last executing test programs:

1m57.893581068s ago: executing program 32 (id=335):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', <r1=>0x0})
unshare(0x62040200)
r2 = gettid()
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0)

1m51.631249236s ago: executing program 33 (id=481):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1m35.49916264s ago: executing program 5 (id=746):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

1m35.41786526s ago: executing program 5 (id=747):
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x7ffff000)

1m35.312352481s ago: executing program 5 (id=748):
r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m34.284826809s ago: executing program 6 (id=756):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m34.257133239s ago: executing program 6 (id=757):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={<r0=>0xffffffffffffffff})
close(r0)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"])
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x28}])

1m34.12502975s ago: executing program 6 (id=758):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

1m34.06403953s ago: executing program 6 (id=761):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000640)='./file1\x00', 0x4800, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000000f00)="$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")
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

1m33.926444251s ago: executing program 6 (id=764):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_emit_ethernet(0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0064f48d783b818cd9218c5f1574d47f480086dd6018000029c43a00fe8000000000000068b4000000000000fe80000000000000000000000000003880009078"], 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20)
shutdown(r1, 0x0)

1m33.813267892s ago: executing program 6 (id=768):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000})
ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7)

1m33.785327162s ago: executing program 34 (id=768):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000})
ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7)

1m32.932042259s ago: executing program 5 (id=785):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r0, 0x3)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0)

1m32.890570539s ago: executing program 5 (id=778):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@minixdf}, {@nombcache}, {@oldalloc}]}, 0x1, 0x500, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103c42, 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

1m32.510494632s ago: executing program 5 (id=784):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m17.474247577s ago: executing program 35 (id=784):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m13.778287696s ago: executing program 4 (id=1123):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

1m13.755548836s ago: executing program 4 (id=1125):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050008"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)

1m13.664459746s ago: executing program 4 (id=1128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r0}, &(0x7f0000001d80), &(0x7f0000001dc0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1m13.652844377s ago: executing program 4 (id=1130):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$eJzs3U9rHGUcB/DfM9mkf9KaVAStPRgo2IKaNGlFEcEW682DfwqeBGOSltJtG5oItlZsob4DfQGCNy/isYgU9eLVm+ALkGKRNhdvkdnMpNt2N82fTadmPh/YZJ55MjzPZPnuM/vszGwAtTWS/8gi9kbEbIoYaqtrRFE5svR3d25fnlq4fXkqxeLi+/+kSMW68u9T8Xuw2Hh7RPz+c4on+x5sd+7ipTOTzebMhaI8Nn92dmzu4qWXTp+dPDVzaubcxPgr4y8fOTxx5FBP9nN3RPw6erxx7eSb+76f+nbPFz9+dz3F0dhV1LfvR6+MxMjy/6Rd/n99tdeNVaSv2J/2pzg1KuwQa1I+f/0R8XQMRV/cffKG4st3K+0csKkWU8QiUFNJ/qGmyuOA/P1v+aj2iAR4VG4dW5oAuJOW5vYWlvPfWJobjO2tuYGdCynap3VSRPRiZi5vY/b5NJQ/YpPm4YDOrlyNiGc6jf+plc3h1ix+nv/snvxnEfFO8Ttf/9462x+5ryz/8OhsJP8fteX/43W2L/8AAAAAAADQOzeORcSLnT7/y5bP/4kO5/8MRsTRHrT/8M//sps9aAbo4NaxiNcjojz3b6Et/4XhvqK0u3U+QH86ebo5cyginoiIg9G/LS+Pr9DGyL7f+rvWtZ3/lz/y9stzAYt+3Gxsu3eb6cn5yY3sM7Dk1tWIZxud8p+Wx//UYfzPXw9mV9nG4vE3fulW9/D8A5tl8ZuIAx3H/7t3rkgr359jrHU8MFYeFTzosw+v/9CtffmH6uTj/86V8z+c2u/XM7f2Nj7/+88N5L/z8f9AOtG65cxAse7Tyfn5C+MRA+ntB9dPrL3PsBWVeSjzkuf/4P7O7/9XOv7fERFXVtnmiZ/eutatzvgP1cnzP72m8X/tC/s/+Prfbu2vbvw/0hrTDxZrzP/BylYb0Kr7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R1lE7IqUjS4vZ9noaMRgRDwVO7Pm+bn5F06e/+TcdF7X+v7/rPym36Glciq//3+4rTxxX/lwROyJiK/6drTKo1Pnm9NV7zwAAAAAAAAAAAAAAAAAAAA8Jga7XP+f+6uv6t4Bm65RdQeAysg/1Jf8Q33JP9SX/EN9yT/Ul/xDfck/1Jf8Q33JPwAAAAAAbCl7nrvxR4qIK6/taD1yA0Vdf6U9AzZbVnUHgMq4xQ/Ul1N/oL5S1R0AKvew14Ht694SAAAAAAAAAAAAAOiVA3td/w915fp/qK/u1/+7MwBsda7/h/ryHh9w/T8AAAAAAAAAAAAAPP7mLl46M9lszlxY78K2jW1uwUJ9FiL1IHGPaKHqVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD0XwAAAP//dt72Ng==")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

1m13.526144547s ago: executing program 4 (id=1133):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
getpriority(0x2, 0x0)

1m13.436721358s ago: executing program 4 (id=1135):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

1m13.400090688s ago: executing program 36 (id=1135):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

54.984149609s ago: executing program 8 (id=1632):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x103e, &(0x7f0000000a80)=ANY=[], 0x0)

54.966152089s ago: executing program 8 (id=1633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r2, 0x0, 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20)

54.949822599s ago: executing program 8 (id=1634):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
readahead(0xffffffffffffffff, 0x4, 0x81)

54.93324523s ago: executing program 8 (id=1635):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4fa, &(0x7f0000002140)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0xc8)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x985640, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xc000}}}, 0x78)

54.86563378s ago: executing program 8 (id=1636):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

54.744415931s ago: executing program 8 (id=1637):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})
chdir(&(0x7f0000000300)='./bus\x00')
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sr0, 0x0, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

54.683116871s ago: executing program 37 (id=1637):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==")
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})
chdir(&(0x7f0000000300)='./bus\x00')
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sr0, 0x0, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

38.650406824s ago: executing program 9 (id=1989):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
splice(r3, 0x0, r2, 0x0, 0x7, 0xe)

37.78913125s ago: executing program 9 (id=2018):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

37.729099061s ago: executing program 9 (id=2019):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
io_setup(0x2e, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0xfdef, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='^', 0x1, 0x4}])
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1)

37.618619202s ago: executing program 9 (id=2021):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x4800, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0xfd, 0x1211, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf161JU/NHrdX2oA948bQ0OXgSJEgKkgWlNkIrCFMz0WXH3ZBZglvE6smrr8OzN8F3kHfhLRePPYgjmUlst2zVgskW+/kcdn7M83x5nocdFmaZZw7f+eHL/k7Z2clG0Tp3Llq7Eel+ihStOPH6ZnO8dXtzvdvduJHS9fWbq2+nlJbe+OWTr+ci4uLHPy39PBcHK58e/rb268HlgyuHf9z8olemXpkGw1HK0p3hcJTdKfK03Sv7nZQ+LPKszFNvUOZ7E+07xXB3d5yywfbiwu5eXpYpG4xTPx+n0TCN9sYp+zzrDVKn00mLC8Fjnf/nLls/3q+qKqKqzsfzUVVVdSEW4mK8EIuxFN9GxIvxUrwcl+KVuByvxmtxpe51FtMHAAAAAAAAAAAAAAAAAACAZ8ff7f9fjhX7/wEAAAAAAAAAAAAAAAAAAOAMfHTr9uZ6t7txI6X5iOL7/a39rebYtK/vRC+KyONaLMfvUe/+bzT19fe7G9dSbSW+K+4d5+/tbz3X5I8+jvKr9esEjvPtuu0kv9rk02R+LhYeHn8tluPS9PHXpubn4603T/Lzx6v9LIZRxHY99oP8N6spvfdB95H81bofAAAA/B900l+m3r93Oo9rb/JP8P/AI/fX7bjanu3aiSjHd/tZq8j3yvHRF14Xd/vZ/ElRKP5FMTd5pnVKY7Vi5iv9z4v2Q1fd0zCf0yy+ejqmMb24EJNnZv3LxFl4cBnMeiYAAAAAAAAAAAA8iVN+rrAdU54se3c2SwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFABAAD//yU9xBU=")
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

37.515577943s ago: executing program 9 (id=2026):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x18, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)

37.451564593s ago: executing program 9 (id=2027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, 0xfa, 0x0, &(0x7f0000000000))
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)

37.370133784s ago: executing program 38 (id=2027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, 0xfa, 0x0, &(0x7f0000000000))
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)

2.807878498s ago: executing program 0 (id=2889):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfff3, [0x8080, 0x6a4e], 0x9856}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

2.617148509s ago: executing program 2 (id=2897):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000801, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime')

2.616446779s ago: executing program 2 (id=2899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x8004, &(0x7f0000000480)={[{@inode32}]})

