last executing test programs:

2m37.312137293s ago: executing program 0 (id=107):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r4=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x5c, r3, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty=0x7f000001}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

2m35.160781728s ago: executing program 0 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0'])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7f}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x31)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)

2m34.300357268s ago: executing program 0 (id=127):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="8b7e9ed16cb41354ab5a86a7676f89d9a04e7a6e591cc8e4934f32cea79b93ff1fe05ec21100acd1f85f35c84749841102f7b18c107ad48ef4c500cc2a1655708dfb5f", 0x43}, {&(0x7f0000000080)="1265362dded0014c658c3238de0a10e4d7d6ffe0f08aed1771f57f46ae22cc53fd84ab38c7cb640ea6b15fd19a5d88798c88c46fc835021b57ba7a2fc0368783c49d9253ddd372fe73a8c64b4fd8d82f7b1db571c9c38fad8effebbca7904c27c5e3a1b7f3c2d63a1f4f1a7197d4df026c2cdd228fa6e53a2f1b20082ef717aa9f9b9148fff3499425954176539f5866976ae8a33e3ee65762f9f056f5d87f5ddaa5c13972850a9e3a15f3ed9dbbb341fc233d4ecbb7def934ade629c14a79b5f5c779f7e90a4dc5f8a7c073709ec1765d0ba4836ed1713947104fe8aaf02ce69d85644231ea190042f04b34", 0xec}, {&(0x7f0000000180)="24f06b987ee940e7cb78a4319d270a57cc8c6ed8029a067bd5806dfb96ed73e04737391389216f15002246115270e1d28322290142c574343e069a3a6c09beead698b355ff2ac8d9707b5ba2d657ad7b175fd7baaab23c22b7d0a7f9fa5ba906288cb899f3c9c00ee6b75492651147a4a45da05b7c69cc1d9820cc36653b0c5201d57f31229df7fe3c4145cd196e61c9af2fec4de8d30af518e75ac01a39c173f44d", 0xa2}, {&(0x7f0000000240)="8168e093e275aca147bfb2b52b8a23db2c2ffad54c5a536fb41801cb4bd9b5d77e16138021d345919b5b6b5ddaf715c40e5dbb952c5df06f0c3b70e88ff76439afc1d2ebf46bcadfc0a417b93babd42c1f060183dd96add1451c4e444a1d63b68bfadc8ad5ccb84835bdb9e30f309abfc78d46cae1a8dbcbb0ba8c9b934ccefd8ff2d589180bec9a685927f39ce294993089de9ed9c3948bc0c9fe9a67b57933106d10c83d267a992e1abf97a791128bc771115e827e52536367274fa5539dbb76dc5377275ea258c3de96198ec2e578c4cb0c7373e98d706f222b7c7a5d814b0657", 0xe2}, {&(0x7f0000000340)="9f12e587085f508581b7f8ed0105a4eea0166777f6da5637f45b161dd6264cd2618a8151c0453791e03882b5f466543ba8c1fb7a1fee2dd3e1fbec9fbcdd89d53717fbff003fc6aeed91a99a545132cf3c44dc667b5dd88ab81aa56af498eab14c661f6723e610842140632cf856f88136e11d7f180bae24244e126a065e637dceeca3aac57929e90b56d53c9599", 0x8e}, {&(0x7f0000000400)="ba5503e8feb6064c7f6577a6877b78c7d19c152a7082630c43b807ddb7ce30d87f5c382acf85fe4166026ba2c226af28ab3e7cedb09b1fccf7aa1d296d52b8895b65eed13faf03400ffccbaf3c8a03b41c7a5ebb33b4be7d5637c1f2b1d3e522f590cca326cd53a24c07e7d9cc2fb9843cfd5242a54da67b9f46c03b95ea29c80b1ca472def803db81e1c1c772810090766e15f20e3a2ef29e0e53408df7f4cc5ce62b58e9d2f02bd30242c4da1ea9ce0dd3421fc34cce2e5d64b9bd54fd560b9d520752011545e00f", 0xc9}, {&(0x7f0000000500)="9192789c56b33e2f2a8cc4d8a0eeb0600c7f4572679fe0da1734f52903c1cb0c8c386e2dd729dd31ce363847007b4265dbaabed13ea1bbab90c4029fe3d5ec5015bbeae55b55b16e46d9ad1c118ec3323cb3d96836ded886130079c745f379dac8ab3afab83f014fe30b30d26d85096c26a0bd5dfaf15aca31fab9828382a5fab4431f71d19022a8b44ee09effd789127a1d33df80cd35ea56", 0x99}, {&(0x7f00000005c0)="7be629977bc9ded1bd5eeaf397c2b0e73c7d90c677a6f34e0ffdc750dc0c031fafb0b3d003d311a4623a36630a868916664953d326f50052e3dad53d42b48ecbad15eaa6b8b455972420c4c2717795d5a397cd4f384d08363e7df56e9c3eaa507964bc9e4ce29d68f1255b67a28797fdd9fd30a63e7f328f04cdaa1885618020eebec4d7addee1cff3b8602612", 0x8d}], 0x8, &(0x7f0000000700)="b9b63260c7e02f295249cc5fa11733349f371fefb0e2d5cc3da1fb713fb193487d2a3d83e5f72fc2c1d10e46d091c7c27b825b1ded003f879e01bf969721b92b72ecd0d24ae21c1837580cfe08307ee5d88b67d0a36ea900a4b6d3f41b050f58bf183e10540cd9c6d479215eba9b6004767e108df2e5057c96f7a56db9d3444582c3e065aca25e2ef588ba78950416eaa71f52ec27cf9f8c8beb78ebfcd9fbc9ccda2123bb5c6c0a500b76", 0xab, 0x800}, 0x41)
inotify_init1(0x80800)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x9, 0x109a00)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x400800, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000880)={0x924, 0x600000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f000000e400)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f000000e440)={r1, <r4=>0xffffffffffffffff}, 0x4)
getpeername$packet(r2, &(0x7f000000e600)={0x11, 0x0, <r5=>0x0}, &(0x7f000000e640)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e780)={0x16, 0x1b, &(0x7f000000e480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff6b72}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf4d9, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x80, 0x7, 0x5, 0xf, 0x800}, @ldst={0x2, 0x1, 0x3, 0x8, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f000000e580)='GPL\x00', 0x9, 0x31, &(0x7f000000e5c0)=""/49, 0x40f00, 0x2, '\x00', r5, @flow_dissector=0x11, r1, 0x8, &(0x7f000000e680)={0x5, 0x3}, 0x8, 0x10, &(0x7f000000e6c0)={0x0, 0xf, 0xffffffff, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f000000e700)=[r1, r2, r2, r1], &(0x7f000000e740)=[{0x0, 0x4, 0x6, 0x3}, {0x4, 0x3, 0x9, 0x8}], 0x10, 0x867}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e840)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffff51, '\x00', r5, r2, 0x2, 0x2, 0x3}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000000ea00)={'tunl0\x00', &(0x7f000000e980)={'ip_vti0\x00', <r7=>r5, 0x700, 0x80, 0x200, 0x6, {{0x17, 0x4, 0x1, 0x1f, 0x5c, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @cipso={0x86, 0x22, 0x0, [{0x0, 0x12, "d0708fc3a3c49eda87ecf375527541b2"}, {0x1, 0xa, "5485ea24ad2fe235"}]}, @rr={0x7, 0xb, 0xb2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @ssrr={0x89, 0x7, 0xcb, [@rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x88, [@multicast1, @rand_addr=0x64010102, @loopback, @private=0xa010101]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000000ed80)={r2, 0xe0, &(0x7f000000ec80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f000000eac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f000000eb00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000eb40)=[0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xed, &(0x7f000000eb80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f000000ebc0), &(0x7f000000ec00), 0x8, 0xd8, 0x8, 0x8, &(0x7f000000ec40)}}, 0x10)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000000edc0)={0x0, 0x7}, 0xc)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000ee00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7fff, '\x00', r5, r2, 0x1, 0x3, 0x1}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000ef40)={0x0, 0x4, &(0x7f000000e8c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f000000e900)='syzkaller\x00', 0xffffffff, 0x1, &(0x7f000000e940)=""/1, 0x41100, 0x8, '\x00', r7, @fallback=0x14, r1, 0x8, &(0x7f000000ea40)={0x8, 0x4}, 0x8, 0x10, &(0x7f000000ea80)={0x4, 0xf, 0xfffffff8, 0x2}, 0x10, r9, 0xffffffffffffffff, 0x6, &(0x7f000000ee80)=[r2, r10, r1, r11], &(0x7f000000eec0)=[{0x4, 0x2, 0xe, 0xa}, {0x4, 0x4, 0x6, 0x4}, {0x5, 0x5, 0x3}, {0x2, 0x2, 0x9, 0x9}, {0x0, 0x5, 0xf, 0x5}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f000000f000)=@bloom_filter={0x1e, 0x4, 0x3, 0x1ff, 0x0, r3, 0x8000, '\x00', r8, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xf}, 0x50)
r13 = openat$cgroup(r2, &(0x7f000000f1c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f000000f180)={@fallback=<r14=>r13, 0xa, 0x0, 0xf15, &(0x7f000000f080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f000000f0c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000f100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000f140)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r15 = gettid()
fcntl$setown(r12, 0x8, r15)
fsopen(&(0x7f000000f200)='securityfs\x00', 0x0)
r16 = add_key$fscrypt_provisioning(&(0x7f000000f240), &(0x7f000000f280)={'syz', 0x3}, &(0x7f000000f2c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffe)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r14, 0xc0506617, &(0x7f000000f300)={@id={0x2, 0x0, @a}, 0xa, r16, '\x00', @auto=[0x19, 0x14, 0x38, 0x2b, 0x30, 0x28, 0x15, 0x28, 0x36, 0x2a]})
ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f000000f380)=""/4096)
getdents(r1, &(0x7f0000010380)=""/187, 0xbb)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000010440)=<r17=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000010480)={0x1, r17})
socketpair$unix(0x1, 0xa, 0x0, &(0x7f00000104c0))

