last executing test programs:

2m19.924845853s ago: executing program 32 (id=82):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f00000008c0)={0x40, 0x23, 0x2c, {0x2c, 0x26, "a3f4000100000000000000cfb105d1e1ecc800e2eb56fea9ffe4e5597f1ec71b3aebfed8b166191ce457"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m48.775363273s ago: executing program 5 (id=278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m48.619556318s ago: executing program 5 (id=281):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

1m48.570902063s ago: executing program 33 (id=281):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

1m48.376677782s ago: executing program 34 (id=287):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m23.558544491s ago: executing program 35 (id=507):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r1}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))

1m15.464115236s ago: executing program 0 (id=584):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
close(r1)

1m15.432333149s ago: executing program 0 (id=585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009800)=@newchain={0x24, 0x64, 0x5b5db92f4c13419d, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x2, 0x1}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

1m15.389602793s ago: executing program 0 (id=587):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x2000, 0x2, 0xd1e2, 0xa, 0xa0, 0x0, 0xa3}, {0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x7, 0x6, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3826}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffd, 0x33}, 0x14, @in=@multicast1, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x7}}, 0xe8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1m15.295319552s ago: executing program 0 (id=592):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/196, 0xc4}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4)

1m14.439192417s ago: executing program 0 (id=598):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0xf, 0xf4, 0x2, 0xfd, 0xd7, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0x2, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x1, 0x3, 0x9}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x4a, 0x2, 0xd, 0x6, 0xff, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x55, 0xff, 0x80, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xeeef0000, 0x2, 0xd, 0x5, 0xff, 0x3, 0xa, 0x0, 0x54, 0x6, 0x0, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffc, 0x0, [{0xc, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd, 0x4, '\x00', 0x4b}, {0xb0, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x3, '\x00', 0x7}, {0x8, 0xc, 0x8, '\x00', 0xa8}, {0x2, 0x91, 0x6, '\x00', 0xff}, {0x7, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8d, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xaa, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0xe2, 0x9, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x6, 0x2, 0xc, '\x00', 0x3}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x4, 0x7, '\x00', 0x4}, {0xd, 0x40, 0xa, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0x2}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m14.362539084s ago: executing program 0 (id=599):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m14.342771006s ago: executing program 36 (id=599):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m3.327503938s ago: executing program 6 (id=687):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
unshare(0x4020400)
fdatasync(r0)

1m3.241834927s ago: executing program 6 (id=690):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f800ffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0)

1m2.774470533s ago: executing program 6 (id=695):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040c01)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xfdff)

1m2.035750345s ago: executing program 4 (id=702):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000600)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9cz\xd4\x18,\f\xd4s\xb2\x99c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x80\x00\x00\x00\x00\x00\x00\x00\n\xde\x9e8-\x82\xee\x99[L\xd2\xf4\x9a\xdd\xdah\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\xb6W\x00\x00\x00\x00\x00\x00Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xc8\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\xff\xff\xff\x7f\x00\x00\x00\x00\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\t\x00\x00\x00\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x15\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee\x9e\xa0`\x8fV\x1eq\x17\xc7\x92\xcen\x15\x8b\xbe\xcc\xbb?\xd3\x0e]\v$nF\x05\x14\xa7\xca6\xdah\x1c\xf0\xe4|d\x15\x98\xb3\xd6\x11O\xd8F\xc5\xc6~\xf3[\x1e\xf5{\xefJ\xed*\xe5\xaf\xc4co3\x94\x9f\xb8\xc5S\x99W\xc3Hs\xb9\\\x96\xb8x\xbb\xa4\xfa\x01\x018\xea\xa3\xff\x96\x8a\xf9\x18@\xfbL\xa5^i+\vt\xbd\xb4L\xd5\xb0\'o\xd2\xbfq\x8f\xb0`\xb6\xdb\x98:\x15\xf8\n\xcb\xbd\xb6Vo\xf1\x05\xa1\xdf{t\x10\x1cD\x1c~\f\xe6\xa5\xb5N\xf2*\x1d\xfe\x95 ?3\xe7\xb5\xd3\x8d\xe0\x18\x7fb\x06\xf6=\xb9\xbf\x9c\xcb\xbd\xca*\xc34\'\xe5\x89^9\xbb\x15GM\xad\xc9\xfc\xcf\xba\xa7g\x9d\xc8\xa90/\xdbK\xeb9\xb1\x1bw\xf4\xd9>\xac=\xba\x95\xc7|\x1e\x90\x8e\x9fi\xb34\x1a$R\x84O\x99\xc0\a\xc8\x9b\xcf\xad\xfd8\x89\x10W\x1b~fi|\x18\xb2\x00\x00\x00\x00\x00\x00\x00', 0x2)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r1, 0x409, 0xb)

1m1.972349812s ago: executing program 4 (id=703):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xcb, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m1.899773148s ago: executing program 6 (id=704):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0), 0x9, 0x269, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0)
creat(&(0x7f0000000140)='./bus\x00', 0x80)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000001})

1m1.5843341s ago: executing program 4 (id=706):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000140)=0x7, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r0, 0x0, r2, 0x0, 0x3000, 0x0)

1m0.959694651s ago: executing program 6 (id=708):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1m0.580010888s ago: executing program 4 (id=709):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6261636b67726f756e645f67633d6f66662c6e6f666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f78617474722c6772706a71756f74613d2c636865636b706f696e743d64697361626c652c00b49405881d23d0c95ec7f5f668e6544238"], 0x4, 0x550c, &(0x7f00000089c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zc7OxlbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/0nEAu8ZbDHiJ4jszszO7kB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+O4kjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+mR4ufwh6ozDvTqSAQAA4GyIi/o+hLCTbCymfaOd1f9JcU1a83//7Cgu6vnDdX/RF7V/2n77dffF8UDt0TjpTW+sDPoXj6bSfHKznG3P/e0VzezJZ+9e4uwLaXyw9sIwyZ5n9O3jx++1snCuimwBgH/jQtHnQfH7UNr36kwMgDOjWSq8i/o/btebEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAVhmvh6SKOQggLzUmc2tp7sHxc/2h9e6FoVx8+XA9fT+6Z3iIJIdxYGfQvVjqb2Xb33v1bS4NB/071wSshhLpGfyef/q2Pprg4hFqej+D/Cfbn8i97RvI5IUGNP5QAADiVkryldf1OsrGYnovmQ9j/4WD9/3opDlPW/7sfX90sj1Wu/3uVzXD2dVdvf969e+/+myu3l272b/Y/fetS7+3e5WtXrlzrZu9Kut6YAAAA8N+08lau/xvzR9f/z5fiMGX9/8V3va/KY8Xq/2NNFv3qzgQAAOBse/7VP/+IjjkftVrhy6XV1Tu90XH8+dLoWEOq/9hc3sr1fzxfd1YAAABAFYZr0YH1/+ulOEy5/v/Mjy/9XL5nHEI4l6//X1j+bHC9uunMtCr+nLjuOQIAAFCvc3krr/8n2f7/xnjLQyOE8MZrozj/N4BT1f/x+9/8VB6rvP//cnVTnEmNzuh5ZH0nhGan7owAAAA4zZ7KW1rs/55sLH7yy/kPW/b/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//RAE/8A==")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

1m0.347791401s ago: executing program 6 (id=711):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080))
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
chdir(&(0x7f0000001180)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1618c2, 0x85)

1m0.25721488s ago: executing program 37 (id=711):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080))
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
chdir(&(0x7f0000001180)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1618c2, 0x85)

1m0.118140724s ago: executing program 4 (id=715):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000050000000004000009"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

59.389947765s ago: executing program 4 (id=720):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0)

59.346924389s ago: executing program 38 (id=720):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0)

58.4257976s ago: executing program 5 (id=721):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b07007461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d097ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcef1bf1373669caaa2f19b9640000000000000000001200", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

58.334098168s ago: executing program 5 (id=731):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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")
mount$bind(0x0, 0x0, 0x0, 0x108061, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

58.311841571s ago: executing program 5 (id=732):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

58.103597612s ago: executing program 5 (id=733):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

57.834756518s ago: executing program 39 (id=733):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

44.029390794s ago: executing program 8 (id=852):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000070000000900000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000600), &(0x7f00000006c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

44.013131845s ago: executing program 8 (id=853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