2.57965834s ago: executing program 2 (id=2902):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x8800000)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0)
read(r1, &(0x7f0000000040)=""/69, 0x45)
write$UHID_INPUT(r1, &(0x7f0000000fc0)={0x8, {"b93037d242cda22c923cd91687ef6a971e18a2d8a80b7667f214496a798894075b839aaec9bd8e78ff9636d7ffc2b031d876596008e4853e6c615ff46a87a39518da73186122a5dc256e13b85c9227da594135f194272465163eb775ffbee3f8a44fcb3fb2beb53fd636f0d4d7826326cc9576c213a249b44ebd2d529b32c38fcd368570f738405a5139e19a0c6337e2ee01c0898251c41846bbb7f950af9ccb95381d9b17699bc2c770e62b7f368ec86c6d44f382194e97d54d45e9ad5428d12222c1af47609856192c0e69327d69b133d7b91df3b51f81d690e8557c7dd06d133df7727e403560b227d1e603e70e44c4c3790949fafa7ba189a05ad51575d851e97fa1a676758606f27c3fd83e63b552c090f45cc3dddc44646c1ade70760c3ee2e700701fd412be1ea95453f9ab9cc405def2bb295377d5ef13818f5442bc2d4fc61741b255ac4d30be5dcca784f51a60287d005ffd2882002cf1eae8e60e0475ecd1ee6180b9362f905dca23574d12ac093d1ea6daa52636501327c6d2563a32e5f797f2ec0d8fad661cc34de4954ab9dcca6cf4fa47f25ae839d21b91abc887939713937339eb8dce9f7016915eb3ad86777155909f3a2ae5d12645d1e74e0d0bdc11e1db97345c183282b53df67ef30e5f8a356774f990d46786bf42fc80dac90f842204182a242e731731812d3e45268e91eec3ba887f694e6b9a5822db8ad66b5648466443d11d63f0a1f2a65c2588f2e53a7e008527f95d3910e99d333eece27c7a18945cb709e6480d4761d4389164a8f1b1c4f9cee41d2f9067e41bc029ac2c3cdca3ef4f3a26d4b3a4375d77e89aa49eabe14620b929248b853d2552326b4aa28b90655b16b3e055800427a74d95dc64c972cd809a0ae65f2bb2d1ad5ad3fbac1ed93c5d0e4fd5d7f7aacc9492eedb1c31596feea2d0a466e2fc6fbdd23ded12d120b5061344cbfaf5eaedfe7827bf37f98a78a302cd5e540f36ae7fec3836279466d62bffbc54896b9e7dc5cf1f7f5a96295462aeb46545440b2c03630597cb8fb8aedb2be1cbbda130fe40644c61483b4ad4e11d7f22b3fd17655be13df72db08b2a6faae884f962c58f207d5984a5e01cb289bacab7197215c81dd5d0537e91982d93902cdaa3c21d75ed5ce0989bfbef24450c8564187b5b9ecbaa10a5de5163eccbb5e8053ed52ba895ca73a727b77e2d90a90f3b498bf620dc198e111924b2d4c26092688840d8feb6468f2f277fd0f4d276f4245761bee60fa7bdb4b077889177d5ed0391fbefb8b09f15fc4f24f3c84fde9da3189325fa92abd4a031c87e892d4c6e77285cfd5d983ad29dea3a5320e1f7fd2db109fa5fdacf67883ff02fb90801cdf1b5a221e2b8bd0ade10cdbb9d263f268226dfa5d062bc67116c6825d6bb7e710149da8ec409cecffa921282139614fefc5c696ab891d777dfd58226d8a2818e95b412b0c4ecd3539288ccebb50f41d12d55e0b1d29bfc8e3b5f3c1578cbbc3d7ff50ff108d67d5f06baf28b2901fa17ec1ca042f73efde0039cb4251353b824b7e645b9a1c5593cfe6898d9e3551920835d61b0b67f0021bbed8cfb4f4af39ab02ef0e81ca9cffec9901aa9d9cd1f9aa251267316eb99c30947bcdc87fdb8be016cb935f7787350ae657470567595057e6b7616b0e15dcc51d9f214420376b351484ff19de22d4f724c120f9f425770f9fc66824f90038575297ba0af3695d852adb531a2ad6fabcc51b2bdb05312e72c1c6873cf3c8bb8b7fce90918ac7514fd7ad1ac3a6350988342c5d814788b22d8e4464a4b9647bbe1cbb2c88826dbdff9f246576831b896aed85ffacadb70e0e2a4eac130b124097a27eea216b4cc955a99f45d77a2bb7be9d1889177277f2182c4003cf56cdc142b9572a16654e2c5d48d4d9e825c8b5e293ee7880730d3dad7b4fdab1582025169aff4c3488d3e9d19e622f0d133d985c79b0a3f840a15aab32344b805f179227d5a29473d6afafa3d646e9b6072cb315f0536e02294831dd77cc75800a189182effc8603b0b5d9a4353971eab7b5404f4095720a4ec12b2fddd3f70cdb6713f6997fee7d1ffd4c0f93ad46538962033acf5f96f72252bba30b46b9c40496a235b43d9433586401679270c20236e528807dbefb259f749192d919fcb3fe537f1c94cc14e0660e6034b35e1a3e28669e4a61c1fd3a98023089002eda631379841d69e081903cba8629584c6cc79edbc031a48e28cc855db4ebb3a3fc4c03309cde851f75f4df599816b5d52c445c33cd6a63d1885387a53df213ef805305ad36a33ab65c02b89be698fea65c197e8d595d9369aaad2895f6cf3fa97f58ccdc214e403b0820a404894a0c3144c8f82517fdd6fe552483781e617dda766da5e53cece132b4934dab83a031d36681d5ade8781c7d9acb6552be1f8a4044d9eac9c10f28005a76a9886c3e0edc55b1a9db53bd08341d8b5f19a77121fadeb50d15a297a68d2816d2be42d26e9ea6214b49a1889d0b430b8ca8bbf81ef3dbc02813ba461faf032b5cfaa9b627c823dae6d35aa3edc5b60905dd1e000b2b73133e60bdf0d21bdcf0a3f5876b546348f53a1e36593885cb86c16b3d47ffdf7950904a673000351fa383e6ad8c88de7792710cb8d10ad2a0bd7d8177165b1a79e5b8d7e1da25905a0ac13594cd168956037e9f1814293a52f9b9b69a10d79ab9672bcf250bdc8d8b05f9e1fb905e7570e984849ace66d9527aa8a62ca58a0ff09b96c977c154f114ba72bfd5674647c2ac365bc7c0db69c337a08b590ee00c84beb20ab4836768a223af4f245c71b95d581773163abfcbf89b27f4339e724a6cb4c93c03296f9cb7e42afebd7dc81ba0e5e1b03b92fb149f415f049bbaaee41ea049dcdc9185230f03c1664ce12180de93757852faeb91a951fc881a778a1ed50f320ad9f423cc32d60651eca1ad517f0c85319b8d406912ff435f9882b21e275d9bdc43ea96dcb913ead2c2cfb8b1e1b045b8cae4ff0b6abf18258976a6858275e5f0294dad1fb306cbedc62a746558924c471243ac22caf21d01cea4fbe0fc698d02ac7204aaca9fa43fdff25d44624832fbf0c989f54a1063aeddbf444ac1742a11531fedecde21c430bce27ab6445ccf5433eba2dd549c6fa0a1f946d6aac8496cff0277276c7bc3971447a54c26033c0b5847ed1205dab9960e63f5e1022a3448c16675b7fcacafa14e3fcfc71364e9e139da27b4c14b6c39602b583e8946cb1ead1cd5afb7ecece2a4cd9e0565e45e3254e90f1fee64567f75c731765ab96d46877afb361852da58c62953efd07eea85b7d228414781efadd30eac8c067c2227d9421a688fe5bd96320711584f72974d64d0e5d9d845bca6cae1b3948219c4000eea83f226c7a9c1dbb14eda50794940a407035318c8e3e9fdc145f78896f30a47e45f89136ef7946d231834e62687b35bd4f7d0319bfae187cfd1d6a50282aa2bf10ea9a8de07112b668dbbdd3280d2e25df28eaa5bb34b57080ce4ac0d24b13e598bfce815d2047dc8729cda19575181283cda1116226da7fbe25ea351c2611724d57817ffcca5266ce976da86aedf07384fd8329542dc56d83fc062aa2e51a28edb3c7f43fb3190b6731adabfa292ef7876a8e7586845f194da22b417ef02b5cc41a1338db37adbe7709ede723c73813736f3c140570df74863b094a9baedbf176ee03572709d1b9b2a4d61f83c5dcad456b9a9eeea4950d0eb3008995f63defa03f4dd99bc0997fc629237f79226faea8c3d44135fc44965c023e992741334d7d346392f2ac09bab12c4f40dd89e87885d727866ce80272f414f828202cb9de2a1b0e42c7ecda14081b396facb5d8f2afc7958c0f38097c1ec0021c332aa208f7da58576397975cb7d5586f85446f4ea7c46ff051790b969b97f06572bf3d395d30779c556025005404496e64dc32a912a1f988b9e9a646aa7aaeaf4a7f1fee5151e0a06c5ffbed19e842d320e524d456c2fd8eef4ad2ae78d2dd3241c9195669fe314aaff7c8d96e10025f023475a92de577bfd13b1eed1d882b902bafdda06ff239070f1954dc70f87157e8ae4b7d6dc302b91abe0c863c9a3943d16d97aa0840e9696d19f16eed6411456cbb45cde19e269241921d0c962cd5b954e1991f61094802e7c25ed9d459092c4282bf55d191ac818ccfddf382729312625b1d0a1f0ed5835fcf097487780c229cf77ac83cc89f6a0d349bf64e503dd6afaca48031d23310282df31e6ac4c897b03d6b133e2867e7950374acbb2f5ec89f29c2b54639fb5e6a984c3c19e9f958e0a77d8db66049374a6ddd221dbe547298079c4293ad2ed9facb9f0e22684ed7bd78a5fe173cf69cd421d07bbc63a9151e33cbbc9425445bae36265ad8467372a75adb9d230b0f94718a7786ff58461f8513a7c201af64738a24a1ed848b31957d1b22619ef31b8e34d487d8d97622143d03d7383135b7416d34c974b8ea45336cff651f1496b670edcc333e1019a6903697180ae7f5d601caef5194168313f8818df50d8e9d1e4e73c736e515dda3a4db1d743643d4e8d48b5e888f97599116d83f086375b9acc427f4dc17278702a118d9e61a0889a23a2aa6b3611f71cfb6f81f5a4c440614690c6cc45020a85defd8e38ae847a1ba59949fbd25d80b703b5288a2488c6ebf67476c0a405112121a859a86a8a8c4a310242481e53e562e002870f94c0a29393e120348becf248481025f819cd870935a346c7d885114d22e598e817381041595d5b9ccc1f1c8abe632e59338cd9ba764f5978acb8b49c6aafcb8bdba64fa381d5d306a4c67323a7b149c0a74b27e9388ee2fc2a0c01b4942fa61d72efb2fc3a68c40e24246951c87fc8655cf1d46e16568b6a6a14f1278a9c5ac4146ef5eb4a83de9dc6f1d41143ea85f2d6500c8a52d67c7a4a7dd87358c52279be2f9468e039297e4c429d19c628470e910a35f2319de1862ca7c39cd6f5d5ea6c7b92f1ce4cd47b34a8ef42b2498923ebb568d08fb2b6b4698aa2ad4a07298395c7af4234728719240976c1dd3966f92c15662f11f3650e192b95d34ae110062c270482fb044bf1bcf357b2cdeadccf12b1e3d39626c0621b28397bb35bf6d73c0c54057295da81839b7afdd71571b43c7ac7c637f2e21f6e6abeb218c8daf72499916d2f1d2d2baa88ae0bb5fb298fb506793d332e9fd3e8db4b50af7f4ba9a22b0a91a68a9beab7e0369316876c51e6c533f8a72ddb39aba88ba08c4e1d82379da2dda53f0df3ca5fa9532febc6d6f42f554d23fccdfd660fa4ed6925acbc0cb581c56d902ef9f7d1d009b728f2a60cc17b188fc385c0b9caf6f040962e98ffda759cf10e6115773e323c9040675698ebc8f31e7d31fdcc9cea2edacb18d9fcc5974db7cc262505b764eceb0bde6ce7d3163c8aea5b0012a992982f6129fd2077a022719141368081abcff4d88f81b6b4c13835957f8213b41053225fd0718353132a745cf3057425be18694184956ba628099ebc81bcef04428eb2ffaf964d0356ce3abec396248f8be05a72614581b0d3d27f61654b7f8feb8e1e4cfabe40579a1d2e63632bb0eb139370c577556739243034fd42746fc93d6988af6f738a07169d55f2ca9758c8334a03aa97411f1158192cfea7baac8eec0402eb77927d33c2e712f6f372c3d9335c9eb2e653f734aeba44409c48f6099674295d467585bfbdb58143c1b9f5232cbf60190b7b8ad4388bf38c68cb3a6865ccc8fb048bb59ed71376ed0af8ffa0ae3e095", 0x1000}}, 0x1006)

2.081082603s ago: executing program 1 (id=2908):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x40, 0x1c, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x8, 0x84, 0x3, 0x0, 0xd, 0x10, 0x8, 0xa9, 0xd, 0x6, '\x00', 0x4, 0xfffb})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x8, 0x5, 0x5, 0x0, 0x402a4558, 0x6, 0x7, 0x11, 0x7f, 0x9, 0x1, 0x2, 0x0, 0x6, 0x6, 0x1, 0x6, 0xf, 0x0, '\x00', 0x1, 0x100000000})

1.953238494s ago: executing program 1 (id=2909):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

1.952950335s ago: executing program 1 (id=2910):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)

1.952826555s ago: executing program 1 (id=2911):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000180), 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000003000))
sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0)

1.948041075s ago: executing program 1 (id=2912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
unshare(0x22020600)
flistxattr(r1, 0x0, 0x0)

1.932569174s ago: executing program 2 (id=2913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0)

1.889325615s ago: executing program 1 (id=2914):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xfffd, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7, 0x4}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x11, 0x0, 0x4100, 0x9, 0x2, 0x0, 0x7df, 0x80003ff, 0x8, 0x2, 0x4, 0x8000}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.632948677s ago: executing program 2 (id=2917):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000fff9de2ae896d6d4fa800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e0001006970366772657461700000002c000280140006002001000000000000000000000000000214000700fc00000000000000000000000000000108000a00"], 0x68}}, 0x0)

1.632284127s ago: executing program 3 (id=2918):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180))

1.631910977s ago: executing program 3 (id=2919):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000003c0)=""/62}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.631543617s ago: executing program 3 (id=2920):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0xffffff6a)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r0, r3, 0xfffffffffffffc01, 0x0)
tee(r0, r3, 0x60000000000, 0x0)
vmsplice(r2, &(0x7f0000002600)=[{&(0x7f00000002c0)='*', 0x1}], 0x1, 0x8)

1.629960217s ago: executing program 2 (id=2921):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000f80)=ANY=[@ANYBLOB="000504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000400)={0x40, 0xc, 0x4, 'Rg~p'}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000c40)={0x40, 0x1, 0x53, "fd048002779eaefd3841ce796416de9b53665156924bcff77a5286d0e7dab5c04d44ebb587d796a0e902db203695b4d266a99095a64f4b600d5a0600e23028c1f7cb30331b510591c1069981808757d13d5a04"}, 0x0, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0})

873.305163ms ago: executing program 7 (id=2923):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)

809.282183ms ago: executing program 7 (id=2924):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

794.514113ms ago: executing program 3 (id=2925):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)

735.238504ms ago: executing program 0 (id=2926):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

609.246775ms ago: executing program 7 (id=2927):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

609.064985ms ago: executing program 0 (id=2928):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000008737cc3c5cfb0c7216589f012d5d"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

608.901645ms ago: executing program 7 (id=2929):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

608.773825ms ago: executing program 3 (id=2930):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x1)
close_range(r1, r1, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})

557.153105ms ago: executing program 7 (id=2931):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r1, 0x407, 0x2000000)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)

556.925255ms ago: executing program 3 (id=2932):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x48)

520.856906ms ago: executing program 0 (id=2933):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000180)='%-5lx  \x00'}, 0x1e)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
getcwd(&(0x7f0000000040)=""/19, 0x13)

504.139446ms ago: executing program 0 (id=2934):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/52, 0x34, 0x8, 0x16e, 0xfffffffe, 0x1, 0x8000}}, 0x120)

391.602356ms ago: executing program 7 (id=2935):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))

0s ago: executing program 0 (id=2936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

kernel console output (not intermixed with test programs):