2m34.244721963s ago: executing program 0 (id=128):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@errors_remount}]}, 0x1, 0x7a2, &(0x7f0000000f80)="$eJzs3ctrG9caAPBvZDuOk9xrX7hwb7oyFFpDiFynbtJCFyldlEIDgXbdxMiKSS1bwZJDbAxNKIVuCn0tCu0m6z7SXbd9bNv/oouS0IcTmtJFcRlp5Ki25CipJRn8+8HY58xD53w6M2fOaAYpgH1rPP2TizgaEe8kEaPZ/CQihmqpwYjT9fXurq8V0imJjY2Xf0lq69xZXytE0zapw1nm/xHxzZsRx3Lby62srM7PlErFpSw/WV24NFlZWT1+cWFmrjhXXDw5NT194tRTp07uXqy/fb965Na7Lzz++ek/3vjfjbe/TeJ0HMmWNcexW8ZjPHtPhtK38G+e3+3C+izpdwV4KOmhOVA/yuNojMZALdXGSC9rBgB0ywYAsA8lxgAAsM80Pge4s75WaEz9/USit356LiIO1uNv3N+sLxnM7tkdrN0HPXQnqd0ZadwdSSJibBfKH4+Ij7989dN0iqwd3EsDeuHqtYg4Pza+vf9Ptj2zkNl4fTM5vONrP7HTwo36tuNbZu+38w/001fp+OfpVuO/3Ob4J5rGPw3DLY7dh3H/4z93cxeKaSsd/z3b9Gzb3ab4M2MDWe5ftTHfUHLhYqmY9m3/joiJGBpO81O1VTdHbsnVpjImbv95u135zeO/X9977ZO0/PT/vTVyNwe3dLOzM9WZXQk+jf9axCODreJPNts/afHoTzrvbIdlvPjMWx+1W5bGn8bbmLbH310b1yMea9n+90bhyY7PJ07WdofJxk7Rwhc/fHioXfnN7Z9OafmNa4FeSNs/rVzSPv6xpPl5zcqDl/Hd9dGv2y27f/yt9/8DySu19IFs3pWZanVpKuJA8tL2+SfubdvIN9ZP4594tPXxXy+2vv9v7f/Sa8LzHcY/eOvnzx4+/u5K45/def/f0v4Pnrhxd36gXfmdtf90LTWRzemk/+u0gv/kvQMAAAAAAAAAAAAAAAAAAAAAAACATuUi4kgkufxmOpfL5+u/4f3fOJQrlSvVYxfKy4uzUfut7LEYyjW+6nK06ftQp7Lvw2/kT2zJPxkR/4mID4ZHavl8oVya7XfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJA53Ob3/1M/Dve7dgBA1xzsdwUAgJ5z/geA/efBzv8jXasHANA7rv8BYP/p+Px/vrv1AAB6x/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXb2zJl02vh9fa2Q5mcvryzPly8fny1W5vMLy4V8obx0KT9XLs+VivlCeWFzw/e3vNDV+r9SuXxpOhaXr0xWi5XqZGVl9dxCeXmxeu7iwsxc8VxxqKfRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBnKiur8zOlUnFJYsfEyN6oxp5JDMaeqIZE1xLNvcRI/zooAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD3urwAAAP//mFguzQ==")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r2, 0x8800000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fdatasync(r5)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
ioctl$MON_IOCQ_URB_LEN(r2, 0x9201)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3e0000b6c1e8a842d500"/20, @ANYRES32=r2, @ANYBLOB='\x00'/10, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0200000002000000010000000a00"/28], 0x50)
dup3(r0, r0, 0x80000)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x2400, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x88, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff02, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x3, 0x3}}}, {{@pci, {0x0, 0x3, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc010}, 0x40011)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004c8d0}, 0x4044091)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)

30.339641132s ago: executing program 0 (id=129):
r0 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0)
dup(r0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0080000003f55c645ca32506b600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
open(&(0x7f00000002c0)='./file1\x00', 0x151c40, 0x0)
open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x2a)
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r8, &(0x7f0000004200)='t', 0x1)
sendfile(r8, r7, 0x0, 0x3ffff)
fallocate(r6, 0x0, 0x0, 0x1001f0)

30.336622093s ago: executing program 0 (id=130):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x1000002, 0xfffffffe, 0x5, 0x1ff, 0xfffffff9, 0xa}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x61, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039e600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000fe"], 0x5c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x61, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039e600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000fe"], 0x5c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095", @ANYRESOCT], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')

30.336323593s ago: executing program 32 (id=130):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x1000002, 0xfffffffe, 0x5, 0x1ff, 0xfffffff9, 0xa}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x61, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039e600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000fe"], 0x5c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x61, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039e600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000fe"], 0x5c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095", @ANYRESOCT], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')

4.146363225s ago: executing program 3 (id=361):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0})
ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x6)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)

3.272835395s ago: executing program 1 (id=366):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

3.142836806s ago: executing program 3 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0xffffffffffffffff, 0x0)
getrlimit(0xa, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_pts(r3, 0x101)

2.926739383s ago: executing program 1 (id=368):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0x5)

2.587800051s ago: executing program 5 (id=372):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = eventfd(0x0)
r2 = dup3(r1, r0, 0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x3, 0x7, 0x7, 0x6, {0x2, 0x4, 0xbace, 0x81, 0x4e, 0x0, 0xfffffffd, 0x2, 0x8, 0x1000, 0xb, 0x0, 0x0, 0x3, 0x8}}, {0x0, 0x18}}}, 0xa0)

2.587539271s ago: executing program 5 (id=373):
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept$nfc_llcp(r5, 0x0, 0x0)

2.348718s ago: executing program 1 (id=376):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ecc0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$usbfs(0x0, 0x205, 0x2581)
fcntl$dupfd(r3, 0x0, r3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

2.307375893s ago: executing program 4 (id=378):
socket(0x23, 0x5, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)

2.204746022s ago: executing program 3 (id=379):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd2f, 0xa0000000, "af"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x18)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)

1.599450331s ago: executing program 3 (id=380):
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500007000"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x2, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x43, 0xc976, 0x6], 0x2, 0x20200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.35678647s ago: executing program 5 (id=382):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_setup(0x5, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)=0x2, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
sendfile(r2, r1, 0x0, 0x20000023893)

1.23754125s ago: executing program 3 (id=383):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x1000000000000002)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="005aec8f5105a09e625ccebdb85aa418e073bf2659b915b8aedc835fd1ddf71e7c9b3573f4f8176403cb066bf04c8f05b7d7809dba750d87fb205fa9e72716e8d17d0cce1791c53d92978af4e4341f06a83b3a022c"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./bus\x00', 0x143042, 0x0)
setresuid(0x0, 0xee00, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x4008f50a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.130349449s ago: executing program 5 (id=384):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})

1.028702727s ago: executing program 5 (id=385):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000001c0)=0xd)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122)
connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)

807.032625ms ago: executing program 1 (id=386):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00800000010c00014000000000000000080800054000000001140000001100010000000000000000000000000a0000000000"], 0xe8}}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r2, 0x0, 0x8000002b)

649.030778ms ago: executing program 4 (id=387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20040000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0x44000)

576.806584ms ago: executing program 2 (id=388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)

564.128655ms ago: executing program 4 (id=389):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

444.827364ms ago: executing program 2 (id=390):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6)

444.516354ms ago: executing program 4 (id=391):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000feff00170000000c0006800800060000000000e122dff3647a354a84ea64d5cdde721fc39f2f60b36bf54136373aa0dcd679fb40c6d7ed15957af0094257621891c4767224590f216988e3"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

418.560666ms ago: executing program 4 (id=392):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x44742, 0x94)

418.091126ms ago: executing program 2 (id=393):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)="15", 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0xdc, 0x4)

342.851902ms ago: executing program 2 (id=394):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TIOCNXCL(r0, 0x540d)

286.415527ms ago: executing program 2 (id=395):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

284.645697ms ago: executing program 1 (id=396):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000000000800040001000000", 0x24)

254.13639ms ago: executing program 4 (id=397):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)=0xd)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)

253.90198ms ago: executing program 2 (id=398):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000600)={{0xc3, 0x0, 0x1, 0x38c, 0x14f, 0xffffffff, 0x30b, 0x9}, "", ['\x00']}, 0x120)

184.839035ms ago: executing program 5 (id=399):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x40000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)

98.960722ms ago: executing program 1 (id=400):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570)

