b0be1e7ae5e8bc9581e6196efef55c2701a", &(0x7f00000005c0)="34cd5fb6c9d83ac7fecb48a98f19cfe0054988f279c9f1ee9482415cd432eaa50edf67ed1598fce1cae13e1e03c28a0a988d713af0778f43f37a3891e775b7a0a6a8bc3ab2b35eac7f6296011edb621910aa27f399bc7054f31f7efcc7e6bb10a32d72b7091fdafc0f30221b9783f33a0202897c66c59d28fcfdc3bec18d175c30484c8a7bde7ae2274727a85ea164b4cde8e77d63c81f53913339aa41ce22a2eabc9ed905fe449395c98f35e70baba5ee3b9beb1e48b78e44d2a86221e0c11140e7b6270d33", 0x1, 0x0, 0x1}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0517000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\x00\n\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000200)=0x8) r8 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4400046}) rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000240)={0x21, 0xfffffff7, 0xe}) pwrite64(r8, &(0x7f00000008c0)='/', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000080)={[{@debug}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x8, 0x624, &(0x7f0000000780)="$eJzs3c9vVNUeAPDvve20pX3vtZCX98SFNDEGEqWlBQwxJsKeEPyxc1VpIUihhNZokcSS4MbEuHFh4sqF+F8oiVsXbl24cWVIiDFdgCEy5k7vlNt2pj+mnd7Sfj7JpefcM3PPuWW+PWfOnHsngD1rMPsnjTgYEdeTiP5CWWfkhYMLj5v/89aFbEuiWn37jyRufZLMFY+V5D/78if/3R/Jz2nEgY6V9U7P3rwyNjk5cSPPD89cvT48PXvz6OWrY5cmLk1cG3119NTJEydPjRzb1PkVqz575/0P+z879+63Xz9ORr779VwSp+NJ/oDsvJY/t3tTNWe/s8GoLnhU3J/9Xk9t8tg7xcP++uvkqWT5Dnasi/nrsRIR/4/+6Cj8b/bHp2+W2jigrapJ1PsoYM9JWor/nq1vCLDN6uOA+nv7+XQ9b97S9g5KgG3x4MzCBMBC/Fcioj4P1rkwNxg9tbmB3vlkyTxPEhGbm5lbkNXx04/n7mRbLJuHazBtCGyhudv1We68/1+Mv4f5CKGnluudT5fEf1rYsv1vtVj/4LJ8o3l4oD3mbkfEc3n/3xWF+E9qsTkQzeN/sBD/77VYv/gHAAAAAACArXPvTES8Ulj/t/j5W7q4/qerwfqfvog4vQX1r/35X3o/TyRbUB1Q8OBMxOvROP5zAx157t+19QCV5OLlyYljEfGfiDgSle4sP7LsuMUVwkc/P/BVs/qL6/+yLau/vhYwP9L9zmUX4o6PzYxt9ryBiAe3I56vrf89lO9Zuv4n6/+TBv1/Ft/X11nHgZfunm9Wtnb8A+1S/SbicMP+/+lwO1n9/hzDtfHAcH1UsNILH3/xfbP6xT+UJ+v/e1eP/+6keL+e6Y0dvysijs92VpuVtzr+70re6agfP/PR2MzMjZGIruTsyv2jG2sz7Fb1eKjHSxb/R15cff5vcfxfiMN9ETG3zjr/96Tvt2Zl+n8oTxb/46v3/wNL+/+NJ0bvDvzQpPrk/Lr6/xO1Pv1Ivsf8HxStvB/HegO0lOYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDMujYh/RZIOLabTdGgooi8i/hu96eTU9MzLF6c+uDaeldW+/z+tf9Nv/0I+qX///0BEVCIiy4/m+Xr58YjYHxFfduyr5YcuTE2Ol33yAAAAAAAAAAAAAAAAAAAAsEP01a75r3Yvv/4/83tH2a0D2q4z/yneYe/pbPmZ1e4tbQiw7VqPf+BZt/74r7S1HcD2ax7/jx5Xa7a1OcA2Mv6HvavF+PdxAewC+n/Yq9Y5p9fT7nYAZdD/AwAAAADArrL/0L1fkoiYe21fbct05WUW+8PulpbdAKA01vDC3tU5VXYLgLJ4jw8ki6m/Gl7s33z1f9KeBgEAAAAAAAAAAAAAKxw+6Pp/2KtWv/7f2n7YzVa5/r9R8LtdAOwizb/6Q98Pu533+ECyxh8C1/8DAAAAAAAAAAAAwA7Qc/PK2OTkxI3p2dUTXbH2Y9qYqDQqeqOFA3aXeRZZYm6szNrbk3jSniNXIsp91W1RIt3wWdRvwVFi40v+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz6JwAA//8tkCr+") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) lseek(r8, 0x0, 0x4) sendfile(r8, r8, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) 16m28.254553803s ago: executing program 3 (id=148): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r5, 0x409, 0xc) open_tree(0xffffffffffffffff, 0x0, 0x8c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x2}}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x68}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x9, 0xd651, 0x6, 0x6, 0x6, 0x20000000ffd, 0x7, 0xfffffffd}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 16m28.089403107s ago: executing program 3 (id=149): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, 0x0) 16m28.089216567s ago: executing program 35 (id=149): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, 0x0) 16m16.237276907s ago: executing program 4 (id=341): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "0a2362e44e7030a9f9b9ba1a"}}}}}}}, 0x0) 16m16.201761659s ago: executing program 4 (id=342): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x400c8040, &(0x7f0000000040)={0xa, 0x4e29, 0x2, @loopback, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40895, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 16m16.182587169s ago: executing program 4 (id=343): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0, 0x6c}) 16m16.1643143s ago: executing program 4 (id=344): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10006, 0x0) 16m15.873445847s ago: executing program 4 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000003200)={0x90, 0x0, 0x0, {0x5, 0x0, 0x9, 0x2, 0x8, 0x7e64, {0x0, 0x7, 0x2, 0x2b1, 0x0, 0x7fff, 0x6, 0x8, 0x8, 0x2000, 0x9, 0x0, r1, 0x6, 0x400}}}, 0x90) 16m15.809626528s ago: executing program 4 (id=351): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 16m15.767339429s ago: executing program 36 (id=351): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 16m8.470048568s ago: executing program 9 (id=452): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x81, 0x296, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 16m8.326680161s ago: executing program 9 (id=454): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=' ', 0x1}, {&(0x7f0000000a40)="d789", 0x2}], 0x2) 16m8.195198615s ago: executing program 9 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)="69ad52a5", 0x4}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x3, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m8.113384557s ago: executing program 9 (id=457): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,iocharset=cp1251,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESOCT=0x0, @ANYBLOB="2dfd"], 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) 16m7.930466691s ago: executing program 9 (id=458): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141100) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffff0}}, {{0xa, 0x0, 0x6, @private1}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 16m7.826120294s ago: executing program 9 (id=459): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") membarrier(0x2, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x4, 0x8000, 0x6, 0x1, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet(0x2, 0x5, 0x7) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c0000000000000095000000000000001810", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="11"], 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x5c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10001}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1007}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x6, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) fallocate(r0, 0x0, 0x0, 0x1000f4) 16m7.762059625s ago: executing program 37 (id=459): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") membarrier(0x2, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x4, 0x8000, 0x6, 0x1, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet(0x2, 0x5, 0x7) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c0000000000000095000000000000001810", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="11"], 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x5c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10001}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1007}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x6, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) fallocate(r0, 0x0, 0x0, 0x1000f4) 16m2.709431329s ago: executing program 7 (id=522): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000740)={0x40000004}) 16m1.885662159s ago: executing program 7 (id=532): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x1b, 0xfffffffffffffffe, &(0x7f0000000000)=0x5d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) close(r2) 16m1.873945609s ago: executing program 7 (id=533): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x3) syz_usb_connect(0x5, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ffffff40950b20770000010203010902270001010080fa0904000003ff0000000705810200020007050202000200070583c392"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 15m59.668157914s ago: executing program 7 (id=550): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2800000, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inlinecrypt}, {@data_err_abort}, {@usrquota}, {@bh}, {@noacl}]}, 0x1, 0xbdf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x410c01, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) timer_delete(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$evdev(r1, &(0x7f0000000040), 0x0) 15m59.488877058s ago: executing program 7 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x4090) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000881}, 0x4048844) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x80) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x24000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000815) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, 0x0) 15m59.38953702s ago: executing program 7 (id=558): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delqdisc={0xc4, 0x25, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xffff, 0x5}, {0xa, 0x5}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x6, 0x5, 0x40010, 0x2, 0xffffff90, 0x4, 0x7}}, {0x12, 0x2, [0x5, 0x6, 0x101, 0x4, 0x8, 0x200, 0x8]}}, {{0x1c, 0x1, {0xff, 0x3, 0x2, 0x4, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x401, 0xe005, 0x5, 0x7, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x20}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x7182, 0x1, 0x1, 0x206, 0x10, 0x5}}, {0xe, 0x2, [0x1, 0x8, 0xf179, 0x8, 0x6a]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x4020) 15m59.374465041s ago: executing program 38 (id=558): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delqdisc={0xc4, 0x25, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xffff, 0x5}, {0xa, 0x5}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x6, 0x5, 0x40010, 0x2, 0xffffff90, 0x4, 0x7}}, {0x12, 0x2, [0x5, 0x6, 0x101, 0x4, 0x8, 0x200, 0x8]}}, {{0x1c, 0x1, {0xff, 0x3, 0x2, 0x4, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x401, 0xe005, 0x5, 0x7, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x20}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x7182, 0x1, 0x1, 0x206, 0x10, 0x5}}, {0xe, 0x2, [0x1, 0x8, 0xf179, 0x8, 0x6a]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x4020) 14m54.930340434s ago: executing program 8 (id=800): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x34, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x7}, {0x20}, {0x0, 0x0, 0x0, 0x6}, {0x100}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xfd}, {}, {0x0, 0x0, 0xff}, {0x8000}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {0xffff, 0x0, 0x0, 0xff}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {0x1000}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x200000}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3, 0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0x8a}, {}, {}, {0x6, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753aca25e474febca69d17a9722bd2f5be411676d93fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f75cc59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da5200", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x6}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 14m54.798815357s ago: executing program 8 (id=802): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000000000)=ANY=[], 0x7, 0x376, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) 14m54.67783218s ago: executing program 8 (id=806): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) fallocate(r0, 0x20, 0x0, 0x8000) 14m53.45667091s ago: executing program 8 (id=817): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 14m52.996808472s ago: executing program 8 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m52.861052165s ago: executing program 8 (id=825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x5fc, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5d0, 0x2, [@TCA_BPF_ACT={0x5cc, 0x1, [@m_bpf={0x168, 0x11, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0xfffd, 0x6, 0x1}, {0x387b, 0x0, 0x7, 0xb5}, {0x81, 0x1, 0x4, 0x4}, {0x77e, 0xf, 0x7, 0x66}, {0x26, 0xff, 0x1f, 0x800}, {0x4, 0x1, 0x14, 0x200}, {0xfe3, 0x7, 0x9, 0x4}, {0x7, 0x2, 0xc2}]}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xc, 0x10, 0x7, 0x6}]}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x434, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0xe, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x15, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x5, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x4, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x3, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x80000001, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0x0, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x2, 0x0, 0x423, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6175, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0xfff, 0x1000, 0x80000000, 0x2797, 0x4, 0x3, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 14m52.740248898s ago: executing program 39 (id=825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x5fc, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5d0, 0x2, [@TCA_BPF_ACT={0x5cc, 0x1, [@m_bpf={0x168, 0x11, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0xfffd, 0x6, 0x1}, {0x387b, 0x0, 0x7, 0xb5}, {0x81, 0x1, 0x4, 0x4}, {0x77e, 0xf, 0x7, 0x66}, {0x26, 0xff, 0x1f, 0x800}, {0x4, 0x1, 0x14, 0x200}, {0xfe3, 0x7, 0x9, 0x4}, {0x7, 0x2, 0xc2}]}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xc, 0x10, 0x7, 0x6}]}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x434, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0xe, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x15, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x5, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x4, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x3, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x80000001, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0x0, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x2, 0x0, 0x423, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6175, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0xfff, 0x1000, 0x80000000, 0x2797, 0x4, 0x3, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.277188669s ago: executing program 0 (id=3898): socket(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20084084) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x804) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x40842300, 0x0, 0x0, 0x0, 0x0, 0x0) 1.219937511s ago: executing program 1 (id=3901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}}, 0x0, 0x2a}, 0x28) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.200494401s ago: executing program 0 (id=3902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0x4, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.091924274s ago: executing program 0 (id=3905): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 407.262371ms ago: executing program 6 (id=3920): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) 402.981311ms ago: executing program 2 (id=3921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 348.573152ms ago: executing program 6 (id=3922): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 269.416174ms ago: executing program 1 (id=3923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xb, 0x5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) 269.234854ms ago: executing program 5 (id=3924): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r0, &(0x7f00000005c0)="1f0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8014) 269.096964ms ago: executing program 1 (id=3925): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x100000003, 0xffffffffffffffff, 0x7fff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff801, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6000000000, 0xffffffffffffffff, 0x1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x30f3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 268.998424ms ago: executing program 5 (id=3926): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 268.876484ms ago: executing program 2 (id=3927): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x2000, 0x42) preadv(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 241.600545ms ago: executing program 1 (id=3928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="a1830000000000000000050000000800030027b5"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) 241.511445ms ago: executing program 0 (id=3929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) 233.438655ms ago: executing program 2 (id=3930): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000580)) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 231.968745ms ago: executing program 5 (id=3931): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) unshare(0x22020400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 212.091765ms ago: executing program 6 (id=3932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 211.625505ms ago: executing program 1 (id=3933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 199.973456ms ago: executing program 0 (id=3934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f0000002180)=ANY=[], 0x0) 160.283607ms ago: executing program 2 (id=3935): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x10004, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 148.941187ms ago: executing program 1 (id=3936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 129.768357ms ago: executing program 5 (id=3937): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x46, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}}, 0x0) 127.791187ms ago: executing program 2 (id=3938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 118.034608ms ago: executing program 6 (id=3939): mkdir(&(0x7f0000000400)='./file0\x00', 0xa2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r0) 112.820528ms ago: executing program 0 (id=3940): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 59.772919ms ago: executing program 6 (id=3941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3, 0x1}], 0x0, 0x0, 0x0}) 59.71147ms ago: executing program 5 (id=3942): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0x4008744b, &(0x7f0000000100)={0x29, 0x2}) 59.43205ms ago: executing program 2 (id=3943): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f00000003c0)={0x5, 0x5, 0x80, 0x1, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 521.4µs ago: executing program 6 (id=3944): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000000e600)) 0s ago: executing program 5 (id=3945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044081}, 0x0) kernel console output (not intermixed with test programs): rs=continue [ 866.859694][ T54] usb 2-1: device descriptor read/64, error -71 [ 867.604217][ T54] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 867.916552][ T290] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 869.034176][T10486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 869.253576][ T372] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 869.287046][T10490] EXT4-fs (loop5): Ignoring removed nobh option [ 869.422518][T10490] EXT4-fs error (device loop5) in ext4_do_update_inode:5362: error 27 [ 869.431435][T10490] EXT4-fs (loop5): Remounting filesystem read-only [ 869.438674][T10490] EXT4-fs error (device loop5): ext4_dirty_inode:6181: inode #3: comm syz.5.2828: mark_inode_dirty error [ 869.453621][T10490] EXT4-fs error (device loop5) in ext4_do_update_inode:5362: error 27 [ 869.464390][T10490] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.2828: mark_inode_dirty error [ 869.772940][T10189] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 869.847420][T10490] Quota error (device loop5): write_blk: dquota write failed [ 869.856236][T10490] Quota error (device loop5): qtree_write_dquot: Error -27 occurred while creating quota [ 869.867518][T10490] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.2828: Failed to acquire dquot type 0 [ 869.880170][T10490] EXT4-fs (loop5): 1 truncate cleaned up [ 869.886633][T10490] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 869.897662][T10490] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.019471][ T372] usb 1-1: device descriptor read/64, error -71 [ 871.749605][T10189] usb 7-1: device descriptor read/64, error -71 [ 873.420835][T10519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2833'. [ 873.480208][T10527] EXT4-fs (loop5): Ignoring removed nobh option [ 873.512099][T10527] EXT4-fs error (device loop5) in ext4_do_update_inode:5362: error 27 [ 873.520893][T10527] EXT4-fs (loop5): Remounting filesystem read-only [ 873.527638][T10527] EXT4-fs error (device loop5): ext4_dirty_inode:6181: inode #3: comm syz.5.2835: mark_inode_dirty error [ 873.540296][T10527] EXT4-fs error (device loop5) in ext4_do_update_inode:5362: error 27 [ 873.615473][T10527] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.2835: mark_inode_dirty error [ 873.851367][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2837'. [ 873.903346][T10527] Quota error (device loop5): write_blk: dquota write failed [ 873.911314][T10527] Quota error (device loop5): qtree_write_dquot: Error -27 occurred while creating quota [ 873.922382][T10527] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.2835: Failed to acquire dquot type 0 [ 873.934588][T10527] EXT4-fs (loop5): 1 truncate cleaned up [ 873.941005][T10527] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 873.951825][T10527] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.972033][T10548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.971800][ T290] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 876.023762][T10555] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 876.036726][T10555] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 876.071428][T10555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 876.085089][T10555] System zones: 0-1, 3-36 [ 876.091175][T10555] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 876.294210][ T290] usb 2-1: device descriptor read/64, error -71 [ 878.409406][T10189] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 881.184720][ T290] usb 2-1: device descriptor read/64, error -71 [ 887.469178][T10658] EXT4-fs (loop5): Ignoring removed nobh option [ 887.494439][T10658] EXT4-fs error (device loop5) in ext4_do_update_inode:5362: error 27 [ 887.650366][T10658] EXT4-fs (loop5): Remounting filesystem read-only [ 887.657722][T10658] EXT4-fs error (device loop5): ext4_dirty_inode:6181: inode #3: comm syz.5.2867: mark_inode_dirty error [ 887.671288][T10658] EXT4-fs error (device loop5) in ext4_do_update_inode:5362: error 27 [ 887.682185][T10658] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.2867: mark_inode_dirty error [ 888.651168][T10658] Quota error (device loop5): write_blk: dquota write failed [ 888.660367][T10658] Quota error (device loop5): qtree_write_dquot: Error -27 occurred while creating quota [ 888.670943][T10658] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.2867: Failed to acquire dquot type 0 [ 888.683070][T10658] EXT4-fs (loop5): 1 truncate cleaned up [ 888.688845][T10658] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 888.790852][ T372] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 888.810306][T10667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 889.457369][T10658] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.532276][T10731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2882'. [ 899.871328][T10733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.353578][T10739] tipc: Enabling of bearer rejected, failed to enable media [ 905.462397][T10764] EXT4-fs (loop5): Ignoring removed oldalloc option [ 905.469120][T10764] EXT4-fs (loop5): Ignoring removed oldalloc option [ 905.475932][T10764] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 905.603399][T10764] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue syzkaller syzkaller login: [ 907.594116][T10788] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 907.609465][T10788] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 907.682923][T10788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 907.699799][T10788] System zones: 0-1, 3-36 [ 907.710461][T10788] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 909.544408][T10801] tipc: Enabling of bearer rejected, failed to enable media [ 910.139419][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 910.643436][ T8632] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 912.680863][T10821] fuse: Unknown parameter 'grou00000000000000000000' [ 917.660293][ T49] attempt to access beyond end of device [ 917.660293][ T49] loop5: rw=1, want=1041, limit=128 [ 919.533384][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.738546][T10869] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 921.689737][T10869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 921.810572][T10869] System zones: 1-12 [ 921.853800][T10869] EXT4-fs error (device loop5): ext4_quota_enable:6447: comm syz.5.2913: Bad quota inum: 2934046720, type: 1 [ 922.632585][T10869] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 922.709567][T10869] EXT4-fs (loop5): mount failed [ 925.930143][T10901] EXT4-fs (loop5): 1 truncate cleaned up [ 925.935941][T10901] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro, [ 929.703177][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2931'. [ 929.910874][T10942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 930.037682][T10954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 933.464400][T10976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 933.477506][T10977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 933.505440][T10978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 934.217800][T10985] erofs: (device loop5): mounted with root inode @ nid 36. [ 934.235039][T10985] attempt to access beyond end of device [ 934.235039][T10985] loop5: rw=524288, want=1342179832, limit=16 [ 934.264051][T10987] tipc: Enabling of bearer rejected, failed to enable media [ 936.652266][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 936.661150][T11004] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 936.669148][T11004] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 936.684685][T11004] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.2948: iget: bad i_size value: 12154757448730 [ 936.719022][T11004] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2948: couldn't read orphan inode 13 (err -117) [ 936.759604][T11004] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue [ 937.891575][T11026] 9pnet: Insufficient options for proto=fd [ 939.828595][T11051] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 939.836617][T11051] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 939.845349][T11051] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.2960: iget: bad i_size value: 12154757448730 [ 939.858766][T11051] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2960: couldn't read orphan inode 13 (err -117) [ 940.150125][T11051] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue [ 941.722480][T11077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 943.797056][T11091] FAULT_INJECTION: forcing a failure. [ 943.797056][T11091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 943.842257][T11091] CPU: 1 PID: 11091 Comm: syz.6.2970 Tainted: G W syzkaller #0 [ 943.851230][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 943.861307][T11091] Call Trace: [ 943.864696][T11091] __dump_stack+0x21/0x24 [ 943.869055][T11091] dump_stack_lvl+0x1a7/0x208 [ 943.873757][T11091] ? show_regs_print_info+0x18/0x18 [ 943.879039][T11091] ? stack_trace_save+0xa6/0xf0 [ 943.883912][T11091] dump_stack+0x15/0x1c [ 943.888117][T11091] should_fail+0x3ab/0x500 [ 943.892655][T11091] should_fail_alloc_page+0x4f/0x60 [ 943.897867][T11091] __alloc_pages_nodemask+0x11a/0x640 [ 943.903390][T11091] ? slab_free_freelist_hook+0xc5/0x190 [ 943.908948][T11091] ? kmem_cache_free+0x100/0x2d0 [ 943.914046][T11091] ? putname+0xfe/0x150 [ 943.918399][T11091] ? __x64_sys_openat+0x136/0x160 [ 943.923503][T11091] ? do_syscall_64+0x31/0x40 [ 943.928144][T11091] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 943.934395][T11091] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 943.940344][T11091] ? kstrtouint_from_user+0x1c4/0x220 [ 943.945806][T11091] handle_pte_fault+0x153b/0x3910 [ 943.950858][T11091] __handle_speculative_fault+0xe77/0x1390 [ 943.956927][T11091] ? finish_fault+0xa60/0xa60 [ 943.961695][T11091] ? mutex_lock+0x92/0xf0 [ 943.966041][T11091] ? mutex_trylock+0xb0/0xb0 [ 943.970746][T11091] ? __fget_files+0x2e1/0x340 [ 943.975623][T11091] do_user_addr_fault+0x846/0xe20 [ 943.980675][T11091] ? do_kern_addr_fault+0x80/0x80 [ 943.985867][T11091] ? debug_smp_processor_id+0x17/0x20 [ 943.991474][T11091] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 943.997742][T11091] exc_page_fault+0x5a/0xc0 [ 944.002265][T11091] ? asm_exc_page_fault+0x8/0x30 [ 944.007399][T11091] asm_exc_page_fault+0x1e/0x30 [ 944.012294][T11091] RIP: 0033:0x7f98d0ce4a26 [ 944.016818][T11091] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 8d 09 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 8c ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 944.037081][T11091] RSP: 002b:00007f98cf873f60 EFLAGS: 00010206 [ 944.043431][T11091] RAX: 0000000000000000 RBX: 00007f98d10a4fa0 RCX: 0000000000000000 [ 944.051519][T11091] RDX: 0000200000000080 RSI: 0000200000000080 RDI: 00007f98d0eb539d [ 944.059512][T11091] RBP: 00007f98cf876090 R08: 00007f98d0cd1850 R09: 0000000000000000 [ 944.067500][T11091] R10: 0000000000000000 R11: 0000200000000080 R12: 0000000000000063 [ 944.075485][T11091] R13: 0000200000000080 R14: 0000000000000000 R15: 00007ffef36f57b8 [ 944.087166][T11091] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 944.193510][T10683] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 944.322976][T11098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 944.369392][ T25] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 944.579733][T10683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.986925][T10683] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 945.019544][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.282152][T11106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 945.314692][T11098] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 945.324174][T11098] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 945.689400][ T25] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 945.859541][T10683] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 945.870691][T10683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.878784][T10683] usb 2-1: Product: syz [ 945.883536][T10683] usb 2-1: Manufacturer: syz [ 945.888153][T10683] usb 2-1: SerialNumber: syz [ 946.027118][T10683] usb-storage 2-1:1.0: USB Mass Storage device detected [ 946.039466][ T25] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 947.379206][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.387860][ T25] usb 7-1: Product: syz [ 947.397290][ T25] usb 7-1: Manufacturer: syz [ 947.400619][T11112] EXT4-fs (loop5): 1 truncate cleaned up [ 947.402253][ T25] usb 7-1: SerialNumber: syz [ 947.407608][T11112] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro, [ 947.517715][T10683] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 948.520100][ T25] usb 7-1: can't set config #1, error -71 [ 948.528404][ T25] usb 7-1: USB disconnect, device number 22 [ 948.669034][T10683] scsi host1: usb-storage 2-1:1.0 [ 948.684245][T10683] usb 2-1: USB disconnect, device number 40 [ 949.227742][ T630] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 949.398961][T11135] xt_CT: You must specify a L4 protocol and not use inversions on it syzkaller syzkaller login: [ 950.690309][T11146] exfat: Deprecated parameter 'utf8' [ 951.308740][T11146] exfat: Bad value for 'uid' [ 951.344174][T11155] FAULT_INJECTION: forcing a failure. [ 951.344174][T11155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.357688][T11155] CPU: 0 PID: 11155 Comm: syz.6.2984 Tainted: G W syzkaller #0 [ 951.366730][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 951.376901][T11155] Call Trace: [ 951.380199][T11155] __dump_stack+0x21/0x24 [ 951.384621][T11155] dump_stack_lvl+0x1a7/0x208 [ 951.389620][T11155] ? thaw_kernel_threads+0x220/0x220 [ 951.394942][T11155] ? vsnprintf+0x189d/0x1990 [ 