_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  101.920953][   T28] audit: type=1400 audit(1741911937.820:7490): avc:  denied  { listen } for  pid=4233 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  101.946774][ T4236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1645'.
[  101.955275][   T28] audit: type=1400 audit(1741911937.820:7491): avc:  denied  { connect } for  pid=4233 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  101.956071][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.003730][ T4216] device veth1_macvtap entered promiscuous mode
[  102.013840][ T1151] usb 10-1: USB disconnect, device number 3
[  102.018465][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1647'.
[  102.033350][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  102.050254][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.080912][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  102.089674][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  102.120351][   T28] audit: type=1400 audit(1741911938.060:7492): avc:  denied  { mounton } for  pid=4216 comm="syz-executor" path="/root/syzkaller.1ISvcS/syz-tmp" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  102.135712][ T4249] loop7: detected capacity change from 0 to 16
[  102.146247][   T28] audit: type=1400 audit(1741911938.060:7493): avc:  denied  { mount } for  pid=4216 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  102.173948][   T28] audit: type=1400 audit(1741911938.070:7494): avc:  denied  { mounton } for  pid=4216 comm="syz-executor" path="/root/syzkaller.1ISvcS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  102.205645][ T4249] erofs: (device loop7): mounted with root inode @ nid 36.
[  102.217473][   T28] audit: type=1400 audit(1741911938.070:7495): avc:  denied  { mounton } for  pid=4216 comm="syz-executor" path="/root/syzkaller.1ISvcS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  102.250129][   T46] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  102.267992][   T28] audit: type=1400 audit(1741911938.120:7496): avc:  denied  { mounton } for  pid=4216 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  102.296758][   T28] audit: type=1400 audit(1741911938.120:7497): avc:  denied  { mounton } for  pid=4216 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  102.955061][ T2322] Bluetooth: hci0: Frame reassembly failed (-84)
[  103.025526][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'.
[  103.034765][ T4335] device bridge_slave_1 left promiscuous mode
[  103.041148][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.048968][ T4335] device bridge_slave_0 left promiscuous mode
[  103.055702][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.696118][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1697'.
[  103.900600][ T1151] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  103.980581][  T315] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  104.082683][ T1151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.093643][ T1151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.103284][ T1151] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.116313][ T1151] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.125290][ T1151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.137214][ T1151] usb 1-1: config 0 descriptor??
[  104.161741][  T315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.173091][  T315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.183414][  T315] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.196673][  T315] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.205945][  T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.218181][  T315] usb 8-1: config 0 descriptor??
[  104.492660][ T4394] 9pnet: p9_errstr2errno: server reported unknown error �
[  104.546729][ T1151] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  104.556146][ T1151] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  104.626810][  T315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd
[  104.636026][  T315] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  104.645748][  T315] plantronics 0003:047F:FFFF.0016: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  104.654272][ T4405] loop1: detected capacity change from 0 to 2048
[  104.689294][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  104.712438][ T4216] EXT4-fs (loop1): unmounting filesystem.
[  104.744548][ T4416] netlink: 'syz.1.1720': attribute type 27 has an invalid length.
[  104.772538][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.779609][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.811868][ T1151] usb 1-1: USB disconnect, device number 15
[  104.831823][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.832072][   T24] usb 8-1: USB disconnect, device number 5
[  104.875226][ T4419] device veth0_vlan left promiscuous mode
[  104.889016][ T4419] device veth0_vlan entered promiscuous mode
[  104.901903][ T4419] device veth1_macvtap left promiscuous mode
[  104.908527][ T4419] device veth1_macvtap entered promiscuous mode
[  104.917175][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.925990][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.935547][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.950638][ T2322] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.957560][ T2322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.965600][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.974342][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.982982][ T2322] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.989838][ T2322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.997522][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.006168][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  105.016560][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.030383][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  105.030728][  T895] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  105.038610][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  105.052121][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.060179][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.068541][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.079968][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.095054][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.103982][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.112253][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.122005][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.130414][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.138926][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.147043][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.155182][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.163227][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.171182][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.179407][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.187666][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.195635][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.203703][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.211036][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.218341][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.226477][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.234525][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.242073][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.661728][ T4462] device pim6reg1 entered promiscuous mode
[  105.802043][ T4473] futex_wake_op: syz.7.1745 tries to shift op by -1; fix this program
[  105.983322][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'.
[  106.005078][ T4483] device bridge_slave_1 left promiscuous mode
[  106.017732][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.034838][ T4483] device bridge_slave_0 left promiscuous mode
[  106.044985][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.204661][ T4479] loop7: detected capacity change from 0 to 40427
[  106.230178][ T4479] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  106.238983][ T4479] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  106.266876][ T4479] F2FS-fs (loop7): Found nat_bits in checkpoint
[  106.317641][ T4479] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  106.317667][ T4479] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  106.394418][ T4479] syz.7.1748: attempt to access beyond end of device
[  106.394418][ T4479] loop7: rw=2049, sector=77824, nr_sectors = 2096 limit=40427
[  106.421752][ T4479] syz.7.1748: attempt to access beyond end of device
[  106.421752][ T4479] loop7: rw=2049, sector=79920, nr_sectors = 2000 limit=40427
[  106.429009][ T4479] syz.7.1748: attempt to access beyond end of device
[  106.429009][ T4479] loop7: rw=2049, sector=49152, nr_sectors = 2064 limit=40427
[  106.443521][ T4479] syz.7.1748: attempt to access beyond end of device
[  106.443521][ T4479] loop7: rw=2049, sector=51216, nr_sectors = 2032 limit=40427
[  106.502819][ T4479] syz.7.1748: attempt to access beyond end of device
[  106.502819][ T4479] loop7: rw=2049, sector=57344, nr_sectors = 1832 limit=40427
[  106.701435][ T1241] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  106.840434][ T4531] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1767'.
[  106.890550][ T1241] usb 3-1: Using ep0 maxpacket: 8
[  106.891848][ T1241] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  106.905854][ T1241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.906582][ T1241] usb 3-1: config 0 descriptor??
[  107.108595][ T1241] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  107.129034][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  107.129068][   T28] audit: type=1326 audit(1741911943.070:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.0.1773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59b918d169 code=0x0
[  107.181852][   T28] audit: type=1400 audit(1741911943.130:7529): avc:  denied  { set_context_mgr } for  pid=4544 comm="syz.0.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  107.469580][ T4555] loop9: detected capacity change from 0 to 512
[  107.489548][ T4555] /dev/loop9: Can't open blockdev
[  107.553909][ T4557] netlink: 'syz.9.1777': attribute type 27 has an invalid length.
[  107.589648][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.596950][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.687544][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  107.717268][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.724244][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.738267][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.745355][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.772209][ T4558] device veth0_vlan left promiscuous mode
[  107.778466][ T4558] device veth0_vlan entered promiscuous mode
[  107.792090][ T4558] device veth1_macvtap left promiscuous mode
[  107.818890][ T4558] device veth1_macvtap entered promiscuous mode
[  107.827075][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.841272][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.857764][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.882193][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.900752][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.910756][ T1241] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  107.922611][ T1241] asix: probe of 3-1:0.0 failed with error -71
[  107.929250][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.941108][ T1241] usb 3-1: USB disconnect, device number 17
[  107.948372][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.957563][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.965873][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  107.974528][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  107.983176][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.993514][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  108.001963][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.005074][ T4568] serio: Serial port ptm0
[  108.010207][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  108.022053][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.030013][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.038234][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.052139][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.060385][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.199921][   T28] audit: type=1326 audit(1741911944.140:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.9.1786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20ac38d169 code=0x0
[  108.303842][   T28] audit: type=1400 audit(1741911944.250:7531): avc:  denied  { sys_module } for  pid=4583 comm="syz.1.1787" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  108.824370][ T4615] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1799'.
[  108.958569][ T4629] loop0: detected capacity change from 0 to 2048
[  108.997159][ T4629] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002]
[  109.020662][ T4629] System zones: 0-4
[  109.025162][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  109.037799][   T28] audit: type=1400 audit(1741911944.980:7532): avc:  denied  { listen } for  pid=4644 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  109.043824][ T4629] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.082897][ T4647] loop9: detected capacity change from 0 to 256
[  109.089337][ T4647] exfat: Bad value for 'uid'
[  109.109415][   T28] audit: type=1400 audit(1741911945.010:7533): avc:  denied  { accept } for  pid=4644 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  109.131538][ T1244] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.149175][  T297] EXT4-fs (loop0): unmounting filesystem.
[  109.164217][   T28] audit: type=1400 audit(1741911945.040:7534): avc:  denied  { watch } for  pid=4628 comm="syz.0.1806" path="/376/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  109.195150][   T28] audit: type=1400 audit(1741911945.050:7535): avc:  denied  { ioctl } for  pid=4628 comm="syz.0.1806" path="/376/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.229484][   T28] audit: type=1400 audit(1741911945.050:7536): avc:  denied  { write } for  pid=4628 comm="syz.0.1806" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.274151][   T28] audit: type=1400 audit(1741911945.220:7537): avc:  denied  { setopt } for  pid=4655 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  109.420604][    T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  109.541155][ T4674] SELinux: ebitmap: map size 2 does not match my size 64 (high bit was 1216)
[  109.561093][ T4674] SELinux: failed to load policy
[  109.601018][    T6] usb 10-1: Using ep0 maxpacket: 16
[  109.607807][    T6] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.619496][    T6] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.630401][    T6] usb 10-1: config 0 interface 0 has no altsetting 0
[  109.637374][    T6] usb 10-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00
[  109.646868][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.659512][    T6] usb 10-1: config 0 descriptor??
[  109.860601][  T314] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  110.061920][  T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.079260][    T6] hid (null): global environment stack underflow
[  110.094466][  T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.107232][    T6] hid-generic 0003:060B:430A.0017: unexpected long global item
[  110.116918][  T314] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  110.130139][    T6] hid-generic: probe of 0003:060B:430A.0017 failed with error -22
[  110.147447][  T314] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.156642][  T314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.165796][  T314] usb 8-1: config 0 descriptor??
[  110.317011][    T6] usb 10-1: USB disconnect, device number 4
[  110.499907][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1840'.
[  110.575703][  T314] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  110.591790][  T314] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  110.605253][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'.
[  110.892131][    C1] plantronics 0003:047F:FFFF.0018: hid_field_extract() called with n (132) > 32! (syz.2.1842)
[  111.106933][ T1241] usb 8-1: USB disconnect, device number 6
[  111.143740][ T4743] loop1: detected capacity change from 0 to 1024
[  111.151089][ T4743] EXT4-fs: Ignoring removed bh option
[  111.161396][ T4743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  111.171444][ T4743] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 2: comm syz.1.1849: lblock 2 mapped to illegal pblock 2 (length 1)
[  111.185958][ T4743] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.1849: lblock 0 mapped to illegal pblock 48 (length 1)
[  111.200842][ T4743] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.1849: Failed to acquire dquot type 0
[  111.220863][ T4743] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem
[  111.251286][ T4743] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.1849: mark_inode_dirty error
[  111.279052][ T4743] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  111.311820][ T4743] EXT4-fs (loop1): 1 orphan inode deleted
[  111.317623][ T4743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  111.340715][   T10] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  111.369235][   T10] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:1: Failed to release dquot type 0
[  111.382102][ T4743] EXT4-fs (loop1): unmounting filesystem.
[  111.387832][ T4743] EXT4-fs error (device loop1): __ext4_get_inode_loc:4508: comm syz.1.1849: Invalid inode table block 1 in block_group 0
[  111.401821][ T4755] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1854'.
[  111.419246][ T4743] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem
[  111.439214][ T4743] EXT4-fs error (device loop1): ext4_quota_off:7071: inode #3: comm syz.1.1849: mark_inode_dirty error
[  111.539307][ T4766] overlayfs: failed to resolve './file0': -2
[  111.665719][ T4783] device bridge_slave_0 entered promiscuous mode
[  111.715681][ T4792] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1874'.
[  112.544990][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  112.545007][   T28] audit: type=1400 audit(1741911948.490:7550): avc:  denied  { getopt } for  pid=4835 comm="syz.1.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  112.941831][ T4866] IPv6: NLM_F_REPLACE set, but no existing node found!
[  113.014343][   T28] audit: type=1400 audit(1741911948.960:7551): avc:  denied  { bind } for  pid=4873 comm="syz.2.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  113.035036][   T28] audit: type=1400 audit(1741911948.980:7552): avc:  denied  { setopt } for  pid=4873 comm="syz.2.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  113.061932][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  113.212057][ T4888] netlink: 'syz.9.1917': attribute type 4 has an invalid length.
[  113.226818][ T4888] netlink: 'syz.9.1917': attribute type 4 has an invalid length.