0s ago: executing program 3 (id=401):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008018, &(0x7f00000000c0)=ANY=[], 0x5, 0x202, &(0x7f00000002c0)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wINUxI6u/MLNWeaus6Z9PtpUfy+Gp3oZvHTqL9IGsOODIzlDBwQkX+/0eWVwGTjCwgV6hAxUIZmBg0GRgY9kO1qELFExiYGMKg7FQGRoZIKDsLiZ0PsyYnVS85PyclLTMn1QBEGIIIIxBhjGw/CwMDw9tGRoYUBgYGDrDr/v9nRJIvrqzKTszJSS1CZ7D+h9mDIUUqA1/4gd3nyMRgCw+9//9B8RXR0dwI4uuBCDZUPYYMTAyGULYxAyNDMJRtwcDOoKenhwgSJP9LsSDMZybG/8iMuZT4nxldpAJNTcIjXNoFdakQ+tRnwJIgNKEQF4ajDKoxGNFFQBkaLiL2dtdpTF1PibXiSwFy5CJLMZKSZajEOPC/KjsRXHAxMDBgqLnERZqBJbGo/oKVK1gVI8onUOmtjlQ+sTCwwMsP/ZLcAv3iyirdzNzE9NT01DwjI2MzAxMDA1MjfXBBBCExyr0/8PKPA1w+cSGZz4qjrGRjZHOAc0qKDNkY2RgqEktKiowgJFKJG7wt/w1YGRO4/GNi0FCGaGOEFac4KjpGKGYC0yCWBjMO54yCUTAKRsEoGAWjYBSMglEwCkbBKBgFo2AUjIJRMApGAYlAnoERPAoKnaj6jwMYBYBVAwIAAP//14RaCg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x402a, 0x10100002000001, 0x0, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts.
[   20.029943][   T24] audit: type=1400 audit(1753956446.550:64): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.031393][  T267] cgroup: Unknown subsys name 'net'
[   20.038879][   T24] audit: type=1400 audit(1753956446.550:65): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.048460][   T24] audit: type=1400 audit(1753956446.570:66): avc:  denied  { unmount } for  pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.048779][  T267] cgroup: Unknown subsys name 'devices'
[   20.253101][  T267] cgroup: Unknown subsys name 'hugetlb'
[   20.258809][  T267] cgroup: Unknown subsys name 'rlimit'
[   20.429944][   T24] audit: type=1400 audit(1753956446.950:67): avc:  denied  { setattr } for  pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.453402][   T24] audit: type=1400 audit(1753956446.950:68): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.478446][   T24] audit: type=1400 audit(1753956446.950:69): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.486394][  T269] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   20.511056][   T24] audit: type=1400 audit(1753956447.030:70): avc:  denied  { relabelto } for  pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.536633][   T24] audit: type=1400 audit(1753956447.030:71): avc:  denied  { write } for  pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.564235][   T24] audit: type=1400 audit(1753956447.090:72): avc:  denied  { read } for  pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.590076][   T24] audit: type=1400 audit(1753956447.090:73): avc:  denied  { open } for  pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.590279][  T267] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.852623][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.859692][  T275] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.867304][  T275] device bridge_slave_0 entered promiscuous mode
[   21.875379][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.882452][  T275] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.889978][  T275] device bridge_slave_1 entered promiscuous mode
[   21.939451][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.946580][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.954036][  T278] device bridge_slave_0 entered promiscuous mode
[   21.982123][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.989178][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.996650][  T278] device bridge_slave_1 entered promiscuous mode
[   22.017201][  T277] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.024414][  T277] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.031951][  T277] device bridge_slave_0 entered promiscuous mode
[   22.041073][  T277] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.048343][  T277] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.055743][  T277] device bridge_slave_1 entered promiscuous mode
[   22.102384][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.109547][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.117054][  T279] device bridge_slave_0 entered promiscuous mode
[   22.134078][  T276] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.141135][  T276] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.148884][  T276] device bridge_slave_0 entered promiscuous mode
[   22.155685][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.162911][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.170488][  T279] device bridge_slave_1 entered promiscuous mode
[   22.199269][  T276] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.206380][  T276] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.214017][  T276] device bridge_slave_1 entered promiscuous mode
[   22.227527][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.234780][  T275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.242191][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.249492][  T275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.316208][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.323364][  T278] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.330813][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.337952][  T278] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.355070][  T277] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.362309][  T277] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.369570][  T277] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.376637][  T277] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.411686][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.418836][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.426139][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.433201][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.442572][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.449999][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.457332][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.464570][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.472024][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.479321][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.486891][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.494133][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.502116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.509500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.524268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.532713][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.539837][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.547857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.556800][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.564087][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.580582][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.598175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.623926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.631638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.640080][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.647163][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.655168][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.663911][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.671260][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.678597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.687009][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.694296][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.701688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.709912][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.717121][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.724650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.742126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.750396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.772177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.780398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.789029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.797392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.806252][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.813444][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.820839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.828987][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.837364][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.844518][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.863879][  T275] device veth0_vlan entered promiscuous mode
[   22.870518][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.879132][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.888144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.896554][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.904639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.913135][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.921618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.929994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.938697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.946298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.962399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.970588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.978828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.987641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.996283][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.003603][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.011534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.019835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.028114][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.035635][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.043205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.062119][  T278] device veth0_vlan entered promiscuous mode
[   23.072651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.080957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.089354][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.098400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.107332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.116065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.124205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.132166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.140109][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.148148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.156405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.164046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.171526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.178924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.190020][  T275] device veth1_macvtap entered promiscuous mode
[   23.198400][  T279] device veth0_vlan entered promiscuous mode
[   23.205106][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.214415][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.223119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.236215][  T277] device veth0_vlan entered promiscuous mode
[   23.249666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.258317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.267190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.275488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.283953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.292094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.300173][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.308625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.317168][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.324974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.340649][  T276] device veth0_vlan entered promiscuous mode
[   23.350363][  T277] device veth1_macvtap entered promiscuous mode
[   23.358752][  T279] device veth1_macvtap entered promiscuous mode
[   23.369852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.378692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.378898][  T275] request_module fs-gadgetfs succeeded, but still no fs?
[   23.388073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.403891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.412507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.420340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.428702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.437237][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.445602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.453517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.461867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.469939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.477866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.485430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.493355][  T278] device veth1_macvtap entered promiscuous mode
[   23.505000][  T276] device veth1_macvtap entered promiscuous mode
[   23.513669][  T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   23.524670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.532911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.547330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.556136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.564858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.573509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.582090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.590656][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.601453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.609972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.619047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.644016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.658920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.669004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.677891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.695970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.705810][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.721549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.731505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.802424][  T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.005887][  T311] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   24.122190][  T324] ======================================================