43.861541741s ago: executing program 8 (id=854):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

43.854815591s ago: executing program 8 (id=855):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1536, &(0x7f00000034c0)="$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")
getdents(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

43.804223776s ago: executing program 8 (id=856):
socket$inet6(0xa, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
unshare(0x20000600)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$nl_xfrm(r0, 0x0, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_io_uring_setup(0x2d64, 0x0, &(0x7f0000000400), &(0x7f0000011000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)

43.727739424s ago: executing program 8 (id=857):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r2 = dup(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mknod$loop(&(0x7f0000000400)='./file0/file0\x00', 0x400, 0x0)

43.727620234s ago: executing program 40 (id=857):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r2 = dup(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mknod$loop(&(0x7f0000000400)='./file0/file0\x00', 0x400, 0x0)

5.18779529s ago: executing program 1 (id=1170):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10)
close(r0)

5.127552216s ago: executing program 1 (id=1171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x42)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)

5.025874606s ago: executing program 1 (id=1173):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000730000408000000081"])
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.868682021s ago: executing program 1 (id=1176):
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0x6, {0x6, 0x22, "261bfd85"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.972484699s ago: executing program 2 (id=1180):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
close(r0)

3.839512462s ago: executing program 2 (id=1185):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x6)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

3.737493192s ago: executing program 2 (id=1190):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2(0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

3.6627751s ago: executing program 3 (id=1193):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x44)

3.506058456s ago: executing program 2 (id=1194):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x18, &(0x7f00000026c0)={@flat=@weak_binder={0x77622a85, 0x101, 0x8000000000}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

3.402617785s ago: executing program 2 (id=1196):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0))

2.777126467s ago: executing program 7 (id=1198):
socket$inet6(0xa, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
unshare(0x20000600)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$nl_xfrm(r0, 0x0, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff8500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_io_uring_setup(0x2d64, 0x0, &(0x7f0000000400), &(0x7f0000011000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)

2.776794667s ago: executing program 3 (id=1199):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x1)

2.214293522s ago: executing program 1 (id=1201):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x23)

1.770890146s ago: executing program 7 (id=1202):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0xffe}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40)

1.703682993s ago: executing program 7 (id=1203):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)

1.608043662s ago: executing program 3 (id=1204):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)

1.52913547s ago: executing program 3 (id=1205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x10, 0xfffffe15, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180))

1.437683428s ago: executing program 3 (id=1207):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000002940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9200183afffe8000000000000000e0ffffff0000aafe8000000000000000000000000000aa88009078ce"], 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084)

1.289911793s ago: executing program 9 (id=1209):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
lseek(r2, 0x1, 0x1)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

1.059631606s ago: executing program 1 (id=1210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x4, @loopback}}}, 0x108)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0)

883.428443ms ago: executing program 9 (id=1211):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

480.545843ms ago: executing program 7 (id=1212):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x10, &(0x7f0000000440))

476.484993ms ago: executing program 9 (id=1213):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

363.926694ms ago: executing program 9 (id=1214):
socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$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")
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4010)
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

342.516446ms ago: executing program 7 (id=1215):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)

255.132875ms ago: executing program 9 (id=1216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))

39.620486ms ago: executing program 3 (id=1217):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaafe80000000000000000b80c45736527605b7fe167d081f"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000380)={0x0, 0x22, 0x2, {0x2, 0x8}}, &(0x7f0000000580)={0x0, 0x3, 0x8, @string={0x8, 0x3, "c6d46e38c16a"}}, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xb, "f22ec60b"}, @local=@item_012={0x2, 0x2, 0x2, 'fu'}]}}, 0x0}, 0x0)

39.313056ms ago: executing program 2 (id=1218):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g")
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}})

226.21µs ago: executing program 9 (id=1219):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

0s ago: executing program 7 (id=1220):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c)
sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000002480), 0x0, 0x40002003, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088)
unshare(0x64000600)

kernel console output (not intermixed with test programs):