951.399526][T11155] ? show_regs_print_info+0x18/0x18 [ 951.404715][T11155] dump_stack+0x15/0x1c [ 951.408957][T11155] should_fail+0x3ab/0x500 [ 951.413371][T11155] should_fail_usercopy+0x1a/0x20 [ 951.418674][T11155] _copy_to_user+0x20/0x90 [ 951.423129][T11155] simple_read_from_buffer+0xe9/0x160 [ 951.428517][T11155] proc_fail_nth_read+0x1a6/0x220 [ 951.433539][T11155] ? proc_fault_inject_write+0x310/0x310 [ 951.439165][T11155] ? rw_verify_area+0x1c0/0x360 [ 951.444025][T11155] ? proc_fault_inject_write+0x310/0x310 [ 951.449760][T11155] vfs_read+0x209/0xa50 [ 951.453921][T11155] ? kernel_read+0x70/0x70 [ 951.458339][T11155] ? __kasan_check_write+0x14/0x20 [ 951.463821][T11155] ? mutex_lock+0x92/0xf0 [ 951.468147][T11155] ? mutex_trylock+0xb0/0xb0 [ 951.472731][T11155] ? __fget_files+0x2e1/0x340 [ 951.477402][T11155] ? __fdget_pos+0x2d2/0x380 [ 951.482006][T11155] ? ksys_read+0x70/0x260 [ 951.486342][T11155] ksys_read+0x14a/0x260 [ 951.490679][T11155] ? vfs_write+0xd70/0xd70 [ 951.495109][T11155] ? ____fput+0x15/0x20 [ 951.499262][T11155] ? debug_smp_processor_id+0x17/0x20 [ 951.504634][T11155] __x64_sys_read+0x7b/0x90 [ 951.509244][T11155] do_syscall_64+0x31/0x40 [ 951.513663][T11155] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 951.519637][T11155] RIP: 0033:0x7f98d0ddd9ce [ 951.524223][T11155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 951.545698][T11155] RSP: 002b:00007f98cf875fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.554309][T11155] RAX: ffffffffffffffda RBX: 00007f98cf8766c0 RCX: 00007f98d0ddd9ce [ 951.562289][T11155] RDX: 000000000000000f RSI: 00007f98cf8760a0 RDI: 0000000000000004 [ 951.570347][T11155] RBP: 00007f98cf876090 R08: 0000000000000000 R09: 0000000000000000 [ 951.578523][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.586681][T11155] R13: 00007f98d10a5038 R14: 00007f98d10a4fa0 R15: 00007ffef36f57b8 [ 951.816068][T11159] tipc: Enabling of bearer rejected, failed to enable media [ 952.679235][T11166] FAULT_INJECTION: forcing a failure. [ 952.679235][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.693819][T11166] CPU: 0 PID: 11166 Comm: syz.5.2989 Tainted: G W syzkaller #0 [ 952.702691][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 952.713066][T11166] Call Trace: [ 952.716377][T11166] __dump_stack+0x21/0x24 [ 952.720712][T11166] dump_stack_lvl+0x1a7/0x208 [ 952.725499][T11166] ? show_regs_print_info+0x18/0x18 [ 952.730714][T11166] dump_stack+0x15/0x1c [ 952.734878][T11166] should_fail+0x3ab/0x500 [ 952.739401][T11166] should_fail_usercopy+0x1a/0x20 [ 952.744608][T11166] _copy_from_user+0x20/0xd0 [ 952.749295][T11166] __copy_msghdr_from_user+0xc9/0x630 [ 952.754694][T11166] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 952.760090][T11166] ? __fsnotify_parent+0x6d2/0x7c0 [ 952.765225][T11166] ___sys_sendmsg+0x19a/0x2e0 [ 952.769912][T11166] ? __sys_sendmsg+0x280/0x280 [ 952.775024][T11166] ? rw_verify_area+0x1c0/0x360 [ 952.779970][T11166] ? __fdget+0x1a1/0x230 [ 952.784440][T11166] __x64_sys_sendmsg+0x201/0x2d0 [ 952.789476][T11166] ? fput+0x1a/0x20 [ 952.793451][T11166] ? ___sys_sendmsg+0x2e0/0x2e0 [ 952.798320][T11166] ? debug_smp_processor_id+0x17/0x20 [ 952.803894][T11166] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 952.810048][T11166] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 952.815759][T11166] do_syscall_64+0x31/0x40 [ 952.820263][T11166] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 952.826250][T11166] RIP: 0033:0x7f88ae5f3199 [ 952.830670][T11166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.850270][T11166] RSP: 002b:00007f88ad04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.858681][T11166] RAX: ffffffffffffffda RBX: 00007f88ae87afa0 RCX: 00007f88ae5f3199 [ 952.866648][T11166] RDX: 00000000040080c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 952.874791][T11166] RBP: 00007f88ad04c090 R08: 0000000000000000 R09: 0000000000000000 [ 952.882757][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.890812][T11166] R13: 00007f88ae87b038 R14: 00007f88ae87afa0 R15: 00007ffcb71ef7d8 [ 953.006363][ T24] audit: type=1400 audit(2000000021.950:430): avc: denied { unmount } for pid=2035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 953.049755][ T24] audit: type=1400 audit(2000000022.000:431): avc: denied { map } for pid=11171 comm="syz.5.2992" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 953.085296][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2990'. [ 955.239444][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2999'. [ 955.273178][ T24] audit: type=1400 audit(2000000024.220:432): avc: denied { write } for pid=11199 comm="syz.1.3000" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 955.487103][T11206] FAULT_INJECTION: forcing a failure. [ 955.487103][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 955.495871][T11209] overlayfs: failed to clone upperpath [ 955.503109][T11206] CPU: 1 PID: 11206 Comm: syz.0.3002 Tainted: G W syzkaller #0 [ 955.514583][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 955.524970][T11206] Call Trace: [ 955.528372][T11206] __dump_stack+0x21/0x24 [ 955.532810][T11206] dump_stack_lvl+0x1a7/0x208 [ 955.537599][T11206] ? thaw_kernel_threads+0x220/0x220 [ 955.542904][T11206] ? show_regs_print_info+0x18/0x18 [ 955.548298][T11206] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 955.554907][T11206] dump_stack+0x15/0x1c [ 955.559126][T11206] should_fail+0x3ab/0x500 [ 955.563576][T11206] ? getname_flags+0xba/0x510 [ 955.568345][T11206] __should_failslab+0xa4/0xe0 [ 955.573140][T11206] should_failslab+0x9/0x20 [ 955.577669][T11206] kmem_cache_alloc+0x3d/0x2d0 [ 955.582810][T11206] getname_flags+0xba/0x510 [ 955.587425][T11206] getname+0x19/0x20 [ 955.591343][T11206] do_sys_openat2+0xde/0x750 [ 955.595973][T11206] ? __kasan_check_write+0x14/0x20 [ 955.601120][T11206] ? fput_many+0x15a/0x1a0 [ 955.606035][T11206] ? do_sys_open+0xe0/0xe0 [ 955.610470][T11206] ? fput+0x1a/0x20 [ 955.614389][T11206] ? ksys_write+0x1fa/0x260 [ 955.618909][T11206] ? __ia32_sys_read+0x90/0x90 [ 955.623796][T11206] ? __fdget+0x1b3/0x230 [ 955.628151][T11206] __x64_sys_openat+0x136/0x160 [ 955.633001][T11206] do_syscall_64+0x31/0x40 [ 955.637409][T11206] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 955.643409][T11206] RIP: 0033:0x7f2839806199 [ 955.647844][T11206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.668201][T11206] RSP: 002b:00007f283825f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 955.676705][T11206] RAX: ffffffffffffffda RBX: 00007f2839a8dfa0 RCX: 00007f2839806199 [ 955.684965][T11206] RDX: 0000000000000042 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 955.693022][T11206] RBP: 00007f283825f090 R08: 0000000000000000 R09: 0000000000000000 [ 955.701096][T11206] R10: 0000000000000180 R11: 0000000000000246 R12: 0000000000000001 [ 955.709158][T11206] R13: 00007f2839a8e038 R14: 00007f2839a8dfa0 R15: 00007ffc08b43df8 [ 955.791638][T11230] FAULT_INJECTION: forcing a failure. [ 955.791638][T11230] name failslab, interval 1, probability 0, space 0, times 0 [ 955.792351][ T24] audit: type=1400 audit(2000000024.740:433): avc: denied { execute } for pid=11228 comm="syz.6.3008" name="file1" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 955.804884][T11230] CPU: 1 PID: 11230 Comm: syz.6.3008 Tainted: G W syzkaller #0 [ 955.828107][T11216] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 955.836238][T11230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 955.836244][T11230] Call Trace: [ 955.836263][T11230] __dump_stack+0x21/0x24 [ 955.836273][T11230] dump_stack_lvl+0x1a7/0x208 [ 955.836285][T11230] ? thaw_kernel_threads+0x220/0x220 [ 955.836304][T11230] ? show_regs_print_info+0x18/0x18 [ 955.878848][T11230] ? __kasan_check_write+0x14/0x20 [ 955.883963][T11230] ? mutex_lock+0x92/0xf0 [ 955.888285][T11230] ? mutex_trylock+0xb0/0xb0 [ 955.892867][T11230] ? __fget_files+0x2e1/0x340 [ 955.897623][T11230] dump_stack+0x15/0x1c [ 955.901860][T11230] should_fail+0x3ab/0x500 [ 955.906444][T11230] ? getname_flags+0xba/0x510 [ 955.911122][T11230] __should_failslab+0xa4/0xe0 [ 955.915879][T11230] should_failslab+0x9/0x20 [ 955.920381][T11230] kmem_cache_alloc+0x3d/0x2d0 [ 955.925231][T11230] getname_flags+0xba/0x510 [ 955.930002][T11230] __x64_sys_execveat+0xc3/0xf0 [ 955.934866][T11230] do_syscall_64+0x31/0x40 [ 955.939374][T11230] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 955.945345][T11230] RIP: 0033:0x7f98d0e1d199 [ 955.949757][T11230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.969624][T11230] RSP: 002b:00007f98cf876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 955.978032][T11230] RAX: ffffffffffffffda RBX: 00007f98d10a4fa0 RCX: 00007f98d0e1d199 [ 955.986472][T11230] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 955.994793][T11230] RBP: 00007f98cf876090 R08: 0000000000000000 R09: 0000000000000000 [ 956.002853][T11230] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 956.011011][T11230] R13: 00007f98d10a5038 R14: 00007f98d10a4fa0 R15: 00007ffef36f57b8 [ 956.020059][T11216] ext4 filesystem being mounted at /483/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 956.047473][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'. [ 956.082641][ T24] audit: type=1400 audit(2000000024.740:434): avc: denied { execute_no_trans } for pid=11228 comm="syz.6.3008" path="/415/file1" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 956.236094][T11255] FAULT_INJECTION: forcing a failure. [ 956.236094][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 956.279437][T11255] CPU: 0 PID: 11255 Comm: syz.5.3013 Tainted: G W syzkaller #0 [ 956.288461][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 956.299162][T11255] Call Trace: [ 956.302484][T11255] __dump_stack+0x21/0x24 [ 956.306839][T11255] dump_stack_lvl+0x1a7/0x208 [ 956.311547][T11255] ? thaw_kernel_threads+0x220/0x220 [ 956.317023][T11255] ? show_regs_print_info+0x18/0x18 [ 956.322358][T11255] ? stack_trace_save+0xa6/0xf0 [ 956.327237][T11255] ? stack_trace_snprint+0xe0/0xe0 [ 956.332394][T11255] dump_stack+0x15/0x1c [ 956.332404][T11255] should_fail+0x3ab/0x500 [ 956.332485][T11255] ? vm_area_dup+0x26/0x250 [ 956.332498][T11255] __should_failslab+0xa4/0xe0 [ 956.332510][T11255] should_failslab+0x9/0x20 [ 956.332521][T11255] kmem_cache_alloc+0x3d/0x2d0 [ 956.332534][T11255] vm_area_dup+0x26/0x250 [ 956.332545][T11255] __split_vma+0xbd/0x420 [ 956.332554][T11255] ? find_vma+0x30/0x150 [ 956.332564][T11255] __do_munmap+0x3c3/0x850 [ 956.332576][T11255] mmap_region+0x8a2/0x19c0 [ 956.332587][T11255] ? arch_get_unmapped_area+0x640/0x640 [ 956.332623][T11255] ? cap_mmap_addr+0x165/0x2e0 [ 956.332654][T11255] ? selinux_mmap_addr+0xbe/0xe0 [ 956.332666][T11255] ? security_mmap_addr+0x72/0x90 [ 956.332678][T11255] do_mmap+0x85f/0xf50 [ 956.332712][T11255] vm_mmap_pgoff+0x1f4/0x350 [ 956.332724][T11255] ? account_locked_vm+0x1a0/0x1a0 [ 956.332735][T11255] ? ksys_write+0x1fa/0x260 [ 956.332746][T11255] ksys_mmap_pgoff+0xfd/0x1e0 [ 956.332756][T11255] __x64_sys_mmap+0xfa/0x110 [ 956.332768][T11255] do_syscall_64+0x31/0x40 [ 956.332779][T11255] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 956.332790][T11255] RIP: 0033:0x7f88ae5f3199 [ 956.332803][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.332811][T11255] RSP: 002b:00007f88ad02b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 956.332827][T11255] RAX: ffffffffffffffda RBX: 00007f88ae87b090 RCX: 00007f88ae5f3199 [ 956.332836][T11255] RDX: 0000000002000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 956.332844][T11255] RBP: 00007f88ad02b090 R08: ffffffffffffffff R09: 0000000000000000 [ 956.332850][T11255] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 956.332858][T11255] R13: 00007f88ae87b128 R14: 00007f88ae87b090 R15: 00007ffcb71ef7d8 [ 956.449881][T11255] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 956.625876][T11255] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 956.858619][T11270] xt_hashlimit: size too large, truncated to 1048576 [ 958.102751][T11279] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ" or missing value [ 958.108924][T11282] FAULT_INJECTION: forcing a failure. [ 958.108924][T11282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.125148][T11282] CPU: 1 PID: 11282 Comm: syz.0.3021 Tainted: G W syzkaller #0 [ 958.134230][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 958.144605][T11282] Call Trace: [ 958.147925][T11282] __dump_stack+0x21/0x24 [ 958.152539][T11282] dump_stack_lvl+0x1a7/0x208 [ 958.157300][T11282] ? show_regs_print_info+0x18/0x18 [ 958.162709][T11282] dump_stack+0x15/0x1c [ 958.167072][T11282] should_fail+0x3ab/0x500 [ 958.171566][T11282] should_fail_usercopy+0x1a/0x20 [ 958.177365][T11282] _copy_from_user+0x20/0xd0 [ 958.182080][T11282] __copy_msghdr_from_user+0xc9/0x630 [ 958.187561][T11282] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 958.193085][T11282] ? __fsnotify_parent+0x6d2/0x7c0 [ 958.198307][T11282] ___sys_sendmsg+0x19a/0x2e0 [ 958.203076][T11282] ? __sys_sendmsg+0x280/0x280 [ 958.207932][T11282] ? rw_verify_area+0x1c0/0x360 [ 958.213541][T11282] ? __fdget+0x1a1/0x230 [ 958.217780][T11282] __x64_sys_sendmsg+0x201/0x2d0 [ 958.222779][T11282] ? fput+0x1a/0x20 [ 958.226800][T11282] ? ___sys_sendmsg+0x2e0/0x2e0 [ 958.231774][T11282] ? debug_smp_processor_id+0x17/0x20 [ 958.237566][T11282] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 958.243841][T11282] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 958.249850][T11282] do_syscall_64+0x31/0x40 [ 958.254266][T11282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 958.260497][T11282] RIP: 0033:0x7f2839806199 [ 958.268900][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.298404][T11282] RSP: 002b:00007f283825f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.307692][T11282] RAX: ffffffffffffffda RBX: 00007f2839a8dfa0 RCX: 00007f2839806199 [ 958.317367][T11282] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 958.327456][T11282] RBP: 00007f283825f090 R08: 0000000000000000 R09: 0000000000000000 [ 958.336749][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.347018][T11282] R13: 00007f2839a8e038 R14: 00007f2839a8dfa0 R15: 00007ffc08b43df8 [ 958.713715][ T24] audit: type=1326 audit(2000000027.660:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.5.3019" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88ae5f3199 code=0x0 [ 958.759065][ T24] audit: type=1400 audit(2000000027.700:436): avc: denied { listen } for pid=11291 comm="syz.6.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 958.778728][ T24] audit: type=1400 audit(2000000027.700:437): avc: denied { accept } for pid=11291 comm="syz.6.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 958.799026][ T24] audit: type=1400 audit(2000000027.730:438): avc: denied { nlmsg_read } for pid=11278 comm="syz.5.