[   24.122190][  T324] WARNING: the mand mount option is being deprecated and
[   24.122190][  T324]          will be removed in v5.15!
[   24.122190][  T324] ======================================================
[   24.281274][  T305] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   24.470421][  T284] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.721384][  T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   24.756196][  T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   24.792647][  T305] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[   24.806414][  T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.815273][  T328] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000]
[   24.823193][  T328] System zones: 0-2, 18-18, 34-34
[   24.829768][  T328] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27
[   24.838353][  T284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   24.848802][  T328] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #3: comm syz.0.9: mark_inode_dirty error
[   24.860812][  T328] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27
[   24.869421][  T328] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #3: comm syz.0.9: mark_inode_dirty error
[   24.880981][  T328] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.9: Failed to acquire dquot type 0
[   24.894451][  T328] EXT4-fs (loop0): 1 orphan inode deleted
[   24.900248][  T328] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue
[   24.911943][  T328] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.932865][  T284] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   24.969019][  T305] usb 5-1: config 0 descriptor??
[   25.021369][  T284] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   25.030786][  T284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   25.039867][   T24] kauditd_printk_skb: 88 callbacks suppressed
[   25.039879][   T24] audit: type=1400 audit(1753956451.560:160): avc:  denied  { unmount } for  pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   25.067579][  T284] usb 2-1: SerialNumber: syz
[   25.138044][  T347] exfat: Unknown parameter '017777777777777777777770x0000000000000000'
[   25.352033][  T284] usb 2-1: 0:2 : does not exist
[   25.359069][  T284] usb 2-1: USB disconnect, device number 2
[   25.415049][  T355] 9pnet: Insufficient options for proto=fd
[   25.813285][  T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   25.849973][   T24] audit: type=1400 audit(1753956452.370:161): avc:  denied  { create } for  pid=376 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   25.958007][  T379] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure
[   26.213317][   T24] audit: type=1400 audit(1753956452.740:162): avc:  denied  { append } for  pid=380 comm="syz.1.19" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   26.451644][  T383] exfat: Unknown parameter '18446744073709551615'
[   26.535829][   T24] audit: type=1400 audit(1753956452.820:163): avc:  denied  { create } for  pid=380 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   26.781192][    C0] sched: RT throttling activated
[   26.781961][   T24] audit: type=1400 audit(1753956452.920:164): avc:  denied  { create } for  pid=384 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.998512][   T24] audit: type=1400 audit(1753956452.940:165): avc:  denied  { write } for  pid=384 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   27.054342][  T409] process 'syz.2.23' launched './file1' with NULL argv: empty string added
[   27.083936][   T24] audit: type=1400 audit(1753956453.540:166): avc:  denied  { write } for  pid=399 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.112376][  T409] kernel profiling enabled (shift: 63)
[   27.130002][  T409] profiling shift: 63 too large
[   27.188674][   T24] audit: type=1400 audit(1753956453.540:167): avc:  denied  { nlmsg_write } for  pid=399 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.305020][   T24] audit: type=1400 audit(1753956453.600:168): avc:  denied  { execute } for  pid=408 comm="syz.2.23" name="file1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   27.438089][   T24] audit: type=1400 audit(1753956453.600:169): avc:  denied  { execute_no_trans } for  pid=408 comm="syz.2.23" path="/6/file1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   27.464538][  T428] netlink: 120 bytes leftover after parsing attributes in process `syz.2.27'.
[   27.841293][  T305] usbhid 5-1:0.0: can't add hid device: -71
[   27.848192][  T305] usbhid: probe of 5-1:0.0 failed with error -71
[   27.855129][  T398] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.881024][  T305] usb 5-1: USB disconnect, device number 2
[   27.911291][  T336] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   28.241390][  T398] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.252373][  T398] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.271331][  T336] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   28.281994][  T336] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.341488][  T398] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   28.350750][  T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   28.358929][  T398] usb 2-1: SerialNumber: syz
[   28.441310][  T336] usb 4-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40
[   28.450780][  T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.459432][  T305] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   28.467229][  T336] usb 4-1: Product: syz
[   28.471491][  T336] usb 4-1: Manufacturer: syz
[   28.478587][  T336] usb 4-1: SerialNumber: syz
[   28.510629][  T460] fuse: Bad value for 'max_read'
[   28.592043][  T464] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext3
[   28.642160][  T398] usb 2-1: 0:2 : does not exist
[   28.650889][  T398] usb 2-1: USB disconnect, device number 3
[   28.669245][  T464] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,
[   28.685394][  T464] EXT4-fs error (device loop0): ext4_find_extent:928: inode #2: comm syz.0.38: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   28.702114][  T464] EXT4-fs (loop0): Remounting filesystem read-only
[   28.755235][  T305] usb 5-1: device descriptor read/64, error -71
[   28.781304][   T53] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.871939][  T336] usb 4-1: 0:1 : does not exist
[   28.877632][  T336] usb 4-1: 0:2 : does not exist
[   28.890226][  T336] usb 4-1: USB disconnect, device number 2
[   29.211403][  T305] usb 5-1: device descriptor read/64, error -71
[   29.218605][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.321255][   T53] usb 3-1: device descriptor read/64, error -71
[   29.444953][  T480] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   29.511267][  T305] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   29.821436][  T305] usb 5-1: device descriptor read/64, error -71
[   29.949339][   T53] usb 3-1: device descriptor read/64, error -71
[   29.962061][  T496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   29.971975][  T496] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.063750][   T24] kauditd_printk_skb: 44 callbacks suppressed
[   30.063765][   T24] audit: type=1400 audit(1753956456.590:214): avc:  denied  { read write } for  pid=493 comm="syz.1.44" name="usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.101492][   T24] audit: type=1400 audit(1753956456.590:215): avc:  denied  { open } for  pid=493 comm="syz.1.44" path="/dev/usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.125263][   T24] audit: type=1400 audit(1753956456.590:216): avc:  denied  { ioctl } for  pid=493 comm="syz.1.44" path="/dev/usbmon8" dev="devtmpfs" ino=178 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.150867][   T24] audit: type=1400 audit(1753956456.620:217): avc:  denied  { ioctl } for  pid=493 comm="syz.1.44" path="socket:[15591]" dev="sockfs" ino=15591 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.198858][   T24] audit: type=1400 audit(1753956456.720:218): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.231298][  T305] usb 5-1: device descriptor read/64, error -71
[   30.854560][   T53] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   30.871057][  T305] usb usb5-port1: attempt power cycle
[   30.903037][   T24] audit: type=1400 audit(1753956457.430:219): avc:  denied  { unmount } for  pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   30.981308][   T24] audit: type=1400 audit(1753956457.500:220): avc:  denied  { setopt } for  pid=506 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   31.023420][   T24] audit: type=1400 audit(1753956457.550:221): avc:  denied  { bind } for  pid=506 comm="syz.1.46" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   31.053644][   T24] audit: type=1400 audit(1753956457.550:222): avc:  denied  { node_bind } for  pid=506 comm="syz.1.46" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   31.131232][   T53] usb 3-1: device descriptor read/64, error -71
[   31.175768][   T24] audit: type=1400 audit(1753956457.630:223): avc:  denied  { remount } for  pid=505 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.594300][  T510] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   31.607539][  T510] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   31.623472][  T522] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   31.640042][  T510] F2FS-fs (loop3): Found nat_bits in checkpoint
[   31.663179][  T522] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   31.672428][   T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   31.692671][  T510] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   31.699906][  T510] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   31.740613][  T510] attempt to access beyond end of device
[   31.740613][  T510] loop3: rw=2049, want=45104, limit=40427
[   31.764373][  T510] attempt to access beyond end of device
[   31.764373][  T510] loop3: rw=0, want=45104, limit=40427
[   31.799566][  T278] attempt to access beyond end of device
[   31.799566][  T278] loop3: rw=2049, want=40968, limit=40427
[   31.941258][   T15] usb 1-1: device descriptor read/64, error -71
[   31.992018][  T535] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   32.016045][  T535] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   32.458482][    T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   32.544577][  T541] erofs: (device loop2): mounted with root inode @ nid 36.
[   32.721864][   T15] usb 1-1: device descriptor read/64, error -71
[   32.822939][    T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   33.578865][   T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   33.854948][  T579] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   33.931956][  T444] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   34.073107][  T579] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   34.171330][  T444] usb 4-1: Using ep0 maxpacket: 32
[   34.191258][   T15] usb 1-1: device descriptor read/64, error -71
[   34.208555][  T583] binfmt_misc: register: failed to install interpreter file ./file0
[   34.301369][  T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.313455][  T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.324480][  T444] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   34.334500][  T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.374610][  T444] usb 4-1: config 0 descriptor??
[   34.395148][  T596] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   34.438300][  T596] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,barrier=0x0000000000000003,,errors=continue
[   34.461274][  T444] hub 4-1:0.0: USB hub found
[   34.466934][  T596] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.596997][  T601] EXT4-fs (loop0): Test dummy encryption mode enabled
[   34.621027][  T601] EXT4-fs (loop0): Test dummy encryption mode enabled
[   34.635695][    T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   34.647186][  T601] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue
[   34.778282][  T601] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   34.779356][  T611] incfs: Can't find or create .index dir in ./file0
[   34.792631][  T611] incfs: mount failed -14
[   34.801369][  T444] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[   35.091617][  T444] usbhid 4-1:0.0: can't add hid device: -71
[   35.099699][  T444] usbhid: probe of 4-1:0.0 failed with error -71
[   35.218946][  T622] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.75: casefold flag without casefold feature
[   35.248186][  T622] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.75: couldn't read orphan inode 15 (err -117)
[   35.269590][  T622] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue
[   35.281983][  T444] usb 4-1: USB disconnect, device number 3
[   35.538404][   T24] kauditd_printk_skb: 23 callbacks suppressed
[   35.538416][   T24] audit: type=1400 audit(1753956462.060:247): avc:  denied  { setopt } for  pid=630 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.579958][  T636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'.
[   35.747143][  T633] syz.3.77[633] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.747199][  T633] syz.3.77[633] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.751339][   T15] usb 1-1: device descriptor read/64, error -71