roduct=0, SerialNumber=0
[   89.654612][  T976] usb 2-1: config 0 descriptor??
[   89.684316][   T28] audit: type=1400 audit(1761578528.921:308): avc:  denied  { mount } for  pid=1870 comm="syz.6.553" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   89.716849][   T28] audit: type=1400 audit(1761578528.991:309): avc:  denied  { unmount } for  pid=1089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   89.738093][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.751951][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.764077][   T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   89.790719][   T60] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   89.800869][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.818945][ T1879] syz.4.552[1879] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.819283][ T1879] syz.4.552[1879] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.904102][   T60] usb 9-1: config 0 descriptor??
[   90.091211][ T1881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.556'.
[   90.711519][ T1886] netlink: 48 bytes leftover after parsing attributes in process `syz.8.546'.
[   91.392730][ T1892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.531'.
[   91.528707][   T28] audit: type=1400 audit(1761578530.801:310): avc:  denied  { create } for  pid=1909 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   92.332136][   T60] usbhid 9-1:0.0: can't add hid device: -71
[   92.443275][   T60] usbhid: probe of 9-1:0.0 failed with error -71
[   92.480404][   T60] usb 9-1: USB disconnect, device number 2
[   92.511529][   T28] audit: type=1326 audit(1761578531.781:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1920 comm="syz.8.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b3198efc9 code=0x0
[   92.747810][   T28] audit: type=1400 audit(1761578532.021:312): avc:  denied  { bind } for  pid=1930 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.833636][   T28] audit: type=1400 audit(1761578532.101:313): avc:  denied  { write } for  pid=1930 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.833715][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'.
[   92.853978][   T28] audit: type=1400 audit(1761578532.101:314): avc:  denied  { nlmsg_write } for  pid=1930 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.000061][  T976] usbhid 2-1:0.0: can't add hid device: -71
[   93.011708][  T976] usbhid: probe of 2-1:0.0 failed with error -71
[   93.024964][  T976] usb 2-1: USB disconnect, device number 6
[   93.047127][ T1942] overlayfs: failed to clone upperpath
[   93.053739][ T1942] overlayfs: failed to clone upperpath
[   93.210157][ T1961] tipc: Failed to remove unknown binding: 66,1,1/0:3509926105/3509926107
[   93.218803][ T1961] tipc: Failed to remove unknown binding: 66,1,1/0:3509926105/3509926107
[   93.251971][ T1955] tipc: Started in network mode
[   93.257736][ T1955] tipc: Node identity fffffffa, cluster identity 4711
[   93.264775][ T1955] tipc: Node number set to 4294967290
[   93.391797][ T1983] loop4: detected capacity change from 0 to 512
[   93.402772][ T1983] EXT4-fs: Ignoring removed i_version option
[   93.409454][ T1983] EXT4-fs: Ignoring removed bh option
[   93.424000][  T343] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   93.428499][ T1983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   93.441207][ T1983] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.469848][  T285] EXT4-fs (loop4): unmounting filesystem.
[   93.523891][  T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   93.605183][  T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.616127][  T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.626109][  T343] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.639038][  T343] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.648133][  T343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.656807][  T343] usb 7-1: config 0 descriptor??
[   93.714938][  T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.725940][  T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.735701][  T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.748679][  T976] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.757738][  T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.766429][  T976] usb 2-1: config 0 descriptor??
[   94.066936][  T343] usbhid 7-1:0.0: can't add hid device: -71
[   94.073021][  T343] usbhid: probe of 7-1:0.0 failed with error -71
[   94.080349][  T343] usb 7-1: USB disconnect, device number 4
[   94.337484][ T2001] netlink: 48 bytes leftover after parsing attributes in process `syz.1.586'.
[   94.432095][ T2005] loop8: detected capacity change from 0 to 1024
[   94.449326][ T2005] EXT4-fs: Ignoring removed bh option
[   94.467795][ T2005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   94.507755][ T2005] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   94.522268][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   94.522282][   T28] audit: type=1400 audit(1761578533.791:318): avc:  denied  { map } for  pid=2004 comm="syz.8.602" path="/16/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.551862][   T28] audit: type=1400 audit(1761578533.811:319): avc:  denied  { execute } for  pid=2004 comm="syz.8.602" path="/16/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.557526][ T2005] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.602: Allocating blocks 385-513 which overlap fs metadata
[   94.594598][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.605701][ T2006] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.613459][ T2006] device bridge_slave_0 entered promiscuous mode
[   94.616298][ T2005] EXT4-fs (loop8): pa ffff888114d88f18: logic 16, phys. 129, len 24
[   94.620918][ T2006] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.627902][ T2005] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8
[   94.644948][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.652450][ T2006] device bridge_slave_1 entered promiscuous mode
[   94.667966][ T1723] EXT4-fs (loop8): unmounting filesystem.
[   94.674820][ T2013] device pim6reg1 entered promiscuous mode
[   94.752443][ T2006] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.759558][ T2006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.766905][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.773975][ T2006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.812025][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.820160][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.835802][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.866489][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.874762][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.881820][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.900453][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.908781][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.915847][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.924996][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.933073][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.959227][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.987144][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.996616][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.004608][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.023264][ T1025] device veth1_macvtap left promiscuous mode
[   95.031781][ T1025] device veth0_vlan left promiscuous mode
[   95.171901][ T2006] device veth0_vlan entered promiscuous mode
[   95.185101][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.195696][ T2006] device veth1_macvtap entered promiscuous mode
[   95.208111][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.226214][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.279393][ T2038] incfs: iterate_incfs_dir / -22
[   95.507412][ T2047] netlink: 8 bytes leftover after parsing attributes in process `syz.9.610'.
[   95.893944][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   96.086088][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.114518][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.209758][   T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.241332][   T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.260430][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.283607][   T24] usb 9-1: config 0 descriptor??
[   96.471932][  T976] usbhid 2-1:0.0: can't add hid device: -71
[   96.478063][  T976] usbhid: probe of 2-1:0.0 failed with error -71
[   96.487420][  T976] usb 2-1: USB disconnect, device number 7
[   96.710116][   T24] usbhid 9-1:0.0: can't add hid device: -71
[   96.716647][   T24] usbhid: probe of 9-1:0.0 failed with error -71
[   96.735542][ T2072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'.
[   96.879487][   T24] usb 9-1: USB disconnect, device number 3
[   97.494869][   T28] audit: type=1400 audit(1761578536.771:320): avc:  denied  { remove_name } for  pid=2076 comm="syz.8.623" name="file0" dev="incremental-fs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.610608][   T28] audit: type=1400 audit(1761578536.791:321): avc:  denied  { rename } for  pid=2076 comm="syz.8.623" name="file0" dev="incremental-fs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.634509][   T28] audit: type=1400 audit(1761578536.791:322): avc:  denied  { rmdir } for  pid=2076 comm="syz.8.623" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="incremental-fs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.903985][  T591] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   98.133920][  T591] usb 5-1: Using ep0 maxpacket: 32
[   98.172621][  T591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.204219][  T591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.215565][  T591] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   98.226055][  T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.277298][  T591] usb 5-1: config 0 descriptor??
[   98.291795][  T591] hub 5-1:0.0: USB hub found
[   98.486283][  T591] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[   98.696724][  T591] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1
[   98.707572][  T591] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22
[   98.737092][   T28] audit: type=1326 audit(1761578538.011:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3198efc9 code=0x7ffc0000
[   98.761627][   T28] audit: type=1326 audit(1761578538.041:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3198efc9 code=0x7ffc0000
[   98.785786][   T28] audit: type=1326 audit(1761578538.041:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3198efc9 code=0x7ffc0000
[   98.809162][   T28] audit: type=1326 audit(1761578538.041:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3198efc9 code=0x7ffc0000
[   98.832836][  T976] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   98.848012][   T28] audit: type=1326 audit(1761578538.041:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.8.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2b3198efc9 code=0x7ffc0000
[   99.026805][    T6] usb 5-1: USB disconnect, device number 9
[   99.054971][  T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.066455][  T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.077317][  T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   99.092157][  T976] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   99.102609][  T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.115863][  T976] usb 2-1: config 0 descriptor??
[   99.383920][  T591] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   99.523505][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   99.531098][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   99.538592][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   99.583999][  T591] usb 10-1: Using ep0 maxpacket: 8