[  113.280858][    T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  113.420604][ T1241] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  113.460612][    T6] usb 2-1: Using ep0 maxpacket: 32
[  113.466751][    T6] usb 2-1: config 0 has an invalid interface number: 136 but max is 0
[  113.474980][    T6] usb 2-1: config 0 has no interface number 0
[  113.482557][    T6] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[  113.491553][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.499316][    T6] usb 2-1: Product: syz
[  113.503338][    T6] usb 2-1: Manufacturer: syz
[  113.507749][    T6] usb 2-1: SerialNumber: syz
[  113.513296][    T6] usb 2-1: config 0 descriptor??
[  113.519076][    T6] usb_ehset_test: probe of 2-1:0.136 failed with error -32
[  113.580687][  T314] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  113.603418][ T1241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.612585][ T1241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.620397][ T1241] usb 1-1: Product: syz
[  113.624632][ T1241] usb 1-1: Manufacturer: syz
[  113.629075][ T1241] usb 1-1: SerialNumber: syz
[  113.721097][  T312] usb 2-1: USB disconnect, device number 4
[  113.761782][  T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.772696][  T314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.782396][  T314] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  113.791296][  T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.800099][  T314] usb 10-1: config 0 descriptor??
[  114.208816][  T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  114.216147][  T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  114.223472][  T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  114.231081][  T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  114.238479][  T314] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  114.246665][  T314] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  114.408610][  T314] playstation 0003:054C:0DF2.0019: Invalid byte count transferred, expected 20 got 0
[  114.417967][  T314] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense pairing info: -22
[  114.426986][  T314] playstation 0003:054C:0DF2.0019: Failed to get MAC address from DualSense
[  114.435736][  T314] playstation 0003:054C:0DF2.0019: Failed to create dualsense.
[  114.444181][  T314] playstation: probe of 0003:054C:0DF2.0019 failed with error -22
[  114.610282][  T314] usb 10-1: USB disconnect, device number 5
[  114.641429][ T1241] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  114.849508][ T1241] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  114.862048][ T1241] usb 1-1: USB disconnect, device number 16
[  114.868101][ T1241] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  115.110669][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  115.116661][  T895] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  115.123077][   T28] audit: type=1400 audit(1741911951.060:7553): avc:  denied  { read } for  pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  115.168846][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'.
[  115.207585][ T4905] loop1: detected capacity change from 0 to 2048
[  115.540589][   T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  115.741696][   T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.770556][   T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  115.802120][   T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.821774][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.829598][   T24] usb 8-1: Product: syz
[  115.853894][   T24] usb 8-1: Manufacturer: syz
[  115.858342][   T24] usb 8-1: SerialNumber: syz
[  115.875842][ T4943] binder: 4942:4943 ioctl c0306201 4000000003c0 returned -14
[  115.888699][ T4911] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  116.107202][ T4954] netlink: 'syz.2.1944': attribute type 12 has an invalid length.
[  116.286911][   T28] audit: type=1400 audit(1741911952.230:7554): avc:  denied  { read } for  pid=4965 comm="syz.2.1949" name="/" dev="configfs" ino=14629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  116.309474][   T28] audit: type=1400 audit(1741911952.240:7555): avc:  denied  { open } for  pid=4965 comm="syz.2.1949" path="/" dev="configfs" ino=14629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  116.336929][   T28] audit: type=1400 audit(1741911952.280:7556): avc:  denied  { write } for  pid=4967 comm="syz.9.1950" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  116.423551][   T28] audit: type=1400 audit(1741911952.370:7557): avc:  denied  { read } for  pid=4976 comm="syz.1.1955" path="socket:[38567]" dev="sockfs" ino=38567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.559719][ T4995] syz.9.1962[4995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.559815][ T4995] syz.9.1962[4995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.589531][ T4998] device batadv_slave_1 entered promiscuous mode
[  116.611979][ T4998] device batadv_slave_1 left promiscuous mode
[  116.680033][   T28] audit: type=1400 audit(1741911952.620:7558): avc:  denied  { module_load } for  pid=5003 comm="syz.9.1965" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  116.680093][ T5004] Invalid ELF header magic: != ELF
[  116.836272][ T5019] binder: 5018:5019 ioctl 400c620e 400000000580 returned -22
[  116.883486][ T5024] device vlan2 entered promiscuous mode
[  116.888976][ T5024] device erspan0 entered promiscuous mode
[  116.891559][ T5027] loop9: detected capacity change from 0 to 512
[  116.901256][ T5027] EXT4-fs: Ignoring removed orlov option
[  116.907068][ T5027] ext4: Unknown parameter 'obj_type'
[  116.912593][ T5024] device erspan0 left promiscuous mode
[  116.919616][   T24] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[  116.926136][   T24] cdc_ncm 8-1:1.0: setting rx_max = 16384
[  116.969496][   T28] audit: type=1400 audit(1741911952.910:7559): avc:  denied  { read } for  pid=5031 comm="syz.0.1978" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  117.016835][ T5030] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  117.034781][ T5030] FAT-fs (loop1): unable to read boot sector
[  117.120155][   T24] cdc_ncm 8-1:1.0: setting tx_max = 16384
[  117.142828][   T24] cdc_ncm 8-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  117.164516][   T24] usb 8-1: USB disconnect, device number 7
[  117.195592][   T24] cdc_ncm 8-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP)
[  117.207079][ T5056] loop1: detected capacity change from 0 to 256
[  117.237439][ T5056] exfat: Deprecated parameter 'namecase'
[  117.261073][ T5056] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  117.687554][ T5113] netlink: 'syz.1.2002': attribute type 13 has an invalid length.
[  117.701919][ T5113] gretap0: refused to change device tx_queue_len
[  117.722125][ T5113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  117.739208][ T5117] loop7: detected capacity change from 0 to 256
[  117.746308][ T5117] FAT-fs (loop7): Unrecognized mount option "�����������" or missing value
[  117.806380][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'.
[  117.823475][ T5124] x_tables: duplicate underflow at hook 4
[  118.210600][ T1241] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  118.231306][  T308] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  118.239055][  T314] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  118.271157][ T5157] loop9: detected capacity change from 0 to 8192
[  118.323067][ T1244] I/O error, dev loop9, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.391770][ T1241] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.402338][ T1241] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.415049][ T1241] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.424009][ T1241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.431908][ T1241] usb 3-1: Product: syz
[  118.435896][ T1241] usb 3-1: Manufacturer: syz
[  118.440321][ T1241] usb 3-1: SerialNumber: syz
[  118.440644][  T308] usb 8-1: Using ep0 maxpacket: 16
[  118.451762][  T308] usb 8-1: config 0 has no interfaces?
[  118.459618][  T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.480580][  T314] usb 1-1: config 0 has no interfaces?
[  118.485973][  T314] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  118.495068][  T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.503817][  T308] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  118.512744][  T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.521514][  T314] usb 1-1: config 0 descriptor??
[  118.526399][  T308] usb 8-1: Product: syz
[  118.530583][  T308] usb 8-1: Manufacturer: syz
[  118.540293][  T308] usb 8-1: SerialNumber: syz
[  118.549224][  T308] r8152-cfgselector 8-1: config 0 descriptor??
[  118.660269][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.668107][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.675987][ T5168] device bridge_slave_0 entered promiscuous mode
[  118.685503][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.692640][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.700101][ T5168] device bridge_slave_1 entered promiscuous mode
[  118.710989][  T314] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  118.738241][ T1151] usb 1-1: USB disconnect, device number 17
[  118.786717][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.793622][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.800724][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.807570][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.835199][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.843378][  T321] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.851138][  T321] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.863770][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.872048][  T321] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.878897][  T321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.887952][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.896632][  T321] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.903536][  T321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.912737][  T314] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.924784][  T314] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.934498][  T314] usb 2-1: config 0 interface 0 has no altsetting 0
[  118.941040][  T314] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  118.949953][  T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.959377][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.967911][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.972532][  T314] usb 2-1: config 0 descriptor??
[  118.981219][ T1151] usb 8-1: USB disconnect, device number 8
[  118.997422][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.012582][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.020924][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.032252][ T5168] device veth0_vlan entered promiscuous mode
[  119.039489][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.047383][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.062275][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.070789][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.080453][ T5168] device veth1_macvtap entered promiscuous mode
[  119.087675][ T2322] device bridge_slave_1 left promiscuous mode
[  119.093733][ T2322] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.101706][ T2322] device bridge_slave_0 left promiscuous mode
[  119.107787][ T2322] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.116138][ T2322] device veth1_macvtap left promiscuous mode
[  119.122219][ T2322] device veth0_vlan left promiscuous mode
[  119.247102][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  119.254936][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  119.263244][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  119.284421][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  119.298826][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.384245][  T314] saitek 0003:06A3:0621.001A: unbalanced delimiter at end of report description
[  119.396901][  T314] saitek 0003:06A3:0621.001A: parse failed
[  119.419136][  T314] saitek: probe of 0003:06A3:0621.001A failed with error -22
[  119.481004][ T1241] cdc_ncm 3-1:1.0: bind() failure
[  119.500462][ T1241] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  119.511323][ T1241] cdc_ncm 3-1:1.1: bind() failure
[  119.517533][ T5189] input: syz1 as /devices/virtual/input/input22
[  119.538066][ T1244] udevd[1244]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  119.586023][  T312] usb 2-1: USB disconnect, device number 5
[  119.636820][ T5193] xt_hashlimit: size too large, truncated to 1048576
[  119.684117][   T24] usb 3-1: USB disconnect, device number 18
[  119.937485][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  119.937500][   T28] audit: type=1400 audit(1741911955.880:7578): avc:  denied  { append } for  pid=5206 comm="syz.7.2042" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  120.248572][ T5221] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2048'.
[  120.354844][ T5236] syz.0.2056[5236] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.354930][ T5236] syz.0.2056[5236] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.377342][   T28] audit: type=1400 audit(1741911956.320:7579): avc:  denied  { connect } for  pid=5234 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  120.794386][  T308] kernel write not supported for file bpf-prog (pid: 308 comm: kworker/0:2)
[  120.810378][ T5290] loop1: detected capacity change from 0 to 1024
[  120.859903][ T5290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  120.871550][ T5290] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.904446][ T5290] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  120.951773][ T4216] EXT4-fs (loop1): unmounting filesystem.
[  121.059784][ T5313] loop1: detected capacity change from 0 to 512
[  121.068039][ T5313] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  121.119969][ T5315] loop1: detected capacity change from 0 to 256
[  121.120049][ T5317] loop9: detected capacity change from 0 to 8
[  121.150217][ T5315] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cd20, utbl_chksum : 0xe619d30d)
[  121.162935][ T5315] exFAT-fs (loop1): failed to load alloc-bitmap
[  121.169293][ T5315] exFAT-fs (loop1): failed to recognize exfat type
[  121.474402][ T5339] loop7: detected capacity change from 0 to 512
[  121.489295][ T5339] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  121.741887][ T5349] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  121.770614][ T5349] FAT-fs (loop7): unable to read boot sector
[  121.873055][   T28] audit: type=1400 audit(1741911957.820:7580): avc:  denied  { append } for  pid=5359 comm="syz.7.2108" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  122.169617][   T28] audit: type=1400 audit(1741911958.110:7581): avc:  denied  { watch } for  pid=5378 comm="syz.0.2117" path="/418/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  122.291317][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2124'.
[  122.375698][ T5416] device ip6tnl2 entered promiscuous mode
[  122.480955][   T28] audit: type=1400 audit(1741911958.430:7582): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  122.506633][   T28] audit: type=1400 audit(1741911958.450:7583): avc:  denied  { ioctl } for  pid=5429 comm="syz.7.2139" path="socket:[41630]" dev="sockfs" ino=41630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  122.555431][   T28] audit: type=1400 audit(1741911958.500:7584): avc:  denied  { create } for  pid=5432 comm="syz.0.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  122.610610][ T1241] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  122.650612][    T6] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  122.712164][   T28] audit: type=1400 audit(1741911958.660:7585): avc:  denied  { getopt } for  pid=5448 comm="syz.0.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  122.782824][   T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0)
[  122.794414][   T28] audit: type=1400 audit(1741911958.740:7586): avc:  denied  { watch } for  pid=5460 comm="syz.7.2153" path="/289/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  122.796286][ T1241] usb 3-1: Using ep0 maxpacket: 16
[  122.828566][ T1241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.841788][ T1241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.856605][    T6] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  122.856770][ T1241] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  122.866288][    T6] usb 4-1: config 0 has no interface number 0
[  122.874178][ T1241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.894996][    T6] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  122.905170][    T6] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  122.908541][ T1241] usb 3-1: config 0 descriptor??
[  122.914527][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.927920][    T6] usb 4-1: config 0 descriptor??
[  122.963424][ T5470] device ip6gretap1 entered promiscuous mode
[  122.994977][   T28] audit: type=1400 audit(1741911958.940:7587): avc:  denied  { read } for  pid=5471 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.338068][ T5516] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  123.346530][ T5516] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  123.349394][ T1241] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.001B/input/input23
[  123.446146][ T5523] loop7: detected capacity change from 0 to 256
[  123.454013][ T1241] appleir 0003:05AC:8241.001B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  123.473505][ T5523] exfat: Deprecated parameter 'namecase'
[  123.526986][ T5523] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  124.049524][ T5556] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.160198][ T5564] device batadv_slave_1 entered promiscuous mode
[  124.570783][    T6] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  124.751687][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.762498][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.772241][    T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  124.784955][    T6] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  124.793785][    T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.802476][    T6] usb 8-1: config 0 descriptor??
[  125.016807][ T5589] bridge0: port 3(vlan2) entered blocking state
[  125.027864][ T5589] bridge0: port 3(vlan2) entered disabled state
[  125.101241][ T5599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2213'.
[  125.165367][ T5603] loop1: detected capacity change from 0 to 512
[  125.175583][ T5603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.190743][ T5603] EXT4-fs (loop1): 1 truncate cleaned up
[  125.196277][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  125.212116][    T6] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[  125.221168][    T6] plantronics 0003:047F:FFFF.001C: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  125.390583][ T1241] usb 3-1: reset high-speed USB device number 19 using dummy_hcd