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 958.820505][ T24] audit: type=1400 audit(2000000027.730:439): avc: denied { ioctl } for pid=11278 comm="syz.5.3019" path="socket:[49686]" dev="sockfs" ino=49686 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 958.848099][T11295] EXT4-fs (loop5): #clusters per group too big: 24576 [ 958.910015][T11298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=11298 comm=syz.1.3026 [ 958.924807][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3026'. [ 958.972203][ T24] audit: type=1400 audit(2000000027.920:440): avc: denied { load_policy } for pid=11299 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 958.972619][T11300] SELinux: failed to load policy [ 959.392007][T11304] erofs: (device loop5): mounted with root inode @ nid 36. [ 959.559804][T11304] attempt to access beyond end of device [ 959.559804][T11304] loop5: rw=524288, want=1342179832, limit=16 [ 959.751047][ T4393] Trying to write to read-only block-device sda (partno 0) [ 960.240792][ T24] audit: type=1400 audit(2000000029.190:441): avc: denied { write } for pid=11308 comm="syz.0.3030" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 960.273853][ T4393] Trying to write to read-only block-device sda (partno 0) [ 960.321830][T11322] fuseblk: Bad value for 'group_id' [ 961.437218][T11335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.663580][T11339] FAULT_INJECTION: forcing a failure. [ 961.663580][T11339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.677310][T11339] CPU: 0 PID: 11339 Comm: syz.5.3037 Tainted: G W syzkaller #0 [ 961.687094][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 961.697981][T11339] Call Trace: [ 961.701556][T11339] __dump_stack+0x21/0x24 [ 961.706009][T11339] dump_stack_lvl+0x1a7/0x208 [ 961.710730][T11339] ? thaw_kernel_threads+0x220/0x220 [ 961.716073][T11339] ? show_regs_print_info+0x18/0x18 [ 961.721415][T11339] ? kasan_set_track+0x5b/0x70 [ 961.726293][T11339] ? kasan_set_free_info+0x23/0x40 [ 961.731507][T11339] ? ____kasan_slab_free+0x125/0x160 [ 961.736805][T11339] ? __kasan_slab_free+0x11/0x20 [ 961.741780][T11339] ? kmem_cache_free+0x100/0x2d0 [ 961.746719][T11339] dump_stack+0x15/0x1c [ 961.750876][T11339] should_fail+0x3ab/0x500 [ 961.755486][T11339] should_fail_usercopy+0x1a/0x20 [ 961.760589][T11339] _copy_from_user+0x20/0xd0 [ 961.765172][T11339] memdup_user_nul+0x63/0xf0 [ 961.769816][T11339] bitmap_parse_user+0x25/0x70 [ 961.774607][T11339] irq_affinity_proc_write+0x107/0x1e0 [ 961.780066][T11339] ? avc_policy_seqno+0x1b/0x70 [ 961.784911][T11339] ? irq_affinity_proc_open+0x40/0x40 [ 961.790280][T11339] ? fsnotify_perm+0x66/0x4a0 [ 961.794953][T11339] ? irq_affinity_proc_open+0x40/0x40 [ 961.800329][T11339] proc_reg_write+0x1c4/0x2b0 [ 961.805005][T11339] ? proc_reg_llseek+0x2b0/0x2b0 [ 961.809959][T11339] vfs_write+0x344/0xd70 [ 961.814207][T11339] ? kernel_write+0x3c0/0x3c0 [ 961.818964][T11339] ? __kasan_check_write+0x14/0x20 [ 961.824096][T11339] ? mutex_lock+0x92/0xf0 [ 961.828512][T11339] ? mutex_trylock+0xb0/0xb0 [ 961.833371][T11339] ? __fget_files+0x2e1/0x340 [ 961.838216][T11339] ? __fdget_pos+0x2d2/0x380 [ 961.842819][T11339] ? ksys_write+0x70/0x260 [ 961.847415][T11339] ksys_write+0x14a/0x260 [ 961.851862][T11339] ? __ia32_sys_read+0x90/0x90 [ 961.856644][T11339] ? __fdget+0x1b3/0x230 [ 961.861081][T11339] ? debug_smp_processor_id+0x17/0x20 [ 961.866457][T11339] __x64_sys_write+0x7b/0x90 [ 961.871315][T11339] do_syscall_64+0x31/0x40 [ 961.875747][T11339] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 961.881823][T11339] RIP: 0033:0x7f88ae5f3199 [ 961.886327][T11339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.906342][T11339] RSP: 002b:00007f88ad04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 961.914937][T11339] RAX: ffffffffffffffda RBX: 00007f88ae87afa0 RCX: 00007f88ae5f3199 [ 961.923071][T11339] RDX: 000000000000000d RSI: 0000200000000040 RDI: 0000000000000004 [ 961.932021][T11339] RBP: 00007f88ad04c090 R08: 0000000000000000 R09: 0000000000000000 [ 961.940001][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.948153][T11339] R13: 00007f88ae87b038 R14: 00007f88ae87afa0 R15: 00007ffcb71ef7d8 [ 961.957503][ T24] audit: type=1400 audit(2000000030.680:442): avc: denied { setopt } for pid=11340 comm="syz.2.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 962.012264][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 962.093603][T11346] EXT4-fs (loop5): Test dummy encryption mode enabled [ 962.109416][T11346] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 962.125175][T11346] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.3041: bad orphan inode 131083 [ 962.136318][T11346] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue [ 962.527469][T11361] xt_hashlimit: size too large, truncated to 1048576 [ 962.574833][T11360] ip_tables: iptables: counters copy to user failed while replacing table [ 962.764532][ T24] audit: type=1326 audit(2000000031.710:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 962.838587][ T24] audit: type=1326 audit(2000000031.740:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 963.066551][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3053'. [ 963.749721][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 963.749736][ T24] audit: type=1326 audit(2000000032.590:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 963.830807][ T24] audit: type=1326 audit(2000000032.730:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 963.916757][ T24] audit: type=1326 audit(2000000032.730:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 963.967684][ T24] audit: type=1326 audit(2000000032.760:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 964.146619][ T24] audit: type=1326 audit(2000000032.760:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 964.187323][ T24] audit: type=1326 audit(2000000032.760:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 964.215255][ T24] audit: type=1326 audit(2000000032.760:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 964.241774][ T24] audit: type=1326 audit(2000000032.760:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 964.269493][ T24] audit: type=1326 audit(2000000032.760:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 964.295856][ T24] audit: type=1326 audit(2000000032.760:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.2.3048" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab0c0c199 code=0x7ffc0000 [ 965.538105][T11418] dummy0: Caught tx_queue_len zero misconfig [ 965.570447][T11404] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 966.871581][T11425] tipc: Enabling of bearer rejected, failed to enable media [ 967.349210][T11435] fuse: Bad value for 'fd' [ 968.550060][T11449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3077'. [ 968.690271][T11462] device syzkaller0 entered promiscuous mode [ 968.770711][T11466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 968.793607][ T24] kauditd_printk_skb: 114 callbacks suppressed [ 968.793622][ T24] audit: type=1400 audit(2000000037.740:590): avc: denied { setattr } for pid=11465 comm="syz.6.3082" path="socket:[50092]" dev="sockfs" ino=50092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 970.550665][T11494] program syz.6.3092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 970.919814][ T423] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 971.609406][ T423] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.673872][ T423] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 971.854033][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3104'. [ 971.859484][ T423] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 971.872530][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.881203][ T423] usb 2-1: Product: syz [ 971.885660][ T423] usb 2-1: Manufacturer: syz [ 971.890652][ T423] usb 2-1: SerialNumber: syz [ 971.930245][ T423] usb-storage 2-1:1.0: USB Mass Storage device detected [ 971.938183][T11543] tunl0: Caught tx_queue_len zero misconfig [ 971.939642][ T423] scsi host1: usb-storage 2-1:1.0 [ 972.049504][ T4339] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 972.140850][T11506] udc-core: couldn't find an available UDC or it's busy [ 972.148053][T11506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 972.163492][T10683] usb 2-1: USB disconnect, device number 41 [ 972.969978][ T24] audit: type=1400 audit(2000000041.920:591): avc: denied { shutdown } for pid=11562 comm="syz.1.3113" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 973.461073][T11583] SELinux: duplicate or incompatible mount options [ 973.500366][ T4339] usb 7-1: Using ep0 maxpacket: 32 [ 973.639502][ T4339] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 973.649790][ T4339] usb 7-1: config 0 has no interface number 0 [ 973.676854][T11596] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 973.691861][T11596] SELinux: failed to load policy [ 973.729159][T11602] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 973.742230][ T24] audit: type=1400 audit(2000000042.690:592): avc: denied { relabelto } for pid=11600 comm="syz.1.3128" name="532" dev="tmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 973.767913][ T24] audit: type=1400 audit(2000000042.690:593): avc: denied { associate } for pid=11600 comm="syz.1.3128" name="532" dev="tmpfs" ino=2996 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 973.798313][T11597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 973.812302][ T24] audit: type=1400 audit(2000000042.760:594): avc: denied { sys_module } for pid=11604 comm="syz.0.3130" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 973.835830][ T4339] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 973.846265][ T4339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.864329][ T4339] usb 7-1: Product: syz [ 973.865991][ T24] audit: type=1400 audit(2000000042.790:595): avc: denied { write } for pid=1728 comm="syz-executor" name="532" dev="tmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 973.868679][ T4339] usb 7-1: Manufacturer: syz [ 973.894172][ T24] audit: type=1400 audit(2000000042.790:596): avc: denied { remove_name } for pid=1728 comm="syz-executor" name="file0" dev="tmpfs" ino=3001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 973.899211][ T4339] usb 7-1: SerialNumber: syz [ 973.925345][ T24] audit: type=1400 audit(2000000042.790:597): avc: denied { rmdir } for pid=1728 comm="syz-executor" name="532" dev="tmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 973.955280][ T4339] usb 7-1: config 0 descriptor?? [ 974.000090][ T4339] smsc95xx v2.0.0 [ 974.007556][T11613] tipc: Started in network mode [ 974.012845][T11613] tipc: Own node identity fe80000000000000000000000000001, cluster identity 4711 [ 974.022706][T11613] tipc: Enabled bearer , priority 10 [ 974.219568][ T4339] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 974.230141][ T4339] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 974.241873][ T4339] usb 7-1: USB disconnect, device number 23 [ 974.458144][ T372] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 974.574716][T11634] ip_tables: iptables: counters copy to user failed while replacing table [ 974.616335][ T24] audit: type=1326 audit(2000000043.560:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.0.3144" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2839806199 code=0x0 [ 974.645425][ T24] audit: type=1400 audit(2000000043.590:599): avc: denied { relabelfrom } for pid=11643 comm="syz.2.3146" name="UNIX" dev="sockfs" ino=50491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 974.645472][T11644] SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped). [ 974.682125][ T24] audit: type=1400 audit(2000000043.630:600): avc: denied { relabelto } for pid=11643 comm="syz.2.3146" name="UNIX" dev="sockfs" ino=50491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:dhcpd_unit_file_t:s0" [ 974.711930][ T24] audit: type=1400 audit(2000000043.630:601): avc: denied { bind } for pid=11643 comm="syz.2.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 974.733505][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 974.769574][ T372] usb 2-1: no configurations [ 974.774551][ T372] usb 2-1: can't read configurations, error -22 [ 974.798022][T11653] ip_tables: iptables: counters copy to user failed while replacing table [ 974.818322][T11655] netlink: 'syz.5.3151': attribute type 1 has an invalid length. [ 974.939363][ T372] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 975.048425][T11668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11668 comm=syz.5.3154 [ 975.061268][T11668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11668 comm=syz.5.3154 [ 975.082750][ T24] audit: type=1400 audit(2000000044.030:602): avc: denied { audit_write } for pid=11667 comm="syz.5.3154" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 975.105766][T11668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11668 comm=syz.5.3154 [ 975.138860][T11670] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 975.149430][ T4339] tipc: 32-bit node address hash set to 100080fe [ 975.234966][T11678] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 975.249035][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 975.290020][ T372] usb 2-1: no configurations [ 975.295664][ T372] usb 2-1: can't read configurations, error -22 [ 975.323307][ T372] usb usb2-port1: attempt power cycle [ 975.511938][T11683] batadv_slave_0: Caught tx_queue_len zero misconfig [ 975.733159][ T24] audit: type=1400 audit(2000000044.680:603): avc: denied { remount } for pid=11703 comm="syz.0.3169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 975.733901][T11704] option changes via remount are deprecated (pid=11703 comm=syz.0.3169) [ 975.763416][T11704] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 975.779389][ T372] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 975.795172][T11704] kvm [11703]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x4 [ 975.827192][T11647] xt_hashlimit: size too large, truncated to 1048576 [ 975.895730][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 975.939525][ T372] usb 2-1: no configurations [ 975.944331][ T372] usb 2-1: can't read configurations, error -22 [ 976.124181][T11710] tipc: Enabling of bearer rejected, failed to enable media [ 976.599556][ T372] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 976.635310][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3171'. [ 976.765618][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3172'. [ 976.819534][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 976.859432][ T372] usb 2-1: no configurations [ 976.864103][ T372] usb 2-1: can't read configurations, error -22 [ 976.879774][ T372] usb usb2-port1: unable to enumerate USB device syzkaller syzkaller login: [ 977.290140][T11751] ip_tables: iptables: counters copy to user failed while replacing table [ 977.594540][T11758] tipc: Enabling of bearer rejected, already enabled [ 978.612478][T11776] ip_tables: iptables: counters copy to user failed while replacing table [ 978.644716][T11774] overlayfs: missing 'lowerdir' [ 978.829480][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 979.249369][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 980.328058][T11829] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3215'. [ 980.408189][T11820] fuse: Unknown parameter 'À' [ 980.730910][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 980.730933][ T24] audit: type=1400 audit(2000000003.660:608): avc: denied { accept } for pid=11832 comm="syz.6.