last executing test programs:

7.51132686s ago: executing program 1 (id=67):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)

7.444571881s ago: executing program 1 (id=68):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x20)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x40, {0x40, 0x7, "c9ef2d6dd6a72d8560a1c696ed7fa36900b9b65e97a05ff16f126000000000000083bdb992268c02cbc819a875e38f0881a39d970609000000c5b5b7c38e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
read(r0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000001600)=0xfffffffc, 0x48)
ioctl(r3, 0xc138fd30, &(0x7f0000000200)="04")

5.488216161s ago: executing program 0 (id=78):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@utf8}, {@dmask={'dmask', 0x3d, 0xadb5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@discard}, {@namecase}, {@umask={'umask', 0x3d, 0x1}}, {@namecase}]}, 0x1, 0x1530, &(0x7f0000006800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000340)=""/16, &(0x7f00000004c0)=0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7e, 0x3, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80)
syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a35f200142c00fe8000000000000000000000000000bbfe8000000000f60000000000000000aa2f"], 0x0)
setresuid(0xee00, 0x0, 0x0)
setresuid(0xee01, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)
r3 = getpid()
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20600, 0x0)
socket(0x10, 0x3, 0x0)
r5 = open_tree(r4, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRESHEX=r5], 0x0)
r6 = syz_pidfd_open(r3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setns(r6, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x2d, 0x0, 0x10000, 0x40, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)

5.178973509s ago: executing program 1 (id=80):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403"], 0x0)
sendto$inet(r0, &(0x7f0000000000)="2b4da921747bc24a3d8d6908f8e746455de188b55dc831970beb66584622a0c2c3a478be41c62fcbf360ed59cef3455837bfc5b502099abd5fd26d38808c2dd205ebf40486722da0bd2c1ecff2ed334ef2aaa9809def7303e486a8b5401740e92e4900d4991dd1d836428b22891eea09c452b7d0ebebd6197e4bccbe859ff444490a8cd071914aa8f2604472f8c5a58bb1ca13bf28ff8fac64e1afeb2ce58e539e35042a35c33740", 0xa8, 0x10, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/185)

4.670500112s ago: executing program 0 (id=81):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x9, 0xfb, 0x9, 0x40, 0x17, 0x0, 0x2e, 0x19, 0x8}, {0x60000, 0x50000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0x0, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x30000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2424, 0x3, 0x8000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xc}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.595254684s ago: executing program 0 (id=82):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffff5}, 0x8)
syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)

4.224682333s ago: executing program 3 (id=85):
syz_usb_connect$midi(0x0, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020fd07010040000102030109023c0001451810040904000002010300060d24010900070009058e0b00090fd7020c2501083b8cbb8907a6d53909058c0200", @ANYRES64=0x0], 0x0)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0)
syz_usb_connect(0x4, 0x85d, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x12, 0x3b, 0x74, 0x8, 0x424, 0x7850, 0x2880, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84b, 0x2, 0x29, 0xe, 0x40, 0x40, "", [{{0x9, 0x4, 0x11, 0x0, 0xe, 0xf1, 0x4c, 0x51, 0x9, [@hid_hid={0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x2be}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "28a857"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1d07, 0xfff8, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@mdlm_detail={0x60, 0x24, 0x13, 0x9, "61e5495e6d137791cd486db7d0a8fb727c416d8ea630692ef2ed4f55bc0bba72eae859e73ba3acd5a396edeaa77735e0ad3199ddc386c1ca294f8d493f07344210c7a0535ead96494ab43cf7e7bb72c3ed3ea2cbea4134e38ca44448"}]}], [{{0x9, 0x5, 0x5, 0x12, 0x8, 0x4, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x7, 0x58}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x81, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0xa}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0xc}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x42, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x420, 0x40, 0xf2, 0x6, [@generic={0x38, 0x30, "ffb913a6df65262d47c3a42a152ea523bc8fd33896fc72db02302cffbae2201060e849dcb413b7675c168ad0533e4f07ff60c6ab7a02"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x2, 0x5, 0x21, [@generic={0xb4, 0xd, "3a68d333f9eb771698743a921b9388958936d1321f328278dd3f358f3e6bb17d3f340af28bce90ab0294b6d3ba01bcb46aaeb81f89002ee53f0b50ab13539d7b89a393fb10709175be23620debeef8191e4fb20b45b271f5aa1aaada7f4bbb82810fbe6d58ba9e00382c1ba78e90a9dd09bc2cbf20e35066302079ec4be92aacd5060d09217bf2a19d654c5e4af49ba356b766c59440633cde85504ed081d8c235f72e0e6ddda4ebb677e97d1503a669cacf"}, @generic={0x72, 0x24, "46d35ee1a167b1d7f9ce7249d9123fcb3f83a3a3838aac502b6bc49ce0319726d7a5a6ffe175118721dcab43a920da5d92a88ee8b89281b6765d7d5a181af84db7feab1fd357fa289be2f02b281c7bfdca0bd03e622cc5049709c974fbd543b5550e0c696f82bfcaf982fb1814dc05a9"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x7, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x18, 0x8, 0xa600}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xfc, 0x9a, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x3}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x0, 0x1, 0x7, [@generic={0xee, 0x11, "614226f3c52f962f3d2feabfd8e5c35fa49cfe1730d3690f6ab5ebefc1046f752d07af2adaee67966e8b3c67bc0fdbccff6876169000f7801e7bfec2504ae9859f4c5772c363bf18eed8cc3cfd3d1c0fe614f8f11350afe8fb1db224963ac3c00fd1f9e3c2c48eded83f822ab6824fdf5fde8ef4d4c12a61bc07d46ca26d05ef1c245bdae5698263e648975c4bc6bce0e41ed89eca35d46c90b0b16d1262f32039e739bfdcdf59f2aacfc5d05da889eb9bd16f825b9bc14839bafa4ec3149ffcb0f864181d46a0f7898f9bf413f2708b30d2d9119604b88ce23ec9653f35ffaf4bd43444ab896cef390cc902"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa1, 0x8919}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x3, 0xc3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7f, 0x40, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x806}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x0, 0x4}}]}}, {{0x9, 0x4, 0xf, 0xe3, 0xd, 0x1f, 0x93, 0xff, 0xb6, [@hid_hid={0x9, 0x21, 0x40, 0x3, 0x1, {0x22, 0xec9}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "dd9422bd"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x200, 0x9}, {0x6, 0x24, 0x1a, 0x800, 0x30}, [@mbim={0xc, 0x24, 0x1b, 0xff00, 0x3, 0x0, 0x9, 0x0, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x200, 0x2, 0x10, 0x8, 0x6, 0xac}, @mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0xe, 0x24, 0x7, 0x1, 0x200, [0x101, 0x4, 0x8b0, 0x3ff]}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0xd7, 0x17, [@generic={0xf0, 0x22, "09396909683b54528bab9085b7758179539116562bf4790d77aee88a79be15046dcbd3ece9056ed8f3177c033e287f077ae270d8eac21ad458fa2e1613db8772d56fdffb9c498873a874c35356a055318f139ea6166297bd42c04f8c378d595ae117b6a367c1f48544691f8eb58299a5895a04f798b51d0fddf5e21055326be77a4282f02d21faea87d42adaf8c249d69b02980b7b1951a87b3b6f159cd688d59c9f8d67ab2ff6694ccd1b0d7586e05ffa8396ba54df86d4974098a5bbfaea931a01b206f754daca3da35723cbbf6a60da9e9b4f4e6d3f34f1011acc56c24e774c504892cea8caa68352566b2f8b"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x4, 0x2, 0xff}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x7f, 0x2, 0x8}}, {{0x9, 0x5, 0x4d708526d2dfd30c, 0x8, 0x10, 0x0, 0x13, 0x10}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x1, 0x27, 0x9}}, {{0x9, 0x5, 0x2, 0xa, 0x10, 0x2, 0xde, 0x7f}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x4, 0x0, 0x81}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xa, 0x12, 0x80, [@generic={0x6f, 0xa, "88053a264c69743339093a5bae4b1ab6d3a9f56669908d7d825861b741fd399d73cdb23d4ede8ef94216f3f1a8ba82797bfe2dae13183141483958e496d49cb87362cbe148e49668059bff7a3672ff62ccf0beee5a28fd0cbe4dea1d1c4411259cce914f8d0e1ca0c59c7d8543"}, @generic={0x81, 0x1, "6499eba5d7be539eb47007b57929bf72868b52fc2db86eec94d7abf4a4f2de3fe01b3fc834627c1f03c2c5b7259aa4f0ea41007bea2ae9c901f92d25bcfa9d8708252a071577cbca12528d45300cdd7c1053c853b35d2b66191954304b9846a8c34d0f7730256bcf5b1e5f501bdd263ae9f2bb294f10ace6effab0f53cc6ca"}]}}, {{0x9, 0x5, 0x7, 0xe, 0x20, 0x9, 0xae, 0x10}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x6, 0x4, 0xb}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0x86, 0x4, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x5, 0x87, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x100}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x1, 0x4, 0x7, [@generic={0xd9, 0x21, "648bd1265a17859962af1eaadac5d3177858649db186622dc05815f7e894fa6b1cc85cae211d645b6f7b4db363cd9909f92a13a2ce20fd3aa7549b4fe7ca7449141b94fcc8b5db8f47a4def70533807b322515c0cecc4bc4f8c1ba4e4e69fbd28f8b3ed717928fc0e7e1ef4d2a1704ff966235ba8253c484bd80269127af0dc5962ea345c54412e9788922d5a8ff52228b3efad5a2646d27de95f1d20015e57e7a41fc9999012c7a9a5a4d26a53e2721a3bebe21b6ff835e632a30889f696015ab77685da582915ec1b487d08e8cf7559caad2b47e8e35"}, @generic={0xe1, 0x3, "ef7cbf398b349d4b71669d30cf3ad73b50dcfb0b251d679074d79e59012159e1d909d9d7bf487addfa918facffc31985cafeabca1daff48f8cc331d1112baa7e17b8892fd2510c85c6892eeaee27d4ae9a91cdd1ed11b95a121884c00264e9a544586050677a6cef62cdae0770ded4dca9bafe916eae9ec1c29e541797780bedbe6a8505b6da8c48409358c9945ea75a0731b1417595b4a6d0defe5d21db70742b942d03023b16e0d42688f0f80d06953a5f64182c9791615b29786bf6d025cd586149dd3da7b6aa0d5cd3310b55163962e69741d9b2e3dd9004ddb396f2cb"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0xdf, 0x6, 0x40, 0x7a}, 0x47, &(0x7f00000001c0)={0x5, 0xf, 0x47, 0x4, [@ssp_cap={0x0, 0x10, 0xa, 0x63, 0x0, 0x7444e92, 0xf01e, 0xff01, [0x0]}, @ss_container_id={0xfffffffffffffedb, 0x10, 0x4, 0x6, "0c93c5fb9261ad561d082bb4a109f81e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x62, 0xdd, 0xf7, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x8, 0xf, 0xdd, [0xffc0c0, 0xc000, 0xc0c0, 0xf0, 0xc000]}]}, 0x2, [{0x5f, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x465ac6f922e89660}}, {0x9c, &(0x7f0000000280)=@string={0x9c, 0x3, "d4ec628859d8d60e30c8141cf8455b3a8ce130b9ba99109fa5ab4ab78f9dc5eee3dfb5007194acdfef0d06424dd9f923f5b54113eb3fc9a97a61131048c49ad175b1c093ff8e1bb2a2837672f4c732d40b40a6c9148ae55cd9a6768bba3b10c3a3812f7080c07c08f18fc064af9233e900db2afaf12bb8541274ceb6c930d6586553bd72ccad5942a6bbee92c17080a6e5be9bea61055c046edb"}}]})