[  125.398764][ T1241] usb 3-1: device reset changed ep0 maxpacket size!
[  125.405550][   T24] usb 3-1: USB disconnect, device number 19
[  125.417067][ T1241] usb 8-1: USB disconnect, device number 9
[  125.438479][  T312] usb 4-1: USB disconnect, device number 7
[  125.458435][ T5610] syz.3.2218[5610] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.458529][ T5610] syz.3.2218[5610] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.590597][   T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  125.781754][   T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  125.790697][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.799114][   T24] usb 3-1: config 0 descriptor??
[  125.991803][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  125.991821][   T28] audit: type=1400 audit(1741911961.940:7606): avc:  denied  { write } for  pid=5645 comm="syz.7.2234" name="bus" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  126.032572][   T28] audit: type=1400 audit(1741911961.940:7607): avc:  denied  { open } for  pid=5645 comm="syz.7.2234" path="/312/bus" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  126.038119][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2235'.
[  126.070253][   T28] audit: type=1400 audit(1741911961.940:7608): avc:  denied  { read } for  pid=5645 comm="syz.7.2234" name="bus" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  126.132768][ T5655] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  126.142495][   T28] audit: type=1400 audit(1741911962.090:7609): avc:  denied  { relabelto } for  pid=5654 comm="syz.7.2238" name="313" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  126.169459][   T28] audit: type=1400 audit(1741911962.090:7610): avc:  denied  { associate } for  pid=5654 comm="syz.7.2238" name="313" dev="tmpfs" ino=1648 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  126.217602][   T28] audit: type=1400 audit(1741911962.150:7611): avc:  denied  { write } for  pid=2160 comm="syz-executor" name="313" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  126.247832][   T24] hid-generic 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  126.281874][   T28] audit: type=1400 audit(1741911962.150:7612): avc:  denied  { remove_name } for  pid=2160 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  126.350608][   T28] audit: type=1400 audit(1741911962.150:7613): avc:  denied  { rmdir } for  pid=2160 comm="syz-executor" name="313" dev="tmpfs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  126.381027][ T4216] EXT4-fs (loop1): unmounting filesystem.
[  126.428742][ T5670] netlink: 'syz.1.2242': attribute type 4 has an invalid length.
[  126.443455][ T5670] netlink: 'syz.1.2242': attribute type 4 has an invalid length.
[  126.446754][ T1151] usb 3-1: USB disconnect, device number 20
[  126.498383][  T321] Bluetooth: hci0: Frame reassembly failed (-84)
[  126.539198][   T28] audit: type=1400 audit(1741911962.480:7614): avc:  denied  { write } for  pid=5679 comm="syz.1.2248" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  126.563576][ T5680] random: crng reseeded on system resumption
[  126.626153][   T28] audit: type=1400 audit(1741911962.570:7615): avc:  denied  { ioctl } for  pid=5679 comm="syz.1.2248" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  126.987494][ T5712] device ip6tnl1 entered promiscuous mode
[  126.993261][   T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  127.191701][   T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.202030][   T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7
[  127.220660][   T24] usb 8-1: New USB device found, idVendor=89b7, idProduct=4050, bcdDevice= 0.11
[  127.232366][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  127.241018][   T24] usb 8-1: SerialNumber: syz
[  127.245834][ T1151] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  127.431714][ T1151] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.442798][ T1151] usb 4-1: config 0 interface 0 has no altsetting 0
[  127.449563][ T1151] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  127.461106][ T1151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.466692][   T24] usb 8-1: 0:2 : does not exist
[  127.475827][ T1151] usb 4-1: config 0 descriptor??
[  127.501317][   T24] usb 8-1: USB disconnect, device number 10
[  127.521178][ T5729] syz.2.2269[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.521290][ T5729] syz.2.2269[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.535487][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'.
[  127.592572][ T5731] serio: Serial port ptm1
[  127.721096][ T1244] udevd[1244]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  127.884941][ T1151] hid-rmi 0003:17EF:6085.001E: item fetching failed at offset 0/3
[  127.898197][ T1151] hid-rmi 0003:17EF:6085.001E: parse failed
[  127.905047][ T1151] hid-rmi: probe of 0003:17EF:6085.001E failed with error -22
[  128.018431][ T5739] loop1: detected capacity change from 0 to 40427
[  128.030789][ T5739] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  128.038626][ T5739] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  128.076330][ T5739] F2FS-fs (loop1): Found nat_bits in checkpoint
[  128.096711][ T1151] usb 4-1: USB disconnect, device number 8
[  128.113418][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'.
[  128.143901][ T5765] incfs: iterate_incfs_dir / -22
[  128.149851][ T5765] incfs: iterate_incfs_dir / -22
[  128.162038][ T5739] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  128.168912][ T5739] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  128.284678][ T5739] syz.1.2273: attempt to access beyond end of device
[  128.284678][ T5739] loop1: rw=2049, sector=77824, nr_sectors = 2112 limit=40427
[  128.305055][ T5739] syz.1.2273: attempt to access beyond end of device
[  128.305055][ T5739] loop1: rw=2049, sector=79936, nr_sectors = 1984 limit=40427
[  128.348210][ T5739] syz.1.2273: attempt to access beyond end of device
[  128.348210][ T5739] loop1: rw=2049, sector=49152, nr_sectors = 2056 limit=40427
[  128.386999][ T5739] syz.1.2273: attempt to access beyond end of device
[  128.386999][ T5739] loop1: rw=2049, sector=51208, nr_sectors = 2040 limit=40427
[  128.447087][ T5776] syz.1.2273: attempt to access beyond end of device
[  128.447087][ T5776] loop1: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[  128.455442][ T5739] syz.1.2273: attempt to access beyond end of device
[  128.455442][ T5739] loop1: rw=2049, sector=57344, nr_sectors = 3824 limit=40427
[  128.461322][ T5776] syz.1.2273: attempt to access beyond end of device
[  128.461322][ T5776] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  128.484317][ T5739] syz.1.2273: attempt to access beyond end of device
[  128.484317][ T5739] loop1: rw=2049, sector=61168, nr_sectors = 1976 limit=40427
[  128.522929][ T5776] syz.1.2273: attempt to access beyond end of device
[  128.522929][ T5776] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  128.543998][ T5776] syz.1.2273: attempt to access beyond end of device
[  128.543998][ T5776] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  128.550609][  T390] Bluetooth: hci0: command 0x1003 tx timeout
[  128.563274][  T895] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  128.780599][ T1151] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  128.940671][  T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  128.961697][ T1151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.972508][ T1151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.982118][ T1151] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  128.991115][ T1151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.999810][ T1151] usb 3-1: config 0 descriptor??
[  129.109359][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'.
[  129.121920][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.133179][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.143158][  T312] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  129.152306][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.161452][  T312] usb 4-1: config 0 descriptor??
[  129.201707][ T5808] bridge0: port 3(vlan2) entered blocking state
[  129.207957][ T5808] bridge0: port 3(vlan2) entered disabled state
[  129.407565][ T1151] hid-led 0003:0FC5:B080.001F: item fetching failed at offset 0/3
[  129.415792][ T1151] hid-led: probe of 0003:0FC5:B080.001F failed with error -22
[  129.450584][  T308] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  129.570378][  T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  129.577681][  T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  129.584869][  T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  129.592233][  T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  129.599465][  T312] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  129.607377][  T312] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  129.619050][ T1151] usb 3-1: USB disconnect, device number 21
[  129.630624][  T308] usb 1-1: Using ep0 maxpacket: 16
[  129.636833][  T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.647891][  T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.657387][  T308] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  129.666233][  T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.674994][  T308] usb 1-1: config 0 descriptor??
[  129.771076][  T312] playstation 0003:054C:0DF2.0020: Invalid reportID received, expected 9 got 0
[  129.779933][  T312] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22
[  129.788968][  T312] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense
[  129.797444][  T312] playstation 0003:054C:0DF2.0020: Failed to create dualsense.
[  129.805614][  T312] playstation: probe of 0003:054C:0DF2.0020 failed with error -22
[  129.972684][ T1151] usb 4-1: USB disconnect, device number 9
[  130.083386][  T308] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0021/input/input24
[  130.133575][ T5811] loop7: detected capacity change from 0 to 256
[  130.140329][ T5814] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2313'.
[  130.163283][  T308] appleir 0003:05AC:8241.0021: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[  130.168322][ T5811] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  130.422922][ T5839] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  130.440718][ T5839] SELinux: failed to load policy
[  130.548033][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2322'.
[  130.645509][ T5860] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  130.763277][ T5871] loop7: detected capacity change from 0 to 512
[  130.779284][ T5871] EXT4-fs: Ignoring removed orlov option
[  130.793643][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2334'.
[  130.811366][ T5871] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  130.820646][ T5871] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.110605][ T1151] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  131.290695][ T1151] usb 8-1: Using ep0 maxpacket: 8
[  131.296834][ T1151] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[  131.304904][ T1151] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.314977][ T1151] usb 8-1: config 0 has no interface number 0
[  131.324602][ T1151] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  131.333568][ T1151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.341323][ T1151] usb 8-1: Product: syz
[  131.345298][ T1151] usb 8-1: Manufacturer: syz
[  131.349695][ T1151] usb 8-1: SerialNumber: syz
[  131.355108][ T1151] usb 8-1: config 0 descriptor??
[  131.360965][ T1151] usb 8-1: Found Unit with invalid ID 0.
[  131.563758][ T1151] usb 8-1: USB disconnect, device number 11
[  131.711139][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'.
[  131.780680][ T5907] futex_wake_op: syz.0.2342 tries to shift op by -1; fix this program
[  131.832739][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  131.832760][   T28] audit: type=1400 audit(1741911967.780:7626): avc:  denied  { validate_trans } for  pid=5910 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  131.946379][   T28] audit: type=1400 audit(1741911967.890:7627): avc:  denied  { mounton } for  pid=5931 comm="syz.1.2359" path="/170/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  131.946542][ T1241] kernel write not supported for file bpf-prog (pid: 1241 comm: kworker/1:4)
[  132.011567][   T24] usb 1-1: USB disconnect, device number 18
[  132.054091][ T5944] 9pnet: p9_errstr2errno: server reported unknown error �@00000000000000000005
[  132.076867][ T2160] EXT4-fs (loop7): unmounting filesystem.
[  132.134303][ T5959] loop7: detected capacity change from 0 to 2048
[  132.178833][ T5959] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002]
[  132.188314][ T5959] System zones: 0-4
[  132.194287][ T5959] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  132.202795][ T5959] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.229100][ T2160] EXT4-fs (loop7): unmounting filesystem.
[  132.253959][ T5970] block device autoloading is deprecated and will be removed.
[  132.267507][ T5970] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  132.530658][    T6] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  132.711834][    T6] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  132.720720][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.729058][    T6] usb 1-1: config 0 descriptor??
[  133.939673][    T6] usb 1-1: Cannot set autoneg
[  133.944298][    T6] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[  133.952991][    T6] usb 1-1: USB disconnect, device number 19
[  134.486674][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'.
[  134.673151][   T28] audit: type=1400 audit(1741911970.620:7628): avc:  denied  { ioctl } for  pid=6035 comm="syz.0.2405" path="socket:[44400]" dev="sockfs" ino=44400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  134.711489][   T28] audit: type=1400 audit(1741911970.620:7629): avc:  denied  { mount } for  pid=6033 comm="syz.1.2406" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  134.736083][ T6041] loop1: detected capacity change from 0 to 256
[  134.751404][   T28] audit: type=1400 audit(1741911970.640:7630): avc:  denied  { setopt } for  pid=6035 comm="syz.0.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  134.773461][   T28] audit: type=1400 audit(1741911970.640:7631): avc:  denied  { unmount } for  pid=4216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  134.806374][ T6041] FAT-fs (loop1): Directory bread(block 64) failed
[  134.817293][ T6041] FAT-fs (loop1): Directory bread(block 65) failed
[  134.830311][ T6041] FAT-fs (loop1): Directory bread(block 66) failed
[  134.843520][ T6041] FAT-fs (loop1): Directory bread(block 67) failed
[  134.850866][   T28] audit: type=1400 audit(1741911970.660:7632): avc:  denied  { connect } for  pid=6038 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.860721][ T6041] FAT-fs (loop1): Directory bread(block 68) failed
[  134.889591][ T6041] FAT-fs (loop1): Directory bread(block 69) failed
[  134.896355][ T6041] FAT-fs (loop1): Directory bread(block 70) failed
[  134.911274][ T6041] FAT-fs (loop1): Directory bread(block 71) failed
[  134.923921][ T6041] FAT-fs (loop1): Directory bread(block 72) failed
[  134.938585][ T6041] FAT-fs (loop1): Directory bread(block 73) failed
[  134.948808][ T6063] device batadv_slave_1 entered promiscuous mode
[  134.955843][ T6062] device batadv_slave_1 left promiscuous mode
[  134.964037][   T28] audit: type=1400 audit(1741911970.910:7633): avc:  denied  { mount } for  pid=6040 comm="syz.1.2408" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  135.029339][   T28] audit: type=1400 audit(1741911970.970:7634): avc:  denied  { unmount } for  pid=4216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  135.369931][ T6099] futex_wake_op: syz.1.2432 tries to shift op by 32; fix this program
[  135.406316][ T6103] input: syz0 as /devices/virtual/input/input25
[  135.412996][ T6105] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  135.445562][   T28] audit: type=1400 audit(1741911971.390:7635): avc:  denied  { read write } for  pid=6108 comm="syz.3.2438" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  135.478529][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.486627][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.500603][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.508200][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.518095][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.526246][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.534334][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.542275][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.551291][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.558847][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.566459][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.574011][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.581537][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.589079][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.599372][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.606989][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.614596][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.623114][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.630716][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.638224][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.645812][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.653362][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.660911][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.668426][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.676074][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.684042][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.691556][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.699072][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.706670][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.714195][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.721777][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.729282][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.736879][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.753224][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.761048][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.768695][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.776260][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.784214][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.800100][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.801738][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1
[  135.807836][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.815615][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.823174][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.830116][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.839153][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.844968][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.852518][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.859566][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.867332][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.874450][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.889040][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.896949][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4