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 981.759921][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3225'. [ 982.190865][T11873] ip_tables: iptables: counters copy to user failed while replacing table [ 982.747612][T11884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 983.507263][T11881] device syz_tun entered promiscuous mode [ 983.643417][T11892] ip_tables: iptables: counters copy to user failed while replacing table [ 983.959371][ T4334] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 985.269470][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 985.479409][ T4334] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.500889][ T4334] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 985.688401][ T501] Trying to write to read-only block-device sda (partno 0) [ 985.770854][T11912] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 985.799585][ T501] Trying to write to read-only block-device sda (partno 0) [ 985.807092][ T501] Trying to write to read-only block-device sda (partno 0) [ 985.869440][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 985.908580][T11927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 985.939016][ T24] audit: type=1400 audit(2000000002.170:609): avc: denied { name_bind } for pid=11926 comm="syz.5.3245" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 985.970403][T11862] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 985.989463][ T4334] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 985.991488][T11862] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 986.024902][ T4334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.042727][ T4334] usb 7-1: Product: syz [ 986.047464][ T4334] usb 7-1: Manufacturer: syz [ 986.059090][T11953] xt_hashlimit: size too large, truncated to 1048576 [ 986.097729][ T4334] usb 7-1: SerialNumber: syz [ 986.147166][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3248'. [ 986.157130][ T4334] usb-storage 7-1:1.0: USB Mass Storage device detected [ 986.173241][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.182263][ T4334] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 986.198908][ T4334] scsi host1: usb-storage 7-1:1.0 [ 986.227708][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.373098][T11863] usb 7-1: USB disconnect, device number 24 [ 986.769360][T10189] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 987.530100][T12015] tmpfs: Unknown parameter 'nrQYlocks' [ 987.557545][T10189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 987.609394][T10189] usb 2-1: not running at top speed; connect to a high speed hub [ 987.617803][T10189] usb 2-1: no configurations [ 987.622875][T10189] usb 2-1: can't read configurations, error -22 [ 987.779349][T10189] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 987.792323][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3264'. [ 989.108882][T12040] 9pnet: Insufficient options for proto=fd [ 989.125118][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3267'. [ 989.339467][T10189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 989.399381][T10189] usb 2-1: not running at top speed; connect to a high speed hub [ 989.407354][T10189] usb 2-1: no configurations [ 989.412345][T10189] usb 2-1: can't read configurations, error -22 [ 989.418703][T10189] usb usb2-port1: attempt power cycle [ 989.851045][T12048] xt_hashlimit: size too large, truncated to 1048576 [ 989.921821][T12053] ip_tables: iptables: counters copy to user failed while replacing table [ 990.037805][T12057] netlink: 'syz.6.3275': attribute type 3 has an invalid length. [ 990.081163][T12059] fuse: Bad value for 'user_id' [ 990.205431][ T24] audit: type=1400 audit(2000000003.630:610): avc: denied { setattr } for pid=12064 comm="syz.0.3279" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 990.671873][T12077] xt_l2tp: missing protocol rule (udp|l2tpip) [ 990.719386][ T4339] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 990.742951][T12085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3286'. [ 990.864768][T12094] ip_tables: iptables: counters copy to user failed while replacing table [ 991.067559][ T24] audit: type=1400 audit(2000000004.490:611): avc: denied { map } for pid=12102 comm="syz.6.3293" path="socket:[51019]" dev="sockfs" ino=51019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 991.067842][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3295'. [ 991.190804][T12110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 992.087415][T12118] ip_tables: iptables: counters copy to user failed while replacing table [ 992.106570][T12118] overlayfs: failed to clone upperpath [ 992.119221][T12118] overlayfs: failed to clone upperpath [ 992.143065][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 992.189419][ T4339] usb 1-1: not running at top speed; connect to a high speed hub [ 992.201795][ T4339] usb 1-1: no configurations [ 992.206532][ T4339] usb 1-1: can't read configurations, error -22 [ 992.240262][T12137] fuse: Bad value for 'fd' [ 992.266879][T12143] FAULT_INJECTION: forcing a failure. [ 992.266879][T12143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.280709][T12143] CPU: 0 PID: 12143 Comm: syz.1.3310 Tainted: G W syzkaller #0 [ 992.290909][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 992.301273][T12143] Call Trace: [ 992.304664][T12143] __dump_stack+0x21/0x24 [ 992.309351][T12143] dump_stack_lvl+0x1a7/0x208 [ 992.314032][T12143] ? show_regs_print_info+0x18/0x18 [ 992.319329][T12143] ? kasan_set_track+0x5b/0x70 [ 992.324404][T12143] ? avc_ss_reset+0x270/0x270 [ 992.329451][T12143] dump_stack+0x15/0x1c [ 992.333722][T12143] should_fail+0x3ab/0x500 [ 992.338157][T12143] should_fail_usercopy+0x1a/0x20 [ 992.343302][T12143] _copy_from_user+0x20/0xd0 [ 992.348148][T12143] inet_ioctl+0x33c/0x490 [ 992.352948][T12143] ? inet_shutdown+0x390/0x390 [ 992.357745][T12143] ? __asan_set_shadow_00+0xe/0x10 [ 992.363004][T12143] ? do_vfs_ioctl+0x1403/0x15d0 [ 992.367883][T12143] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 992.373541][T12143] sock_do_ioctl+0xda/0x380 [ 992.378079][T12143] ? sock_show_fdinfo+0xa0/0xa0 [ 992.382955][T12143] ? kernel_write+0x3c0/0x3c0 [ 992.387745][T12143] ? selinux_file_ioctl+0x3ad/0x4c0 [ 992.393063][T12143] ? mutex_trylock+0xb0/0xb0 [ 992.397774][T12143] ? __fget_files+0x2e1/0x340 [ 992.402654][T12143] sock_ioctl+0x472/0x740 [ 992.407012][T12143] ? sock_poll+0x350/0x350 [ 992.411571][T12143] ? __fget_files+0x2e1/0x340 [ 992.416292][T12143] ? security_file_ioctl+0x84/0xa0 [ 992.422398][T12143] ? sock_poll+0x350/0x350 [ 992.427503][T12143] __se_sys_ioctl+0x121/0x1a0 [ 992.433795][T12143] __x64_sys_ioctl+0x7b/0x90 [ 992.438406][T12143] do_syscall_64+0x31/0x40 [ 992.443165][T12143] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 992.450273][T12143] RIP: 0033:0x7fec0e045199 [ 992.454719][T12143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.477878][T12143] RSP: 002b:00007fec0ca9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.486340][T12143] RAX: ffffffffffffffda RBX: 00007fec0e2ccfa0 RCX: 00007fec0e045199 [ 992.496385][T12143] RDX: 00002000000002c0 RSI: 0000000000008915 RDI: 0000000000000003 [ 992.504855][T12143] RBP: 00007fec0ca9e090 R08: 0000000000000000 R09: 0000000000000000 [ 992.513666][T12143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.522507][T12143] R13: 00007fec0e2cd038 R14: 00007fec0e2ccfa0 R15: 00007ffcb26631b8 [ 992.850943][T12157] xt_hashlimit: size too large, truncated to 1048576 [ 992.909380][ T4339] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 993.289446][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 993.349819][ T4339] usb 1-1: no configurations [ 993.355107][ T4339] usb 1-1: can't read configurations, error -22 [ 993.379425][ T4339] usb usb1-port1: attempt power cycle [ 993.614103][ T24] audit: type=1400 audit(2000000000.120:612): avc: denied { map } for pid=12206 comm="syz.5.3331" path="pipe:[51108]" dev="pipefs" ino=51108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 993.659346][ T24] audit: type=1400 audit(2000000000.120:613): avc: denied { execute } for pid=12206 comm="syz.5.3331" path="pipe:[51108]" dev="pipefs" ino=51108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 993.873422][ T24] audit: type=1400 audit(2000000000.380:614): avc: denied { bind } for pid=12223 comm="syz.6.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 993.898679][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3336'. [ 993.919570][ T24] audit: type=1400 audit(2000000000.420:615): avc: denied { ioctl } for pid=12221 comm="syz.5.3335" path="socket:[51134]" dev="sockfs" ino=51134 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 993.993085][T12226] fuse: Unknown parameter 'À' [ 994.739351][ T4339] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 995.179566][ T4339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 995.191769][ T4339] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 995.204741][T12266] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3353'. [ 995.219187][T12268] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 995.389381][ T4339] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 995.399053][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.407304][ T4339] usb 2-1: Product: syz [ 995.411714][ T4339] usb 2-1: Manufacturer: syz [ 995.416386][ T4339] usb 2-1: SerialNumber: syz [ 995.694130][ T4339] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 995.810342][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 996.110915][ T4334] usb 2-1: USB disconnect, device number 49 [ 996.170094][ T4334] usblp0: removed [ 997.743889][T12301] fuse: Bad value for 'fd' [ 998.012013][T12320] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 998.037215][T12277] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3355'. [ 999.630329][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 999.881874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 999.942606][T12364] veth0_to_bridge: FDB only supports static addresses [ 999.952356][T12369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12369 comm=syz.2.3389 [ 1000.061536][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1000.522448][ T24] audit: type=1400 audit(2000000000.780:616): avc: denied { map } for pid=12411 comm="syz.6.3404" path="socket:[52859]" dev="sockfs" ino=52859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1000.619873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.647859][T12422] device veth1_to_bond entered promiscuous mode [ 1000.655985][T12422] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1000.676205][T12421] device veth1_to_bond left promiscuous mode [ 1000.882647][T12436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1001.052613][T12434] xt_hashlimit: size too large, truncated to 1048576 [ 1001.976496][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'. [ 1002.242170][T12473] program syz.1.3430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1002.465022][T12482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1002.499750][T12491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16102 sclass=netlink_route_socket pid=12491 comm=syz.0.3436 [ 1002.649460][T11863] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1004.562058][ T24] audit: type=1400 audit(2000000002.080:617): avc: denied { map } for pid=12529 comm="syz.2.3449" path="socket:[53734]" dev="sockfs" ino=53734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1006.647826][T11863] usb 2-1: device descriptor read/all, error -71 [ 1006.936233][T12565] netlink: 'syz.0.3460': attribute type 4 has an invalid length. [ 1006.955415][T12567] 9pnet: Insufficient options for proto=fd [ 1006.964278][T12565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1007.033123][T12573] 9pnet: Insufficient options for proto=fd [ 1007.125468][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1007.133901][ T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1007.149488][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1007.979627][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1008.110818][T12602] fuse: Bad value for 'fd' [ 1008.149029][T12604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1008.253164][T12610] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1008.309348][ T4339] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1008.339388][T11861] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1008.919784][T11861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.931875][T11861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.960899][T11861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1008.975735][T11861] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.016218][T11861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.440151][T11861] usb 2-1: config 0 descriptor?? [ 1009.719412][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1009.759471][ T4339] usb 1-1: not running at top speed; connect to a high speed hub [ 1009.767875][ T4339] usb 1-1: no configurations [ 1009.773059][ T4339] usb 1-1: can't read configurations, error -22 [ 1009.920382][T11861] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description [ 1009.930429][T11861] plantronics 0003:047F:FFFF.0007: parse failed [ 1009.937561][T11861] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 1009.939363][ T4339] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1010.067456][T12635] fuse: Bad value for 'fd' [ 1010.568223][T12643] fuse: Bad value for 'user_id' [ 1010.625243][T11861] usb 2-1: USB disconnect, device number 52 [ 1011.189394][ T24] audit: type=1400 audit(2000000008.650:618): avc: denied { create } for pid=12652 comm="syz.1.3492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 1011.221113][T12659] ip_tables: iptables: counters copy to user failed while replacing table [ 1011.231243][T12655] fuse: Unknown parameter 'À' [ 1011.257496][ T24] audit: type=1400 audit(2000000008.770:619): avc: denied { append } for pid=12660 comm="syz.0.3495" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1011.409358][T11861] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1011.487552][T12687] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1011.649467][T11861] usb 2-1: Using ep0 maxpacket: 32 [ 1011.769483][T11861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.847359][T11861] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1011.952595][T11861] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1012.459484][T11861] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1012.472892][T11861] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.482827][T11861] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1012.538060][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1012.566477][T12694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12694 comm=syz.0.3507 [ 1012.649425][T11861] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1012.658924][T11861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.668137][T11861] usb 2-1: Product: syz [ 1012.672839][T11861] usb 2-1: Manufacturer: syz [ 1012.677538][T11861] usb 2-1: SerialNumber: syz [ 1012.708137][T12718] tipc: Started in network mode [ 1012.713261][T12718] tipc: Own node identity ac14142f, cluster identity 4711 [ 1012.720821][T12718] tipc: Enabled bearer , priority 10 [ 1012.727993][T12718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3518'. [ 1012.970029][T11861] usb 2-1: selecting invalid altsetting 0 [ 1012.989409][T11861] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 1013.009451][T11861] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1013.020135][T11861] usb 2-1: USB disconnect, device number 53 [ 1013.069561][ T4339] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1013.102334][T12739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1013.229983][T12483] udevd[12483]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1013.429505][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1013.469386][ T4339] usb 1-1: not running at top speed; connect to a high speed hub [ 1013.549483][ T4339] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1013.615547][T12766] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1013.640146][T12774] fuse: Bad value for 'fd' [ 1013.708405][T12778] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3544'. [ 1013.718082][T12778] device gretap0 entered promiscuous mode [ 1013.725344][ T290] tipc: 32-bit node address hash set to 2f1414ac [ 1013.733731][T12778] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3544'. [ 1013.743233][ T4339] usb 1-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 1013.752428][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.756771][T12778] 0ªî{X¹¦: renamed from gretap0 [ 1013.760864][ T4339] usb 1-1: Product: syz [ 1013.770273][ T4339] usb 1-1: Manufacturer: syz [ 1013.770839][T12778] device 30ªî{X¹¦ left promiscuous mode [ 1013.775173][ T4339] usb 1-1: SerialNumber: syz [ 1013.781945][T12778] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1013.809463][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3543'. [ 1013.847793][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.857123][T12791] ip_tables: iptables: counters copy to user failed while replacing table [ 1013.859983][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.876174][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.885494][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.895909][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.905934][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.916213][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.925932][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.936624][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.946673][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.956841][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.966585][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.977322][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.986941][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1013.996450][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.005989][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.013088][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1014.015526][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.025357][T12708] overlayfs: failed to resolve './sys/class/net/bridge0/bridge/group_addr/file0': -20 [ 1014.043367][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.052889][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.062451][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.071986][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.081477][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.090894][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.135249][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.174175][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.183324][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.192661][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.199427][ T4339] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1014.202123][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.217219][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.229220][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.240749][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.252039][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.262966][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.274540][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.293158][T12809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.407374][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.419123][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.431602][ T4339] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1014.431996][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.440539][ T4339] usb 1-1: 2:1 : sample bitwidth 76 in over sample bytes 4 [ 1014.440553][ T4339] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1014.440564][ T4339] usb 1-1: 2:1 : invalid channels 0 [ 1014.469593][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.496301][ T4339] usb 1-1: USB disconnect, device number 31 [ 1014.504073][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.532800][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.542752][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.553367][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.563821][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.573599][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.583516][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.593264][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.604339][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.614737][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.627418][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.636838][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.646883][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.652834][T12814] xt_limit: Overflow, try lower: 1207959552/384 [ 1014.656368][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.671442][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.680970][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.690357][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.700041][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.709595][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.719044][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.734456][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.744934][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.754509][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.779551][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.810407][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.821897][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.832021][T12789] 9pnet: p9_fd_create_tcp (12789): problem connecting socket to 127.0.0.1 [ 1014.869727][T12826] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.931232][ T24] audit: type=1400 audit(2000000002.300:620): avc: denied { mount } for pid=12825 comm="syz.6.3563" name="/" dev="incremental-fs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1014.965762][ T24] audit: type=1400 audit(2000000002.330:621): avc: denied { add_name } for pid=12825 comm="syz.6.3563" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1016.584420][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1016.955296][ T24] audit: type=1400 audit(2000000004.320:622): avc: denied { ioctl } for pid=12869 comm="syz.2.3576" path="socket:[54188]" dev="sockfs" ino=54188 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1016.995335][ T24] audit: type=1400 audit(2000000004.350:623): avc: denied { getopt } for pid=12869 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1017.024432][T12876] device veth1_to_bond entered promiscuous mode [ 1017.032181][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 1017.060454][T12876] device veth1_to_bond left promiscuous mode [ 1018.283622][T12887] netlink: 'syz.5.3583': attribute type 3 has an invalid length. [ 1018.362111][ T24] audit: type=1400 audit(2000000005.730:624): avc: denied { watch } for pid=12885 comm="syz.1.3582" path="/597/bus" dev="tmpfs" ino=3362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1018.391990][T12903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3588'. [ 1018.402626][T12903] 9pnet: Insufficient options for proto=fd [ 1018.409713][ T24] audit: type=1400 audit(2000000005.780:625): avc: denied { create } for pid=12902 comm="syz.5.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1018.433804][T12890] device erspan0 entered promiscuous mode [ 1018.455856][T12906] overlayfs: failed to clone upperpath [ 1018.527851][T12927] netlink: 'syz.2.3600': attribute type 2 has an invalid length. [ 1018.609448][T11860] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1018.634348][T12931] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1018.643056][T12931] overlayfs: missing 'lowerdir' [ 1018.889367][T11860] usb 1-1: Using ep0 maxpacket: 16 [ 1019.055438][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.064689][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.074340][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.084280][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.094120][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.103375][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.113903][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.123615][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.133387][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.142793][T12964] 9pnet: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 1019.156730][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1019.169382][T11860] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1019.178578][T11860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.187801][T11860] usb 1-1: Product: syz [ 1019.192151][T11860] usb 1-1: Manufacturer: syz [ 1019.196870][T11860] usb 1-1: SerialNumber: syz [ 1019.464282][T12894] fuse: Invalid rootmode [ 1019.512599][T11860] usb 1-1: USB disconnect, device number 32 [ 1019.806412][T12982] ip_tables: iptables: counters copy to user failed while replacing table [ 1019.937367][T12978] tipc: Enabling of bearer rejected, already enabled [ 1019.951820][ T24] audit: type=1400 audit(2000000001.270:626): avc: denied { create } for pid=12977 comm="syz.1.3621" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1019.952340][ T24] audit: type=1400 audit(2000000001.270:627): avc: denied { read write open } for pid=12977 comm="syz.1.3621" path="/608/file1" dev="tmpfs" ino=3422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1020.069477][ T24] audit: type=1400 audit(2000000001.380:628): avc: denied { unlink } for pid=1728 comm="syz-executor" name="file1" dev="tmpfs" ino=3422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1020.253236][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1022.531555][T13042] overlayfs: failed to clone upperpath [ 1023.264615][ T24] audit: type=1400 audit(2000000002.640:629): avc: denied { create } for pid=13051 comm="syz.1.3649" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1023.285792][ T24] audit: type=1400 audit(2000000002.640:630): avc: denied { read write } for pid=13051 comm="syz.1.3649" name="file0" dev="tmpfs" ino=3450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1023.311622][ T24] audit: type=1400 audit(2000000002.640:631): avc: denied { open } for pid=13051 comm="syz.1.3649" path="/612/file0" dev="tmpfs" ino=3450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1023.335764][ T24] audit: type=1400 audit(2000000002.640:632): avc: denied { ioctl } for pid=13051 comm="syz.1.3649" path="/612/file0" dev="tmpfs" ino=3450 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1023.613297][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1023.645953][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1023.655299][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1023.770214][T13066] netlink: 'syz.0.3654': attribute type 4 has an invalid length. [ 1023.778873][T13066] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1026.448665][T13118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.456393][T13118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.464225][T13118] device bridge_slave_0 entered promiscuous mode [ 1026.472117][ T24] audit: type=1400 audit(2000000005.850:633): avc: denied { ioctl } for pid=13120 comm="syz.6.3674" path="socket:[55614]" dev="sockfs" ino=55614 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1026.498841][ T24] audit: type=1400 audit(2000000005.850:634): avc: denied { write } for pid=13120 comm="syz.6.3674" path="socket:[55617]" dev="sockfs" ino=55617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1026.525005][T13118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.534099][T13118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.542197][T13118] device bridge_slave_1 entered promiscuous mode [ 1026.572661][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.584011][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.593714][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.604078][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.613591][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.628019][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.639409][T11860] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1026.645875][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.648953][T13118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.663455][T13118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.672173][T13118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.677558][T13128] 9pnet: p9_fd_create_tcp (13128): problem connecting socket to 127.0.0.1 [ 1026.679430][T13118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.717277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.728635][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.736959][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.755195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.764271][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.771462][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.780049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.789686][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.796751][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.819396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.839123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.861465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.884336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1026.894443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1026.903475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1026.914078][T13118] device veth0_vlan entered promiscuous mode [ 1026.943245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1026.954611][T13118] device veth1_macvtap entered promiscuous mode [ 1026.963545][T11860] usb 2-1: Using ep0 maxpacket: 16 [ 1026.976530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.018751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.038639][ T24] audit: type=1400 audit(2000000006.410:635): avc: denied { mounton } for pid=13118 comm="syz-executor" path="/root/syzkaller.s4Tzu8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1027.041164][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3677'. [ 1027.119554][T11860] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1027.211888][T11860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.347500][T11860] usb 2-1: config 0 has no interface number 0 [ 1027.962148][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.969223][T13143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.977065][T13143] device bridge_slave_0 entered promiscuous mode [ 1027.989312][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.989461][T11860] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1027.996638][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.997093][T13143] device bridge_slave_1 entered promiscuous mode [ 1028.006037][T11860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.029710][T11860] usb 2-1: Product: syz [ 1028.034345][T11860] usb 2-1: Manufacturer: syz [ 1028.039076][T11860] usb 2-1: SerialNumber: syz [ 1028.045658][T11860] usb 2-1: config 0 descriptor?? [ 1028.065340][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.072782][T13143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.081007][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.088280][T13143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.110969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1028.120071][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.128395][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.142499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1028.151084][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.158198][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.169208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1028.178738][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.186193][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.199025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1028.209023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.224871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1028.236179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1028.244758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1028.252567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1028.262810][T13143] device veth0_vlan entered promiscuous mode [ 1028.273948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1028.283316][T13143] device veth1_macvtap entered promiscuous mode [ 1028.293527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1028.305090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.329469][T11860] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 1028.338559][T11860] uvcvideo: No valid video chain found. [ 1028.400427][ T9188] device bridge_slave_1 left promiscuous mode [ 1028.406678][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.414324][ T9188] device bridge_slave_0 left promiscuous mode [ 1028.420713][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.428566][ T9188] device veth1_macvtap left promiscuous mode [ 1028.434805][ T9188] device veth0_vlan left promiscuous mode [ 1028.530758][T13149] udc-core: couldn't find an available UDC or it's busy [ 1028.540365][T13149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1028.790015][ T9188] tipc: Disabling bearer [ 1028.795649][ T9188] tipc: Left network mode [ 1029.240154][ T9188] device bridge_slave_1 left promiscuous mode [ 1029.246726][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.255080][ T9188] device veth1_macvtap left promiscuous mode [ 1029.261490][ T9188] device veth0_vlan left promiscuous mode [ 1029.568886][ T4337] usb 2-1: USB disconnect, device number 54 [ 1035.078744][T13153] netlink: 'syz.0.3680': attribute type 11 has an invalid length. [ 1035.420321][T13166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.427684][T13166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.435959][T13166] device bridge_slave_0 entered promiscuous mode [ 1035.470301][T13166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.478052][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.487724][T13166] device bridge_slave_1 entered promiscuous mode [ 1035.766104][T13166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.773520][T13166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.780865][T13166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.787899][T13166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.807074][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1035.814776][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.822520][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.834398][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1035.842836][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.849969][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.859242][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1035.868026][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.875443][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.889974][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.900161][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.916357][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1035.935467][T13166] device veth0_vlan entered promiscuous mode [ 1035.987317][T13166] device veth1_macvtap entered promiscuous mode [ 1035.995228][T13180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1036.005396][T12835] device bridge_slave_0 left promiscuous mode [ 1036.006193][T13180] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1036.012079][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.021102][T13180] netlink: 'syz.1.3688': attribute type 5 has an invalid length. [ 1036.036737][T13180] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1036.048919][T12835] device veth1_macvtap left promiscuous mode [ 1036.056038][T12835] device veth0_vlan left promiscuous mode [ 1036.065894][ T24] audit: type=1400 audit(2000000015.430:636): avc: denied { create } for pid=13179 comm="syz.1.