3.362985845s ago: executing program 1 (id=89):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001000)={0x0, &(0x7f0000002000)=[@wrmsr={0x65, 0x20, {0x400000f1}}, @uexit={0x0, 0x18, 0xaaaa}], 0x38})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000003000)={0x5, 0x0, [{0x1}, {0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x40000001, 0x0, 0x7, 0x31237648}, {0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x40000082, 0x0, 0x0, 0x2, 0x0, 0x59}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.284875667s ago: executing program 1 (id=90):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x20)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x40, {0x40, 0x7, "c9ef2d6dd6a72d8560a1c696ed7fa36900b9b65e97a05ff16f126000000000000083bdb992268c02cbc819a875e38f0881a39d970609000000c5b5b7c38e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
read(r0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000001600)=0xfffffffc, 0x48)
ioctl(r3, 0xc138fd30, &(0x7f0000000200)="04")

2.484956437s ago: executing program 3 (id=91):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f00000004c0)="$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")
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r1, 0x0, 0x4e)
r2 = open(&(0x7f0000001b80)='.\x00', 0x8000, 0x112)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}, {0x20, '\xbf\x06\x00\x00\x00\r\xeaN9nd\x18\x00\xc2<K\xb1\xa4Q\xb0\xe7>\x02\xc8\x87\"\x88\x9c\xae\x11\x96%qb \x95\f\x88\x9f\x17\x1e7\xb5N\x81\t\x00\x00\x00\x00\x00\x00\x00NY\x86\xe8\'\xeegkTc\xfa\x98PKM\x95o\x9e$\x0f\xe3\x87\xe1\xde\xb4S\xe23\xda\xf7\x10^\xe52\xcd\x1e\xdc\x10\xd8\xaa\xd7Zf0c\xbb\xd8\xe1\xeb)'}]}, 0x77)
syz_open_dev$usbfs(&(0x7f0000000240), 0x8, 0x0)
close(r3)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/64, 0x40}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000003c0)=""/166, 0xa6}], 0x3}, 0x2022)
ioctl$FS_IOC_SETFLAGS(r2, 0xc0406618, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='tracefs\x00', 0x20000, &(0x7f0000000200)='([\',{^}&^-\x00')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000180)=0x7fffffff, 0x38)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x1, 0x200000, @loopback, 0xfffffffd}, 0x1c)
socket(0x2a, 0x5, 0x7fffffff)
syz_usb_connect$midi(0x5, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201010200000010820560004000010209040902270001010980e80904000001010300"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450000200000000000119078000000000000000000014e20000c9078010000002d63377b31e8c8d80e6c0e8edc6baa81e398c1f218b44e8decc434c8aeef0c6bb2e3c23cea114049b8dfe35554717f413f085c2a466badd2e9f6dc5a1bd1e029158f6c9a867228158de457cd52b20ca49768f7de46762e74c7e60332d7ff"], 0x0)

2.014354659s ago: executing program 4 (id=93):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000008d0b5c3e0200000000010000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c00"], 0x23c}}, 0x0)

1.952105041s ago: executing program 4 (id=94):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x80)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x3fb, 0x8, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x22000000)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000003c0)={0x7, r1, 'id0\x00'})
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000005ac0), 0x6d7, 0x80)
read$msr(r5, &(0x7f0000005b00)=""/4, 0x4)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x9, 0xfb, 0x9, 0x40, 0x17, 0x0, 0x2e, 0x19, 0x8}, {0x60000, 0x50000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0x0, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x30000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2424, 0x3, 0x8000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.758667736s ago: executing program 4 (id=96):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x200, @loopback, 0x7}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = eventfd2(0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'})
io_setup(0x81, &(0x7f0000000400)=<r3=>0x0)
read$eventfd(r1, &(0x7f0000000000), 0x8)
io_getevents(r3, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}])
newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./bus\x00', &(0x7f0000002500), 0x4000)

1.573512631s ago: executing program 0 (id=98):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.551535331s ago: executing program 2 (id=99):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007119b100000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', <r0=>0x0, 0x0, 0x9, 0x9, 0x101, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7800, 0x1, 0x101, 0x6}})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00')
read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2], 0x31)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x55, &(0x7f0000000100)=""/85, 0x41100, 0xc, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x0, 0x3, 0xf, 0x4}, {0x1, 0x2, 0x4, 0x8}, {0x0, 0x5, 0x9, 0x6}, {0x1, 0x1, 0x3, 0x6}], 0x10, 0x7}, 0x94)

1.429948054s ago: executing program 2 (id=100):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
write$binfmt_misc(r0, 0x0, 0x30)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10001, 0x963, 0x20000008, 0x1800000, 0x3351453d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='bpf\x00', 0x80, &(0x7f0000000100)={@align=0x8, {0x5, 0x8, 0xc, 0x7}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x5})

1.429623584s ago: executing program 2 (id=101):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000008f80))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000008fc0)={{{@in6=@initdev, @in6=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000090c0)=0xe8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x6, {0x7, 0x28, 0x0, 0x47405cb, 0x5000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0))
r2 = getpid()
process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0xb72}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0)

1.235587169s ago: executing program 1 (id=102):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00224102000083000400000b11200000b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
write$cgroup_int(r2, &(0x7f0000000080)=0x800, 0x12)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0)

865.139558ms ago: executing program 4 (id=103):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x200, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0)

838.079999ms ago: executing program 4 (id=104):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ftruncate(r3, 0x6000809)
sendfile(r1, r3, 0x0, 0x7ffff004)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x6, 0x0, '\x00', @auto=[0x3c, 0x3c, 0x31, 0x25, 0x24, 0x33]})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @a}})

780.98652ms ago: executing program 4 (id=105):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x14014)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
io_setup(0x5, &(0x7f0000000300)) (async)
io_setup(0x5, &(0x7f0000000300)=<r5=>0x0)
r6 = eventfd2(0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) (async)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r6}])
io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0) (async)
io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r6, 0x81}], 0x1, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x801)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r7=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r7, 0x8004745a, 0x0) (async)
ioctl$EXT4_IOC_GETFSUUID(r7, 0x8004745a, 0x0)

606.328435ms ago: executing program 2 (id=106):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102031a11fffd84b062f53d0b0c0d0e0f101112"}}]}]}, 0x54}}, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x137840, 0x0)
r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84088000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x14, r8, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4080)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001e00010026bc676ff38722822b8f7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020014001680100001800c0005004cffffff04000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0x3}, {0x0, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x4)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="48b8b7000000000000000f23c00f21f835010001000f23f82e462c91c44279585d7e430f21b8430f01c5b985030000b8c34e0000ba000000000f3066410fc7340166b8b8008ee848b879000000000000000f23c80f21f8350000a0000f23f864660fc737", 0x64}], 0x1, 0x12, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x0)
mlockall(0x7)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000500))
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x1b, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfffd}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1ff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000006982d67f9c0752e40a17950a6dbff8af49a18e9b90bf0122", @ANYRES16=r14, @ANYBLOB="000429bd7000ffdbdf25820000000c009900000001006d000000"], 0x20}, 0x1, 0x0, 0x0, 0x40008}, 0x4004004)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=0x9)

336.304691ms ago: executing program 2 (id=107):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd28, 0x25dfdbfd, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040))
sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0xd, 0x4f9, 0x7, 0x101, 0xb1e, 0x0, 0x7}, {0x1, 0xf, 0x3, 0x70bc, 0xa, 0x9, 0xfffffff9}]})

248.911304ms ago: executing program 2 (id=108):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffff5}, 0x8)
syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)

248.008504ms ago: executing program 3 (id=109):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000020003d008500000083000000bc1800000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x4c)

247.779084ms ago: executing program 3 (id=110):
r0 = socket$igmp(0x2, 0x3, 0x2)
mount$incfs(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000003e40), 0x40, &(0x7f0000000280)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xfffffffffffffffa}}]}) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) (async)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async)
recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x32, 0x40010002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x21, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="280300001300010029bd7010e6964439ca9448ff", @ANYRES32=0x0, @ANYBLOB="0004000091f90000140003006272696467655f736c6176655f310000880018800400018080000180070002002cf4000008000100000000000800010004000000140004006938bfe7c3b8ae42240b16c0ed6b8768140004000c9b73b021b79fd2025f27082114a6d0140004009feccbb316587f1fafb7dbd8e9ed8d8d14000400f33646b47b166d68a8a26e25f05ece0a130002006272696467655f736c6176655f31000005002700060000000a000100c28360e46eb900000a0002009aec062e663b00002c0216"], 0x328}, 0x1, 0x0, 0x0, 0x4040010}, 0x400c010)

202.598395ms ago: executing program 3 (id=111):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_snmp6\x00')
statx(r1, &(0x7f0000000040)='.\x00', 0x2000, 0x400, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x40000}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000088000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, r2}, 0x94)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x2, 0x7, 0xffff, 0x2, 0x1, 0x8, 0x7}, 0x1c)

191.583445ms ago: executing program 3 (id=112):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x20)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x40, {0x40, 0x7, "c9ef2d6dd6a72d8560a1c696ed7fa36900b9b65e97a05ff16f126000000000000083bdb992268c02cbc819a875e38f0881a39d970609000000c5b5b7c38e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
read(r0, &(0x7f0000000100), 0x14)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000001600)=0xfffffffc, 0x48)
ioctl(r3, 0xc138fd30, &(0x7f0000000200)="04")

151.192036ms ago: executing program 0 (id=113):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
setresgid(0x0, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="756e6c6f636b08be8fa2cf2a2f39c1ba3340b9f1f3aa077aab1e959a0f479f9d4a265dd1a7c4bd15d4b1afd70c27bef12bf0f96b8b86c78db824be1ee8df765b1792d6044914575dbfcdad04d314ad70d933b5cca489d6c2bf0000000000"], 0xa)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==")