[  135.901815][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.904300][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.911823][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.928540][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.933613][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.945073][ T6123] netlink: 272 bytes leftover after parsing attributes in process `syz.7.2443'.
[  135.946945][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4
[  135.954074][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.961673][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.969113][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  135.976729][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.991545][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  135.998777][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.006056][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  136.006084][   T24] hid-generic 0008:016E:FFFFFFFE.0022: unknown main item tag 0x0
[  136.021740][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.021871][   T24] hid-generic 0008:016E:FFFFFFFE.0022: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  136.028949][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4
[  136.028974][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.054017][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.063174][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.070557][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.077856][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.085095][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.092533][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.099992][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.107414][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.114942][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.122182][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.129357][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.136609][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.143788][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.150990][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.158167][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.165512][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.172767][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.179930][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.187158][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.194351][  T314] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  136.202088][  T314] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  136.214082][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'.
[  136.281317][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2448'.
[  136.339548][ T6140] loop7: detected capacity change from 0 to 4096
[  136.351499][ T6140] EXT4-fs (loop7): Test dummy encryption mode enabled
[  136.391176][ T6140] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  136.432224][ T2160] EXT4-fs (loop7): unmounting filesystem.
[  136.442737][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'.
[  136.452042][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'.
[  136.713442][ T1151] hid-generic 0000:0003:0001.0024: unknown main item tag 0x0
[  136.720952][ T1151] hid-generic 0000:0003:0001.0024: unknown main item tag 0x0
[  136.728753][ T1151] hid-generic 0000:0003:0001.0024: hidraw0: <UNKNOWN> HID v0.ff Device [syz0] on syz1
[  136.755512][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'.
[  136.937203][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  136.937222][   T28] audit: type=1326 audit(1741911972.880:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  136.973993][   T28] audit: type=1326 audit(1741911972.890:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  136.997627][   T28] audit: type=1326 audit(1741911972.890:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.022272][   T28] audit: type=1326 audit(1741911972.890:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.054512][   T28] audit: type=1326 audit(1741911972.890:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.080261][   T28] audit: type=1326 audit(1741911972.890:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.080757][ T1151] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  137.107890][   T28] audit: type=1326 audit(1741911972.890:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.158211][   T28] audit: type=1326 audit(1741911972.890:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.182819][   T28] audit: type=1326 audit(1741911972.920:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.227666][ T6201] loop0: detected capacity change from 0 to 512
[  137.236253][   T28] audit: type=1326 audit(1741911972.950:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  137.286842][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  137.313461][ T6201] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.320550][ T1151] usb 8-1: Using ep0 maxpacket: 16
[  137.332176][ T1151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.350545][ T1151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.360847][ T1151] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  137.369722][ T1151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.378485][ T1151] usb 8-1: config 0 descriptor??
[  137.482539][  T297] EXT4-fs (loop0): unmounting filesystem.
[  137.577058][ T6222] loop1: detected capacity change from 0 to 256
[  137.792666][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0
[  137.812443][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0
[  137.820323][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0
[  137.838364][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0
[  137.851201][ T1151] hid-multitouch 0003:1FD2:6007.0025: unknown main item tag 0x0
[  137.861748][ T1151] hid-multitouch 0003:1FD2:6007.0025: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.7-1/input0
[  137.930647][   T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  137.938168][   T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  138.014276][ T6250] sock: sock_set_timeout: `syz.1.2497' (pid 6250) tries to set negative timeout
[  138.023520][ T1151] usb 8-1: USB disconnect, device number 12
[  138.120569][   T39] usb 4-1: Using ep0 maxpacket: 16
[  138.126672][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.140580][   T39] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  138.159685][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.168475][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.177296][   T39] usb 4-1: Product: syz
[  138.181418][   T39] usb 4-1: Manufacturer: syz
[  138.185891][   T39] usb 4-1: SerialNumber: syz
[  138.191389][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  138.200260][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.212014][   T39] usb 4-1: config 0 descriptor??
[  138.216890][   T24] usb 1-1: Product: syz
[  138.221053][   T24] usb 1-1: Manufacturer: syz
[  138.226376][   T39] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  138.234458][   T24] usb 1-1: SerialNumber: syz
[  138.239838][   T39] usb 4-1: Detected FT232H
[  138.350547][  T312] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  138.426252][   T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  138.453130][   T24] usb 1-1: 0:2 : does not exist
[  138.462822][   T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  138.482338][   T24] usb 1-1: USB disconnect, device number 20
[  138.540630][  T312] usb 2-1: Using ep0 maxpacket: 32
[  138.546808][  T312] usb 2-1: New USB device found, idVendor=13b1, idProduct=0026, bcdDevice=16.0c
[  138.558741][  T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.576079][ T6267] __vm_enough_memory: pid: 6267, comm: syz.2.2515, no enough memory for the allocation
[  138.580682][  T312] usb 2-1: config 0 descriptor??
[  138.595105][  T312] usb 2-1: bad CDC descriptors
[  138.641781][   T39] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32
[  138.652210][   T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  138.671064][   T39] usb 4-1: USB disconnect, device number 10
[  138.684521][   T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  138.694286][  T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  138.695881][   T39] ftdi_sio 4-1:0.0: device disconnected
[  138.797053][    T6] usb 2-1: USB disconnect, device number 6
[  139.000569][   T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  139.163388][ T6284] loop7: detected capacity change from 0 to 40427
[  139.170227][ T6284] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  139.178141][ T6284] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  139.188181][ T6284] F2FS-fs (loop7): invalid crc value
[  139.191770][   T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  139.204001][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'.
[  139.204858][ T6284] F2FS-fs (loop7): Found nat_bits in checkpoint
[  139.213285][   T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  139.235769][   T24] usb 3-1: config 220 has no interface number 2
[  139.249012][   T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  139.262701][   T24] usb 3-1: config 220 interface 0 has no altsetting 0
[  139.270546][   T24] usb 3-1: config 220 interface 76 has no altsetting 0
[  139.279054][   T24] usb 3-1: config 220 interface 1 has no altsetting 0
[  139.288670][   T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  139.295701][ T6284] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  139.298408][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.304736][ T6284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  139.329091][   T24] usb 3-1: Product: syz
[  139.334477][   T24] usb 3-1: Manufacturer: syz
[  139.339085][   T24] usb 3-1: SerialNumber: syz
[  139.378614][ T6283] bio_check_eod: 4798 callbacks suppressed
[  139.378635][ T6283] syz.7.2521: attempt to access beyond end of device
[  139.378635][ T6283] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  139.398430][ T6284] syz.7.2521: attempt to access beyond end of device
[  139.398430][ T6284] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.428129][ T2322] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  139.437680][ T2322] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  139.463991][ T2322] kworker/u4:7: attempt to access beyond end of device
[  139.463991][ T2322] loop7: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  139.567292][   T24] usb 3-1: selecting invalid altsetting 0
[  139.579562][   T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  139.593681][   T24] usb 3-1: No valid video chain found.
[  139.617943][   T24] usb 3-1: USB disconnect, device number 22
[  139.721095][ T6324] futex_wake_op: syz.7.2526 tries to shift op by 32; fix this program
[  139.970346][ T6349] loop1: detected capacity change from 0 to 2048
[  140.002891][ T6349] Alternate GPT is invalid, using primary GPT.
[  140.009011][ T6349]  loop1: p1 p2 p3
[  140.067058][  T391] udevd[391]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  140.067103][ T1169] udevd[1169]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  140.093278][ T1244] udevd[1244]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  140.210935][    T6] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  140.393353][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.414510][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.436528][    T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.459203][    T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.468280][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.476757][    T6] usb 1-1: config 0 descriptor??
[  140.660718][ T6401] loop7: detected capacity change from 0 to 1024
[  140.692470][ T6401] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  140.739027][ T6401] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.2560: Allocating blocks 497-513 which overlap fs metadata
[  140.791317][ T6401] EXT4-fs (loop7): pa ffff8881161f9e70: logic 256, phys. 385, len 8
[  140.799179][ T6401] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  140.826066][ T6415] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  140.870200][ T2160] EXT4-fs (loop7): unmounting filesystem.
[  140.884754][    T6] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd
[  140.903878][    T6] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving
[  140.934860][    T6] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  140.971001][ T6407] loop1: detected capacity change from 0 to 40427
[  140.974792][ T6427] loop7: detected capacity change from 0 to 2048
[  141.008145][ T6407] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  141.021302][ T6407] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  141.041713][ T6407] F2FS-fs (loop1): Found nat_bits in checkpoint
[  141.051833][ T6427] GPT:first_usable_lbas don't match.
[  141.056957][ T6427] GPT:34 != 290
[  141.062855][ T6427] GPT: Use GNU Parted to correct GPT errors.
[  141.068872][ T6427]  loop7: p1 p2 p3
[  141.128913][  T391] udevd[391]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  141.129927][ T1244] udevd[1244]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  141.151545][   T24] usb 1-1: USB disconnect, device number 21
[  141.158180][ T1169] udevd[1169]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  141.204092][ T6407] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  141.221086][ T6407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.248555][ T6407] syz.1.2561: attempt to access beyond end of device
[  141.248555][ T6407] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.300918][ T4216] syz-executor: attempt to access beyond end of device
[  141.300918][ T4216] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  141.342907][ T6452] SELinux: failed to load policy
[  141.580432][ T6475] xt_hashlimit: max too large, truncated to 1048576
[  141.583514][   T39] hid-generic 0000:0004:0000.0027: unknown main item tag 0x0
[  141.594857][   T39] hid-generic 0000:0004:0000.0027: unknown main item tag 0x0
[  141.601262][ T6475] xt_bpf: check failed: parse error
[  141.603183][   T39] hid-generic 0000:0004:0000.0027: unknown main item tag 0x0
[  141.615649][   T39] hid-generic 0000:0004:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  141.649434][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'.
[  141.760660][  T314] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  141.931833][ T6504] loop1: detected capacity change from 0 to 1024
[  141.951645][  T314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.970649][ T6508] loop0: detected capacity change from 0 to 256
[  141.976823][  T314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  141.991030][ T6504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  142.043314][  T314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.055412][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2605'.
[  142.070538][ T1151] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  142.078074][  T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.092701][  T314] usb 3-1: Product: syz
[  142.096715][  T314] usb 3-1: Manufacturer: syz
[  142.112960][ T4216] EXT4-fs (loop1): unmounting filesystem.
[  142.127824][  T314] usb 3-1: SerialNumber: syz
[  142.143602][ T6466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  142.172159][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  142.172176][   T28] audit: type=1326 audit(1741911978.120:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15118d169 code=0x0
[  142.260541][ T1151] usb 8-1: Using ep0 maxpacket: 16
[  142.268238][ T1151] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  142.286773][ T1151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.294956][ T1151] usb 8-1: Product: syz
[  142.298974][ T1151] usb 8-1: Manufacturer: syz
[  142.303599][ T1151] usb 8-1: SerialNumber: syz
[  142.308907][ T1151] r8152-cfgselector 8-1: config 0 descriptor??
[  142.717487][ T1151] r8152-cfgselector 8-1: Unknown version 0x0000
[  142.723893][ T1151] r8152-cfgselector 8-1: bad CDC descriptors
[  142.730451][ T1151] r8152-cfgselector 8-1: Unknown version 0x0000
[  142.742138][ T1151] r8152-cfgselector 8-1: USB disconnect, device number 13
[  143.184274][  T314] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  143.190574][  T314] cdc_ncm 3-1:1.0: setting rx_max = 16384
[  143.326913][ T6539] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  143.387996][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6547 comm=syz.1.2616
[  143.400651][  T314] cdc_ncm 3-1:1.0: setting tx_max = 16384
[  143.409204][  T314] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  143.427083][   T28] audit: type=1400 audit(1741911979.370:7689): avc:  denied  { bind } for  pid=6548 comm="syz.1.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  143.453773][  T314] usb 3-1: USB disconnect, device number 23
[  143.466270][  T314] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  143.483575][ T6552] serio: Serial port ptm0
[  143.685742][ T6585] loop0: detected capacity change from 0 to 256
[  143.708533][ T6585] FAT-fs (loop0): bogus number of FAT sectors
[  143.731011][ T6585] FAT-fs (loop0): Can't find a valid FAT filesystem
[  143.804559][ T6588] SELinux: failed to load policy
[  144.035565][ T6632] ------------[ cut here ]------------
[  144.040921][ T6632] WARNING: CPU: 0 PID: 6632 at arch/x86/kvm/x86.c:11209 kvm_arch_vcpu_ioctl_run+0x2094/0x2270
[  144.051148][ T6632] Modules linked in:
[  144.054946][ T6632] CPU: 0 PID: 6632 Comm: syz.1.2645 Tainted: G        W          6.1.128-syzkaller-00009-g70d032fba5f4 #0
[  144.066075][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.076019][ T6632] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2094/0x2270
[  144.082323][ T6632] Code: a4 e9 ff ff e8 ad b4 ac 00 e9 9a e9 ff ff 89 f9 80 e1 07 38 c1 0f 8c b0 e9 ff ff e8 96 b4 ac 00 e9 a6 e9 ff ff e8 ac 15 65 00 <0f> 0b e9 6b f9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f8 ff
[  144.101850][ T6632] RSP: 0018:ffffc90001b77bc0 EFLAGS: 00010287
[  144.107714][ T6632] RAX: ffffffff81107f34 RBX: 0000000000000000 RCX: 0000000000080000
[  144.115567][ T6632] RDX: ffffc9000d34e000 RSI: 0000000000000040 RDI: 0000000000000041
[  144.123464][ T6632] RBP: ffffc90001b77cd0 R08: ffffffff8117a776 R09: ffffed1021842511
[  144.131339][ T6632] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888129e5e000
[  144.139118][ T6632] R13: ffff8881353bc980 R14: dffffc0000000000 R15: ffff8881353bca08
[  144.147003][ T6632] FS:  00007fb4609246c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  144.155937][ T6632] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.162437][ T6632] CR2: 000000110c2b796c CR3: 0000000148872000 CR4: 00000000003526b0
[  144.170214][ T6632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000ebb466c8