[   36.211288][   T15] usb usb1-port1: attempt power cycle
[   36.244958][  T647] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.266246][  T647] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.278802][  T647] EXT4-fs (loop3): 1 truncate cleaned up
[   36.284669][  T647] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue
[   36.320826][   T24] audit: type=1400 audit(1753956462.840:248): avc:  denied  { create } for  pid=650 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   36.341653][  T647] overlayfs: unrecognized mount option "verity=require" or missing value
[   36.350548][   T24] audit: type=1400 audit(1753956462.870:249): avc:  denied  { mounton } for  pid=646 comm="syz.3.83" path="/13/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.448147][   T24] audit: type=1326 audit(1753956462.970:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   36.711387][   T24] audit: type=1326 audit(1753956462.970:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   36.779796][   T24] audit: type=1326 audit(1753956462.970:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   36.810290][   T24] audit: type=1326 audit(1753956462.970:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   36.851259][   T15] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   36.868862][   T24] audit: type=1326 audit(1753956462.970:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   36.893214][   T24] audit: type=1326 audit(1753956462.970:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   36.918313][   T24] audit: type=1326 audit(1753956462.970:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   37.036566][  T660] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   37.241336][   T15] usb 1-1: device descriptor read/8, error -71
[   37.281309][  T444] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   37.641361][  T444] usb 5-1: Invalid ep0 maxpacket: 16
[   37.671254][  T336] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   37.751359][   T15] usb 1-1: device descriptor read/8, error -71
[   37.796498][  T680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'.
[   37.881339][  T444] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[   37.943276][  T689] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue
[   37.958501][  T689] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.001299][  T336] usb 3-1: device descriptor read/64, error -71
[   38.021251][   T15] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   38.131242][  T444] usb 5-1: Invalid ep0 maxpacket: 16
[   38.136776][  T444] usb usb5-port1: attempt power cycle
[   38.211356][   T15] usb 1-1: device descriptor read/8, error -71
[   38.401387][  T336] usb 3-1: device descriptor read/64, error -71
[   38.551269][  T444] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[   38.651697][  T444] usb 5-1: Invalid ep0 maxpacket: 16
[   38.681433][  T336] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   38.731254][   T15] usb 1-1: device descriptor read/8, error -71
[   38.759531][  T712] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   38.787215][  T721] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   38.796874][  T721] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.807423][  T444] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[   38.835309][  T721] APIC base relocation is unsupported by KVM
[   38.835583][  T721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3046119094 (389903244032 ns) > initial count (130012400512 ns). Using initial count to start timer.
[   38.860485][   T15] usb usb1-port1: unable to enumerate USB device
[   38.864616][  T721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3247545405 (25980363240 ns) > initial count (18814535272 ns). Using initial count to start timer.
[   38.885753][  T732] Unsupported ieee802154 address type: 0
[   38.931340][  T444] usb 5-1: Invalid ep0 maxpacket: 16
[   38.936998][  T444] usb usb5-port1: unable to enumerate USB device
[   38.989872][  T336] usb 3-1: device descriptor read/64, error -71
[   39.561263][  T614] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   39.741284][  T336] usb 3-1: device descriptor read/64, error -71
[   39.871335][  T336] usb usb3-port1: attempt power cycle
[   39.981279][  T614] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[   39.991723][  T614] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   40.002826][  T614] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   40.091418][  T614] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.100903][  T614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   40.109196][  T614] usb 4-1: SerialNumber: syz
[   40.151277][  T305] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   40.158929][  T444] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   40.281300][  T336] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   40.382285][  T614] usb 4-1: bad CDC descriptors
[   40.388850][  T614] usb 4-1: USB disconnect, device number 4
[   40.391342][  T336] usb 3-1: device descriptor read/8, error -71
[   40.401619][  T305] usb 1-1: Using ep0 maxpacket: 8
[   40.661409][  T305] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   40.669777][  T305] usb 1-1: config 179 has no interface number 0
[   40.676548][  T305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   40.688340][  T444] usb 5-1: config 3 has an invalid interface number: 53 but max is 1
[   40.696740][  T305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   40.711235][  T336] usb 3-1: device descriptor read/8, error -71
[   40.718033][  T444] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 2
[   40.726984][  T444] usb 5-1: config 3 has no interface number 0
[   40.733116][  T305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   40.744611][  T444] usb 5-1: config 3 interface 53 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64
[   40.755974][  T305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   40.767888][  T444] usb 5-1: config 3 interface 53 altsetting 5 has an invalid endpoint with address 0x80, skipping
[   40.778750][  T305] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   40.792018][  T444] usb 5-1: config 3 interface 53 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[   40.805111][  T305] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   40.814355][  T444] usb 5-1: config 3 interface 53 has no altsetting 0
[   40.821217][  T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.841316][  T753] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   40.950534][   T24] kauditd_printk_skb: 63 callbacks suppressed
[   40.950548][   T24] audit: type=1326 audit(1753956467.470:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   40.980388][  T444] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0100, bcdDevice= e.60
[   40.980722][   T24] audit: type=1326 audit(1753956467.470:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   40.989616][  T444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.021692][  T444] usb 5-1: Product: ࠓ
[   41.025918][  T444] usb 5-1: Manufacturer: ꎲꞂ꛱ৢ颾肽ᷲ歴ힱ絫솿榇粭ﯦ﷿惲ꝋԧɐ琣栮铕箶鏼笩鸇硟휾恷런高搃⚞㷘瑾菩䞰ꦷ
[   41.040833][  T444] usb 5-1: SerialNumber: ㏝ﱖ넶㻹䌽틮홭录㱗搽⼅⯱列鸫᷍㩸錶긗珰齼傳≀怆싀ࠩ됹꯲❔䖯▲ృ笃យ繸渴䣬㎈捧诸玜⯽Ȅ펂स柿糤炌ꅋ횾쥩⫾泘挌ⷅ텏ᓽ찒歉⚟誤鑿㼖玎䝝ﾑ㭻數ᛗ곒⹇ࡧ暅腡ꓵ᤾䋄须ﴞ藞툁큻撡鬑棳廒
[   41.048741][   T24] audit: type=1326 audit(1753956467.480:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.079192][  T753] udc-core: couldn't find an available UDC or it's busy
[   41.102092][   T24] audit: type=1326 audit(1753956467.480:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.102251][  T753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   41.130912][   T24] audit: type=1326 audit(1753956467.480:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.156125][   T24] audit: type=1326 audit(1753956467.480:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.179896][   T24] audit: type=1326 audit(1753956467.480:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.201256][  T336] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   41.203529][   T24] audit: type=1326 audit(1753956467.480:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.233744][   T24] audit: type=1326 audit(1753956467.480:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.257104][   T24] audit: type=1326 audit(1753956467.480:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09247d49a9 code=0x7ffc0000
[   41.341459][   T15] usb 1-1: USB disconnect, device number 6
[   41.361272][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   41.381472][  T336] usb 3-1: device descriptor read/8, error -71
[   41.405745][  T444] usb 5-1: USB disconnect, device number 10
[   41.671294][  T336] usb 3-1: device descriptor read/8, error -71
[   41.801526][  T336] usb usb3-port1: unable to enumerate USB device
[   42.029050][  T791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   42.038777][  T791] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   42.529190][  T812] netlink: 165 bytes leftover after parsing attributes in process `syz.3.124'.
[   42.556518][  T815] futex_wake_op: syz.1.123 tries to shift op by 36; fix this program
[   42.565543][  T815] overlayfs: missing 'lowerdir'
[   42.962921][  T823] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro,
[   42.985760][  T823] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   43.001019][  T823] EXT4-fs (loop0): Remounting filesystem read-only
[   43.007895][  T823] EXT4-fs error (device loop0) in ext4_evict_inode:258: Readonly filesystem
[   43.017033][  T823] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off.
[   43.034720][  T275] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 9, entries 0, max 0(0), depth 0(0)
[   43.052194][  T275] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 9, entries 0, max 0(0), depth 0(0)
[   43.091266][  T284] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   43.266234][  T828] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.273364][  T828] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.281368][  T828] device bridge_slave_0 entered promiscuous mode
[   43.288310][  T828] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.295490][  T828] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.303048][  T828] device bridge_slave_1 entered promiscuous mode
[   43.331217][  T284] usb 5-1: Using ep0 maxpacket: 32
[   43.344924][  T828] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.352027][  T828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.359409][  T828] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.366621][  T828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.397129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.405320][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.432062][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.488749][  T284] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   43.497623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.506431][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.513780][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.541284][  T828] device veth0_vlan entered promiscuous mode
[   43.547531][  T284] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   43.556279][  T284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   43.566601][  T284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   43.576537][  T284] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   43.587829][  T284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   43.598194][  T284] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   43.608354][  T284] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   43.612104][  T838] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   43.622183][  T284] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   43.630544][  T838] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.639994][  T284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.659245][  T284] usb 5-1: config 0 descriptor??
[   43.665002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.673645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.682184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.689948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.697879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.706898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.716093][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.723188][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.730923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.739156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.748623][  T828] device veth1_macvtap entered promiscuous mode
[   43.760981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.766558][  T276] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   43.793405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.922513][  T284] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   43.935150][  T284] usb 5-1: USB disconnect, device number 11
[   43.944112][  T284] usblp0: removed
[   43.981330][    T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   44.221423][    T5] usb 2-1: Using ep0 maxpacket: 16
[   44.244170][  T819] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   44.253105][    T9] device bridge_slave_1 left promiscuous mode
[   44.259387][  T819] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   44.264861][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.270816][  T819] F2FS-fs (loop4): Found nat_bits in checkpoint
[   44.281326][    T9] device bridge_slave_0 left promiscuous mode
[   44.287592][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.296268][    T9] device veth1_macvtap left promiscuous mode