0s ago: executing program 0 (id=114):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x200, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts.
[   22.619662][   T24] audit: type=1400 audit(1785535048.430:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.620672][  T271] cgroup: Unknown subsys name 'net'
[   22.642323][   T24] audit: type=1400 audit(1785535048.430:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.669611][   T24] audit: type=1400 audit(1785535048.460:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.669790][  T271] cgroup: Unknown subsys name 'devices'
[   22.778449][  T271] cgroup: Unknown subsys name 'hugetlb'
[   22.784084][  T271] cgroup: Unknown subsys name 'rlimit'
[   22.890500][   T24] audit: type=1400 audit(1785535048.700:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.914013][   T24] audit: type=1400 audit(1785535048.700:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.938845][   T24] audit: type=1400 audit(1785535048.700:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.965601][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.974487][   T24] audit: type=1400 audit(1785535048.780:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.000061][   T24] audit: type=1400 audit(1785535048.780:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.035018][   T24] audit: type=1400 audit(1785535048.840:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.060529][   T24] audit: type=1400 audit(1785535048.840:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.087061][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.541910][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.549042][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.556459][  T279] device bridge_slave_0 entered promiscuous mode
[   23.564098][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.571134][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.578513][  T279] device bridge_slave_1 entered promiscuous mode
[   23.625358][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.632510][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.639986][  T281] device bridge_slave_0 entered promiscuous mode
[   23.647606][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.654627][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.662043][  T281] device bridge_slave_1 entered promiscuous mode
[   23.750828][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.758044][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.765280][  T280] device bridge_slave_0 entered promiscuous mode
[   23.773166][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.780275][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.787622][  T280] device bridge_slave_1 entered promiscuous mode
[   23.794121][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.801197][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.808490][  T282] device bridge_slave_0 entered promiscuous mode
[   23.817620][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.824641][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.831999][  T282] device bridge_slave_1 entered promiscuous mode
[   23.864328][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.871406][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.878775][  T283] device bridge_slave_0 entered promiscuous mode
[   23.885509][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.892603][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.899980][  T283] device bridge_slave_1 entered promiscuous mode
[   23.969089][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.976128][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.983438][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.990532][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.029744][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.036797][  T281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.044039][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.051067][  T281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.072106][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.079155][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.086389][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.093437][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.109365][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.116558][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.123897][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.131244][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.138997][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.146105][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.153731][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.161118][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.190450][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.198023][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.206085][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.213137][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.226822][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.235002][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.242029][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.251478][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.270952][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.278532][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.286664][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.293683][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.301171][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.309464][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.316469][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.323959][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.332104][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.339133][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.346548][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.354664][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.361690][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.368988][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.377319][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.384321][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.391672][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.412625][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.420871][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.427928][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.437693][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.462276][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.470221][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.478768][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.487549][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.495743][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.502834][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.510311][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.518523][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.525533][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.533762][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.543144][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.551214][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.559399][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.574201][  T281] device veth0_vlan entered promiscuous mode
[   24.585629][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.593928][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.602503][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.611526][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.619534][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.627878][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.636081][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.644035][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.652083][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.659536][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.673158][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.681323][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.689595][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.698622][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.707277][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.715263][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.733842][  T279] device veth0_vlan entered promiscuous mode
[   24.744080][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.752503][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.760846][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.769050][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.777012][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.785056][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.793264][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.801908][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.810350][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.818699][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.827028][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.834427][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.844886][  T281] device veth1_macvtap entered promiscuous mode
[   24.855366][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.863127][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.871298][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.880890][  T283] device veth0_vlan entered promiscuous mode
[   24.893686][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.901326][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.908822][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.916631][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.924524][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.933226][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.941624][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.949917][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.958471][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.966881][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.975179][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.982631][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.993371][  T280] device veth0_vlan entered promiscuous mode
[   25.002714][  T282] device veth0_vlan entered promiscuous mode
[   25.009167][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.017315][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.025428][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.033246][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.049110][  T281] request_module fs-gadgetfs succeeded, but still no fs?
[   25.050647][  T282] device veth1_macvtap entered promiscuous mode
[   25.063791][  T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   25.064555][  T283] device veth1_macvtap entered promiscuous mode
[   25.087594][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.095958][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.104754][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.113181][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.121850][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.129738][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.138191][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.146483][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.155304][  T279] device veth1_macvtap entered promiscuous mode
[   25.196420][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.204538][  T308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   25.205525][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.222261][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.231187][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.241264][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.251029][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.260726][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.270355][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.281433][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.337353][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.346522][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.356501][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.367467][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.638630][  T316] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   26.207740][  T327] exfat: Deprecated parameter 'namecase'