[  144.178060][ T6632] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  144.185877][ T6632] Call Trace:
[  144.188951][ T6632]  <TASK>
[  144.191760][ T6632]  ? show_regs+0x58/0x60
[  144.195812][ T6632]  ? __warn+0x160/0x3d0
[  144.199815][ T6632]  ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270
[  144.205515][ T6632]  ? report_bug+0x4d5/0x7d0
[  144.209789][ T6632]  ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270
[  144.215471][ T6632]  ? handle_bug+0x41/0x70
[  144.219603][ T6632]  ? exc_invalid_op+0x1b/0x50
[  144.224351][ T6632]  ? asm_exc_invalid_op+0x1b/0x20
[  144.229403][ T6632]  ? kvm_lapic_hv_timer_in_use+0x66/0xc0
[  144.234968][ T6632]  ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270
[  144.240551][ T6632]  ? kvm_arch_vcpu_ioctl_run+0x2094/0x2270
[  144.246285][ T6632]  ? memcpy+0x56/0x70
[  144.250101][ T6632]  ? mutex_lock_killable+0xb1/0x1e0
[  144.255189][ T6632]  ? __kvm_request_immediate_exit+0x70/0x70
[  144.260884][ T6632]  kvm_vcpu_ioctl+0x7eb/0xcf0
[  144.265377][ T6632]  ? xa_release+0x40/0x40
[  144.269538][ T6632]  ? selinux_file_ioctl+0x3cc/0x540
[  144.274613][ T6632]  ? __ia32_sys_get_robust_list+0x90/0x90
[  144.280136][ T6632]  ? selinux_file_alloc_security+0x120/0x120
[  144.285989][ T6632]  ? __fget_files+0x2cb/0x330
[  144.290462][ T6632]  ? security_file_ioctl+0x84/0xb0
[  144.295409][ T6632]  ? xa_release+0x40/0x40
[  144.299674][ T6632]  __se_sys_ioctl+0x114/0x190
[  144.304220][ T6632]  __x64_sys_ioctl+0x7b/0x90
[  144.308607][ T6632]  x64_sys_call+0x98/0x9a0
[  144.313135][ T6632]  do_syscall_64+0x3b/0xb0
[  144.317401][ T6632]  ? clear_bhb_loop+0x55/0xb0
[  144.322298][ T6632]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.328223][ T6632] RIP: 0033:0x7fb45fb8d169
[  144.332526][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.352045][ T6632] RSP: 002b:00007fb460924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.360271][ T6632] RAX: ffffffffffffffda RBX: 00007fb45fda5fa0 RCX: 00007fb45fb8d169
[  144.368121][ T6632] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  144.375972][ T6632] RBP: 00007fb45fc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  144.383746][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.391622][ T6632] R13: 0000000000000000 R14: 00007fb45fda5fa0 R15: 00007ffc42fe6538
[  144.399748][ T6632]  </TASK>
[  144.402654][ T6632] ---[ end trace 0000000000000000 ]---
[  144.433453][   T28] audit: type=1400 audit(1741911980.380:7690): avc:  denied  { audit_write } for  pid=6639 comm="syz.0.2658" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  144.472103][   T28] audit: type=1107 audit(1741911980.400:7691): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  144.586327][ T6655] tmpfs: Unknown parameter 'nolazytime��'
[  144.612060][ T6657] SELinux:  Context system_u:object_r:null_device_t:s0 is not valid (left unmapped).
[  144.622069][   T28] audit: type=1400 audit(1741911980.570:7692): avc:  denied  { relabelto } for  pid=6656 comm="syz.2.2655" name="file0" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:null_device_t:s0"
[  144.650560][   T28] audit: type=1400 audit(1741911980.590:7693): avc:  denied  { associate } for  pid=6656 comm="syz.2.2655" name="file0" dev="tmpfs" ino=2908 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:null_device_t:s0"
[  144.681194][ T6659] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  144.690562][   T28] audit: type=1400 audit(1741911980.600:7694): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:null_device_t:s0"
[  144.790586][ T1151] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  144.911174][ T6664] netlink: 'syz.2.2659': attribute type 12 has an invalid length.
[  144.941627][ T6668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2660'.
[  145.001643][ T1151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  145.022196][ T1151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  145.048392][ T1151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.053990][ T6676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2662'.
[  145.068207][ T1151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.086183][ T1151] usb 1-1: Product: syz
[  145.094617][ T1151] usb 1-1: Manufacturer: syz
[  145.101133][ T1151] usb 1-1: SerialNumber: syz
[  145.111196][ T6651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  145.384186][ T6724] futex_wake_op: syz.2.2684 tries to shift op by 32; fix this program
[  145.463160][ T6731] loop1: detected capacity change from 0 to 512
[  145.498417][ T6731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  145.511796][ T6731] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.555790][ T6746] SELinux: ebitmap: map size 2592 does not match my size 64 (high bit was 0)
[  145.566215][ T6746] SELinux: failed to load policy
[  145.605256][   T28] audit: type=1400 audit(1741911981.550:7695): avc:  denied  { ioctl } for  pid=6749 comm="syz.2.2692" path="socket:[47541]" dev="sockfs" ino=47541 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  145.640039][ T4216] EXT4-fs (loop1): unmounting filesystem.
[  146.124252][ T1151] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  146.130714][ T1151] cdc_ncm 1-1:1.0: setting rx_max = 16384
[  146.210332][ T6782] loop7: detected capacity change from 0 to 512
[  146.222988][ T6782] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  146.232754][ T6782] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.324653][ T1151] cdc_ncm 1-1:1.0: setting tx_max = 16384
[  146.332302][ T1151] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  146.350799][ T2160] EXT4-fs (loop7): unmounting filesystem.
[  146.351830][ T1151] usb 1-1: USB disconnect, device number 22
[  146.360085][ T1244] udevd[1244]: failed to send result of seq 12436 to main daemon: Connection refused
[  146.362720][ T1151] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  146.397178][ T6792] device dummy0 entered promiscuous mode
[  146.404324][ T6792] device dummy0 left promiscuous mode
[  146.470655][  T308] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  146.650192][ T6820] device erspan0 entered promiscuous mode
[  146.660458][ T6820] device erspan0 left promiscuous mode
[  146.661925][  T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.677469][  T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.687923][  T308] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  146.697305][  T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.706524][  T308] usb 3-1: config 0 descriptor??
[  146.745381][ T6824] loop1: detected capacity change from 0 to 512
[  146.752940][ T6824] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  146.761413][ T6824] EXT4-fs (loop1): orphan cleanup on readonly fs
[  146.768275][ T6824] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present
[  146.778507][   T28] audit: type=1326 audit(1741911982.710:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15118d169 code=0x7ffc0000
[  146.802203][ T6824] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.2726: Failed to acquire dquot type 1
[  146.813873][ T6824] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2726: bg 0: block 40: padding at end of block bitmap is not set
[  146.828279][ T6824] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  146.837436][ T6824] EXT4-fs (loop1): 1 truncate cleaned up
[  146.849117][ T6824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  146.867336][ T4216] EXT4-fs (loop1): unmounting filesystem.
[  146.986891][ T6845] loop0: detected capacity change from 0 to 512
[  147.005087][ T6845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  147.014884][ T6845] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.080562][ T6852] device pim6reg1 entered promiscuous mode
[  147.111124][  T297] EXT4-fs (loop0): unmounting filesystem.
[  147.165298][ T6863] overlayfs: failed to resolve './file0': -2
[  147.215393][ T6870] input: syz0 as /devices/virtual/input/input28
[  147.287341][ T6868] loop1: detected capacity change from 0 to 512
[  147.300872][ T6868] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.2741: corrupted xattr block 255
[  147.312786][ T6868] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  147.321127][ T6868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  147.321133][  T308] usb 3-1: string descriptor 0 read error: -22
[  147.321167][ T6868] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.2741: corrupted xattr block 255
[  147.348022][ T6868] SELinux: (dev loop1, type ext4) getxattr errno 117
[  147.355301][ T6868] EXT4-fs (loop1): unmounting filesystem.
[  147.446298][ T6872] loop0: detected capacity change from 0 to 40427
[  147.452702][   T39] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  147.461146][ T6872] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9)
[  147.469140][ T6872] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  147.478810][ T6872] F2FS-fs (loop0): invalid crc value
[  147.489625][ T6872] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  147.538687][ T6872] F2FS-fs (loop0): Start checkpoint disabled!
[  147.546732][ T6872] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  147.555115][ T6872] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  147.651677][   T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  147.670544][   T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  147.700579][   T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.709653][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.722290][  T308] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71
[  147.727867][   T39] usb 4-1: Product: syz
[  147.738632][  T308] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71
[  147.738637][   T39] usb 4-1: Manufacturer: syz
[  147.738656][   T39] usb 4-1: SerialNumber: syz
[  147.750534][  T308] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71
[  147.764764][ T6866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  147.777868][  T308] uclogic 0003:256C:006D.0028: failed probing parameters: -71
[  147.790244][  T308] uclogic: probe of 0003:256C:006D.0028 failed with error -71
[  147.808910][  T308] usb 3-1: USB disconnect, device number 24
[  147.888885][  T321] kworker/u4:4: attempt to access beyond end of device
[  147.888885][  T321] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.929865][ T6904] tmpfs: Unknown parameter 'nolazytime��'
[  147.984395][ T6908] syz.1.2759[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.984481][ T6908] syz.1.2759[6908] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.041077][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  148.041096][   T28] audit: type=1400 audit(1741911983.990:7700): avc:  denied  { watch } for  pid=6914 comm="syz.0.2761" path="/514/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  148.118859][ T6919] futex_wake_op: syz.0.2765 tries to shift op by -1; fix this program
[  148.487087][ T6958] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  148.488184][ T6900] loop7: detected capacity change from 0 to 131072
[  148.506305][ T6900] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0)
[  148.526354][ T6900] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  148.535668][ T6900] F2FS-fs (loop7): invalid crc value
[  148.571450][ T6900] F2FS-fs (loop7): Found nat_bits in checkpoint
[  148.627349][ T6900] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  148.634451][ T6900] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  148.649785][   T28] audit: type=1400 audit(1741911984.590:7701): avc:  denied  { execute } for  pid=6899 comm="syz.7.2755" path="/389/file0/bus" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  148.809462][   T39] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  148.817435][   T39] cdc_ncm 4-1:1.0: setting rx_max = 16384
[  149.010651][   T39] cdc_ncm 4-1:1.0: setting tx_max = 16384
[  149.026598][   T39] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  149.038842][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'.
[  149.047754][ T6987] device bridge_slave_1 left promiscuous mode
[  149.049663][   T39] usb 4-1: USB disconnect, device number 11
[  149.054080][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.062617][   T39] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  149.075722][ T6987] device bridge_slave_0 left promiscuous mode
[  149.088200][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.090611][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  149.300584][  T314] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  149.317493][   T24] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  149.325489][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.335613][   T24] usb 1-1: config 0 has no interface number 0
[  149.343205][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  149.353876][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.355650][   T28] audit: type=1400 audit(1741911985.300:7702): avc:  denied  { getopt } for  pid=7017 comm="syz.2.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  149.362237][   T24] usb 1-1: Product: syz
[  149.387647][   T24] usb 1-1: Manufacturer: syz
[  149.402312][   T24] usb 1-1: SerialNumber: syz
[  149.412904][   T24] usb 1-1: config 0 descriptor??
[  149.480694][  T314] usb 8-1: Using ep0 maxpacket: 8
[  149.486848][  T314] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  149.495010][  T314] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  149.503262][  T314] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  149.512272][  T314] usb 8-1: config 250 has no interface number 0
[  149.518302][  T314] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  149.529903][  T314] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  149.540375][  T314] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  149.550874][  T314] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  149.561228][  T314] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  149.574905][  T314] usb 8-1: config 250 interface 228 has no altsetting 0
[  149.583229][  T314] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  149.592929][  T314] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  149.601224][  T314] usb 8-1: Product: syz
[  149.605482][  T314] usb 8-1: SerialNumber: syz
[  149.609947][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'.
[  149.619310][  T314] hub 8-1:250.228: bad descriptor, ignoring hub
[  149.620194][ T7034] device bridge_slave_1 left promiscuous mode
[  149.628544][  T314] hub: probe of 8-1:250.228 failed with error -5
[  149.631746][   T24] usb 1-1: Found UVC 0.00 device syz (046d:0823)
[  149.644160][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.651298][   T24] usb 1-1: No valid video chain found.
[  149.658421][ T7034] device bridge_slave_0 left promiscuous mode
[  149.664823][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.798031][   T28] audit: type=1400 audit(1741911985.740:7703): avc:  denied  { write } for  pid=7041 comm="syz.1.2816" path="socket:[49385]" dev="sockfs" ino=49385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  149.823399][  T314] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  149.845511][   T39] usb 1-1: USB disconnect, device number 23
[  150.140650][  T315] usb 8-1: USB disconnect, device number 14
[  150.147101][  T315] usblp0: removed
[  150.160710][    T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  150.350556][    T6] usb 2-1: Using ep0 maxpacket: 16
[  150.359563][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.371820][ T7051] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2819'.
[  150.380778][    T6] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  150.389705][ T7051] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  150.405187][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.413749][    T6] usb 2-1: config 0 descriptor??
[  150.490608][  T315] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  150.650587][   T39] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  150.670534][  T315] usb 8-1: Using ep0 maxpacket: 8
[  150.676493][  T315] usb 8-1: config 0 has no interfaces?
[  150.681910][  T315] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  150.690800][  T315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.699185][  T315] usb 8-1: config 0 descriptor??
[  150.820534][    T6] usbhid 2-1:0.0: can't add hid device: -71
[  150.826350][    T6] usbhid: probe of 2-1:0.0 failed with error -71
[  150.833393][   T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.833614][    T6] usb 2-1: USB disconnect, device number 7
[  150.842499][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.856015][   T39] usb 1-1: Product: syz
[  150.859988][   T39] usb 1-1: Manufacturer: syz
[  150.864447][   T39] usb 1-1: SerialNumber: syz
[  150.906768][  T315] usb 8-1: USB disconnect, device number 15
[  151.610622][  T315] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  151.771155][   T28] audit: type=1400 audit(1741911987.720:7704): avc:  denied  { write } for  pid=7106 comm="syz.2.2858" path="socket:[48625]" dev="sockfs" ino=48625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  151.801866][  T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  151.812944][  T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  151.826007][  T315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.835354][  T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.843470][  T315] usb 2-1: Product: syz
[  151.847656][  T315] usb 2-1: Manufacturer: syz
[  151.852401][  T315] usb 2-1: SerialNumber: syz
[  151.858075][ T7062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  151.873591][   T39] cdc_ncm 1-1:1.0: failed to get mac address
[  151.980613][    T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  152.079956][   T39] cdc_ncm 1-1:1.0: bind() failure
[  152.086470][   T39] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  152.093474][   T39] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  152.101641][   T39] usb 1-1: USB disconnect, device number 24
[  152.129379][ T7127] loop7: detected capacity change from 0 to 2048
[  152.136565][ T7127] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  152.170562][    T6] usb 4-1: Using ep0 maxpacket: 8
[  152.175582][ T7129] device wireguard0 entered promiscuous mode
[  152.176744][    T6] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  152.191183][    T6] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  152.199496][    T6] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  152.208687][    T6] usb 4-1: config 250 has no interface number 0
[  152.215043][    T6] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  152.226717][    T6] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  152.237530][    T6] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  152.247790][    T6] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  152.257834][    T6] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  152.271582][    T6] usb 4-1: config 250 interface 228 has no altsetting 0
[  152.279466][    T6] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  152.288476][    T6] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  152.296670][    T6] usb 4-1: Product: syz