[   99.761458][  T591] usb 10-1: config 0 has an invalid interface number: 31 but max is 0
[   99.784371][  T591] usb 10-1: config 0 has no interface number 0
[   99.873455][  T591] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  100.000997][  T591] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.111088][  T591] usb 10-1: Product: syz
[  100.150652][  T591] usb 10-1: Manufacturer: syz
[  100.236078][  T591] usb 10-1: SerialNumber: syz
[  100.376140][  T591] usb 10-1: config 0 descriptor??
[  100.564302][ T2147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.626'.
[  100.586307][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.593748][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.601892][  T591] usb 10-1: Found UVC 0.04 device syz (046d:08c3)
[  100.602779][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.615882][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.618339][  T591] usb 10-1: No valid video chain found.
[  100.623277][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.623304][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.643648][  T976] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  100.651070][  T976] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description
[  100.653399][  T591] usb 10-1: USB disconnect, device number 2
[  100.660919][  T976] plantronics 0003:047F:FFFF.0003: parse failed
[  100.672868][  T976] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22
[  100.800159][ T2151] loop4: detected capacity change from 0 to 1024
[  100.816922][ T2151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  100.826086][ T2151] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.838350][ T2151] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  100.853557][ T2151] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  100.866391][ T2151] EXT4-fs (loop4): This should not happen!! Data will be lost
[  100.866391][ T2151] 
[  100.876390][ T2151] EXT4-fs (loop4): Total free blocks count 0
[  100.882490][ T2151] EXT4-fs (loop4): Free/Dirty block details
[  100.888534][ T2151] EXT4-fs (loop4): free_blocks=4293918720
[  100.894551][ T2151] EXT4-fs (loop4): dirty_blocks=16
[  100.899684][ T2151] EXT4-fs (loop4): Block reservation details
[  100.906164][ T2151] EXT4-fs (loop4): i_reserved_data_blocks=1
[  100.919868][  T285] EXT4-fs (loop4): unmounting filesystem.
[  100.953732][   T28] kauditd_printk_skb: 38 callbacks suppressed
[  100.953747][   T28] audit: type=1400 audit(1761578540.221:366): avc:  denied  { compute_member } for  pid=2161 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  101.005119][ T2170] loop2: detected capacity change from 0 to 7
[  101.011699][ T2170]  loop2:
[  101.070818][ T2175] netlink: 'syz.8.658': attribute type 12 has an invalid length.
[  101.463905][  T536] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  101.644951][  T536] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.655272][  T536] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.665186][  T536] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  101.674436][  T536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  101.682523][  T536] usb 10-1: SerialNumber: syz
[  101.759270][  T976] usb 2-1: USB disconnect, device number 8
[  101.822125][   T28] audit: type=1400 audit(1761578541.091:367): avc:  denied  { create } for  pid=2194 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  101.842076][   T28] audit: type=1400 audit(1761578541.091:368): avc:  denied  { relabelfrom } for  pid=2194 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  101.861959][   T28] audit: type=1400 audit(1761578541.091:369): avc:  denied  { relabelto } for  pid=2194 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  101.891211][  T536] usb 10-1: 0:2 : does not exist
[  101.896292][  T536] usb 10-1: unit 255 not found!
[  101.902941][  T536] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5)
[  101.912307][  T536] usb 10-1: USB disconnect, device number 3
[  101.936259][ T2202] loop1: detected capacity change from 0 to 128
[  102.114357][  T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  102.133979][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  102.184685][ T2206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.670'.
[  102.315313][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.326387][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.336258][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.349252][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.358459][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.368815][   T24] usb 5-1: config 0 descriptor??
[  102.512309][ T2209] binder: 2207:2209 ioctl c0306201 0 returned -14
[  102.875277][   T24] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  102.892662][   T24] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  103.038023][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.672'.
[  103.636580][    C1] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.6.672)
[  103.730370][ T2225] loop9: detected capacity change from 0 to 512
[  103.748455][ T2225] EXT4-fs: Ignoring removed oldalloc option
[  103.760368][ T2225] EXT4-fs (loop9): Test dummy encryption mode enabled
[  103.767476][ T2225] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  103.778959][ T2225] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.676: bad orphan inode 131083
[  103.790375][ T2225] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  103.819925][ T2225] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  103.832879][   T28] audit: type=1400 audit(1761578543.101:370): avc:  denied  { read append } for  pid=2224 comm="syz.9.676" path="/16/bus/bus/cgroup.controllers" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  103.858610][  T536] usb 5-1: USB disconnect, device number 10
[  103.875950][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  104.008049][ T2229] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  104.283908][  T591] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  104.474965][  T591] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.486282][  T591] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.496166][  T591] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.509258][  T591] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.518430][  T591] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.007936][  T591] usb 10-1: config 0 descriptor??
[  105.147325][ T2247] loop6: detected capacity change from 0 to 512
[  105.154978][ T2247] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  105.174320][ T2247] EXT4-fs (loop6): 1 truncate cleaned up
[  105.179998][ T2247] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  105.339020][ T1089] EXT4-fs (loop6): unmounting filesystem.
[  105.381267][ T2259] netlink: 104 bytes leftover after parsing attributes in process `syz.8.689'.
[  105.416108][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.425095][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.432968][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.440626][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.449392][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.457080][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.465138][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.472654][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.480270][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.487900][  T591] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  105.495484][  T591] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description
[  105.506034][  T591] plantronics 0003:047F:FFFF.0005: parse failed
[  105.506223][   T28] audit: type=1400 audit(1761578544.781:371): avc:  denied  { unlink } for  pid=2257 comm="syz.4.688" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  105.512410][  T591] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22
[  105.670896][ T2272] loop8: detected capacity change from 0 to 512
[  105.714756][ T2272] EXT4-fs (loop8): orphan cleanup on readonly fs
[  105.731583][ T2272] EXT4-fs warning (device loop8): ext4_xattr_inode_get:509: inode #11: comm syz.8.693: EA inode hash validation failed
[  105.747517][ T2272] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  105.760641][ T2272] ------------[ cut here ]------------
[  105.766141][ T2272] EA inode 11 ref_count=-1
[  105.766262][ T2272] WARNING: CPU: 1 PID: 2272 at fs/ext4/xattr.c:1016 ext4_xattr_inode_update_ref+0x476/0x570
[  105.780819][ T2272] Modules linked in:
[  105.784760][ T2272] CPU: 1 PID: 2272 Comm: syz.8.693 Not tainted syzkaller #0
[  105.792067][ T2272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.802193][ T2272] RIP: 0010:ext4_xattr_inode_update_ref+0x476/0x570
[  105.809181][ T2272] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 1c 16 bb ff 49 8b 36 48 c7 c7 20 e0 94 85 4c 89 e2 e8 5a e2 47 ff <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 af fe ff ff
[  105.828914][ T2272] RSP: 0018:ffffc90008447180 EFLAGS: 00010246
[  105.835031][ T2272] RAX: f02a8e882563d400 RBX: 00000000ffffffff RCX: 0000000000080000
[  105.843023][ T2272] RDX: ffffc900096da000 RSI: 000000000000c285 RDI: 000000000000c286
[  105.851050][ T2272] RBP: ffffc90008447270 R08: dffffc0000000000 R09: ffffed103ee24eb4
[  105.859053][ T2272] R10: ffffed103ee24eb4 R11: 1ffff1103ee24eb3 R12: ffffffffffffffff
[  105.867060][ T2272] R13: ffffc900084471e0 R14: ffff8881004b01a8 R15: 0000000000000001
[  105.875069][ T2272] FS:  00007f2b327e96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  105.884045][ T2272] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.890876][ T2272] CR2: 00007f7d2c489000 CR3: 0000000136345000 CR4: 00000000003526a0
[  105.899273][ T2272] Call Trace:
[  105.901748][ T2281] netlink: 48 bytes leftover after parsing attributes in process `syz.9.677'.
[  105.902746][ T2272]  <TASK>
[  105.914479][ T2272]  ? ext4_xattr_block_csum+0x500/0x500
[  105.919973][ T2272]  ? kasan_save_alloc_info+0x25/0x30
[  105.925418][ T2272]  ? __kasan_kmalloc+0x95/0xb0
[  105.930254][ T2272]  ? ext4_xattr_inode_dec_ref_all+0x423/0xfe0
[  105.936381][ T2272]  ? kmalloc_trace+0x40/0xb0
[  105.941094][ T2272]  ext4_xattr_inode_dec_ref_all+0xa91/0xfe0
[  105.947050][ T2272]  ? errseq_check+0x41/0x80
[  105.951578][ T2272]  ? ext4_xattr_delete_inode+0xbb0/0xbb0
[  105.957274][ T2272]  ? __cfi___ext4_journal_get_write_access+0x10/0x10
[  105.963993][ T2272]  ? __kasan_check_write+0x14/0x20
[  105.969129][ T2272]  ext4_xattr_delete_inode+0x9f1/0xbb0
[  105.974662][ T2272]  ? ext4_truncate+0xbde/0xf90
[  105.979453][ T2272]  ? __cfi_ext4_xattr_delete_inode+0x10/0x10
[  105.985503][ T2272]  ext4_evict_inode+0xe58/0x1460
[  105.990461][ T2272]  ? _raw_spin_unlock+0x4c/0x70
[  105.995366][ T2272]  ? __cfi_ext4_evict_inode+0x10/0x10
[  106.000768][ T2272]  ? unlock_new_inode+0x97/0xc0
[  106.005683][ T2272]  ? __cfi_ext4_evict_inode+0x10/0x10
[  106.011079][ T2272]  evict+0x493/0x890
[  106.015037][ T2272]  ? proc_nr_inodes+0x2f0/0x2f0
[  106.019916][ T2272]  ? __kasan_check_write+0x14/0x20
[  106.025074][ T2272]  iput+0x620/0x670
[  106.028910][ T2272]  ext4_process_orphan+0x2b1/0x320
[  106.034075][ T2272]  ext4_orphan_cleanup+0xb02/0x1210
[  106.039301][ T2272]  ? __cfi_ext4_orphan_cleanup+0x10/0x10
[  106.044976][ T2272]  ? ext4_register_sysfs+0x285/0x2c0
[  106.050287][ T2272]  ? errseq_check_and_advance+0x66/0x130
[  106.055980][ T2272]  ext4_fill_super+0x7439/0x7970
[  106.060949][ T2272]  ? __cfi_ext4_fill_super+0x10/0x10
[  106.066293][ T2272]  ? snprintf+0xd7/0x120