[   26.240238][  T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.289636][  T327] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[   26.368668][  T280] device veth1_macvtap entered promiscuous mode
[   26.376095][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.394514][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.403034][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.435407][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.454684][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.469420][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.481202][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.514586][  T333] EXT4-fs (loop4): Mount option "dioread_nolock" incompatible with ext3
[   26.623477][  T341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.645835][  T330] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   26.656972][  T330] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   26.669515][  T330] F2FS-fs (loop0): invalid crc value
[   26.700258][  T330] F2FS-fs (loop0): Found nat_bits in checkpoint
[   26.752524][  T330] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   26.756793][  T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.760878][  T330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   26.770538][  T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.788069][  T314] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   26.797443][  T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.809008][  T314] usb 3-1: config 0 descriptor??
[   26.873652][  T348] F2FS-fs (loop4): invalid crc value
[   26.884361][  T348] F2FS-fs (loop4): Found nat_bits in checkpoint
[   26.905950][  T348] F2FS-fs (loop4): Start checkpoint disabled!
[   26.912926][  T348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   26.933990][  T348] attempt to access beyond end of device
[   26.933990][  T348] loop4: rw=10241, want=45104, limit=40427
[   26.999121][  T348] attempt to access beyond end of device
[   26.999121][  T348] loop4: rw=2049, want=81920, limit=40427
[   27.017824][  T348] attempt to access beyond end of device
[   27.017824][  T348] loop4: rw=2049, want=53248, limit=40427
[   27.034899][  T348] attempt to access beyond end of device
[   27.034899][  T348] loop4: rw=2049, want=77824, limit=40427
[   27.068390][  T359] attempt to access beyond end of device
[   27.068390][  T359] loop4: rw=524288, want=78072, limit=40427
[   27.080043][  T359] attempt to access beyond end of device
[   27.080043][  T359] loop4: rw=0, want=77832, limit=40427
[   27.080896][  T348] attempt to access beyond end of device
[   27.080896][  T348] loop4: rw=2049, want=88840, limit=40427
[   27.091612][  T359] attempt to access beyond end of device
[   27.091612][  T359] loop4: rw=0, want=77832, limit=40427
[   27.104453][  T348] attempt to access beyond end of device
[   27.104453][  T348] loop4: rw=2049, want=45104, limit=40427
[   27.113712][  T359] attempt to access beyond end of device
[   27.113712][  T359] loop4: rw=0, want=77832, limit=40427
[   27.136181][    T5] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   27.166672][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.391699][  T367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   27.477173][  T371] EXT4-fs (loop1): Ignoring removed oldalloc option
[   27.485693][  T371] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2749: inode #11: comm syz.1.15: corrupted xattr block 95
[   27.499062][  T371] EXT4-fs (loop1): Remounting filesystem read-only
[   27.505587][  T371] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   27.519024][    T5] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   27.527550][  T371] EXT4-fs error (device loop1): ext4_evict_inode:296: comm syz.1.15: couldn't truncate inode 11 (err -30)
[   27.539222][    T5] usb 1-1: config 0 has no interface number 0
[   27.545314][    T5] usb 1-1: config 0 interface 41 has no altsetting 0
[   27.546742][   T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   27.552630][  T371] EXT4-fs (loop1): 1 orphan inode deleted
[   27.566093][   T25] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   27.567361][  T371] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000fffd,errors=remount-ro,oldalloc,jqfmt=vfsold,
[   27.576453][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.599030][   T25] usb 4-1: config 0 descriptor??
[   27.609328][  T371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.15: bg 0: block 7: invalid block bitmap
[   27.621754][  T371] EXT4-fs (loop1): Remounting filesystem read-only
[   27.703717][   T24] kauditd_printk_skb: 62 callbacks suppressed
[   27.703726][   T24] audit: type=1400 audit(1785535053.510:136): avc:  denied  { bpf } for  pid=375 comm="syz.1.17" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   27.730596][    T5] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   27.740230][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.748395][    T5] usb 1-1: Product: syz
[   27.752584][    T5] usb 1-1: Manufacturer: syz
[   27.757315][  T376] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   27.772117][   T24] audit: type=1400 audit(1785535053.580:137): avc:  denied  { read write } for  pid=375 comm="syz.1.17" name="file1" dev="loop1" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   27.778337][    T5] usb 1-1: SerialNumber: syz
[   27.800151][   T24] audit: type=1400 audit(1785535053.620:138): avc:  denied  { open } for  pid=375 comm="syz.1.17" path="/4/file2/file1" dev="loop1" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   27.824758][    T5] usb 1-1: config 0 descriptor??
[   27.830900][   T24] audit: type=1400 audit(1785535053.620:139): avc:  denied  { create } for  pid=375 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   27.851350][   T24] audit: type=1400 audit(1785535053.620:140): avc:  denied  { ioctl } for  pid=375 comm="syz.1.17" path="socket:[15194]" dev="sockfs" ino=15194 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   27.910408][   T24] audit: type=1400 audit(1785535053.720:141): avc:  denied  { mount } for  pid=377 comm="syz.4.16" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   27.960445][   T24] audit: type=1400 audit(1785535053.760:142): avc:  denied  { create } for  pid=377 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   27.979992][   T24] audit: type=1400 audit(1785535053.770:143): avc:  denied  { write } for  pid=377 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   28.015358][  T382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   28.025987][  T382] device vlan2 entered promiscuous mode
[   28.036759][  T314] hid-led: probe of 0003:1D34:000A.0001 failed with error -71
[   28.040922][  T382] device bridge0 entered promiscuous mode
[   28.045940][  T314] usb 3-1: USB disconnect, device number 2
[   28.062946][  T385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=385 comm=syz.2.19
[   28.077333][   T24] audit: type=1400 audit(1785535053.890:144): avc:  denied  { perfmon } for  pid=381 comm="syz.1.18" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   28.100464][   T24] audit: type=1400 audit(1785535053.900:145): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   28.204111][  T391] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   28.320613][  T395] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   28.320625][  T395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   28.325429][  T399] FAULT_INJECTION: forcing a failure.
[   28.325429][  T399] name failslab, interval 1, probability 0, space 0, times 1
[   28.325455][  T399] CPU: 0 PID: 399 Comm: syz.1.23 Not tainted syzkaller #0
[   28.325460][  T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   28.325464][  T399] Call Trace:
[   28.325489][  T399]  __dump_stack+0x21/0x24
[   28.325499][  T399]  dump_stack_lvl+0x1a7/0x208
[   28.325510][  T399]  ? show_regs_print_info+0x18/0x18
[   28.325520][  T399]  dump_stack+0x15/0x1c
[   28.325530][  T399]  should_fail+0x3ab/0x500
[   28.325540][  T399]  ? avc_alloc_node+0x83/0x340
[   28.325550][  T399]  __should_failslab+0xa4/0xe0
[   28.325560][  T399]  should_failslab+0x9/0x20
[   28.325569][  T399]  kmem_cache_alloc+0x3d/0x2d0
[   28.325577][  T399]  ? memset+0x35/0x40
[   28.325585][  T399]  avc_alloc_node+0x83/0x340
[   28.325593][  T399]  ? avc_xperms_free+0x270/0x270
[   28.325603][  T399]  ? is_bpf_text_address+0x177/0x190
[   28.325613][  T399]  avc_update_node+0x50/0x750
[   28.325633][  T399]  ? unwind_get_return_address+0x4d/0x90
[   28.325643][  T399]  ? stack_trace_save+0xf0/0xf0
[   28.325652][  T399]  ? arch_stack_walk+0xee/0x140
[   28.325659][  T399]  avc_denied+0x133/0x1b0
[   28.325676][  T399]  avc_has_extended_perms+0x9cb/0xc90
[   28.471382][  T399]  ? kasan_set_track+0x5b/0x70
[   28.473855][  T391] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   28.476145][  T399]  ? avc_ss_reset+0x270/0x270
[   28.476162][  T399]  ? __kasan_slab_free+0x11/0x20
[   28.492923][  T399]  ? do_sys_openat2+0x68e/0x750
[   28.493294][  T391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   28.497772][  T399]  ? __x64_sys_openat+0x136/0x160
[   28.497781][  T399]  ? do_syscall_64+0x31/0x40
[   28.497788][  T399]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   28.497800][  T399]  ? memset+0x35/0x40
[   28.497810][  T399]  ? ioctl_has_perm+0x1b8/0x4f0
[   28.497826][  T399]  ioctl_has_perm+0x3a6/0x4f0
[   28.506956][  T391] F2FS-fs (loop4): invalid crc value
[   28.510978][  T399]  ? has_cap_mac_admin+0x370/0x370
[   28.520108][  T391] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   28.521598][  T399]  ? kernel_write+0x3c0/0x3c0
[   28.521618][  T399]  selinux_file_ioctl+0x3ad/0x4c0
[   28.541833][  T391] F2FS-fs (loop4): Start checkpoint disabled!
[   28.545432][  T399]  ? mutex_trylock+0xb0/0xb0
[   28.545449][  T399]  ? __fget_files+0x2e1/0x340
[   28.557245][  T391] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   28.561310][  T399]  ? selinux_file_alloc_security+0x120/0x120
[   28.561328][  T399]  ? __fget_files+0x2e1/0x340
[   28.566394][  T391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   28.572426][  T399]  security_file_ioctl+0x74/0xa0
[   28.572436][  T399]  __se_sys_ioctl+0x53/0x1a0
[   28.572446][  T399]  ? debug_smp_processor_id+0x17/0x20
[   28.572454][  T399]  __x64_sys_ioctl+0x7b/0x90
[   28.572462][  T399]  do_syscall_64+0x31/0x40
[   28.572470][  T399]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   28.572486][  T399] RIP: 0033:0x7f101ed43019
[   28.599676][  T395] EXT4-fs (loop2): 1 truncate cleaned up
[   28.606807][  T399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   28.606814][  T399] RSP: 002b:00007f101d79c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   28.606826][  T399] RAX: ffffffffffffffda RBX: 00007f101efcafa0 RCX: 00007f101ed43019
[   28.606831][  T399] RDX: 0000200000000000 RSI: 0000000040084503 RDI: 0000000000000003
[   28.606836][  T399] RBP: 00007f101d79c090 R08: 0000000000000000 R09: 0000000000000000
[   28.606842][  T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   28.606858][  T399] R13: 00007f101efcb038 R14: 00007f101efcafa0 R15: 00007ffd0fd31d68
[   28.611962][  T395] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000010,nombcache,max_batch_time=0x0000000000000007,,errors=continue
[   28.691512][    T5] CoreChips: probe of 1-1:0.41 failed with error -32
[   28.755602][  T391] xt_SECMARK: invalid security context 'unconfined'
[   28.798584][  T405] EXT4-fs (loop1): Test dummy encryption mode enabled
[   28.810201][  T405] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   28.827867][  T405] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   28.836078][  T405] System zones: 0-5
[   28.841028][  T405] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   28.939712][   T25] usb 1-1: USB disconnect, device number 2
[   29.126054][  T420] APIC base relocation is unsupported by KVM
[   29.174902][  T412] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   29.197930][  T412] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   29.207176][  T412] F2FS-fs (loop2): invalid crc_offset: 33558524
[   29.228234][  T412] F2FS-fs (loop2): Found nat_bits in checkpoint
[   29.259973][  T412] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   29.267258][  T412] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   29.387995][  T437] xt_TCPMSS: Only works on TCP SYN packets