[  152.300684][    T6] usb 4-1: SerialNumber: syz
[  152.306687][    T6] hub 4-1:250.228: bad descriptor, ignoring hub
[  152.312856][    T6] hub: probe of 4-1:250.228 failed with error -5
[  152.323062][ T7132] syz.7.2857[7132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.323177][ T7132] syz.7.2857[7132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.449672][ T7139] loop7: detected capacity change from 0 to 16384
[  152.508370][    T6] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  152.574980][ T7139] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2
[  152.625475][   T28] audit: type=1400 audit(1741911988.570:7705): avc:  denied  { write } for  pid=7148 comm="syz.7.2865" path="socket:[48817]" dev="sockfs" ino=48817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  152.750097][ T7155] input: syz0 as /devices/virtual/input/input29
[  152.830868][  T312] usb 4-1: USB disconnect, device number 12
[  152.840998][  T312] usblp0: removed
[  152.872786][  T315] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  152.882104][  T315] cdc_ncm 2-1:1.0: setting rx_max = 16384
[  153.007775][ T7189] loop7: detected capacity change from 0 to 4096
[  153.025042][ T7189] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  153.055265][ T2160] EXT4-fs (loop7): unmounting filesystem.
[  153.072858][ T7207] loop7: detected capacity change from 0 to 256
[  153.078997][  T315] cdc_ncm 2-1:1.0: setting tx_max = 16384
[  153.083747][ T7207] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  153.087646][  T315] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  153.101675][ T7207] exFAT-fs (loop7): hint_cluster is invalid (17)
[  153.109444][   T28] audit: type=1400 audit(1741911989.050:7706): avc:  denied  { write } for  pid=7206 comm="syz.7.2891" path="/420/file0/file1" dev="loop7" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  153.154270][  T315] usb 2-1: USB disconnect, device number 8
[  153.162565][  T315] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  153.180621][  T314] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  153.211040][ T7220] tmpfs: Unknown parameter 'nolazytime��'
[  153.253034][   T28] audit: type=1400 audit(1741911989.200:7707): avc:  denied  { mounton } for  pid=7223 comm="syz.2.2899" path="/632/file0" dev="tmpfs" ino=3301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  153.380555][  T314] usb 4-1: Using ep0 maxpacket: 8
[  153.391249][  T314] usb 4-1: config 0 has no interfaces?
[  153.396551][  T314] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  153.420547][  T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.440772][  T314] usb 4-1: config 0 descriptor??
[  153.611973][   T28] audit: type=1400 audit(1741911989.560:7708): avc:  denied  { mount } for  pid=7232 comm="syz.1.2903" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  153.648465][  T314] usb 4-1: USB disconnect, device number 13
[  154.125847][ T7258] syz.7.2915 uses obsolete (PF_INET,SOCK_PACKET)
[  154.200610][  T315] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  154.381757][  T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.392661][  T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  154.404936][  T315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  154.413925][  T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.421888][  T315] usb 2-1: Product: syz
[  154.425920][  T315] usb 2-1: Manufacturer: syz
[  154.430251][  T315] usb 2-1: SerialNumber: syz
[  154.435556][ T7256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.520547][    T6] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  154.710626][    T6] usb 3-1: Using ep0 maxpacket: 32
[  154.716829][    T6] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  154.725178][    T6] usb 3-1: config 0 has no interface number 0
[  154.731271][    T6] usb 3-1: config 0 interface 184 has no altsetting 0
[  154.739442][    T6] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  154.748377][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.756161][    T6] usb 3-1: Product: syz
[  154.760112][    T6] usb 3-1: Manufacturer: syz
[  154.764689][    T6] usb 3-1: SerialNumber: syz
[  154.769788][    T6] usb 3-1: config 0 descriptor??
[  154.775426][    T6] smsc75xx v1.0.0
[  155.110530][  T390] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  155.246305][ T7291] bridge0: port 3(vlan2) entered blocking state
[  155.253332][ T7291] bridge0: port 3(vlan2) entered disabled state
[  155.368854][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.381047][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.388793][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.398194][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.406003][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.413763][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.422278][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.429947][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.439472][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.447282][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.455382][  T315] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  155.461756][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.469445][  T315] cdc_ncm 2-1:1.0: setting rx_max = 16384
[  155.476413][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.486378][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.495047][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.503180][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.511476][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.519279][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.526997][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.534830][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.542513][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.550164][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.557862][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.565671][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.573504][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.581304][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.588949][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.596734][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.604435][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.612103][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.619709][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.627261][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.634901][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.642568][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.650168][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.658208][  T315] cdc_ncm 2-1:1.0: setting tx_max = 16384
[  155.664226][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.674030][  T315] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  155.684818][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.693961][  T315] usb 2-1: USB disconnect, device number 9
[  155.699854][  T315] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  155.708884][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.716454][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.724115][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.733220][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.740836][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.748365][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.755943][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.763507][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.771150][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.778734][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.786322][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.793900][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.794189][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  155.801441][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.818576][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.826194][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.833881][   T39] hid-generic 0008:016E:FFFFFFFE.0029: unknown main item tag 0x0
[  155.842119][   T39] hid-generic 0008:016E:FFFFFFFE.0029: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  155.859190][   T39] ==================================================================
[  155.867096][   T39] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[  155.874725][   T39] Read of size 8 at addr ffff888110074cf0 by task kworker/1:1/39
[  155.882274][   T39] 
[  155.884451][   T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G        W          6.1.128-syzkaller-00009-g70d032fba5f4 #0
[  155.895473][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  155.905568][   T39] Workqueue:  0x0 (events)
[  155.909909][   T39] Call Trace:
[  155.913033][   T39]  <TASK>
[  155.915806][   T39]  dump_stack_lvl+0x151/0x1b7
[  155.920335][   T39]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  155.925629][   T39]  ? _printk+0xd1/0x111
[  155.929710][   T39]  ? __virt_addr_valid+0x242/0x2f0
[  155.934659][   T39]  print_report+0x158/0x4e0
[  155.938995][   T39]  ? _raw_spin_lock_irq+0xa5/0x1b0
[  155.943939][   T39]  ? __virt_addr_valid+0x242/0x2f0
[  155.948901][   T39]  ? kasan_complete_mode_report_info+0x90/0x1b0
[  155.954968][   T39]  ? __list_del_entry_valid+0xa6/0x130
[  155.960259][   T39]  kasan_report+0x13c/0x170
[  155.964605][   T39]  ? __list_del_entry_valid+0xa6/0x130
[  155.969894][   T39]  __asan_report_load8_noabort+0x14/0x20
[  155.975363][   T39]  __list_del_entry_valid+0xa6/0x130
[  155.980488][   T39]  worker_thread+0xb1a/0x1260
[  155.984998][   T39]  kthread+0x26d/0x300
[  155.988905][   T39]  ? worker_clr_flags+0x1a0/0x1a0
[  155.993771][   T39]  ? kthread_blkcg+0xd0/0xd0
[  155.998200][   T39]  ret_from_fork+0x1f/0x30
[  156.002443][   T39]  </TASK>
[  156.005303][   T39] 
[  156.007473][   T39] Allocated by task 315:
[  156.011658][   T39]  kasan_set_track+0x4b/0x70
[  156.016081][   T39]  kasan_save_alloc_info+0x1f/0x30
[  156.021030][   T39]  __kasan_kmalloc+0x9c/0xb0
[  156.025453][   T39]  __kmalloc_node+0xb4/0x1e0
[  156.029879][   T39]  kvmalloc_node+0x221/0x640
[  156.034307][   T39]  alloc_netdev_mqs+0x8c/0xf90
[  156.038909][   T39]  alloc_etherdev_mqs+0x36/0x40
[  156.043594][   T39]  usbnet_probe+0x213/0x28a0
[  156.048024][   T39]  usb_probe_interface+0x5b6/0xa90
[  156.052965][   T39]  really_probe+0x2b8/0x920
[  156.057316][   T39]  __driver_probe_device+0x1a0/0x310
[  156.062429][   T39]  driver_probe_device+0x54/0x3d0
[  156.067287][   T39]  __device_attach_driver+0x2e3/0x490
[  156.072492][   T39]  bus_for_each_drv+0x183/0x200
[  156.077309][   T39]  __device_attach+0x312/0x510
[  156.081913][   T39]  device_initial_probe+0x1a/0x20
[  156.086762][   T39]  bus_probe_device+0xbe/0x1e0
[  156.091393][   T39]  device_add+0xb60/0xf10
[  156.095547][   T39]  usb_set_configuration+0x190f/0x1e80
[  156.100823][   T39]  usb_generic_driver_probe+0x8b/0x150
[  156.106124][   T39]  usb_probe_device+0x144/0x260
[  156.110804][   T39]  really_probe+0x2b8/0x920
[  156.115144][   T39]  __driver_probe_device+0x1a0/0x310
[  156.120264][   T39]  driver_probe_device+0x54/0x3d0
[  156.125125][   T39]  __device_attach_driver+0x2e3/0x490
[  156.130332][   T39]  bus_for_each_drv+0x183/0x200
[  156.135143][   T39]  __device_attach+0x312/0x510
[  156.139732][   T39]  device_initial_probe+0x1a/0x20
[  156.144601][   T39]  bus_probe_device+0xbe/0x1e0
[  156.149194][   T39]  device_add+0xb60/0xf10
[  156.153361][   T39]  usb_new_device+0xf2f/0x1820
[  156.157959][   T39]  hub_event+0x2db1/0x4830
[  156.162212][   T39]  process_one_work+0x73d/0xcb0
[  156.166899][   T39]  worker_thread+0xa60/0x1260
[  156.171672][   T39]  kthread+0x26d/0x300
[  156.175580][   T39]  ret_from_fork+0x1f/0x30
[  156.179832][   T39] 
[  156.182000][   T39] Freed by task 315:
[  156.185738][   T39]  kasan_set_track+0x4b/0x70
[  156.190160][   T39]  kasan_save_free_info+0x2b/0x40
[  156.195020][   T39]  ____kasan_slab_free+0x131/0x180
[  156.199969][   T39]  __kasan_slab_free+0x11/0x20
[  156.204570][   T39]  __kmem_cache_free+0x21d/0x410
[  156.209339][   T39]  kfree+0x7a/0xf0
[  156.212924][   T39]  kvfree+0x35/0x40
[  156.216544][   T39]  netdev_freemem+0x3f/0x60
[  156.220884][   T39]  netdev_release+0x7f/0xb0
[  156.225225][   T39]  device_release+0x95/0x1c0
[  156.229652][   T39]  kobject_put+0x178/0x260
[  156.233938][   T39]  put_device+0x1f/0x30
[  156.237906][   T39]  free_netdev+0x393/0x480
[  156.242159][   T39]  usbnet_disconnect+0x25f/0x3b0
[  156.246932][   T39]  usb_unbind_interface+0x1fa/0x8c0
[  156.251953][   T39]  device_release_driver_internal+0x53e/0x870
[  156.257856][   T39]  device_release_driver+0x19/0x20
[  156.262826][   T39]  bus_remove_device+0x2fa/0x360
[  156.267579][   T39]  device_del+0x663/0xe90
[  156.271746][   T39]  usb_disable_device+0x380/0x720
[  156.276608][   T39]  usb_disconnect+0x32a/0x890
[  156.281122][   T39]  hub_event+0x1ed8/0x4830
[  156.285374][   T39]  process_one_work+0x73d/0xcb0
[  156.290061][   T39]  worker_thread+0xd71/0x1260
[  156.294585][   T39]  kthread+0x26d/0x300
[  156.298478][   T39]  ret_from_fork+0x1f/0x30
[  156.302972][   T39] 
[  156.305135][   T39] Last potentially related work creation:
[  156.310691][   T39]  kasan_save_stack+0x3b/0x60
[  156.315201][   T39]  __kasan_record_aux_stack+0xb4/0xc0
[  156.320411][   T39]  kasan_record_aux_stack_noalloc+0xb/0x10
[  156.326227][   T39]  insert_work+0x56/0x310
[  156.330392][   T39]  __queue_work+0x9b6/0xd70
[  156.334741][   T39]  queue_work_on+0x105/0x170
[  156.339158][   T39]  usbnet_link_change+0x182/0x1a0
[  156.344020][   T39]  usbnet_probe+0x1e1e/0x28a0
[  156.348534][   T39]  usb_probe_interface+0x5b6/0xa90
[  156.353480][   T39]  really_probe+0x2b8/0x920
[  156.357817][   T39]  __driver_probe_device+0x1a0/0x310
[  156.362937][   T39]  driver_probe_device+0x54/0x3d0
[  156.367809][   T39]  __device_attach_driver+0x2e3/0x490
[  156.373013][   T39]  bus_for_each_drv+0x183/0x200
[  156.377741][   T39]  __device_attach+0x312/0x510
[  156.382311][   T39]  device_initial_probe+0x1a/0x20
[  156.387155][   T39]  bus_probe_device+0xbe/0x1e0
[  156.391754][   T39]  device_add+0xb60/0xf10
[  156.395944][   T39]  usb_set_configuration+0x190f/0x1e80
[  156.401216][   T39]  usb_generic_driver_probe+0x8b/0x150
[  156.406632][   T39]  usb_probe_device+0x144/0x260
[  156.411314][   T39]  really_probe+0x2b8/0x920
[  156.415652][   T39]  __driver_probe_device+0x1a0/0x310
[  156.421120][   T39]  driver_probe_device+0x54/0x3d0
[  156.425994][   T39]  __device_attach_driver+0x2e3/0x490
[  156.431182][   T39]  bus_for_each_drv+0x183/0x200
[  156.435869][   T39]  __device_attach+0x312/0x510
[  156.440477][   T39]  device_initial_probe+0x1a/0x20
[  156.445329][   T39]  bus_probe_device+0xbe/0x1e0
[  156.449939][   T39]  device_add+0xb60/0xf10
[  156.454117][   T39]  usb_new_device+0xf2f/0x1820
[  156.458699][   T39]  hub_event+0x2db1/0x4830
[  156.462947][   T39]  process_one_work+0x73d/0xcb0
[  156.467643][   T39]  worker_thread+0xa60/0x1260
[  156.472178][   T39]  kthread+0x26d/0x300
[  156.476185][   T39]  ret_from_fork+0x1f/0x30
[  156.480422][   T39] 
[  156.482592][   T39] The buggy address belongs to the object at ffff888110074000
[  156.482592][   T39]  which belongs to the cache kmalloc-4k of size 4096
[  156.496480][   T39] The buggy address is located 3312 bytes inside of
[  156.496480][   T39]  4096-byte region [ffff888110074000, ffff888110075000)
[  156.509760][   T39] 
[  156.511944][   T39] The buggy address belongs to the physical page:
[  156.518207][   T39] page:ffffea0004401c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110070
[  156.528339][   T39] head:ffffea0004401c00 order:3 compound_mapcount:0 compound_pincount:0
[  156.536716][   T39] flags: 0x4000000000010200(slab|head|zone=1)
[  156.542615][   T39] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[  156.551059][   T39] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  156.559611][   T39] page dumped because: kasan: bad access detected
[  156.565872][   T39] page_owner tracks the page as allocated
[  156.572020][   T39] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, tgid 291 (syz-executor), ts 24541449255, free_ts 24329769651
[  156.593025][   T39]  post_alloc_hook+0x213/0x220
[  156.597618][   T39]  prep_new_page+0x1b/0x110
[  156.602306][   T39]  get_page_from_freelist+0x3a98/0x3b10
[  156.607692][   T39]  __alloc_pages+0x234/0x610
[  156.612232][   T39]  alloc_slab_page+0x6c/0xf0
[  156.616650][   T39]  new_slab+0x90/0x3e0
[  156.620730][   T39]  ___slab_alloc+0x6f9/0xb80
[  156.625190][   T39]  __slab_alloc+0x5d/0xa0
[  156.629323][   T39]  __kmem_cache_alloc_node+0x207/0x2a0
[  156.634729][   T39]  kmalloc_trace+0x2a/0xa0
[  156.638976][   T39]  kobject_uevent_env+0x262/0x720
[  156.643841][   T39]  kobject_uevent+0x1f/0x30
[  156.648177][   T39]  net_rx_queue_update_kobjects+0x239/0x4a0
[  156.653907][   T39]  netdev_register_kobject+0x231/0x320
[  156.659200][   T39]  register_netdevice+0xe43/0x1490
[  156.664276][   T39]  wg_newlink+0x4e3/0x7d0
[  156.668448][   T39] page last free stack trace:
[  156.673140][   T39]  free_unref_page_prepare+0x9f1/0xa00
[  156.678445][   T39]  free_unref_page+0xb2/0x5c0
[  156.682954][   T39]  __free_pages+0x61/0xf0
[  156.687130][   T39]  __free_slab+0xce/0x1a0
[  156.691397][   T39]  __unfreeze_partials+0x165/0x1a0
[  156.696465][   T39]  put_cpu_partial+0xa9/0x100
[  156.700975][   T39]  __slab_free+0x1c8/0x280
[  156.705220][   T39]  ___cache_free+0xc6/0xd0
[  156.709474][   T39]  qlist_free_all+0xc5/0x140
[  156.713934][   T39]  kasan_quarantine_reduce+0x15a/0x180
[  156.719195][   T39]  __kasan_slab_alloc+0x24/0x80
[  156.723949][   T39]  slab_post_alloc_hook+0x53/0x2c0
[  156.728829][   T39]  kmem_cache_alloc+0x175/0x320
[  156.733515][   T39]  getname_flags+0xba/0x520
[  156.737859][   T39]  getname+0x19/0x20
[  156.741614][   T39]  do_sys_openat2+0xe0/0x870
[  156.746016][   T39] 
[  156.748180][   T39] Memory state around the buggy address:
[  156.753660][   T39]  ffff888110074b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.761556][   T39]  ffff888110074c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.769592][   T39] >ffff888110074c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.777564][   T39]                                                              ^
[  156.785127][   T39]  ffff888110074d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.793020][   T39]  ffff888110074d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.801092][   T39] ==================================================================
[  156.809370][   T39] Disabling lock debugging due to kernel taint
[  156.859752][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  156.870643][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  156.880145][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  156.890775][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  156.900454][    T6] smsc75xx: probe of 3-1:0.184 failed with error -71
[  156.908017][    T6] usb 3-1: USB disconnect, device number 25