[   44.302569][    T9] device veth0_vlan left promiscuous mode
[   44.315928][  T819] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   44.323402][  T819] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   44.341259][    T5] usb 2-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config
[   44.351695][    T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   44.361905][    T5] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   44.531401][    T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   44.540588][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.548609][    T5] usb 2-1: Product: syz
[   44.553267][    T5] usb 2-1: Manufacturer: syz
[   44.557855][    T5] usb 2-1: SerialNumber: syz
[   44.601334][  T301] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[   44.841846][    T5] cdc_ncm 2-1:1.0: bind() failure
[   44.847511][  T301] usb 5-1: Invalid ep0 maxpacket: 16
[   44.853941][    T5] cdc_ncm 2-1:1.1: bind() failure
[   44.863312][    T5] usb 2-1: USB disconnect, device number 4
[   45.011261][  T301] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[   45.251314][  T301] usb 5-1: Invalid ep0 maxpacket: 16
[   45.256805][  T301] usb usb5-port1: attempt power cycle
[   45.671229][  T301] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[   45.761274][  T301] usb 5-1: Invalid ep0 maxpacket: 16
[  127.171835][    T7] device bridge_slave_1 left promiscuous mode
[  127.178006][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.185545][    T7] device bridge_slave_0 left promiscuous mode
[  127.191761][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.199470][    T7] device veth1_macvtap left promiscuous mode
[  127.205565][    T7] device veth0_vlan left promiscuous mode
[  166.995146][  T879] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.002954][  T879] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.011430][  T879] device bridge_slave_0 entered promiscuous mode
[  167.019063][  T879] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.026836][  T879] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.034664][  T879] device bridge_slave_1 entered promiscuous mode
[  167.054447][  T885] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 2: comm syz.5.143: lblock 2 mapped to illegal pblock 2 (length 1)
[  167.068576][  T885] __quota_error: 94 callbacks suppressed
[  167.068585][  T885] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  167.083511][  T885] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 48: comm syz.5.143: lblock 0 mapped to illegal pblock 48 (length 1)
[  167.098800][  T885] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  167.108665][  T885] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.143: Failed to acquire dquot type 0
[  167.120189][  T885] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  167.131674][  T885] EXT4-fs error (device loop5): ext4_evict_inode:283: inode #11: comm syz.5.143: mark_inode_dirty error
[  167.143204][  T885] EXT4-fs warning (device loop5): ext4_evict_inode:286: couldn't mark inode dirty (err -117)
[  167.153557][  T885] EXT4-fs (loop5): 1 orphan inode deleted
[  167.159419][  T885] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,noblock_validity,init_itable,max_batch_time=0x0000000000000002,nodiscard,inlinecrypt,i_version,,errors=continue
[  167.178428][    T9] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.192880][    T9] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  167.197029][  T879] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.201838][  T301] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  167.209211][  T879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.209326][  T879] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.224833][    T9] EXT4-fs error (device loop5): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0
[  167.232012][  T879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.251995][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.262052][  T885] EXT4-fs error (device loop5): __ext4_get_inode_loc:4438: comm syz.5.143: Invalid inode table block 1 in block_group 0
[  167.275385][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.275429][  T885] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  167.292930][  T885] EXT4-fs error (device loop5): ext4_quota_off:6545: inode #3: comm syz.5.143: mark_inode_dirty error
[  167.293797][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  167.311464][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  167.320493][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.329108][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.336201][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.360485][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.369622][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.378234][  T903] Zero length message leads to an empty skb
[  167.388466][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.403798][  T907] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  167.420873][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.430537][  T907] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  167.431058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.453225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.461905][  T879] device veth0_vlan entered promiscuous mode
[  167.472890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.482390][  T879] device veth1_macvtap entered promiscuous mode
[  167.492809][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.503345][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.531188][   T24] audit: type=1400 audit(1753956595.047:424): avc:  denied  { bind } for  pid=910 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.551184][  T301] usb 2-1: device descriptor read/64, error -71
[  167.557780][   T24] audit: type=1400 audit(1753956595.047:425): avc:  denied  { read write } for  pid=910 comm="syz.2.140" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  167.581919][   T24] audit: type=1400 audit(1753956595.047:426): avc:  denied  { open } for  pid=910 comm="syz.2.140" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  167.610981][   T24] audit: type=1400 audit(1753956595.127:427): avc:  denied  { remount } for  pid=912 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  167.630766][   T24] audit: type=1400 audit(1753956595.137:428): avc:  denied  { create } for  pid=912 comm="syz.2.149" name="#8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  167.652194][   T24] audit: type=1400 audit(1753956595.137:429): avc:  denied  { link } for  pid=912 comm="syz.2.149" name="#8" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  167.675660][   T24] audit: type=1400 audit(1753956595.137:430): avc:  denied  { rename } for  pid=912 comm="syz.2.149" name="#9" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  167.875619][  T917] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  167.941210][  T301] usb 2-1: device descriptor read/64, error -71
[  168.061353][  T614] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  168.092771][  T926] EXT4-fs (loop3): Test dummy encryption mode enabled
[  168.100130][  T926] EXT4-fs (loop3): Test dummy encryption mode enabled
[  168.107147][  T926] EXT4-fs (loop3): Unrecognized mount option "obj_type=test_dummy_encryption=v1" or missing value
[  168.211202][  T301] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  168.256337][  T306] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  168.431366][  T614] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  168.442906][  T614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.461431][  T614] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  168.474842][  T614] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  168.484536][  T301] usb 2-1: device descriptor read/64, error -71
[  168.491348][  T614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.500717][  T614] usb 5-1: config 0 descriptor??
[  168.561309][  T398] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  168.801236][  T398] usb 6-1: Using ep0 maxpacket: 16
[  168.881303][  T301] usb 2-1: device descriptor read/64, error -71
[  168.941338][  T398] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.951924][  T398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.993593][  T614] wacom 0003:056A:0084.0001: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.4-1/input0
[  169.005341][  T301] usb usb2-port1: attempt power cycle
[  169.111596][  T398] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  169.120866][  T398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.132688][  T398] usb 6-1: Product: syz
[  169.136907][  T398] usb 6-1: Manufacturer: syz
[  169.141897][  T398] usb 6-1: SerialNumber: syz
[  169.203565][  T741] usb 5-1: USB disconnect, device number 16
[  169.431236][  T301] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  169.461310][  T398] usb 6-1: 0:2 : does not exist
[  169.468236][  T398] usb 6-1: USB disconnect, device number 2
[  169.592697][  T957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  169.605018][  T957] EXT4-fs (loop3): 1 orphan inode deleted
[  169.610897][  T957] EXT4-fs (loop3): 1 truncate cleaned up
[  169.616694][  T957] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,grpjquota=,
[  169.634928][  T301] usb 2-1: device descriptor read/8, error -71
[  169.671812][  T873] udevd[873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  169.765408][  T970] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  169.773883][  T970] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  169.782064][  T970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0002]
[  169.790466][  T970] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  169.800776][  T970] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  169.810040][  T970] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue
[  169.814746][  T974] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  169.845269][  T974] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  169.854795][  T970] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.165: dx entry: limit 65535 != root limit 120
[  169.867361][  T970] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.165: Corrupt directory, running e2fsck is recommended
[  169.887218][  T970] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.165: dx entry: limit 65535 != root limit 120
[  169.899703][  T970] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.165: Corrupt directory, running e2fsck is recommended
[  169.914866][  T970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'.
[  169.921292][  T301] usb 2-1: device descriptor read/8, error -71
[  169.997058][  T985]  loop1: p1 < > p4
[  170.006106][  T985] loop1: p4 size 8388608 extends beyond EOD, truncated
[  170.591221][  T398] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  170.667264][  T306] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  170.930840][ T1019] binfmt_misc: register: failed to install interpreter file ./file2
[  170.951236][  T398] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  170.960221][  T398] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  170.970895][  T398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  170.980799][  T398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  170.992433][  T398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  171.121311][  T398] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  171.130474][  T398] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  171.138627][  T398] usb 3-1: Product: syz
[  171.142967][  T398] usb 3-1: Manufacturer: syz
[  171.181645][  T398] cdc_wdm 3-1:1.0: skipping garbage
[  171.186979][  T398] cdc_wdm 3-1:1.0: skipping garbage
[  171.193279][  T398] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  171.431192][  T301] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  171.585366][   T15] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0
[  171.598166][   T15] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0
[  171.606386][   T15] hid-generic 0000:0D17:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  171.638851][ T1044] fido_id[1044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  171.654874][ T1048] bridge0: port 3(gretap0) entered blocking state
[  171.661422][ T1048] bridge0: port 3(gretap0) entered disabled state
[  171.668763][ T1048] device gretap0 entered promiscuous mode
[  171.674656][ T1048] bridge0: port 3(gretap0) entered blocking state
[  171.681206][ T1048] bridge0: port 3(gretap0) entered forwarding state
[  171.688738][ T1048] device gretap0 left promiscuous mode
[  171.694446][ T1048] bridge0: port 3(gretap0) entered disabled state
[  171.801281][  T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.812596][  T301] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  171.822003][  T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.850136][  T301] usb 2-1: config 0 descriptor??
[  172.621229][   T24] kauditd_printk_skb: 99 callbacks suppressed
[  172.621243][   T24] audit: type=1400 audit(1753956599.707:530): avc:  denied  { setattr } for  pid=1061 comm="syz.4.196" name="file1" dev="overlay" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  172.671247][  T301] usbhid 2-1:0.0: can't add hid device: -71
[  172.678595][  T301] usbhid: probe of 2-1:0.0 failed with error -71
[  172.698850][  T301] usb 2-1: USB disconnect, device number 9
[  172.904639][   T24] audit: type=1400 audit(1753956600.417:531): avc:  denied  { create } for  pid=1071 comm="syz.5.199" dev="anon_inodefs" ino=19030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  172.928219][   T24] audit: type=1400 audit(1753956600.417:532): avc:  denied  { ioctl } for  pid=1071 comm="syz.5.199" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19030 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  173.065183][ T1081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  173.080354][ T1081] EXT4-fs (loop4): 1 truncate cleaned up