[  106.070580][ T2272]  ? set_blocksize+0x1df/0x360
[  106.075402][ T2272]  ? sb_set_blocksize+0xaa/0xf0
[  106.080285][ T2272]  get_tree_bdev+0x444/0x680
[  106.084935][ T2272]  ? __cfi_ext4_fill_super+0x10/0x10
[  106.090243][ T2272]  ext4_get_tree+0x1c/0x20
[  106.094700][ T2272]  vfs_get_tree+0x9a/0x270
[  106.099150][ T2272]  do_new_mount+0x25a/0xa20
[  106.103687][ T2272]  path_mount+0x675/0x1010
[  106.108166][ T2272]  ? user_path_at_empty+0x161/0x1c0
[  106.113396][ T2272]  __se_sys_mount+0x318/0x380
[  106.118147][ T2272]  ? __this_cpu_preempt_check+0x13/0x20
[  106.123734][ T2272]  ? __x64_sys_mount+0xd0/0xd0
[  106.128562][ T2272]  ? __kasan_check_write+0x14/0x20
[  106.133689][ T2272]  ? fpregs_restore_userregs+0x128/0x260
[  106.139367][ T2272]  __x64_sys_mount+0xbf/0xd0
[  106.144015][ T2272]  x64_sys_call+0x65d/0x9a0
[  106.148558][ T2272]  do_syscall_64+0x4c/0xa0
[  106.153018][ T2272]  ? clear_bhb_loop+0x30/0x80
[  106.157743][ T2272]  ? clear_bhb_loop+0x30/0x80
[  106.162465][ T2272]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  106.168411][ T2272] RIP: 0033:0x7f2b3199076a
[  106.172869][ T2272] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.192521][ T2272] RSP: 002b:00007f2b327e8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  106.200977][ T2272] RAX: ffffffffffffffda RBX: 00007f2b327e8ef0 RCX: 00007f2b3199076a
[  106.209001][ T2272] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2b327e8eb0
[  106.217012][ T2272] RBP: 0000200000000180 R08: 00007f2b327e8ef0 R09: 000000000080078b
[  106.225148][ T2272] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0
[  106.233143][ T2272] R13: 00007f2b327e8eb0 R14: 0000000000000473 R15: 0000200000000680
[  106.241166][ T2272]  </TASK>
[  106.244211][ T2272] ---[ end trace 0000000000000000 ]---
[  106.251375][ T2272] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.693: corrupted inode contents
[  106.273867][ T2272] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #15: comm syz.8.693: mark_inode_dirty error
[  106.289942][ T2272] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.693: corrupted inode contents
[  106.314054][ T2272] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2963: inode #15: comm syz.8.693: mark_inode_dirty error
[  106.317160][ T2285] kvm: pic: non byte write
[  106.334134][ T2272] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2966: inode #15: comm syz.8.693: mark inode dirty (error -117)
[  106.357640][ T2272] EXT4-fs warning (device loop8): ext4_evict_inode:299: xattr delete (err -117)
[  106.373911][ T2272] EXT4-fs (loop8): 1 orphan inode deleted
[  106.379670][ T2272] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  106.402273][ T1723] EXT4-fs (loop8): unmounting filesystem.
[  106.733941][  T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  106.773629][ T2310] loop6: detected capacity change from 0 to 128
[  106.788965][ T2310] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  106.803892][ T2302] kvm [2301]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  106.812067][ T2302] kvm [2301]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  106.841406][ T2310] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  106.925770][  T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.930512][   T28] audit: type=1400 audit(1761578546.201:372): avc:  denied  { ioctl } for  pid=2309 comm="syz.6.704" path="/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  106.941559][  T976] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  106.985889][ T2315] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.704: Invalid block bitmap block 1984 in block_group 0
[  106.993622][  T976] usb 2-1: language id specifier not provided by device, defaulting to English
[  107.005491][ T2315] EXT4-fs error (device loop6): ext4_discard_preallocations:5114: comm syz.6.704: Error -117 reading block bitmap for 0
[  107.029947][  T976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.039547][  T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.047593][  T976] usb 2-1: Manufacturer: ࠖ
[  107.052198][  T976] usb 2-1: SerialNumber: ᑣ
[  107.116743][   T24] usb 10-1: USB disconnect, device number 4
[  107.668529][ T1089] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  107.691420][ T1089] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz-executor: Invalid inode bitmap blk 8192 in block_group 0
[  107.708221][ T1089] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem
[  107.724961][ T1089] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz-executor: Invalid inode bitmap blk 8192 in block_group 0
[  107.739120][ T1089] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem
[  107.750473][ T1089] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  107.769704][ T1089] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  108.072288][ T1089] EXT4-fs (loop6): unmounting filesystem.
[  108.269625][ T2325] loop4: detected capacity change from 0 to 40427
[  108.279511][ T2325] F2FS-fs (loop4): fault_type options not supported
[  108.286203][ T2325] F2FS-fs (loop4): fault_injection options not supported
[  108.294925][ T2325] F2FS-fs (loop4): Image doesn't support compression
[  108.316013][ T2325] F2FS-fs (loop4): invalid crc value
[  108.328740][ T2327] loop9: detected capacity change from 0 to 1024
[  108.344402][ T2325] F2FS-fs (loop4): Found nat_bits in checkpoint
[  108.349064][ T2327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.368153][ T2327] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.393538][ T2325] F2FS-fs (loop4): Start checkpoint disabled!
[  108.400391][ T2325] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  108.408692][ T2327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  108.417872][ T2327] System zones: 0-1, 3-36
[  108.423199][ T2327] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  108.443196][   T28] audit: type=1400 audit(1761578547.711:373): avc:  denied  { setattr } for  pid=2326 comm="syz.9.710" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.475956][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  108.504906][   T28] audit: type=1400 audit(1761578547.781:374): avc:  denied  { mounton } for  pid=2324 comm="syz.4.709" path="/139/file2/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  108.545255][  T285] F2FS-fs (loop4): access invalid blkaddr:4043309056
[  108.552072][   T28] audit: type=1400 audit(1761578547.811:375): avc:  denied  { setattr } for  pid=2324 comm="syz.4.709" name="work" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  108.582175][  T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G        W          syzkaller #0
[  108.591159][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  108.601232][  T285] Call Trace:
[  108.604526][  T285]  <TASK>
[  108.607484][  T285]  __dump_stack+0x21/0x24
[  108.611837][  T285]  dump_stack_lvl+0xee/0x150
[  108.616444][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[  108.621463][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[  108.621724][   T28] audit: type=1400 audit(1761578547.811:376): avc:  denied  { unlink } for  pid=2324 comm="syz.4.709" name="#1c" dev="loop4" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  108.627388][  T285]  dump_stack+0x15/0x24
[  108.627411][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[  108.627438][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[  108.627468][  T285]  f2fs_map_blocks+0xc93/0x3a50
[  108.627497][  T285]  ? __cfi_f2fs_map_blocks+0x10/0x10
[  108.665586][   T28] audit: type=1400 audit(1761578547.911:377): avc:  denied  { unmount } for  pid=2006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  108.669190][  T285]  ? xas_start+0x317/0x3e0
[  108.669220][  T285]  ? xas_load+0x39e/0x3b0
[  108.669247][  T285]  ? xa_load+0xad/0xd0
[  108.669272][  T285]  f2fs_mpage_readpages+0xa3a/0x1b70
[  108.712391][  T285]  ? dquot_release_reservation_block+0xa0/0xa0
[  108.718560][  T285]  ? cgroup_rstat_updated+0xf5/0x370
[  108.723850][  T285]  ? xas_nomem+0x6b/0x1f0
[  108.728193][  T285]  f2fs_readahead+0xfc/0x240
[  108.732889][  T285]  ? __cfi_f2fs_readahead+0x10/0x10
[  108.738088][  T285]  read_pages+0x1b0/0xdd0
[  108.742423][  T285]  ? __cfi___filemap_add_folio+0x10/0x10
[  108.748062][  T285]  ? page_cache_ra_unbounded+0x720/0x720
[  108.753702][  T285]  ? folio_add_lru+0x260/0x390
[  108.758491][  T285]  ? filemap_add_folio+0x105/0x150
[  108.763608][  T285]  page_cache_ra_unbounded+0x5d1/0x720
[  108.769068][  T285]  ? __kernel_text_address+0xd/0x30
[  108.774267][  T285]  ? __cfi_page_cache_ra_unbounded+0x10/0x10
[  108.780269][  T285]  ? stack_trace_save+0x98/0xe0
[  108.785134][  T285]  page_cache_ra_order+0x36a/0xb70
[  108.790262][  T285]  ? slab_free_freelist_hook+0xc2/0x190
[  108.795821][  T285]  ? kmem_cache_free+0x12d/0x300
[  108.800769][  T285]  ? __x64_sys_newfstatat+0x9b/0xb0
[  108.805969][  T285]  ? x64_sys_call+0x77c/0x9a0
[  108.810651][  T285]  ? __cfi_page_cache_ra_order+0x10/0x10
[  108.816293][  T285]  ondemand_readahead+0x817/0xdb0
[  108.821325][  T285]  ? page_cache_sync_ra+0x490/0x490
[  108.826541][  T285]  page_cache_sync_ra+0x41b/0x490
[  108.831607][  T285]  f2fs_readdir+0x444/0x940
[  108.836119][  T285]  ? cgroup_rstat_updated+0xf5/0x370
[  108.841423][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[  108.846457][  T285]  ? handle_mm_fault+0x17be/0x2640
[  108.851586][  T285]  ? down_read_killable+0xb6/0x100
[  108.856710][  T285]  ? __cfi_down_read_killable+0x10/0x10
[  108.862278][  T285]  ? fsnotify_perm+0x269/0x5b0
[  108.867048][  T285]  ? security_file_permission+0x94/0xb0
[  108.872605][  T285]  iterate_dir+0x271/0x610
[  108.877020][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[  108.882050][  T285]  __se_sys_getdents64+0xe5/0x240
[  108.887097][  T285]  ? __x64_sys_getdents64+0x90/0x90
[  108.892301][  T285]  ? __cfi_filldir64+0x10/0x10
[  108.897073][  T285]  ? do_user_addr_fault+0x9ac/0x1050
[  108.902431][  T285]  ? debug_smp_processor_id+0x17/0x20
[  108.907823][  T285]  __x64_sys_getdents64+0x7b/0x90
[  108.912856][  T285]  x64_sys_call+0x15c/0x9a0
[  108.917365][  T285]  do_syscall_64+0x4c/0xa0
[  108.921781][  T285]  ? clear_bhb_loop+0x30/0x80
[  108.926554][  T285]  ? clear_bhb_loop+0x30/0x80
[  108.931241][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.937235][  T285] RIP: 0033:0x7f012a3c1933
[  108.941655][  T285] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  108.961268][  T285] RSP: 002b:00007ffe372683f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  108.969690][  T285] RAX: ffffffffffffffda RBX: 0000555578bdc4e0 RCX: 00007f012a3c1933
[  108.977676][  T285] RDX: 0000000000008000 RSI: 0000555578bdc4e0 RDI: 0000000000000005
[  108.985654][  T285] RBP: 0000555578bdc4b4 R08: 0000000000000000 R09: 0000000000000000
[  108.993624][  T285] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  109.001596][  T285] R13: 0000000000000010 R14: 0000555578bdc4b0 R15: 00007ffe3726a6b0
[  109.009575][  T285]  </TASK>
[  109.020256][  T285] syz-executor: attempt to access beyond end of device
[  109.020256][  T285] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  109.034590][  T285] syz-executor: attempt to access beyond end of device
[  109.034590][  T285] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  109.056013][ T2332] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.063117][ T2332] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.070790][ T2332] device bridge_slave_0 entered promiscuous mode
[  109.074373][ T1025] kworker/u4:6: attempt to access beyond end of device