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1036.172280][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1036.180818][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.188475][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.196902][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1036.236808][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1036.266896][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1036.315910][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1036.335143][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1036.396962][T13209] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3695'. [ 1036.503959][T13223] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1036.910821][T13250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1037.061660][ T24] audit: type=1400 audit(2000000016.440:637): avc: denied { listen } for pid=13258 comm="syz.2.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1037.461915][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.469229][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.570485][T13268] device bridge_slave_0 entered promiscuous mode [ 1037.627077][T12835] tipc: Disabling bearer [ 1037.635466][T12835] tipc: Left network mode [ 1037.643097][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.683783][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.731573][T13268] device bridge_slave_1 entered promiscuous mode [ 1038.085789][ T24] audit: type=1400 audit(2000000017.460:638): avc: denied { nlmsg_write } for pid=13274 comm="syz.2.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1038.521800][T13283] FAT-fs (loop5): Directory bread(block 64) failed [ 1038.728764][T13283] FAT-fs (loop5): Directory bread(block 65) failed [ 1038.835629][T12835] device bridge_slave_1 left promiscuous mode [ 1038.854674][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.863879][T13283] FAT-fs (loop5): Directory bread(block 66) failed [ 1038.998174][T13283] FAT-fs (loop5): Directory bread(block 67) failed [ 1039.015394][T12835] device bridge_slave_0 left promiscuous mode [ 1039.099608][T13283] FAT-fs (loop5): Directory bread(block 68) failed [ 1040.054372][T13283] FAT-fs (loop5): Directory bread(block 69) failed [ 1040.064048][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.071833][T13283] FAT-fs (loop5): Directory bread(block 70) failed [ 1040.081469][T12835] device veth1_macvtap left promiscuous mode [ 1040.087946][T13283] FAT-fs (loop5): Directory bread(block 71) failed [ 1040.095471][T12835] device veth0_vlan left promiscuous mode [ 1040.095870][T13283] FAT-fs (loop5): Directory bread(block 72) failed [ 1040.567918][T13283] FAT-fs (loop5): Directory bread(block 73) failed [ 1040.813287][T13297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1040.839558][ T24] audit: type=1400 audit(2000000020.220:639): avc: denied { mounton } for pid=13282 comm="syz.5.3709" path="/3/file0/file0" dev="loop5" ino=1048843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1040.913206][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1040.944187][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1040.953411][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1040.962658][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1040.971932][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1040.981344][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1040.996034][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1041.013413][T13300] 9pnet: p9_fd_create_tcp (13300): problem connecting socket to 127.0.0.1 [ 1041.030320][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1041.038541][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.047268][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.058934][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.069089][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.076290][ T9188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.094563][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.103718][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.112807][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.121516][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.128702][ T9188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.142835][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1041.151286][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1041.167532][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1041.176832][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1041.196635][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1041.215172][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1041.229826][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1041.238613][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1041.250917][T13268] device veth0_vlan entered promiscuous mode [ 1041.269665][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1041.282424][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1041.306714][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1041.317284][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1041.329323][ T4337] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1041.338596][T13268] device veth1_macvtap entered promiscuous mode [ 1041.359106][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1041.369401][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1041.380000][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1041.390434][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1041.399007][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1041.456090][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1042.174080][T13323] ip_tables: iptables: counters copy to user failed while replacing table [ 1042.422849][T13328] ip_tables: iptables: counters copy to user failed while replacing table [ 1042.444897][ T24] audit: type=1400 audit(2000000021.820:640): avc: denied { map } for pid=13326 comm="syz.0.3721" path="socket:[57054]" dev="sockfs" ino=57054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1042.503277][T13330] ip_tables: iptables: counters copy to user failed while replacing table [ 1042.555816][ T4337] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1042.560371][T13334] device bridge1 entered promiscuous mode [ 1042.599430][ T4337] usb 6-1: not running at top speed; connect to a high speed hub [ 1042.617732][ T4337] usb 6-1: no configurations [ 1042.623070][ T4337] usb 6-1: can't read configurations, error -22 [ 1042.767581][ T24] audit: type=1400 audit(2000000022.140:641): avc: denied { watch_reads } for pid=13331 comm="syz.2.3723" path="/10/file1" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1043.371865][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3728'. [ 1043.450978][ T4337] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1043.867570][T13363] FAULT_INJECTION: forcing a failure. [ 1043.867570][T13363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.880846][T13363] CPU: 0 PID: 13363 Comm: syz.1.3732 Tainted: G W syzkaller #0 [ 1043.890101][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1043.900248][T13363] Call Trace: [ 1043.903575][T13363] __dump_stack+0x21/0x24 [ 1043.908269][T13363] dump_stack_lvl+0x1a7/0x208 [ 1043.913049][T13363] ? show_regs_print_info+0x18/0x18 [ 1043.918600][T13363] dump_stack+0x15/0x1c [ 1043.922960][T13363] should_fail+0x3ab/0x500 [ 1043.927373][T13363] should_fail_usercopy+0x1a/0x20 [ 1043.932390][T13363] _copy_from_user+0x20/0xd0 [ 1043.937074][T13363] __copy_msghdr_from_user+0xc9/0x630 [ 1043.942538][T13363] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 1043.948077][T13363] ? __fsnotify_parent+0x6d2/0x7c0 [ 1043.953399][T13363] ___sys_sendmsg+0x19a/0x2e0 [ 1043.958177][T13363] ? __sys_sendmsg+0x280/0x280 [ 1043.962975][T13363] ? rw_verify_area+0x1c0/0x360 [ 1043.967843][T13363] ? __fdget+0x1a1/0x230 [ 1043.972128][T13363] __x64_sys_sendmsg+0x201/0x2d0 [ 1043.977556][T13363] ? fput+0x1a/0x20 [ 1043.982118][T13363] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1043.987079][T13363] ? debug_smp_processor_id+0x17/0x20 [ 1043.992458][T13363] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1043.999086][T13363] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 1044.004905][T13363] do_syscall_64+0x31/0x40 [ 1044.010200][T13363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1044.017065][T13363] RIP: 0033:0x7ff0f34d2199 [ 1044.021660][T13363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.041721][T13363] RSP: 002b:00007ff0f1f2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.050621][T13363] RAX: ffffffffffffffda RBX: 00007ff0f3759fa0 RCX: 00007ff0f34d2199 [ 1044.058859][T13363] RDX: 000000000000c840 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1044.066842][T13363] RBP: 00007ff0f1f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.074816][T13363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.082799][T13363] R13: 00007ff0f375a038 R14: 00007ff0f3759fa0 R15: 00007ffd25482f48 [ 1044.113486][T13367] ip_tables: iptables: counters copy to user failed while replacing table [ 1044.179369][ T4337] usb 6-1: device descriptor read/all, error -71 [ 1044.187968][ T4337] usb usb6-port1: attempt power cycle [ 1045.355525][ T24] audit: type=1326 audit(2000000001.900:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.389003][ T24] audit: type=1326 audit(2000000001.930:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.416056][ T24] audit: type=1326 audit(2000000001.930:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.442077][ T24] audit: type=1326 audit(2000000001.930:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.468374][ T24] audit: type=1326 audit(2000000001.930:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.495677][ T24] audit: type=1326 audit(2000000001.930:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.523065][ T24] audit: type=1326 audit(2000000001.930:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1045.549351][ T24] audit: type=1326 audit(2000000001.930:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.0.3737" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f604347e199 code=0x7ffc0000 [ 1046.872308][T13389] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3740'. [ 1047.768061][T13387] exfat: Deprecated parameter 'utf8' [ 1047.773586][T13387] exfat: Deprecated parameter 'namecase' [ 1047.779302][T13387] exfat: Deprecated parameter 'utf8' [ 1047.807382][T11861] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1047.830143][T13387] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1048.073847][T13397] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1048.095706][ T24] kauditd_printk_skb: 1600 callbacks suppressed [ 1048.095717][ T24] audit: type=1400 audit(2000000004.640:2250): avc: denied { unmount } for pid=13166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1048.329695][T11861] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 1048.419898][T11861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 1048.589603][T11861] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1048.668149][T11861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.834600][T13403] ip_tables: iptables: counters copy to user failed while replacing table [ 1048.859805][T11861] usb 3-1: config 0 descriptor?? [ 1048.879367][T11861] usb 3-1: can't set config #0, error -71 [ 1048.909908][T11861] usb 3-1: USB disconnect, device number 2 [ 1049.049761][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3750'. [ 1049.069527][T13404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.076642][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.557376][T13404] device bridge_slave_0 entered promiscuous mode [ 1050.060412][T13404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.067495][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.075193][T13404] device bridge_slave_1 entered promiscuous mode [ 1050.199130][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1050.207351][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1050.225822][T13426] EXT4-fs (loop5): quotafile must be on filesystem root [ 1050.255724][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1050.272112][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.281231][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.288460][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.296165][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1050.305562][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1050.314427][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.321541][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.341714][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1050.427292][T13438] overlayfs: missing 'lowerdir' [ 1050.432240][ T24] audit: type=1400 audit(2000000006.970:2251): avc: denied { map } for pid=13432 comm="syz.2.3754" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1050.780300][T13439] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1051.335271][T13404] device veth0_vlan entered promiscuous mode [ 1051.399003][T13404] device veth1_macvtap entered promiscuous mode [ 1051.424944][T13449] ip_tables: iptables: counters copy to user failed while replacing table [ 1051.454226][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.472545][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1051.482480][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.494440][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.502934][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.510873][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.519674][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.528328][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.537361][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.565111][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1051.654586][T13477] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 1051.720244][ T24] audit: type=1400 audit(2000000008.270:2252): avc: denied { read } for pid=13489 comm="syz.0.