[  173.087070][ T1081] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,
[  173.107517][ T1081] EXT4-fs error (device loop4): ext4_find_extent:892: inode #15: comm syz.4.201: inode has invalid extent depth: 25964
[  173.120278][ T1081] EXT4-fs (loop4): Remounting filesystem read-only
[  173.127101][ T1081] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size
[  173.181233][  T301] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  173.316399][  T741] usb 3-1: USB disconnect, device number 8
[  173.483636][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  173.510546][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.558213][  T301] usb 2-1: Using ep0 maxpacket: 32
[  173.595917][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  173.655687][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.664242][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.672888][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.682263][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.697015][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.781332][  T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.794447][ T1100] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,acl,,errors=continue
[  173.798755][  T301] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  173.805608][ T1100] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.831750][  T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.840610][  T301] usb 2-1: config 0 descriptor??
[  173.841851][ T1093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  173.861394][ T1093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  173.913315][ T1093] F2FS-fs (loop3): Found nat_bits in checkpoint
[  173.952561][ T1093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  173.959762][ T1093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  173.992862][ T1103] F2FS-fs (loop2): old and new quota format mixing
[  174.048559][  T301] usb 2-1: USB disconnect, device number 10
[  174.371604][  T336] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  174.412944][   T24] audit: type=1400 audit(1753956601.937:533): avc:  denied  { remount } for  pid=1128 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  174.469602][   T24] audit: type=1400 audit(1753956601.957:534): avc:  denied  { mounton } for  pid=1128 comm="syz.3.210" path="/54/file0" dev="ramfs" ino=19123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  174.500362][   T24] audit: type=1400 audit(1753956601.977:535): avc:  denied  { unmount } for  pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  174.543600][ T1135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3247545405 (25980363240 ns) > initial count (18814535272 ns). Using initial count to start timer.
[  174.781242][  T336] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  174.833885][ T1145] F2FS-fs (loop3): invalid crc value
[  174.840377][ T1145] F2FS-fs (loop3): Found nat_bits in checkpoint
[  174.873030][ T1145] F2FS-fs (loop3): Start checkpoint disabled!
[  174.880104][ T1145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  174.961235][  T336] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  174.977370][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.994146][  T336] usb 3-1: Product: syz
[  174.998569][  T336] usb 3-1: Manufacturer: syz
[  175.019323][  T336] usb 3-1: SerialNumber: syz
[  175.049252][ T1145] attempt to access beyond end of device
[  175.049252][ T1145] loop3: rw=2049, want=81920, limit=40427
[  175.070531][ T1145] attempt to access beyond end of device
[  175.070531][ T1145] loop3: rw=2049, want=53248, limit=40427
[  175.113868][ T1145] attempt to access beyond end of device
[  175.113868][ T1145] loop3: rw=2049, want=69632, limit=40427
[  175.119559][ T1154] 9pnet: p9_errstr2errno: server reported unknown error �@��0x0000000000000004
[  175.130449][ T1145] attempt to access beyond end of device
[  175.130449][ T1145] loop3: rw=2049, want=69640, limit=40427
[  175.146751][ T1145] attempt to access beyond end of device
[  175.146751][ T1145] loop3: rw=2049, want=69648, limit=40427
[  175.158633][ T1145] attempt to access beyond end of device
[  175.158633][ T1145] loop3: rw=2049, want=69656, limit=40427
[  175.170779][ T1145] attempt to access beyond end of device
[  175.170779][ T1145] loop3: rw=2049, want=69664, limit=40427
[  175.182842][ T1145] attempt to access beyond end of device
[  175.182842][ T1145] loop3: rw=2049, want=69672, limit=40427
[  175.195141][ T1145] attempt to access beyond end of device
[  175.195141][ T1145] loop3: rw=2049, want=69680, limit=40427
[  175.206997][ T1145] attempt to access beyond end of device
[  175.206997][ T1145] loop3: rw=2049, want=69688, limit=40427
[  175.673687][ T1173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  175.703669][ T1173] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  175.720101][ T1173] EXT4-fs (loop3): 1 truncate cleaned up
[  175.726510][ T1173] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue
[  176.071257][  T336] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  176.721217][  T336] usb 2-1: Using ep0 maxpacket: 8
[  176.741783][   T24] audit: type=1400 audit(1753956604.267:536): avc:  denied  { read } for  pid=1191 comm="syz.3.235" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  176.767406][   T24] audit: type=1400 audit(1753956604.267:537): avc:  denied  { open } for  pid=1191 comm="syz.3.235" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  176.793874][   T24] audit: type=1400 audit(1753956604.287:538): avc:  denied  { ioctl } for  pid=1191 comm="syz.3.235" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  176.897924][  T336] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  177.297160][  T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.305496][  T301] usb 3-1: USB disconnect, device number 9
[  177.307227][   T24] audit: type=1400 audit(1753956604.377:539): avc:  denied  { mount } for  pid=1187 comm="syz.5.233" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  177.331245][  T336] usb 2-1: config 0 descriptor??
[  177.361785][ T1196] exfat: Deprecated parameter 'namecase'
[  177.386970][ T1196] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  177.671275][ T1201] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.237: inode #1: comm syz.2.237: iget: illegal inode #
[  177.686629][ T1201] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.237: error while reading EA inode 1 err=-117
[  177.700945][ T1201] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.237: inode #1: comm syz.2.237: iget: illegal inode #
[  177.715202][ T1201] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.237: error while reading EA inode 1 err=-117
[  177.729037][ T1201] EXT4-fs (loop2): 1 orphan inode deleted
[  177.735280][ T1201] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue
[  177.798941][ T1201] EXT4-fs (loop2): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,
[  177.881189][  T398] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  178.118202][   T24] kauditd_printk_skb: 3 callbacks suppressed
[  178.118216][   T24] audit: type=1400 audit(1753956605.637:543): avc:  denied  { connect } for  pid=1207 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  178.231245][  T398] usb 6-1: not running at top speed; connect to a high speed hub
[  178.321227][  T398] usb 6-1: config 6 has an invalid interface number: 10 but max is 0
[  178.329476][  T398] usb 6-1: config 6 has no interface number 0
[  178.351191][  T398] usb 6-1: config 6 interface 10 has no altsetting 0
[  178.373334][ T1217] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.373461][ T1221] EXT4-fs warning (device loop3): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  178.399724][ T1221] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it
[  178.415232][ T1221] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.244: Corrupt directory, running e2fsck is recommended
[  178.432539][ T1221] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  178.440988][ T1221] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.244: corrupted in-inode xattr
[  178.454640][ T1221] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.244: couldn't read orphan inode 15 (err -117)
[  178.467800][ T1221] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,dioread_lock,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue
[  178.498578][ T1221] EXT4-fs warning (device loop3): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  178.510851][ T1221] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it
[  178.521351][ T1221] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.244: Corrupt directory, running e2fsck is recommended
[  178.534695][ T1221] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.244: path /63/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  178.561607][  T398] usb 6-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice=15.6f
[  178.571837][  T398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.580157][  T398] usb 6-1: Product: syz
[  178.585876][  T398] usb 6-1: Manufacturer: syz
[  178.590794][  T398] usb 6-1: SerialNumber: syz
[  178.642506][ T1221] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.244: path /63/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  178.964773][  T398] usb 6-1: USB disconnect, device number 3
[  179.296103][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x82d
[  179.326004][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x228
[  179.344088][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xa6d
[  179.360255][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x28c
[  179.371271][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xaa7
[  179.384109][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x2d4
[  179.393349][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x2d8
[  179.402557][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xae3
[  179.405586][ T1244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.251'.
[  179.413502][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x2ee
[  179.432916][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x330
[  179.443528][ T1235] kvm [1234]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x34c
[  179.767277][  T336] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  179.779146][  T336] asix: probe of 2-1:0.0 failed with error -32
[  180.091252][  T741] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  180.564185][   T24] audit: type=1400 audit(1753956608.067:544): avc:  denied  { create } for  pid=1269 comm="syz.5.260" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.594696][   T24] audit: type=1400 audit(1753956608.067:545): avc:  denied  { associate } for  pid=1269 comm="syz.5.260" name="#11" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  180.682893][  T741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.695306][  T741] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.772078][ T1282] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[  180.857296][    T5] usb 2-1: USB disconnect, device number 11
[  180.931237][  T741] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  180.944962][  T741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.961407][  T741] usb 4-1: Product: syz
[  180.969923][  T741] usb 4-1: Manufacturer: syz
[  180.974954][  T741] usb 4-1: SerialNumber: syz
[  181.077345][    T7] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  181.093283][    T7] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  181.105805][    T7] EXT4-fs (loop5): This should not happen!! Data will be lost
[  181.105805][    T7] 
[  181.115562][    T7] EXT4-fs (loop5): Total free blocks count 0
[  181.122060][    T7] EXT4-fs (loop5): Free/Dirty block details
[  181.128360][    T7] EXT4-fs (loop5): free_blocks=68451041280
[  181.134857][    T7] EXT4-fs (loop5): dirty_blocks=16400
[  181.140750][    T7] EXT4-fs (loop5): Block reservation details
[  181.147001][    T7] EXT4-fs (loop5): i_reserved_data_blocks=1025
[  181.154855][    T7] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  181.167776][    T7] EXT4-fs (loop5): This should not happen!! Data will be lost
[  181.167776][    T7] 
[  181.271342][    T5] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  181.331300][  T741] usb 4-1: 0:2 : does not exist
[  181.338694][  T741] usb 4-1: USB disconnect, device number 5
[  181.359376][  T336] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  181.564280][  T873] udevd[873]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  181.611334][  T336] usb 5-1: Using ep0 maxpacket: 8
[  181.641497][    T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  181.652110][    T5] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  181.663663][    T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  181.673613][    T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  181.685866][    T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  181.811335][    T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  181.838082][    T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  181.864227][    T5] usb 2-1: Product: syz
[  181.870232][    T5] usb 2-1: Manufacturer: syz
[  181.912865][    T5] cdc_wdm 2-1:1.0: skipping garbage
[  181.921493][  T336] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  181.923001][    T5] cdc_wdm 2-1:1.0: skipping garbage
[  181.955761][  T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.960266][    T5] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  181.996576][  T336] usb 5-1: Product: syz