[  109.074373][ T1025] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  109.078212][ T2332] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.098225][ T2332] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.105683][ T2332] device bridge_slave_1 entered promiscuous mode
[  109.118102][   T10] device bridge_slave_1 left promiscuous mode
[  109.124358][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.131814][   T10] device bridge_slave_0 left promiscuous mode
[  109.138137][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.146519][   T10] device veth1_macvtap left promiscuous mode
[  109.161904][   T28] audit: type=1400 audit(1761578548.431:378): avc:  denied  { read write } for  pid=2341 comm="syz.9.718" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  109.163576][   T10] device veth0_vlan left promiscuous mode
[  109.192361][   T28] audit: type=1400 audit(1761578548.431:379): avc:  denied  { open } for  pid=2341 comm="syz.9.718" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  109.447991][  T949] usb 2-1: USB disconnect, device number 9
[  109.480690][ T2332] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.487806][ T2332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.495119][ T2332] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.502166][ T2332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.564446][ T2349] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.574615][ T2349] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.582191][ T2349] device bridge_slave_0 entered promiscuous mode
[  109.589607][ T2349] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.596742][ T2349] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.604637][ T2349] device bridge_slave_1 entered promiscuous mode
[  109.613043][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.620584][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.628087][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  109.635831][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.659576][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.668030][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.675075][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.692001][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.700406][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.707456][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.715939][   T10] tipc: Left network mode
[  109.721120][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  109.737060][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  109.779506][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.797210][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.806232][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.814093][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.827917][ T2332] device veth0_vlan entered promiscuous mode
[  109.843197][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.851160][  T334] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  109.860938][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.870127][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.878533][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.885607][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.893760][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  109.901739][ T2332] device veth1_macvtap entered promiscuous mode
[  109.911477][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.919723][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.926761][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.933928][  T949] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  109.947881][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.957677][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.972265][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  109.981743][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  110.009122][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  110.021257][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  110.031776][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  110.041116][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  110.048853][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  110.055068][  T334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.076526][ T2349] device veth0_vlan entered promiscuous mode
[  110.076760][  T334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.091145][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  110.094686][  T334] usb 10-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  110.110513][  T334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.111183][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  110.122241][  T334] usb 10-1: config 0 descriptor??
[  110.135102][  T949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.148693][  T949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.159781][ T2349] device veth1_macvtap entered promiscuous mode
[  110.166098][  T949] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  110.175508][  T949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.180003][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  110.187096][  T949] usb 2-1: config 0 descriptor??
[  110.194863][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.205615][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.221683][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  110.239678][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.268758][ T2388] loop5: detected capacity change from 0 to 512
[  110.299428][ T2388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  110.308921][ T2388] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.351645][ T2349] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  110.369606][ T2349] EXT4-fs (loop5): Remounting filesystem read-only
[  110.376509][ T2349] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  110.394252][ T2349] EXT4-fs (loop5): Remounting filesystem read-only
[  110.423912][  T536] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  110.457579][   T10] device bridge_slave_1 left promiscuous mode
[  110.464175][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.472989][   T10] device bridge_slave_0 left promiscuous mode
[  110.479718][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.490542][   T10] device veth1_macvtap left promiscuous mode
[  110.496754][   T10] device veth0_vlan left promiscuous mode
[  110.518664][ T2349] EXT4-fs (loop5): unmounting filesystem.
[  110.551700][  T334] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  110.601289][  T334] petalynx 0003:18B1:0037.0006: item fetching failed at offset 3/5
[  110.604051][  T536] usb 9-1: Using ep0 maxpacket: 16
[  110.617575][  T334] petalynx 0003:18B1:0037.0006: parse failed
[  110.623774][  T334] petalynx: probe of 0003:18B1:0037.0006 failed with error -22
[  110.629994][  T536] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024
[  110.651361][  T949] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  110.680551][  T949] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  110.683342][  T536] usb 9-1: config 0 interface 0 has no altsetting 0
[  110.783637][  T536] usb 9-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  110.817510][  T949] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE
[  110.827982][  T536] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.854932][  T343] usb 10-1: USB disconnect, device number 5
[  110.882687][  T536] usb 9-1: config 0 descriptor??
[  111.181159][ T2395] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.188676][ T2395] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.196573][ T2395] device bridge_slave_0 entered promiscuous mode
[  111.204572][ T2395] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.211651][ T2395] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.231893][ T2395] device bridge_slave_1 entered promiscuous mode
[  111.317278][ T2403] kvm: pic: single mode not supported
[  111.328579][ T2395] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.341050][ T2395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.348390][ T2395] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.352789][  T536] wacom 0003:056A:00CC.0008: hidraw1: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.8-1/input0
[  111.355514][ T2395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.388070][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.401248][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.425731][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.465653][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.475472][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.482534][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.490707][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.502306][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.524287][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  111.538392][ T2395] device veth0_vlan entered promiscuous mode
[  111.545580][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  111.553690][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  111.562010][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  111.572176][  T536] usb 9-1: USB disconnect, device number 4
[  111.591073][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  111.600224][ T2395] device veth1_macvtap entered promiscuous mode
[  111.610099][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.631938][ T2369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.636661][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.642195][ T2369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.671221][   T39] usb 2-1: USB disconnect, device number 10
[  111.684653][ T2424] serio: Serial port ptm0
[  111.734069][  T591] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  111.736609][ T2429] loop3: detected capacity change from 0 to 512
[  111.754062][ T2429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  111.765722][ T2429] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  111.779154][ T2429] EXT4-fs (loop3): 1 truncate cleaned up
[  111.785084][ T2429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  111.795220][ T2429] EXT4-fs (loop3): unmounting filesystem.
[  111.914678][   T10] device bridge_slave_1 left promiscuous mode
[  111.920868][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.928835][   T10] device bridge_slave_0 left promiscuous mode
[  111.935122][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.935575][  T591] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.943296][ T2439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2439 comm=syz.2.746
[  111.966036][  T591] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.976109][   T10] device veth1_macvtap left promiscuous mode
[  111.979039][  T591] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  111.982752][   T10] device veth0_vlan left promiscuous mode
[  111.995468][  T591] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  112.023897][  T591] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.034254][  T591] usb 10-1: config 0 descriptor??
[  112.283898][  T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.464326][  T976] usb 4-1: Using ep0 maxpacket: 8
[  112.470584][  T976] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.481343][  T976] usb 4-1: config 0 interface 0 has no altsetting 0
[  112.488160][  T976] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  112.497610][  T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.518973][  T976] usb 4-1: config 0 descriptor??