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1051.818714][T13501] device syzkaller0 entered promiscuous mode [ 1051.899313][ T2561] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1052.051553][T13522] syz.2.3789 (13522) used obsolete PPPIOCDETACH ioctl [ 1052.143348][T13537] xt_hashlimit: size too large, truncated to 1048576 [ 1052.299522][ T2561] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1052.339371][ T2561] usb 7-1: not running at top speed; connect to a high speed hub [ 1052.347247][ T2561] usb 7-1: no configurations [ 1052.359304][ T2561] usb 7-1: can't read configurations, error -22 [ 1052.437398][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1052.456077][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1052.472252][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3810'. [ 1052.511299][T13572] device syzkaller0 entered promiscuous mode [ 1052.519427][ T2561] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1052.686431][T13615] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1052.730212][T13627] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1052.770085][T13627] TC_ACT_REPEAT abuse ? [ 1052.802288][T13647] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1052.824120][T13650] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 1052.871502][T13661] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 1052.934923][T13670] netlink: 'syz.2.3861': attribute type 3 has an invalid length. [ 1052.949728][ T2561] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1053.009651][ T2561] usb 7-1: not running at top speed; connect to a high speed hub [ 1053.019090][ T2561] usb 7-1: no configurations [ 1053.031086][ T2561] usb 7-1: can't read configurations, error -22 [ 1053.044728][ T2561] usb usb7-port1: attempt power cycle [ 1053.459432][ T2561] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1053.493726][T13712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1053.524832][T13716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13716 comm=syz.1.3879 [ 1053.549977][T13718] device syzkaller0 entered promiscuous mode [ 1053.559343][T13720] xt_hashlimit: size too large, truncated to 1048576 [ 1053.572439][T13718] tipc: Started in network mode [ 1053.588133][T13718] tipc: Own node identity 5e7f54c3f3ab, cluster identity 4711 [ 1053.606890][T13718] tipc: Enabled bearer , priority 0 [ 1053.629465][T13717] tipc: Resetting bearer [ 1053.655363][T13717] tipc: Disabling bearer [ 1053.729357][ T2561] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1053.769365][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1053.789409][ T2561] usb 7-1: not running at top speed; connect to a high speed hub [ 1053.797383][ T2561] usb 7-1: no configurations [ 1053.819392][ T2561] usb 7-1: can't read configurations, error -22 [ 1053.950300][ T24] audit: type=1400 audit(2000000010.500:2253): avc: denied { getopt } for pid=13750 comm="syz.0.3894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1053.979558][ T2561] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1054.106892][T13775] device syzkaller0 entered promiscuous mode [ 1054.118319][T13775] tipc: Enabled bearer , priority 0 [ 1054.129806][T13774] tipc: Resetting bearer [ 1054.137288][T13774] tipc: Disabling bearer [ 1054.211659][ T24] audit: type=1400 audit(2000000010.760:2254): avc: denied { mount } for pid=13783 comm="syz.2.3906" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1054.247384][ T24] audit: type=1400 audit(2000000010.790:2255): avc: denied { unmount } for pid=13143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1054.268625][ T2561] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1054.309415][ T2561] usb 7-1: not running at top speed; connect to a high speed hub [ 1054.322735][ T2561] usb 7-1: no configurations [ 1054.333305][ T2561] usb 7-1: can't read configurations, error -22 [ 1054.348122][ T2561] usb usb7-port1: unable to enumerate USB device [ 1054.409657][T13793] overlayfs: unrecognized mount option "verity=require" or missing value [ 1054.480028][T13800] input: syz0 as /devices/virtual/input/input12 [ 1054.578313][T13809] FAULT_INJECTION: forcing a failure. [ 1054.578313][T13809] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.613879][T13809] CPU: 1 PID: 13809 Comm: syz.5.3918 Tainted: G W syzkaller #0 [ 1054.622945][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1054.633127][T13809] Call Trace: [ 1054.636633][T13809] __dump_stack+0x21/0x24 [ 1054.640984][T13809] dump_stack_lvl+0x1a7/0x208 [ 1054.645687][T13809] ? show_regs_print_info+0x18/0x18 [ 1054.651080][T13809] dump_stack+0x15/0x1c [ 1054.655609][T13809] should_fail+0x3ab/0x500 [ 1054.660141][T13809] ? kvmalloc_node+0x88/0x130 [ 1054.664906][T13809] __should_failslab+0xa4/0xe0 [ 1054.669769][T13809] should_failslab+0x9/0x20 [ 1054.674456][T13809] __kmalloc+0x60/0x330 [ 1054.678704][T13809] kvmalloc_node+0x88/0x130 [ 1054.683311][T13809] bpf_int_jit_compile+0x37e/0x8930 [ 1054.688787][T13809] ? kasan_unpoison+0x67/0x90 [ 1054.693478][T13809] ? emit_bpf_dispatcher+0xb90/0xb90 [ 1054.699072][T13809] ? sk_filter_release_rcu+0x110/0x110 [ 1054.704774][T13809] bpf_prog_select_runtime+0x840/0xae0 [ 1054.710515][T13809] ? kmemdup+0x41/0x60 [ 1054.714619][T13809] bpf_prepare_filter+0xfab/0x1150 [ 1054.719805][T13809] ? seccomp_attach_filter+0xb60/0xb60 [ 1054.725263][T13809] ? bpf_prog_create+0x1f0/0x1f0 [ 1054.730374][T13809] bpf_prog_create_from_user+0x2c5/0x420 [ 1054.736001][T13809] ? seccomp_attach_filter+0xb60/0xb60 [ 1054.741565][T13809] do_seccomp+0x7ff/0x1480 [ 1054.745978][T13809] ? prctl_set_seccomp+0x60/0x60 [ 1054.750918][T13809] ? __kasan_check_write+0x14/0x20 [ 1054.756465][T13809] ? switch_fpu_return+0x19c/0x330 [ 1054.762106][T13809] ? fpu__clear_all+0x20/0x20 [ 1054.766775][T13809] ? __x64_sys_signalfd4+0x157/0x1a0 [ 1054.772165][T13809] ? __kasan_check_read+0x11/0x20 [ 1054.777271][T13809] __x64_sys_seccomp+0x7b/0x90 [ 1054.782048][T13809] do_syscall_64+0x31/0x40 [ 1054.786484][T13809] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1054.792724][T13809] RIP: 0033:0x7fc1c5afb199 [ 1054.797143][T13809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.817302][T13809] RSP: 002b:00007fc1c4554028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1054.826090][T13809] RAX: ffffffffffffffda RBX: 00007fc1c5d82fa0 RCX: 00007fc1c5afb199 [ 1054.835001][T13809] RDX: 0000200000002180 RSI: 0000000000000000 RDI: 0000000000000001 [ 1054.842989][T13809] RBP: 00007fc1c5b928e0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.850966][T13809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.858940][T13809] R13: 00007fc1c5d83038 R14: 00007fc1c5d82fa0 R15: 00007ffdb1020b78 [ 1054.891631][ T24] audit: type=1400 audit(2000000011.440:2256): avc: denied { append } for pid=13814 comm="syz.6.3920" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1054.916947][T13815] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1055.104093][ T24] audit: type=1400 audit(2000000011.650:2257): avc: denied { ioctl } for pid=13837 comm="syz.2.3930" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1055.189839][ T24] audit: type=1400 audit(2000000011.730:2258): avc: denied { ioctl } for pid=13857 comm="syz.6.3939" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1055.246702][T13866] ================================================================== [ 1055.255231][T13866] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 1055.262208][T13866] Write of size 8 at addr ffff8881263d4550 by task syz.6.3944/13866 [ 1055.270392][T13866] [ 1055.272756][T13866] CPU: 0 PID: 13866 Comm: syz.6.3944 Tainted: G W syzkaller #0 [ 1055.281810][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1055.292883][T13866] Call Trace: [ 1055.296401][T13866] __dump_stack+0x21/0x24 [ 1055.300838][T13866] dump_stack_lvl+0x1a7/0x208 [ 1055.305697][T13866] ? show_regs_print_info+0x18/0x18 [ 1055.311050][T13866] ? thaw_kernel_threads+0x220/0x220 [ 1055.316457][T13866] ? debug_smp_processor_id+0x17/0x20 [ 1055.322039][T13866] print_address_description+0x7f/0x2c0 [ 1055.327866][T13866] ? mutex_lock+0x85/0xf0 [ 1055.332312][T13866] kasan_report+0x100/0x140 [ 1055.336833][T13866] ? mutex_lock+0x85/0xf0 [ 1055.341184][T13866] kasan_check_range+0x249/0x2a0 [ 1055.346146][T13866] __kasan_check_write+0x14/0x20 [ 1055.349462][ T24] audit: type=1400 audit(2000000011.790:2259): avc: denied { ioctl } for pid=13866 comm="syz.6.3944" path="socket:[59579]" dev="sockfs" ino=59579 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1055.351192][T13866] mutex_lock+0x85/0xf0 [ 1055.351211][T13866] ? mutex_trylock+0xb0/0xb0 [ 1055.385665][T13866] ? l2tp_session_put+0xb2/0x1a0 [ 1055.390630][T13866] ? l2tp_session_delete+0x3a9/0x4a0 [ 1055.396155][T13866] pppol2tp_release+0x178/0x2b0 [ 1055.401030][T13866] sock_close+0xb8/0x200 [ 1055.405298][T13866] ? sock_mmap+0xa0/0xa0 [ 1055.409637][T13866] __fput+0x2dc/0x730 [ 1055.413642][T13866] ____fput+0x15/0x20 [ 1055.417679][T13866] task_work_run+0x127/0x190 [ 1055.422295][T13866] exit_to_user_mode_loop+0xcb/0xe0 [ 1055.427609][T13866] exit_to_user_mode_prepare+0x76/0xa0 [ 1055.433080][T13866] syscall_exit_to_user_mode+0x1d/0x40 [ 1055.438652][T13866] do_syscall_64+0x3d/0x40 [ 1055.443166][T13866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1055.449081][T13866] RIP: 0033:0x7f35ea8e5199 [ 1055.453509][T13866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.473643][T13866] RSP: 002b:00007ffc96d5baf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1055.482324][T13866] RAX: 0000000000000000 RBX: 00007ffc96d5bbe0 RCX: 00007f35ea8e5199 [ 1055.490304][T13866] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1055.498876][T13866] RBP: 00000000001019f6 R08: 0000000000000001 R09: 0000000000000000 [ 1055.507065][T13866] R10: 0000001b31920000 R11: 0000000000000246 R12: 00007ffc96d5bc20 [ 1055.515032][T13866] R13: 00007f35eab6cfac R14: 0000000000101a2c R15: 00007f35eab6cfa0 [ 1055.523178][T13866] [ 1055.525499][T13866] Allocated by task 13867: [ 1055.529921][T13866] __kasan_kmalloc+0xd4/0x100 [ 1055.534689][T13866] __kmalloc+0x19f/0x330 [ 1055.539012][T13866] l2tp_session_create+0x39/0xb60 [ 1055.544114][T13866] pppol2tp_connect+0xbf5/0x1640 [ 1055.549049][T13866] __sys_connect+0x3ce/0x450 [ 1055.553979][T13866] __x64_sys_connect+0x7a/0x90 [ 1055.559189][T13866] do_syscall_64+0x31/0x40 [ 1055.563822][T13866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1055.569713][T13866] [ 1055.572368][T13866] Freed by task 13866: [ 1055.576802][T13866] kasan_set_track+0x4a/0x70 [ 1055.581673][T13866] kasan_set_free_info+0x23/0x40 [ 1055.587146][T13866] ____kasan_slab_free+0x125/0x160 [ 1055.592670][T13866] __kasan_slab_free+0x11/0x20 [ 1055.597963][T13866] slab_free_freelist_hook+0xc5/0x190 [ 1055.603670][T13866] kfree+0xc0/0x270 [ 1055.607580][T13866] l2tp_session_put+0xb2/0x1a0 [ 1055.612350][T13866] l2tp_session_delete+0x3a9/0x4a0 [ 1055.617552][T13866] pppol2tp_release+0x169/0x2b0 [ 1055.622605][T13866] sock_close+0xb8/0x200 [ 1055.626869][T13866] __fput+0x2dc/0x730 [ 1055.630843][T13866] ____fput+0x15/0x20 [ 1055.634815][T13866] task_work_run+0x127/0x190 [ 1055.639422][T13866] exit_to_user_mode_loop+0xcb/0xe0 [ 1055.645005][T13866] exit_to_user_mode_prepare+0x76/0xa0 [ 1055.650661][T13866] syscall_exit_to_user_mode+0x1d/0x40 [ 1055.656147][T13866] do_syscall_64+0x3d/0x40 [ 1055.661454][T13866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1055.667539][T13866] [ 1055.670234][T13866] Last potentially related work creation: [ 1055.676106][T13866] kasan_save_stack+0x3a/0x60 [ 1055.680813][T13866] __kasan_record_aux_stack+0xd2/0x100 [ 1055.686369][T13866] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1055.693155][T13866] call_rcu+0x11a/0x1090 [ 1055.697945][T13866] pwq_unbound_release_workfn+0x283/0x2c0 [ 1055.703675][T13866] process_one_work+0x6fd/0xbc0 [ 1055.709064][T13866] worker_thread+0xa8e/0x13c0 [ 1055.714002][T13866] kthread+0x324/0x3b0 [ 1055.718066][T13866] ret_from_fork+0x1f/0x30 [ 1055.722610][T13866] [ 1055.724963][T13866] The buggy address belongs to the object at ffff8881263d4400 [ 1055.724963][T13866] which belongs to the cache kmalloc-512 of size 512 [ 1055.739564][T13866] The buggy address is located 336 bytes inside of [ 1055.739564][T13866] 512-byte region [ffff8881263d4400, ffff8881263d4600) [ 1055.753361][T13866] The buggy address belongs to the page: [ 1055.759001][T13866] page:ffffea000498f500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1263d4 [ 1055.769752][T13866] head:ffffea000498f500 order:2 compound_mapcount:0 compound_pincount:0 [ 1055.778940][T13866] flags: 0x4000000000010200(slab|head) [ 1055.784679][T13866] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 1055.793365][T13866] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1055.802071][T13866] page dumped because: kasan: bad access detected [ 1055.809029][T13866] page_owner tracks the page as allocated [ 1055.815023][T13866] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 279, ts 22955120571, free_ts 0 [ 1055.833338][T13866] prep_new_page+0x176/0x190 [ 1055.837929][T13866] get_page_from_freelist+0x225f/0x23f0 [ 1055.843466][T13866] __alloc_pages_nodemask+0x29a/0x640 [ 1055.848832][T13866] new_slab+0x84/0x3f0 [ 1055.852933][T13866] ___slab_alloc+0x2f8/0x4c0 [ 1055.857531][T13866] __slab_alloc+0x63/0xa0 [ 1055.861861][T13866] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 1055.867328][T13866] inetdev_init+0x81/0x490 [ 1055.871829][T13866] inetdev_event+0x1f4/0x1010 [ 1055.876900][T13866] raw_notifier_call_chain+0x90/0x100 [ 1055.882285][T13866] call_netdevice_notifiers+0x119/0x190 [ 1055.887850][T13866] register_netdevice+0x100a/0x13a0 [ 1055.893083][T13866] wg_newlink+0x4f1/0x7a0 [ 1055.897504][T13866] rtnl_newlink+0x1307/0x1830 [ 1055.902378][T13866] rtnetlink_rcv_msg+0x9e9/0xca0 [ 1055.907362][T13866] netlink_rcv_skb+0x1e9/0x430 [ 1055.912203][T13866] page_owner free stack trace missing [ 1055.917687][T13866] [ 1055.920010][T13866] Memory state around the buggy address: [ 1055.925636][T13866] ffff8881263d4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1055.933808][T13866] ffff8881263d4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1055.941974][T13866] >ffff8881263d4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1055.950058][T13866] ^ [ 1055.957009][T13866] ffff8881263d4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1055.965157][T13866] ffff8881263d4600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1055.973252][T13866] ================================================================== [ 1055.981632][T13866] Disabling lock debugging due to kernel taint [ 1055.995294][ T24] audit: type=1400 audit(2000000012.540:2260): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.259435][ T2561] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1056.509397][ T2561] usb 3-1: Using ep0 maxpacket: 32 [ 1056.669528][ T2561] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1056.749403][ T2561] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1056.757786][ T2561] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1056.766201][ T2561] usb 3-1: config 14 has no interface number 0 [ 1056.772434][ T2561] usb 3-1: config 14 has no interface number 1 [ 1056.778613][ T2561] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1056.790105][ T2561] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1056.801529][ T2561] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1056.813672][ T2561] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.827294][ T2561] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1056.834507][ T2561] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1056.999443][ T2561] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1057.009862][ T2561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.018290][ T2561] usb 3-1: Product: syz [ 1057.022715][ T2561] usb 3-1: Manufacturer: syz [ 1057.027712][ T2561] usb 3-1: SerialNumber: syz [ 1059.637321][ T2561] usb 3-1: USB disconnect, device number 3