[   30.168424][   T25] usb 4-1: USB disconnect, device number 2
[   30.803970][  T468] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   30.821116][  T468] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   30.830380][  T468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   30.839328][  T468] System zones: 0-2, 18-18, 34-34
[   30.845380][  T468] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.41: bad orphan inode 15
[   30.855727][  T468] ext4_test_bit(bit=14, block=18) = 1
[   30.861324][  T468] is_bad_inode(inode)=0
[   30.865482][  T468] NEXT_ORPHAN(inode)=2264924160
[   30.870578][  T468] max_ino=32
[   30.873896][  T468] i_nlink=0
[   30.877535][  T468] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2914: inode #15: comm syz.2.41: corrupted xattr block 19
[   30.889907][  T468] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -117)
[   30.899249][  T468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   30.946766][    T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   31.006065][  T485] fuse: Unknown parameter 'deFault_permissions'
[   31.056773][  T370] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   31.166695][   T25] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   31.196969][  T488] ======================================================
[   31.196969][  T488] WARNING: the mand mount option is being deprecated and
[   31.196969][  T488]          will be removed in v5.15!
[   31.196969][  T488] ======================================================
[   31.226812][    T5] usb 1-1: device descriptor read/64, error -71
[   31.237225][  T488] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement.
[   31.326694][   T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   31.357520][  T488] EXT4-fs (loop3): Invalid want_extra_isize 138
[   31.436753][  T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   31.447875][  T370] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[   31.456953][  T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.465865][  T370] usb 5-1: config 0 descriptor??
[   31.486755][  T473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   31.566690][   T20] usb 3-1: Using ep0 maxpacket: 16
[   31.636702][    T5] usb 1-1: device descriptor read/64, error -71
[   31.686800][   T20] usb 3-1: config 0 interface 0 has no altsetting 0
[   31.693457][   T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00
[   31.702596][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.713775][   T20] usb 3-1: config 0 descriptor??
[   31.766679][   T53] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   31.826723][  T370] usbhid 5-1:0.0: can't add hid device: -71
[   31.832733][  T370] usbhid: probe of 5-1:0.0 failed with error -71
[   31.840282][  T370] usb 5-1: USB disconnect, device number 2
[   31.916876][    T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   31.962659][  T511] Zero length message leads to an empty skb
[   32.016688][   T53] usb 4-1: Using ep0 maxpacket: 32
[   32.136690][   T53] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   32.144879][   T53] usb 4-1: config 0 has no interface number 0
[   32.216756][    T5] usb 1-1: device descriptor read/64, error -71
[   32.237509][   T20] apple 0003:05AC:0242.0002: unknown main item tag 0x4
[   32.244616][   T20] apple 0003:05AC:0242.0002: unknown global tag 0xd
[   32.251296][   T20] apple 0003:05AC:0242.0002: item 0 2 1 13 parsing failed
[   32.258642][   T20] apple 0003:05AC:0242.0002: parse failed
[   32.264422][   T20] apple: probe of 0003:05AC:0242.0002 failed with error -22
[   32.326707][   T53] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   32.335761][   T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.339788][  T513] F2FS-fs (loop4): invalid crc value
[   32.344403][   T53] usb 4-1: Product: syz
[   32.354039][   T53] usb 4-1: Manufacturer: syz
[   32.359306][   T53] usb 4-1: SerialNumber: syz
[   32.364591][   T53] usb 4-1: config 0 descriptor??
[   32.370864][  T513] F2FS-fs (loop4): Found nat_bits in checkpoint
[   32.391776][  T513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   32.407120][   T53] smsc95xx v2.0.0
[   32.438815][  T491] netlink: 'syz.2.47': attribute type 12 has an invalid length.
[   32.446542][  T491] netlink: 'syz.2.47': attribute type 29 has an invalid length.
[   32.454368][  T491] netlink: 148 bytes leftover after parsing attributes in process `syz.2.47'.
[   32.463487][  T491] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   32.471271][  T491] netlink: 35 bytes leftover after parsing attributes in process `syz.2.47'.
[   32.483709][   T20] usb 3-1: USB disconnect, device number 3
[   32.559561][  T521] FAULT_INJECTION: forcing a failure.
[   32.559561][  T521] name failslab, interval 1, probability 0, space 0, times 0
[   32.572266][  T521] CPU: 1 PID: 521 Comm: syz.4.53 Not tainted syzkaller #0
[   32.579363][  T521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.589483][  T521] Call Trace:
[   32.592774][  T521]  __dump_stack+0x21/0x24
[   32.597098][  T521]  dump_stack_lvl+0x1a7/0x208
[   32.601766][  T521]  ? show_regs_print_info+0x18/0x18
[   32.606943][  T521]  dump_stack+0x15/0x1c
[   32.611091][  T521]  should_fail+0x3ab/0x500
[   32.615505][  T521]  ? security_inode_alloc+0x33/0x110
[   32.620771][  T521]  __should_failslab+0xa4/0xe0
[   32.625512][  T521]  should_failslab+0x9/0x20
[   32.629993][  T521]  kmem_cache_alloc+0x3d/0x2d0
[   32.634732][  T521]  security_inode_alloc+0x33/0x110
[   32.639815][  T521]  inode_init_always+0x725/0x9c0
[   32.644887][  T521]  new_inode_pseudo+0x91/0x210
[   32.646755][    T5] usb 1-1: device descriptor read/64, error -71
[   32.649677][  T521]  do_accept+0x19b/0x6a0
[   32.660120][  T521]  ? __alloc_fd+0x570/0x570
[   32.664602][  T521]  ? __kasan_check_write+0x14/0x20
[   32.669720][  T521]  ? _raw_spin_trylock_bh+0x150/0x150
[   32.675104][  T521]  ? __ia32_sys_listen+0x290/0x290
[   32.680220][  T521]  __sys_accept4+0x10d/0x180
[   32.684791][  T521]  __x64_sys_accept+0x7d/0x90
[   32.689450][  T521]  do_syscall_64+0x31/0x40
[   32.693877][  T521]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   32.699755][  T521] RIP: 0033:0x7f03c8dd1019
[   32.704176][  T521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   32.723936][  T521] RSP: 002b:00007f03c782a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[   32.732336][  T521] RAX: ffffffffffffffda RBX: 00007f03c9058fa0 RCX: 00007f03c8dd1019
[   32.740292][  T521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   32.748253][  T521] RBP: 00007f03c782a090 R08: 0000000000000000 R09: 0000000000000000
[   32.756232][  T521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.764493][  T521] R13: 00007f03c9059038 R14: 00007f03c9058fa0 R15: 00007ffe49ea1588
[   32.766812][    T5] usb usb1-port1: attempt power cycle
[   32.784351][   T24] kauditd_printk_skb: 44 callbacks suppressed
[   32.784359][   T24] audit: type=1400 audit(1785535314.596:190): avc:  denied  { create } for  pid=522 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.846773][   T53] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   32.857914][   T53] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   32.957305][  T532] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   32.964675][  T532] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   32.974673][  T532] F2FS-fs (loop4): invalid crc value
[   32.980887][  T532] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   32.992339][   T25] usb 2-1: unable to get BOS descriptor or descriptor too short
[   33.004900][  T532] F2FS-fs (loop4): Start checkpoint disabled!
[   33.012140][  T532] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   33.019329][  T532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   33.066703][   T25] usb 2-1: unable to read config index 0 descriptor/start: -71
[   33.074406][   T25] usb 2-1: can't read configurations, error -71
[   33.105891][  T535] handle_bad_sector: 17234 callbacks suppressed
[   33.105899][  T535] attempt to access beyond end of device
[   33.105899][  T535] loop4: rw=2049, want=57344, limit=40427
[   33.124658][  T535] attempt to access beyond end of device
[   33.124658][  T535] loop4: rw=2049, want=49160, limit=40427
[   33.140486][  T535] attempt to access beyond end of device
[   33.140486][  T535] loop4: rw=2049, want=53248, limit=40427
[   33.168723][  T535] attempt to access beyond end of device
[   33.168723][  T535] loop4: rw=2049, want=61440, limit=40427
[   33.195015][  T535] attempt to access beyond end of device
[   33.195015][  T535] loop4: rw=2049, want=86016, limit=40427
[   33.196704][    T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   33.208269][  T535] attempt to access beyond end of device
[   33.208269][  T535] loop4: rw=2049, want=102408, limit=40427
[   33.214478][  T531] attempt to access beyond end of device
[   33.214478][  T531] loop4: rw=524288, want=53264, limit=40427
[   33.225578][  T535] attempt to access beyond end of device
[   33.225578][  T535] loop4: rw=2049, want=102416, limit=40427
[   33.237241][  T531] attempt to access beyond end of device
[   33.237241][  T531] loop4: rw=524288, want=53504, limit=40427
[   33.252370][  T535] attempt to access beyond end of device
[   33.252370][  T535] loop4: rw=2049, want=102424, limit=40427
[   33.264812][   T24] audit: type=1400 audit(1785535315.076:191): avc:  denied  { create } for  pid=531 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.291573][   T24] audit: type=1400 audit(1785535315.106:192): avc:  denied  { write } for  pid=531 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.406784][    T5] usb 1-1: device descriptor read/8, error -71
[   33.457138][  T551] bridge0: port 3(dummy0) entered blocking state
[   33.466192][  T551] bridge0: port 3(dummy0) entered disabled state
[   33.473056][  T551] device dummy0 entered promiscuous mode
[   33.473186][  T553] FAULT_INJECTION: forcing a failure.
[   33.473186][  T553] name failslab, interval 1, probability 0, space 0, times 0
[   33.479323][  T551] bridge0: port 3(dummy0) entered blocking state
[   33.491646][  T553] CPU: 1 PID: 553 Comm: syz.1.64 Not tainted syzkaller #0
[   33.497948][  T551] bridge0: port 3(dummy0) entered forwarding state
[   33.505095][  T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   33.522420][  T553] Call Trace:
[   33.525715][  T553]  __dump_stack+0x21/0x24
[   33.530048][  T553]  dump_stack_lvl+0x1a7/0x208
[   33.535395][  T553]  ? thaw_kernel_threads+0x220/0x220
[   33.541215][  T553]  ? show_regs_print_info+0x18/0x18
[   33.546762][  T553]  ? _raw_spin_lock+0x94/0xf0
[   33.551436][  T553]  ? _raw_spin_trylock_bh+0x150/0x150
[   33.556794][  T553]  dump_stack+0x15/0x1c
[   33.560967][  T553]  should_fail+0x3ab/0x500
[   33.565379][  T553]  ? __alloc_file+0x28/0x320
[   33.569955][  T553]  __should_failslab+0xa4/0xe0
[   33.574708][  T553]  should_failslab+0x9/0x20
[   33.579194][  T553]  kmem_cache_alloc+0x3d/0x2d0
[   33.583937][  T553]  __alloc_file+0x28/0x320
[   33.588348][  T553]  alloc_empty_file+0x97/0x180
[   33.593207][  T553]  alloc_file+0x59/0x580
[   33.597709][  T553]  alloc_file_pseudo+0x180/0x200
[   33.602644][  T553]  ? alloc_empty_file_noaccount+0x80/0x80
[   33.608359][  T553]  ? _raw_spin_lock+0x94/0xf0
[   33.613033][  T553]  ? _raw_spin_trylock_bh+0x150/0x150
[   33.618656][  T553]  ? security_inode_alloc+0xc0/0x110
[   33.623938][  T553]  sock_alloc_file+0xba/0x260
[   33.628604][  T553]  do_accept+0x3bc/0x6a0
[   33.632928][  T553]  ? __alloc_fd+0x570/0x570
[   33.637414][  T553]  ? __ia32_sys_listen+0x290/0x290
[   33.642510][  T553]  __sys_accept4+0x10d/0x180
[   33.647082][  T553]  __x64_sys_accept+0x7d/0x90
[   33.651826][  T553]  do_syscall_64+0x31/0x40
[   33.656220][  T553]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   33.662089][  T553] RIP: 0033:0x7f101ed43019
[   33.666507][  T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.686218][  T553] RSP: 002b:00007f101d79c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[   33.694612][  T553] RAX: ffffffffffffffda RBX: 00007f101efcafa0 RCX: 00007f101ed43019
[   33.702559][  T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   33.710509][  T553] RBP: 00007f101d79c090 R08: 0000000000000000 R09: 0000000000000000
[   33.718457][  T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.726422][  T553] R13: 00007f101efcb038 R14: 00007f101efcafa0 R15: 00007ffd0fd31d68