[  112.532486][   T28] audit: type=1400 audit(1761578551.801:380): avc:  denied  { block_suspend } for  pid=2458 comm="syz.8.754" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  112.554006][   T28] audit: type=1400 audit(1761578551.811:381): avc:  denied  { sys_module } for  pid=2458 comm="syz.8.754" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  112.575235][   T28] audit: type=1400 audit(1761578551.811:382): avc:  denied  { module_load } for  pid=2458 comm="syz.8.754" path="/sys/power/wakeup_count" dev="sysfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  112.662634][ T2461] netlink: 48 bytes leftover after parsing attributes in process `syz.9.738'.
[  112.977775][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  112.996100][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  113.006060][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  113.013945][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  113.020785][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  113.031766][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  113.215007][  T976] isku 0003:1E7D:319C.0009: unknown main item tag 0x0
[  113.222721][  T976] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0
[  113.264863][  T949] usb 4-1: USB disconnect, device number 3
[  113.434411][ T2469] fido_id[2469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  113.459665][  T976] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  113.776616][  T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.787627][  T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.797480][  T976] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  113.806601][  T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.816962][  T976] usb 9-1: config 0 descriptor??
[  113.896187][ T2471] bridge0: port 3(gretap0) entered blocking state
[  113.902804][ T2471] bridge0: port 3(gretap0) entered disabled state
[  113.913598][ T2471] device gretap0 entered promiscuous mode
[  113.919906][ T2471] bridge0: port 3(gretap0) entered blocking state
[  113.926397][ T2471] bridge0: port 3(gretap0) entered forwarding state
[  113.935752][ T2471] device gretap0 left promiscuous mode
[  113.941368][ T2471] bridge0: port 3(gretap0) entered disabled state
[  114.225546][  T976] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x4
[  114.240707][  T976] pyra 0003:1E7D:2CF6.000A: unbalanced collection at end of report description
[  114.247707][ T2483] loop2: detected capacity change from 0 to 512
[  114.255644][ T2484] loop3: detected capacity change from 0 to 1024
[  114.262618][  T976] pyra 0003:1E7D:2CF6.000A: parse failed
[  114.276761][  T976] pyra: probe of 0003:1E7D:2CF6.000A failed with error -22
[  114.279289][ T2483] EXT4-fs (loop2): orphan cleanup on readonly fs
[  114.294845][ T2484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  114.303350][ T2484] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.315489][ T2483] EXT4-fs warning (device loop2): ext4_xattr_inode_get:509: inode #11: comm syz.2.763: EA inode hash validation failed
[  114.329694][ T2483] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  114.342899][ T2483] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.763: corrupted inode contents
[  114.354910][ T2483] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #15: comm syz.2.763: mark_inode_dirty error
[  114.363563][ T2484] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.762: Freeing blocks not in datazone - block = 0, count = 16
[  114.369463][ T2483] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.763: corrupted inode contents
[  114.391426][  T555] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  114.391949][ T2483] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2963: inode #15: comm syz.2.763: mark_inode_dirty error
[  114.407041][  T555] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  114.418696][ T2483] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2966: inode #15: comm syz.2.763: mark inode dirty (error -117)
[  114.431714][  T555] EXT4-fs (loop3): This should not happen!! Data will be lost
[  114.431714][  T555] 
[  114.443382][ T2483] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117)
[  114.455630][  T976] usb 9-1: USB disconnect, device number 5
[  114.464851][ T2483] EXT4-fs (loop2): 1 orphan inode deleted
[  114.473385][ T2483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  114.484325][  T591] usbhid 10-1:0.0: can't add hid device: -71
[  114.490410][  T591] usbhid: probe of 10-1:0.0 failed with error -71
[  114.515848][  T555] EXT4-fs (loop3): Total free blocks count 0
[  114.522044][  T555] EXT4-fs (loop3): Free/Dirty block details
[  114.528241][  T555] EXT4-fs (loop3): free_blocks=4293918736
[  114.534196][  T555] EXT4-fs (loop3): dirty_blocks=16
[  114.539356][  T555] EXT4-fs (loop3): Block reservation details
[  114.546163][  T555] EXT4-fs (loop3): i_reserved_data_blocks=1
[  114.575019][ T2332] EXT4-fs (loop3): unmounting filesystem.
[  114.580917][  T591] usb 10-1: USB disconnect, device number 6
[  114.594072][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  114.893906][   T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.001210][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.767'.
[  115.075000][   T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.086131][   T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.096666][   T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  115.109886][   T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.119025][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.127973][   T39] usb 3-1: config 0 descriptor??
[  115.370875][   T28] audit: type=1400 audit(1761578554.641:383): avc:  denied  { mount } for  pid=2511 comm="syz.3.774" name="/" dev="ramfs" ino=29740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  115.402725][   T28] audit: type=1400 audit(1761578554.671:384): avc:  denied  { remount } for  pid=2511 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  115.800827][   T39] usbhid 3-1:0.0: can't add hid device: -71
[  115.809466][   T39] usbhid: probe of 3-1:0.0 failed with error -71
[  115.943084][   T39] usb 3-1: USB disconnect, device number 3
[  116.039483][ T2524] loop9: detected capacity change from 0 to 512
[  116.260802][ T2524] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  116.280069][ T2524] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.336253][ T2532] loop2: detected capacity change from 0 to 512
[  116.349713][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  116.376163][ T2532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  116.387067][ T2532] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.480086][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  116.507805][ T2541] netem: change failed
[  116.599395][ T2553] loop2: detected capacity change from 0 to 1024
[  116.603999][ T1685] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  116.622937][ T2555] bridge: RTM_NEWNEIGH with invalid ether address
[  116.657771][ T2553] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  116.667467][ T2553] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.691540][ T2553] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[  116.701447][ T2553] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #15: comm syz.2.786: mark_inode_dirty error
[  116.713382][ T2553] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[  116.729067][ T2553] EXT4-fs error (device loop2): ext4_punch_hole:4154: inode #15: comm syz.2.786: mark_inode_dirty error
[  116.749933][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  116.801461][ T1685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.815914][ T1685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.827264][ T1685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.840513][ T1685] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.849885][ T1685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.025736][  T343] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  117.785812][ T1685] usb 2-1: config 0 descriptor??
[  117.943913][ T2594] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  117.959429][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.978418][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.992439][  T343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  118.011414][  T343] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  118.032306][  T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.055455][ T2603] bridge: RTM_NEWNEIGH with invalid ether address
[  118.058533][  T343] usb 4-1: config 0 descriptor??
[  118.092207][ T2608] loop2: detected capacity change from 0 to 128
[  118.120409][ T2608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  118.128565][ T2608] System zones: 1-3, 19-19, 35-36
[  118.134873][ T2608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  118.143992][ T2608] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.179475][   T28] audit: type=1400 audit(1761578557.451:385): avc:  denied  { map } for  pid=2606 comm="syz.2.807" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  118.224297][   T28] audit: type=1400 audit(1761578557.461:386): avc:  denied  { execute } for  pid=2606 comm="syz.2.807" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  118.758534][ T2615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.775'.
[  119.509164][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  119.943933][  T976] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  119.955752][  T343] usbhid 4-1:0.0: can't add hid device: -71
[  119.962104][  T343] usbhid: probe of 4-1:0.0 failed with error -71
[  119.977036][  T343] usb 4-1: USB disconnect, device number 4
[  119.999937][ T2625] loop8: detected capacity change from 0 to 128
[  120.033245][ T2625] syz.8.812: attempt to access beyond end of device
[  120.033245][ T2625] loop8: rw=0, sector=121, nr_sectors = 920 limit=128
[  120.135974][ T2632] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  120.143534][ T2632] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  120.159054][  T976] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.169648][  T976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.179635][  T976] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.189206][  T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.197460][  T976] usb 10-1: SerialNumber: syz
[  120.333915][  T591] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  120.364230][ T1685] usbhid 2-1:0.0: can't add hid device: -71
[  120.370275][ T1685] usbhid: probe of 2-1:0.0 failed with error -71
[  120.384751][ T1685] usb 2-1: USB disconnect, device number 11
[  120.400343][   T28] audit: type=1400 audit(1761578559.671:387): avc:  denied  { create } for  pid=2633 comm="syz.8.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  120.405259][  T976] usb 10-1: 0:2 : does not exist
[  120.429867][  T976] usb 10-1: unit 255 not found!
[  120.436902][  T976] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5)
[  120.446473][  T976] usb 10-1: USB disconnect, device number 7
[  120.523896][  T591] usb 3-1: Using ep0 maxpacket: 32
[  120.530192][  T591] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  120.539756][  T591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.549865][  T591] usb 3-1: config 0 descriptor??
[  120.664633][  T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.965208][  T591] sony 0003:054C:1000.000B: ignoring exceeding usage max
[  120.974702][  T591] sony 0003:054C:1000.000B: hidraw0: USB HID vb4.34 Device [HID 054c:1000] on usb-dummy_hcd.2-1/input0
[  120.986754][  T591] sony 0003:054C:1000.000B: failed to claim input
[  121.444191][  T334] usb 3-1: USB disconnect, device number 4
[  122.137882][   T28] audit: type=1400 audit(1761578561.411:388): avc:  denied  { read } for  pid=2664 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  122.748821][ T2676] loop1: detected capacity change from 0 to 2048