[  182.017872][  T336] usb 5-1: Manufacturer: syz
[  182.878118][  T336] usb 5-1: SerialNumber: syz
[  182.897537][   T20] usb 2-1: USB disconnect, device number 12
[  182.904258][  T336] usb 5-1: config 0 descriptor??
[  182.992000][ T1307] F2FS-fs (loop3): invalid crc value
[  182.999523][ T1307] F2FS-fs (loop3): Found nat_bits in checkpoint
[  183.041670][ T1307] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  183.128670][   T24] audit: type=1400 audit(1753956610.607:546): avc:  denied  { execute } for  pid=1306 comm="syz.3.272" path="/70/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  183.189875][   T24] audit: type=1400 audit(1753956610.617:547): avc:  denied  { bind } for  pid=1309 comm="syz.5.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  183.329793][   T24] audit: type=1400 audit(1753956610.847:548): avc:  denied  { bind } for  pid=1324 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  183.484407][ T1329] EXT4-fs (loop1): Ignoring removed bh option
[  183.531511][ T1329] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,block_validity,max_dir_size_kb=0x0000000000000009,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,
[  183.532099][ T1333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'.
[  185.224547][  T444] usb 5-1: USB disconnect, device number 17
[  185.513362][  T336] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  185.606188][   T24] audit: type=1400 audit(1753956613.127:549): avc:  denied  { bind } for  pid=1363 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  185.931210][  T336] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  185.939871][  T336] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  185.962305][  T336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  185.981035][  T336] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  185.993309][  T336] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  186.121225][  T336] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  186.132698][  T336] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  186.171258][  T336] usb 2-1: Product: syz
[  186.178003][  T336] usb 2-1: Manufacturer: syz
[  186.231910][  T336] cdc_wdm 2-1:1.0: skipping garbage
[  186.237362][  T336] cdc_wdm 2-1:1.0: skipping garbage
[  186.253925][  T336] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  186.480601][ T1394] input: syz1 as /devices/virtual/input/input7
[  186.531237][   T24] audit: type=1400 audit(1753956614.027:550): avc:  denied  { read } for  pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=658 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  186.737106][   T25] usb 2-1: USB disconnect, device number 13
[  186.743775][   T24] audit: type=1400 audit(1753956614.027:551): avc:  denied  { open } for  pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=658 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  186.810763][   T24] audit: type=1400 audit(1753956614.027:552): avc:  denied  { ioctl } for  pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=658 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  186.999333][   T24] audit: type=1400 audit(1753956614.517:553): avc:  denied  { name_bind } for  pid=1405 comm="syz.2.305" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  187.214489][   T24] audit: type=1400 audit(1753956614.637:554): avc:  denied  { create } for  pid=1402 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  187.722431][ T1444] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  187.790658][ T1444] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue
[  188.350083][   T24] audit: type=1400 audit(1753956615.867:555): avc:  denied  { rename } for  pid=1457 comm="syz.1.321" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  188.703616][   T24] audit: type=1400 audit(1753956616.227:556): avc:  denied  { setopt } for  pid=1481 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  188.980469][ T1486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  188.997713][ T1486] EXT4-fs (loop4): 1 truncate cleaned up
[  189.037220][ T1486] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  189.100378][ T1480] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  189.119687][ T1480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  189.130393][ T1480] F2FS-fs (loop1): invalid crc value
[  189.138514][   T24] audit: type=1400 audit(1753956616.657:557): avc:  denied  { ioctl } for  pid=1485 comm="syz.4.332" path="/57/bus/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  189.172691][ T1480] F2FS-fs (loop1): Found nat_bits in checkpoint
[  189.191193][  T741] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  189.206750][ T1480] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  189.214442][ T1480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  189.278495][ T1499] 9pnet: p9_errstr2errno: server reported unknown error �@��
[  189.631182][  T741] usb 4-1: Using ep0 maxpacket: 16
[  189.798906][   T24] audit: type=1400 audit(1753956617.317:558): avc:  denied  { bind } for  pid=1510 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  189.811326][  T741] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  189.827268][  T741] usb 4-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config
[  189.834916][   T24] audit: type=1400 audit(1753956617.317:559): avc:  denied  { listen } for  pid=1510 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  189.838150][  T741] usb 4-1: config 226 has 0 interfaces, different from the descriptor's value: 2
[  189.868058][   T24] audit: type=1400 audit(1753956617.347:560): avc:  denied  { accept } for  pid=1510 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  190.021278][  T741] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  190.031382][  T741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.039740][  T741] usb 4-1: Product: syz
[  190.044559][  T741] usb 4-1: Manufacturer: syz
[  190.049425][  T741] usb 4-1: SerialNumber: syz
[  190.310219][ T1522] 9pnet: Could not find request transport: 0xffffffffffffffff
[  190.752721][ T1294] usb 4-1: USB disconnect, device number 6
[  190.891301][    T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  190.915764][   T24] audit: type=1400 audit(1753956618.437:561): avc:  denied  { remount } for  pid=1531 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  191.271261][    T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.287544][    T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.298044][    T5] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  191.307873][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.319170][    T5] usb 3-1: config 0 descriptor??
[  191.470609][ T1543] hub 2-0:1.0: USB hub found
[  191.475880][ T1543] hub 2-0:1.0: 1 port detected
[  191.491402][ T1294] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  191.506619][   T24] audit: type=1400 audit(1753956619.027:562): avc:  denied  { read } for  pid=1540 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  191.812907][    T5] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  191.826093][    T5] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  191.901223][    T5] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected
[  192.041213][ T1294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.051625][ T1294] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  192.061103][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.070328][ T1294] usb 5-1: config 0 descriptor??
[  192.161554][   T24] audit: type=1400 audit(1753956619.687:563): avc:  denied  { create } for  pid=1557 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  192.590248][   T24] audit: type=1400 audit(1753956620.107:564): avc:  denied  { write } for  pid=1561 comm="syz.1.356" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  193.813699][ T1593] hub 6-0:1.0: USB hub found
[  193.819662][ T1593] hub 6-0:1.0: 1 port detected
[  194.016304][  T336] usb 3-1: USB disconnect, device number 10
[  194.045578][  T336] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected
[  194.095916][ T1595] device syzkaller0 entered promiscuous mode
[  194.260088][  T741] usb 5-1: USB disconnect, device number 18
[  194.301463][   T24] kauditd_printk_skb: 19 callbacks suppressed
[  194.301478][   T24] audit: type=1326 audit(1753956621.817:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.349835][   T24] audit: type=1326 audit(1753956621.857:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.513486][   T24] audit: type=1326 audit(1753956621.857:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.564991][   T24] audit: type=1326 audit(1753956621.857:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.599743][   T24] audit: type=1326 audit(1753956621.857:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.635284][   T24] audit: type=1326 audit(1753956621.857:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.666946][   T24] audit: type=1326 audit(1753956621.857:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16144a9a9 code=0x7ffc0000
[  194.692655][   T24] audit: type=1400 audit(1753956622.017:591): avc:  denied  { mount } for  pid=1606 comm="syz.4.370" name="/" dev="configfs" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  194.716283][   T24] audit: type=1400 audit(1753956622.017:592): avc:  denied  { read } for  pid=1606 comm="syz.4.370" name="/" dev="configfs" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  194.723672][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'.
[  194.739202][   T24] audit: type=1400 audit(1753956622.017:593): avc:  denied  { open } for  pid=1606 comm="syz.4.370" path="/67/file0" dev="configfs" ino=2008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  194.946183][ T1616] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  195.753542][ T1638] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  196.622524][ T1654] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  196.643113][ T1655] F2FS-fs (loop3): invalid crc value
[  196.665875][ T1655] F2FS-fs (loop3): Found nat_bits in checkpoint
[  196.706883][ T1655] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.790697][ T1683] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.386: Allocating blocks 497-513 which overlap fs metadata
[  196.815399][ T1683] EXT4-fs (loop1): pa ffff888130bf7dc8: logic 256, phys. 385, len 8
[  196.823617][ T1683] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1
[  196.866505][ T1681] EXT4-fs (loop4): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value
[  196.879738][ T1686] Unknown ioctl 21517
[  197.054940][ T1695] mmap: syz.5.399 (1695) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  197.181419][  T278] handle_bad_sector: 1509 callbacks suppressed
[  197.181461][  T278] attempt to access beyond end of device
[  197.181461][  T278] loop3: rw=2049, want=45104, limit=40427
[  197.425816][ T1705] erofs: (device loop3): mounted with root inode @ nid 36.
[  197.459085][ T1705] BUG: scheduling while atomic: syz.3.401/1705/0x00000002
[  197.466631][ T1705] Modules linked in:
[  197.470753][ T1705] Preemption disabled at:
[  197.470802][ T1705] [<ffffffff82121a08>] z_erofs_reload_indexes+0x318/0x450
[  197.482751][ T1705] CPU: 0 PID: 1705 Comm: syz.3.401 Not tainted 5.10.240-syzkaller-00225-g1154f779f3f3 #0
[  197.493102][ T1705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  197.503503][ T1705] Call Trace:
[  197.506974][ T1705]  __dump_stack+0x21/0x24
[  197.511317][ T1705]  dump_stack_lvl+0x169/0x1d8
[  197.516114][ T1705]  ? show_regs_print_info+0x18/0x18
[  197.521676][ T1705]  ? check_panic_on_warn+0x6c/0xb0
[  197.526814][ T1705]  ? z_erofs_reload_indexes+0x318/0x450
[  197.532462][ T1705]  dump_stack+0x15/0x1c
[  197.536650][ T1705]  __schedule_bug+0x177/0x230
[  197.541356][ T1705]  ? __migrate_task+0x190/0x190
[  197.546369][ T1705]  __schedule+0xc33/0x1310
[  197.550808][ T1705]  ? sched_group_set_shares+0x4c0/0x4c0
[  197.556524][ T1705]  ? release_firmware_map_entry+0x190/0x190
[  197.562531][ T1705]  ? plist_add+0x3e8/0x470
[  197.566957][ T1705]  schedule+0x13c/0x1d0
[  197.571203][ T1705]  futex_wait_queue_me+0x29b/0x530
[  197.576668][ T1705]  ? futex_wait_setup+0x510/0x510
[  197.581696][ T1705]  futex_wait+0x210/0x680
[  197.586059][ T1705]  ? do_futex+0x1210/0x1210
[  197.590967][ T1705]  ? __kasan_check_read+0x11/0x20
[  197.596113][ T1705]  do_futex+0xf3d/0x1210
[  197.600794][ T1705]  ? futex_exit_release+0x1d0/0x1d0
[  197.606297][ T1705]  ? selinux_file_ioctl+0x377/0x480
[  197.611764][ T1705]  ? sched_clock+0x3a/0x40
[  197.616181][ T1705]  ? sched_clock_cpu+0x1b/0x3d0
[  197.621040][ T1705]  ? selinux_file_alloc_security+0x120/0x120
[  197.627279][ T1705]  ? sched_clock_cpu+0x1b/0x3d0
[  197.632202][ T1705]  __se_sys_futex+0x2b4/0x360
[  197.637007][ T1705]  ? __x64_sys_futex+0x100/0x100
[  197.641960][ T1705]  ? fput_many+0x15a/0x1a0
[  197.647136][ T1705]  __x64_sys_futex+0xe5/0x100
[  197.651917][ T1705]  do_syscall_64+0x31/0x40
[  197.656345][ T1705]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  197.662261][ T1705] RIP: 0033:0x7f09247d49a9
[  197.666819][ T1705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.687539][ T1705] RSP: 002b:00007f0922e3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  197.696076][ T1705] RAX: ffffffffffffffda RBX: 00007f09249fbfa8 RCX: 00007f09247d49a9
[  197.704221][ T1705] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f09249fbfa8
[  197.712289][ T1705] RBP: 00007f09249fbfa0 R08: 0000000000000000 R09: 0000000000000000
[  197.720496][ T1705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09249fbfac
[  197.728604][ T1705] R13: 0000000000000000 R14: 00007ffe55a30860 R15: 00007ffe55a30948
[  197.741548][ T1705] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]