[   33.786705][    T5] usb 1-1: device descriptor read/8, error -71
[   33.796555][  T560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'.
[   33.805947][  T555] EXT4-fs (loop3): Ignoring removed orlov option
[   33.828015][  T555] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,resuid=0x0000000000000000,orlov,,errors=continue
[   33.841226][  T555] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.866160][  T551] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.61: bad orphan inode 13
[   33.879698][  T551] ext4_test_bit(bit=12, block=4) = 1
[   33.887791][  T551] is_bad_inode(inode)=0
[   33.892017][  T551] NEXT_ORPHAN(inode)=0
[   33.896123][  T551] max_ino=32
[   33.899539][  T551] i_nlink=1
[   33.902707][  T551] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000007,,errors=continue
[   33.919243][  T551] EXT4-fs warning (device loop4): dx_probe:818: inode #2: comm syz.4.61: Hash code is SIPHASH, but hash not in dirent
[   33.931724][  T551] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.61: Corrupt directory, running e2fsck is recommended
[   33.944806][  T551] EXT4-fs warning (device loop4): dx_probe:818: inode #2: comm syz.4.61: Hash code is SIPHASH, but hash not in dirent
[   33.957465][  T551] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.61: Corrupt directory, running e2fsck is recommended
[   33.970659][  T554] EXT4-fs error (device loop4): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.4.61: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[   33.995395][   T24] audit: type=1400 audit(1785535315.806:193): avc:  denied  { create } for  pid=549 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   34.116743][   T53] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[   34.128172][   T53] smsc95xx: probe of 4-1:0.67 failed with error -71
[   34.140302][   T53] usb 4-1: USB disconnect, device number 3
[   34.217616][  T574] F2FS-fs (loop2): fault_injection options not supported
[   34.224735][  T574] F2FS-fs (loop2): fault_type options not supported
[   34.232267][  T574] F2FS-fs (loop2): invalid crc value
[   34.238815][  T574] F2FS-fs (loop2): Found nat_bits in checkpoint
[   34.247750][   T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   34.264028][  T574] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   34.316793][    T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   34.366712][   T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   34.486728][   T25] usb 2-1: Using ep0 maxpacket: 16
[   34.526759][    T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.537725][    T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.547480][    T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   34.560649][    T5] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   34.570365][    T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.579030][    T5] usb 1-1: config 0 descriptor??
[   34.616776][  T314] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   34.626834][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   34.633459][   T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00
[   34.642648][   T20] usb 5-1: device descriptor read/64, error -71
[   34.649020][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.659020][   T25] usb 2-1: config 0 descriptor??
[   34.667274][   T24] audit: type=1400 audit(1785535316.486:194): avc:  denied  { name_bind } for  pid=588 comm="syz.3.74" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   34.668545][  T589] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   34.689075][   T24] audit: type=1400 audit(1785535316.486:195): avc:  denied  { node_bind } for  pid=588 comm="syz.3.74" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   34.689098][   T24] audit: type=1400 audit(1785535316.486:196): avc:  denied  { watch } for  pid=588 comm="syz.3.74" path="/9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   34.773926][  T590] futex_wake_op: syz.3.74 tries to shift op by -1; fix this program
[   34.976728][  T314] usb 3-1: config 0 has no interfaces?
[   34.982238][  T314] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   34.991436][  T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.999969][  T314] usb 3-1: config 0 descriptor??
[   35.037805][    T5] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   35.046820][    T5] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   35.056681][   T20] usb 5-1: device descriptor read/64, error -71
[   35.217161][   T25] apple 0003:05AC:0242.0004: unknown main item tag 0x4
[   35.224648][   T25] apple 0003:05AC:0242.0004: unknown global tag 0xd
[   35.231333][   T25] apple 0003:05AC:0242.0004: item 0 2 1 13 parsing failed
[   35.240032][   T25] apple 0003:05AC:0242.0004: parse failed
[   35.245820][   T25] apple: probe of 0003:05AC:0242.0004 failed with error -22
[   35.255738][   T25] usb 3-1: USB disconnect, device number 4
[   35.307229][  T547] syz.0.62 (547): /proc/547/oom_adj is deprecated, please use /proc/547/oom_score_adj instead.
[   35.317995][  T287] usb 1-1: USB disconnect, device number 6
[   35.318203][  T547] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -19
[   35.336762][   T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   35.418509][  T569] netlink: 'syz.1.68': attribute type 12 has an invalid length.
[   35.426699][  T569] netlink: 'syz.1.68': attribute type 29 has an invalid length.
[   35.434318][  T569] netlink: 148 bytes leftover after parsing attributes in process `syz.1.68'.
[   35.443454][  T569] netlink: 'syz.1.68': attribute type 3 has an invalid length.
[   35.451110][  T569] netlink: 35 bytes leftover after parsing attributes in process `syz.1.68'.
[   35.461539][  T314] usb 2-1: USB disconnect, device number 3
[   35.507764][  T595] FAULT_INJECTION: forcing a failure.
[   35.507764][  T595] name failslab, interval 1, probability 0, space 0, times 0
[   35.520818][  T595] CPU: 0 PID: 595 Comm: syz.3.75 Not tainted syzkaller #0
[   35.527917][  T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.537949][  T595] Call Trace:
[   35.541221][  T595]  __dump_stack+0x21/0x24
[   35.545524][  T595]  dump_stack_lvl+0x1a7/0x208
[   35.550180][  T595]  ? show_regs_print_info+0x18/0x18
[   35.555352][  T595]  dump_stack+0x15/0x1c
[   35.559499][  T595]  should_fail+0x3ab/0x500
[   35.564005][  T595]  ? security_file_alloc+0x33/0x120
[   35.569301][  T595]  __should_failslab+0xa4/0xe0
[   35.574136][  T595]  should_failslab+0x9/0x20
[   35.578640][  T595]  kmem_cache_alloc+0x3d/0x2d0
[   35.583378][  T595]  ? __alloc_file+0x28/0x320
[   35.587965][  T595]  security_file_alloc+0x33/0x120
[   35.592965][  T595]  __alloc_file+0xb5/0x320
[   35.597359][  T595]  alloc_empty_file+0x97/0x180
[   35.602112][  T595]  alloc_file+0x59/0x580
[   35.606335][  T595]  alloc_file_pseudo+0x180/0x200
[   35.606661][   T25] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   35.611279][  T595]  ? alloc_empty_file_noaccount+0x80/0x80
[   35.611290][  T595]  ? _raw_spin_lock+0x94/0xf0
[   35.611299][  T595]  ? _raw_spin_trylock_bh+0x150/0x150
[   35.611309][  T595]  ? security_inode_alloc+0xc0/0x110
[   35.611329][  T595]  sock_alloc_file+0xba/0x260
[   35.618877][   T20] usb 5-1: device descriptor read/64, error -71
[   35.624484][  T595]  do_accept+0x3bc/0x6a0
[   35.654782][  T595]  ? __alloc_fd+0x570/0x570
[   35.659258][  T595]  ? __ia32_sys_listen+0x290/0x290
[   35.664362][  T595]  __sys_accept4+0x10d/0x180
[   35.669187][  T595]  __x64_sys_accept+0x7d/0x90
[   35.673941][  T595]  do_syscall_64+0x31/0x40
[   35.678339][  T595]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   35.684210][  T595] RIP: 0033:0x7fce8e365019
[   35.688603][  T595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.708187][  T595] RSP: 002b:00007fce8cdbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[   35.716579][  T595] RAX: ffffffffffffffda RBX: 00007fce8e5ecfa0 RCX: 00007fce8e365019
[   35.724529][  T595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   35.732490][  T595] RBP: 00007fce8cdbe090 R08: 0000000000000000 R09: 0000000000000000
[   35.740440][  T595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.748386][  T595] R13: 00007fce8e5ed038 R14: 00007fce8e5ecfa0 R15: 00007fff0a03ca68
[   35.775329][  T597] netlink: 'syz.3.76': attribute type 16 has an invalid length.
[   35.783019][  T597] netlink: 'syz.3.76': attribute type 17 has an invalid length.
[   35.791353][  T597] device lo entered promiscuous mode
[   35.797298][  T597] device tunl0 entered promiscuous mode
[   35.803265][  T597] device gre0 entered promiscuous mode
[   35.809169][  T597] device gretap0 entered promiscuous mode
[   35.814899][  T597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   35.863253][   T24] audit: type=1400 audit(1785535317.676:197): avc:  denied  { read } for  pid=600 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   35.870425][  T598] EXT4-fs (loop3): orphan cleanup on readonly fs
[   35.893795][  T598] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   35.896699][   T25] usb 3-1: device descriptor read/64, error -71
[   35.902424][  T598] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   35.923968][  T598] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #13: comm syz.3.76: attempt to clear invalid blocks 2 len 1
[   35.936920][  T598] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.76: invalid indirect mapped block 1819239214 (level 0)
[   35.937023][  T604] exfat: Deprecated parameter 'utf8'
[   35.951485][  T598] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.76: invalid indirect mapped block 1819239214 (level 1)
[   35.956239][  T604] exfat: Deprecated parameter 'utf8'
[   35.970288][  T598] EXT4-fs (loop3): 1 truncate cleaned up
[   35.980755][  T604] exfat: Deprecated parameter 'namecase'
[   35.981027][  T598] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue
[   35.986393][  T604] exfat: Deprecated parameter 'namecase'
[   36.005513][  T604] exfat: Deprecated parameter 'namecase'
[   36.016758][   T20] usb 5-1: device descriptor read/64, error -71
[   36.092966][  T604] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x902e0124, utbl_chksum : 0xe619d30d)
[   36.135037][  T607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.138077][   T20] usb usb5-port1: attempt power cycle
[   36.152536][  T607] EXT4-fs (loop3): 1 truncate cleaned up
[   36.157328][   T24] audit: type=1400 audit(1785535317.966:198): avc:  denied  { mounton } for  pid=603 comm="syz.0.78" path="/7/file0/file0" dev="loop0" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   36.158394][  T607] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   36.296660][   T25] usb 3-1: device descriptor read/64, error -71
[   36.486667][  T314] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   36.566684][   T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   36.574222][   T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   36.726771][  T314] usb 2-1: Using ep0 maxpacket: 8
[   36.746777][   T20] usb 5-1: device descriptor read/8, error -71
[   36.786468][   T24] audit: type=1400 audit(1785535318.596:199): avc:  denied  { setopt } for  pid=618 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   36.846699][   T25] usb 3-1: device descriptor read/64, error -71
[   36.856727][  T314] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[   36.864821][  T314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   36.874945][  T314] usb 2-1: config 0 has no interface number 0
[   37.016728][   T20] usb 5-1: device descriptor read/8, error -71
[   37.036908][  T314] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   37.045989][  T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.045999][  T314] usb 2-1: Product: syz
[   37.046007][  T314] usb 2-1: Manufacturer: syz
[   37.046016][  T314] usb 2-1: SerialNumber: syz
[   37.055304][  T314] usb 2-1: config 0 descriptor??
[   37.087316][  T314] uvcvideo: Found UVC 0.04 device syz (046d:08c3)
[   37.093870][  T314] uvcvideo: No valid video chain found.
[   37.160974][  T631] FAULT_INJECTION: forcing a failure.
[   37.160974][  T631] name failslab, interval 1, probability 0, space 0, times 0
[   37.173724][  T631] CPU: 0 PID: 631 Comm: syz.4.86 Not tainted syzkaller #0
[   37.180829][  T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.190863][  T631] Call Trace:
[   37.194141][  T631]  __dump_stack+0x21/0x24
[   37.198453][  T631]  dump_stack_lvl+0x1a7/0x208
[   37.203143][  T631]  ? show_regs_print_info+0x18/0x18
[   37.208332][  T631]  ? unwind_get_return_address+0x4d/0x90
[   37.213948][  T631]  ? stack_trace_save+0xf0/0xf0
[   37.218778][  T631]  dump_stack+0x15/0x1c
[   37.222929][  T631]  should_fail+0x3ab/0x500
[   37.227328][  T631]  ? avc_alloc_node+0x83/0x340
[   37.232071][  T631]  __should_failslab+0xa4/0xe0
[   37.236659][   T25] usb 3-1: device descriptor read/64, error -71
[   37.236823][  T631]  should_failslab+0x9/0x20
[   37.247552][  T631]  kmem_cache_alloc+0x3d/0x2d0
[   37.252295][  T631]  avc_alloc_node+0x83/0x340
[   37.256867][  T631]  ? __kasan_slab_alloc+0xb7/0xe0
[   37.261867][  T631]  ? slab_post_alloc_hook+0x5d/0x2f0
[   37.267127][  T631]  ? kmem_cache_alloc+0x15a/0x2d0
[   37.272127][  T631]  ? security_file_alloc+0x33/0x120
[   37.277300][  T631]  ? __alloc_file+0xb5/0x320
[   37.281876][  T631]  ? alloc_file+0x59/0x580
[   37.289806][  T631]  ? alloc_file_pseudo+0x180/0x200
[   37.294898][  T631]  ? sock_alloc_file+0xba/0x260
[   37.299730][  T631]  ? do_accept+0x3bc/0x6a0
[   37.304147][  T631]  ? __sys_accept4+0x10d/0x180
[   37.308909][  T631]  ? __x64_sys_accept+0x7d/0x90
[   37.313758][  T631]  ? avc_xperms_free+0x270/0x270
[   37.319134][  T631]  avc_update_node+0x50/0x750
[   37.323785][  T631]  avc_denied+0x133/0x1b0
[   37.328094][  T631]  avc_has_perm+0x363/0x3d0
[   37.332572][  T631]  ? avc_has_perm_noaudit+0x260/0x260
[   37.337921][  T631]  ? percpu_counter_add_batch+0x13c/0x160
[   37.343624][  T631]  selinux_socket_accept+0x268/0x570
[   37.348903][  T631]  ? alloc_file+0x448/0x580
[   37.353384][  T631]  ? selinux_socket_listen+0x340/0x340
[   37.357021][   T25] usb usb3-port1: attempt power cycle
[   37.359072][  T631]  ? _raw_spin_lock+0x94/0xf0
[   37.359091][  T631]  ? _raw_spin_trylock_bh+0x150/0x150
[   37.374463][  T631]  ? security_inode_alloc+0xc0/0x110
[   37.379753][  T631]  security_socket_accept+0x6b/0xa0
[   37.384948][  T631]  do_accept+0x410/0x6a0
[   37.389192][  T631]  ? __alloc_fd+0x570/0x570
[   37.393678][  T631]  ? __ia32_sys_listen+0x290/0x290
[   37.398772][  T631]  __sys_accept4+0x10d/0x180
[   37.403356][  T631]  __x64_sys_accept+0x7d/0x90
[   37.408042][  T631]  do_syscall_64+0x31/0x40
[   37.412456][  T631]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   37.418409][  T631] RIP: 0033:0x7f03c8dd1019
[   37.422843][  T631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.436722][  T593] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   37.442613][  T631] RSP: 002b:00007f03c782a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[   37.442625][  T631] RAX: ffffffffffffffda RBX: 00007f03c9058fa0 RCX: 00007f03c8dd1019
[   37.442630][  T631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   37.442636][  T631] RBP: 00007f03c782a090 R08: 0000000000000000 R09: 0000000000000000
[   37.442641][  T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.442657][  T631] R13: 00007f03c9059038 R14: 00007f03c9058fa0 R15: 00007ffe49ea1588
[   37.505715][   T53] usb 2-1: USB disconnect, device number 4
[   37.696726][  T593] usb 4-1: Using ep0 maxpacket: 32
[   37.766685][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   37.816748][   T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   37.824304][  T593] usb 4-1: config 69 has an invalid descriptor of length 0, skipping remainder of the config
[   37.834546][  T593] usb 4-1: config 69 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   37.844442][  T593] usb 4-1: config 69 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[   37.854349][  T593] usb 4-1: config 69 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   37.906780][   T20] usb 5-1: Using ep0 maxpacket: 16
[   37.986903][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.997977][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.007726][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   38.022795][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   38.032847][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.041059][  T593] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[   38.054659][   T25] usb 3-1: config 0 descriptor??
[   38.059945][  T593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.069364][  T593] usb 4-1: Product: syz
[   38.073547][  T593] usb 4-1: Manufacturer: syz
[   38.078461][  T593] usb 4-1: SerialNumber: syz
[   38.196714][   T20] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   38.205828][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.213874][   T20] usb 5-1: Product: syz
[   38.218081][   T20] usb 5-1: Manufacturer: syz
[   38.222649][   T20] usb 5-1: SerialNumber: syz
[   38.317623][  T633] udc-core: couldn't find an available UDC or it's busy
[   38.324617][  T633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   38.376674][  T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   38.478948][  T593] usb 4-1: USB disconnect, device number 4
[   38.547472][   T25] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   38.556318][   T25] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   38.616677][  T314] usb 2-1: Using ep0 maxpacket: 16
[   38.736997][  T314] usb 2-1: config 0 interface 0 has no altsetting 0
[   38.743775][  T314] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00
[   38.752965][  T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.761799][  T314] usb 2-1: config 0 descriptor??
[   38.826923][   T53] usb 3-1: USB disconnect, device number 7
[   38.827911][  T635] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -19
[   38.926732][   T20] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[   38.952034][   T20] usb 5-1: USB disconnect, device number 6
[   38.961214][  T646] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   38.977108][  T645] process 'syz.3.91' launched './file0' with NULL argv: empty string added
[   38.987653][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   38.987663][   T24] audit: type=1400 audit(1785535320.806:202): avc:  denied  { create } for  pid=644 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   39.256689][    T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   39.287276][  T314] apple 0003:05AC:0242.0006: unknown main item tag 0x4
[   39.294176][  T314] apple 0003:05AC:0242.0006: unknown global tag 0xd
[   39.300929][  T314] apple 0003:05AC:0242.0006: item 0 2 1 13 parsing failed
[   39.308192][  T314] apple 0003:05AC:0242.0006: parse failed
[   39.313954][  T314] apple: probe of 0003:05AC:0242.0006 failed with error -22
[   39.365563][   T24] audit: type=1400 audit(1785535321.176:203): avc:  denied  { nlmsg_write } for  pid=654 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   39.433532][  T657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   39.450898][   T24] audit: type=1400 audit(1785535321.266:204): avc:  denied  { nlmsg_read } for  pid=656 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   39.489202][  T642] netlink: 'syz.1.90': attribute type 12 has an invalid length.
[   39.504482][  T642] netlink: 'syz.1.90': attribute type 29 has an invalid length.
[   39.508022][  T661] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   39.512339][  T642] netlink: 148 bytes leftover after parsing attributes in process `syz.1.90'.
[   39.520817][    T5] usb 4-1: Using ep0 maxpacket: 16
[   39.529865][  T642] netlink: 'syz.1.90': attribute type 3 has an invalid length.
[   39.542460][  T642] netlink: 35 bytes leftover after parsing attributes in process `syz.1.90'.
[   39.551509][  T661] FAT-fs (loop2): Filesystem has been set read-only
[   39.562219][  T314] usb 2-1: USB disconnect, device number 5
[   39.576824][  T661] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   39.595098][   T24] audit: type=1400 audit(1785535321.406:205): avc:  denied  { unlink } for  pid=666 comm="syz.4.96" name="#1" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   39.617075][   T24] audit: type=1400 audit(1785535321.416:206): avc:  denied  { ioctl } for  pid=666 comm="syz.4.96" path="socket:[17443]" dev="sockfs" ino=17443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.688636][  T670] EXT4-fs (loop2): Test dummy encryption mode enabled
[   39.695636][  T670] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   39.705158][    T5] usb 4-1: unable to get BOS descriptor or descriptor too short
[   39.714705][  T670] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   39.722868][  T670] System zones: 0-5
[   39.727345][  T670] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   39.786799][    T5] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config
[   39.806417][    T5] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   39.856129][   T24] audit: type=1400 audit(1785535321.666:207): avc:  denied  { write } for  pid=679 comm="syz.2.99" name="udplite6" dev="proc" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   39.857511][  T680] cgroup: syz.2.99 (680) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   39.895196][  T680] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   39.916732][    T5] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config
[   39.927097][    T5] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   40.016831][    T5] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config
[   40.027106][    T5] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   40.086698][   T53] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   40.116817][    T5] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config
[   40.127176][    T5] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   40.296797][    T5] usb 4-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40
[   40.305881][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9
[   40.313896][    T5] usb 4-1: Product: syz
[   40.318264][    T5] usb 4-1: Manufacturer: syz
[   40.322835][    T5] usb 4-1: SerialNumber: syz
[   40.426700][  T593] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   40.446700][   T53] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   40.455824][   T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.464490][   T53] usb 1-1: config 0 descriptor??
[   40.516339][   T24] audit: type=1400 audit(1785535322.326:208): avc:  denied  { setopt } for  pid=688 comm="syz.4.103" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.562785][   T24] audit: type=1400 audit(1785535322.376:209): avc:  denied  { connect } for  pid=693 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.637108][    T5] usb 4-1: MIDIStreaming interface descriptor not found
[   40.648737][    T5] usb 4-1: USB disconnect, device number 5
[   40.797059][   T53] usb 1-1: Cannot read MAC address
[   40.802397][   T53] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[   40.806748][  T593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.817724][   T53] usb 1-1: USB disconnect, device number 7
[   40.827762][  T593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.837750][  T593] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   40.850995][  T593] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   40.860785][  T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.876781][  T593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.885694][   T24] audit: type=1400 audit(1785535322.696:210): avc:  denied  { read } for  pid=699 comm="syz.2.106" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   40.911710][  T593] usb 2-1: config 0 descriptor??
[   40.929937][   T24] audit: type=1400 audit(1785535322.696:211): avc:  denied  { open } for  pid=699 comm="syz.2.106" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   41.124625][  T711] incfs: Error accessing: ./file0.
[   41.130036][  T711] incfs: mount failed -2
[   41.135822][  T711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.110'.
[   41.145781][  T711] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.153204][  T711] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   41.329570][  T719] F2FS-fs (loop0): invalid crc value
[   41.336154][  T719] F2FS-fs (loop0): Found nat_bits in checkpoint
[   41.357388][  T719] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   41.395760][  T313] ==================================================================
[   41.395883][  T693] ------------[ cut here ]------------
[   41.403849][  T313] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0
[   41.403858][  T313] Read of size 8 at addr ffff8881099c4080 by task kworker/u4:5/313
[   41.403860][  T313] 
[   41.403870][  T313] CPU: 0 PID: 313 Comm: kworker/u4:5 Not tainted syzkaller #0
[   41.403874][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.403883][  T313] Workqueue: l2tp l2tp_tunnel_del_work
[   41.403891][  T313] Call Trace:
[   41.403903][  T313]  __dump_stack+0x21/0x24
[   41.403911][  T313]  dump_stack_lvl+0x1a7/0x208
[   41.403920][  T313]  ? show_regs_print_info+0x18/0x18
[   41.403928][  T313]  ? thaw_kernel_threads+0x220/0x220
[   41.403938][  T313]  print_address_description+0x7f/0x2c0
[   41.403948][  T313]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[   41.403957][  T313]  kasan_report+0x100/0x140
[   41.403974][  T313]  ? __switch_to_asm+0x3a/0x60
[   41.403982][  T313]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[   41.403998][  T313]  __asan_report_load8_noabort+0x14/0x20
[   41.410510][  T593] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   41.417057][  T313]  l2tp_tunnel_del_work+0xcd/0x3d0
[   41.417067][  T313]  process_one_work+0x6fd/0xbc0
[   41.417075][  T313]  worker_thread+0xa8e/0x13c0
[   41.417087][  T313]  kthread+0x324/0x3b0
[   41.417095][  T313]  ? worker_clr_flags+0x190/0x190
[   41.417104][  T313]  ? kthread_blkcg+0xd0/0xd0
[   41.417113][  T313]  ret_from_fork+0x1f/0x30
[   41.417118][  T313] 
[   41.417124][  T313] Allocated by task 694:
[   41.417134][  T313]  __kasan_kmalloc+0xd4/0x100
[   41.417143][  T313]  __kmalloc+0x19f/0x330
[   41.417152][  T313]  l2tp_session_create+0x39/0xb60
[   41.417160][  T313]  pppol2tp_connect+0xbf5/0x1640
[   41.417167][  T313]  __sys_connect+0x3ce/0x450
[   41.417182][  T313]  __x64_sys_connect+0x7a/0x90
[   41.425443][  T693] WARNING: CPU: 1 PID: 693 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[   41.427351][  T313]  do_syscall_64+0x31/0x40
[   41.427358][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   41.427361][  T313] 
[   41.427365][  T313] Freed by task 696:
[   41.427373][  T313]  kasan_set_track+0x4a/0x70
[   41.427380][  T313]  kasan_set_free_info+0x23/0x40
[   41.427394][  T313]  ____kasan_slab_free+0x125/0x160
[   41.434816][  T693] Modules linked in:
[   41.444850][  T313]  __kasan_slab_free+0x11/0x20
[   41.444857][  T313]  slab_free_freelist_hook+0xc5/0x190
[   41.444865][  T313]  kfree+0xc0/0x270
[   41.444873][  T313]  l2tp_session_put+0xb2/0x1a0
[   41.444880][  T313]  pppol2tp_ioctl+0x748/0x960
[   41.444889][  T313]  pppox_ioctl+0x1e4/0x320
[   41.444904][  T313]  sock_do_ioctl+0xda/0x380
[   41.452304][  T593] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   41.453607][  T313]  sock_ioctl+0x472/0x740
[   41.459900][  T693] 
[   41.462556][  T313]  __se_sys_ioctl+0x121/0x1a0
[   41.462564][  T313]  __x64_sys_ioctl+0x7b/0x90
[   41.462572][  T313]  do_syscall_64+0x31/0x40
[   41.462588][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   41.467859][  T693] CPU: 1 PID: 693 Comm: syz.4.105 Not tainted syzkaller #0
[   41.473012][  T313] 
[   41.478622][  T693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.483808][  T313] The buggy address belongs to the object at ffff8881099c4000
[   41.483808][  T313]  which belongs to the cache kmalloc-512 of size 512
[   41.488325][  T693] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[   41.493019][  T313] The buggy address is located 128 bytes inside of
[   41.493019][  T313]  512-byte region [ffff8881099c4000, ffff8881099c4200)
[   41.493023][  T313] The buggy address belongs to the page:
[   41.493052][  T313] page:ffffea0004267100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1099c4
[   41.498365][  T693] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03
[   41.503906][  T313] head:ffffea0004267100 order:2 compound_mapcount:0 compound_pincount:0
[   41.511678][  T693] RSP: 0018:ffffc9000148fd68 EFLAGS: 00010293
[   41.516680][  T313] flags: 0x4000000000010200(slab|head)
[   41.516696][  T313] raw: 4000000000010200 ffffea00042ed000 0000000400000004 ffff888100043080
[   41.521525][  T693] 
[   41.526176][  T313] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   41.526180][  T313] page dumped because: kasan: bad access detected
[   41.526184][  T313] page_owner tracks the page as allocated
[   41.526204][  T313] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 280, ts 24451409402, free_ts 24446176490
[   41.526222][  T313]  prep_new_page+0x176/0x190
[   41.530328][  T693] RAX: ffffffff842ec3a7 RBX: ffff88810baf2800 RCX: ffff88811c29a780
[   41.535258][  T313]  get_page_from_freelist+0x225f/0x23f0
[   41.539836][  T693] RDX: 0000000000000000 RSI: 000000000c0cb800 RDI: 000000000c04eb7d
[   41.544211][  T313]  __alloc_pages_nodemask+0x29a/0x640
[   41.544219][  T313]  new_slab+0x84/0x3f0
[   41.544232][  T313]  ___slab_alloc+0x2f8/0x4c0
[   41.546570][  T693] RBP: ffffc9000148fd88 R08: ffff88810baf2883 R09: 1ffff1102175e510
[   41.550750][  T313]  __slab_alloc+0x63/0xa0
[   41.550758][  T313]  __kmalloc_track_caller+0x1e4/0x310
[   41.550767][  T313]  __alloc_skb+0xdc/0x520
[   41.550780][  T313]  netlink_sendmsg+0x693/0xb70
[   41.555473][  T693] R10: dffffc0000000000 R11: ffffed102175e511 R12: dffffc0000000000
[   41.559674][  T313]  __sys_sendto+0x467/0x620
[   41.559681][  T313]  __x64_sys_sendto+0xe5/0x100
[   41.559689][  T313]  do_syscall_64+0x31/0x40
[   41.559697][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   41.559706][  T313] page last free stack trace:
[   41.564745][  T693] R13: dffffc0000000000 R14: 000000000c0cb800 R15: ffff8881099c4000
[   41.569617][  T313]  __free_pages_ok+0x80b/0x830
[   41.569625][  T313]  __free_pages+0xd8/0x390
[   41.569632][  T313]  __free_slab+0xcf/0x190
[   41.569644][  T313]  unfreeze_partials+0x150/0x180
[   41.574300][  T693] FS:  00005555856b6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   41.579023][  T313]  put_cpu_partial+0xc1/0x180
[   41.579030][  T313]  __slab_free+0x2c9/0x3a0
[   41.579038][  T313]  ___cache_free+0x10e/0x130
[   41.579046][  T313]  qlink_free+0x50/0x90
[   41.579059][  T313]  qlist_free_all+0x5f/0xb0
[   41.589088][  T693] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.593412][  T313]  kasan_quarantine_reduce+0x14a/0x160
[   41.599413][  T693] CR2: 0000555580534908 CR3: 000000011cdee000 CR4: 00000000003506a0
[   41.601613][  T313]  __kasan_slab_alloc+0x2f/0xe0
[   41.605476][  T693] DR0: 00000000000000b7 DR1: 0000000000000000 DR2: 0000000000000000
[   41.610040][  T313]  slab_post_alloc_hook+0x5d/0x2f0
[   41.610047][  T313]  __kmalloc+0x17b/0x330
[   41.610056][  T313]  qdisc_alloc+0x79/0x720
[   41.610063][  T313]  qdisc_create_dflt+0x6b/0x390
[   41.610070][  T313]  dev_activate+0x292/0x11c0
[   41.610077][  T313] 
[   41.615029][  T693] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.620066][  T313] Memory state around the buggy address:
[   41.620075][  T313]  ffff8881099c3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   41.620082][  T313]  ffff8881099c4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.620092][  T313] >ffff8881099c4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.623961][  T693] Call Trace:
[   41.628690][  T313]                    ^
[   41.628696][  T313]  ffff8881099c4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.628703][  T313]  ffff8881099c4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.628707][  T313] ==================================================================
[   41.628711][  T313] Disabling lock debugging due to kernel taint
[   41.630168][   T53] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   41.637229][  T693]  pppol2tp_release+0x150/0x2b0
[   41.643861][  T313] ------------[ cut here ]------------
[   41.648495][  T693]  sock_close+0xb8/0x200
[   41.664222][  T313] refcount_t: underflow; use-after-free.
[   41.669147][  T693]  ? sock_mmap+0xa0/0xa0
[   41.686903][  T313] WARNING: CPU: 0 PID: 313 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[   41.738547][  T693]  __fput+0x2dc/0x730
[   41.755345][  T313] Modules linked in:
[   41.818000][  T693]  ____fput+0x15/0x20
[   41.824057][  T313] 
[   41.830779][  T693]  task_work_run+0x127/0x190
[   41.836203][  T313] CPU: 0 PID: 313 Comm: kworker/u4:5 Tainted: G    B             syzkaller #0
[   41.855427][  T693]  exit_to_user_mode_loop+0xcb/0xe0
[   41.859818][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.868839][  T693]  exit_to_user_mode_prepare+0x76/0xa0
[   41.873231][  T313] Workqueue: l2tp l2tp_tunnel_del_work
[   41.881701][  T693]  syscall_exit_to_user_mode+0x1d/0x40
[   41.886639][  T313] 
[   41.890871][  T693]  do_syscall_64+0x3d/0x40
[   41.895220][  T313] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[   41.895229][  T313] Code: 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 0f 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40 85 e8 60 ca 3a 02 <0f> 0b eb a7 e8 57 89 26 ff c6 05 92 75 82 04 01 48 c7 c7 60 48 40
[   41.895241][  T313] RSP: 0018:ffffc90000d27c58 EFLAGS: 00010246
[   41.903589][  T693]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   41.915742][  T313] 
[   41.917464][  T693] RIP: 0033:0x7f03c8dd1019
[   41.922414][    T5] usb 2-1: USB disconnect, device number 6
[   41.930273][  T693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.935234][  T687] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -19
[   41.940444][  T693] RSP: 002b:00007ffe49ea16e8 EFLAGS: 00000246
[   41.944006][  T313] RAX: 0adb6c073d250600 RBX: 0000000000000003 RCX: ffff88810dc562c0
[   41.949717][  T693]  ORIG_RAX: 00000000000001b4
[   41.955050][  T313] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   41.962516][  T693] RAX: 0000000000000000 RBX: 00007f03c905ada0 RCX: 00007f03c8dd1019
[   41.967251][   T53] usb 4-1: Using ep0 maxpacket: 16
[   41.973628][  T693] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   41.977389][  T313] RBP: ffffc90000d27c68 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7
[   41.981248][  T693] RBP: 00007f03c905ada0 R08: 0000000000000006 R09: 0000000000000000
[   41.993083][  T313] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff8881099c6020
[   41.994602][  T693] R10: 00007f03c905acb0 R11: 0000000000000246 R12: 000000000000a198
[   42.001644][  T313] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[   42.003532][  T693] R13: 00007f03c905918c R14: 0000000000009ec6 R15: 00007f03c9059180
[   42.007795][  T313] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   42.012256][  T693] ---[ end trace 50d267c7fd284f37 ]---
[   42.019498][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.449229][  T313] CR2: 000000110c30a621 CR3: 000000010d561000 CR4: 00000000003506b0
[   42.457594][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   42.465586][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   42.473761][  T313] Call Trace:
[   42.477190][  T313]  l2tp_session_put+0xcb/0x1a0
[   42.481964][  T313]  l2tp_session_delete+0x3a9/0x4a0
[   42.487257][   T53] usb 4-1: config 0 interface 0 has no altsetting 0
[   42.488709][  T313]  l2tp_tunnel_del_work+0x180/0x3d0
[   42.493855][   T53] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00
[   42.499230][  T313]  process_one_work+0x6fd/0xbc0
[   42.508217][   T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.517266][  T313]  worker_thread+0xa8e/0x13c0
[   42.525741][   T53] usb 4-1: config 0 descriptor??
[   42.530833][  T313]  kthread+0x324/0x3b0
[   42.534962][  T313]  ? worker_clr_flags+0x190/0x190
[   42.540191][  T313]  ? kthread_blkcg+0xd0/0xd0
[   42.544766][  T313]  ret_from_fork+0x1f/0x30
[   42.549246][  T313] ---[ end trace 50d267c7fd284f38 ]---
[   43.027460][   T53] apple 0003:05AC:0242.0008: unknown main item tag 0x4
[   43.034368][   T53] apple 0003:05AC:0242.0008: unknown global tag 0xd
[   43.041021][   T53] apple 0003:05AC:0242.0008: item 0 2 1 13 parsing failed
[   43.048515][   T53] apple 0003:05AC:0242.0008: parse failed
[   43.054265][   T53] apple: probe of 0003:05AC:0242.0008 failed with error -22
[   43.234838][  T717] netlink: 'syz.3.112': attribute type 12 has an invalid length.
[   43.242639][  T717] netlink: 'syz.3.112': attribute type 29 has an invalid length.
[   43.250368][  T717] netlink: 148 bytes leftover after parsing attributes in process `syz.3.112'.
[   43.259322][  T717] netlink: 'syz.3.112': attribute type 3 has an invalid length.
[   43.266965][  T717] netlink: 35 bytes leftover after parsing attributes in process `syz.3.112'.
[   43.277257][   T20] usb 4-1: USB disconnect, device number 6