[  122.773907][  T591] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  122.944726][ T2676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  122.988104][ T2676] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #12: comm syz.1.828: corrupted inode contents
[  123.010521][ T2676] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #12: comm syz.1.828: corrupted inode contents
[  123.038272][ T2676] EXT4-fs error (device loop1): ext4_try_add_inline_entry:1354: inode #12: comm syz.1.828: mark_inode_dirty error
[  123.085386][  T287] EXT4-fs (loop1): unmounting filesystem.
[  123.105067][  T591] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.123880][  T591] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.143981][  T591] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.173887][  T591] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.193274][  T591] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.242955][  T591] usb 10-1: config 0 descriptor??
[  123.388929][ T2691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.834'.
[  123.433118][ T2690] syz.3.833[2690] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.433234][ T2690] syz.3.833[2690] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.479653][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'.
[  123.787165][  T591] usbhid 10-1:0.0: can't add hid device: -71
[  123.794697][  T591] usbhid: probe of 10-1:0.0 failed with error -71
[  123.803723][  T591] usb 10-1: USB disconnect, device number 8
[  123.949668][ T2711] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  123.956795][ T2711] overlayfs: failed to set xattr on upper
[  123.982199][ T2713] bridge: RTM_NEWNEIGH with invalid ether address
[  124.010071][ T2715] loop2: detected capacity change from 0 to 512
[  124.025919][ T2715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  124.035182][ T2715] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.065187][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  124.095911][  T715] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  124.131278][ T2724] loop2: detected capacity change from 0 to 128
[  124.142462][ T2724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  124.151245][ T2724] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.165423][ T2724] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  124.189158][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  124.205295][   T28] audit: type=1400 audit(1761578563.481:389): avc:  denied  { name_bind } for  pid=2728 comm="syz.2.848" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  124.241567][   T28] audit: type=1400 audit(1761578563.511:390): avc:  denied  { accept } for  pid=2730 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1
[  124.285152][  T715] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  124.300374][  T715] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  124.319957][  T715] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.330074][  T715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  124.338409][  T715] usb 2-1: SerialNumber: syz
[  124.434343][ T2736] netlink: 48 bytes leftover after parsing attributes in process `syz.9.851'.
[  124.493873][  T591] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.513929][   T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  124.547111][  T715] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  124.554137][  T715] usb 2-1: USB disconnect, device number 12
[  124.683905][  T591] usb 4-1: Using ep0 maxpacket: 32
[  124.690372][  T591] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  124.698594][   T39] usb 3-1: Using ep0 maxpacket: 16
[  124.703769][  T591] usb 4-1: config 0 has no interface number 0
[  124.710172][  T591] usb 4-1: config 0 interface 184 has no altsetting 0
[  124.718367][   T39] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024
[  124.729832][   T39] usb 3-1: config 0 interface 0 has no altsetting 0
[  124.736528][   T39] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  124.745713][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.753966][  T591] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  124.763020][  T591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.771511][  T591] usb 4-1: Product: syz
[  124.776002][   T39] usb 3-1: config 0 descriptor??
[  124.781037][  T591] usb 4-1: Manufacturer: syz
[  124.785807][  T591] usb 4-1: SerialNumber: syz
[  124.792296][  T591] usb 4-1: config 0 descriptor??
[  124.798282][  T591] smsc75xx v1.0.0
[  124.817073][ T2744] loop8: detected capacity change from 0 to 256
[  124.825426][ T2744] exfat: Deprecated parameter 'namecase'
[  124.834598][ T2744] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x6180d1eb, utbl_chksum : 0xe619d30d)
[  124.860931][   T28] audit: type=1400 audit(1761578564.131:391): avc:  denied  { unlink } for  pid=1723 comm="syz-executor" name="file0" dev="loop8" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  125.092661][ T2750] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.099893][ T2750] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.109432][ T2750] device bridge_slave_0 entered promiscuous mode
[  125.121070][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.128248][ T2750] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.136830][ T2750] device bridge_slave_1 entered promiscuous mode
[  125.195343][   T39] wacom 0003:056A:00CC.000C: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.2-1/input0
[  125.267040][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.274159][ T2750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.281459][ T2750] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.288532][ T2750] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.316490][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.324508][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.331838][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.341354][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.349812][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.356894][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.401926][   T39] usb 3-1: USB disconnect, device number 5
[  125.610168][  T591] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  125.629966][  T591] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  125.640488][  T591] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  125.652106][  T591] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  125.662401][  T591] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  125.673876][  T591] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  125.684420][  T591] smsc75xx: probe of 4-1:0.184 failed with error -71
[  125.717917][  T591] usb 4-1: USB disconnect, device number 5
[  127.378401][ T1685] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  127.389532][ T2767] netlink: 8 bytes leftover after parsing attributes in process `syz.9.862'.
[  127.443076][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.457926][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.466386][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.473487][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.494171][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  127.502546][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.510960][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  127.519118][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.532953][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  127.543565][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.555204][    T8] device bridge_slave_1 left promiscuous mode
[  127.561547][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.569273][    T8] device bridge_slave_0 left promiscuous mode
[  127.575564][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.583535][    T8] device veth1_macvtap left promiscuous mode
[  127.591729][    T8] device veth0_vlan left promiscuous mode
[  127.598482][ T1685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.618714][ T1685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.629027][ T1685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  127.642102][ T1685] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  127.659007][ T1685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.682280][ T1685] usb 2-1: config 0 descriptor??
[  127.740293][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  127.748751][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.763061][ T2787] bridge: RTM_NEWNEIGH with invalid ether address
[  127.774373][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.785495][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.794113][ T2750] device veth0_vlan entered promiscuous mode
[  127.829842][  T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  127.838391][  T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.849088][ T2750] device veth1_macvtap entered promiscuous mode
[  127.866957][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  127.875257][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  127.883632][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.895949][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  127.906729][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.939268][ T2804] device pim6reg1 entered promiscuous mode
[  127.974747][ T2806] loop2: detected capacity change from 0 to 2048
[  127.985757][ T2806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  128.002839][ T2806] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.874: Invalid inode table block 4 in block_group 0
[  128.015693][ T2806] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.874: Invalid inode table block 4 in block_group 0
[  128.029234][ T2806] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[  128.038840][ T2806] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #12: comm syz.2.874: mark_inode_dirty error
[  128.089577][  T336] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm kworker/u4:3: Invalid inode table block 4 in block_group 0
[  128.107093][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  128.120134][  T536] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.127781][  T343] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  128.136642][ T1685] usbhid 2-1:0.0: can't add hid device: -71
[  128.142622][ T1685] usbhid: probe of 2-1:0.0 failed with error -71
[  128.157138][ T1685] usb 2-1: USB disconnect, device number 13
[  128.406648][ T2815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'.
[  129.776305][ T2821] loop1: detected capacity change from 0 to 512
[  130.213876][  T536] usb 4-1: Using ep0 maxpacket: 16
[  130.219072][  T343] usb 10-1: Using ep0 maxpacket: 16
[  130.233586][  T536] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  130.243707][  T343] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8
[  130.252922][  T536] usb 4-1: config 1 has no interface number 1
[  130.259451][  T536] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  130.270326][  T536] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  130.283356][  T536] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  130.295203][  T343] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  130.314000][  T343] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.322914][  T536] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.332245][  T536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.342157][  T343] usb 10-1: Product: syz
[  130.346630][  T343] usb 10-1: Manufacturer: syz
[  130.351333][  T343] usb 10-1: SerialNumber: syz
[  130.356212][  T536] usb 4-1: Product: syz
[  130.360432][  T536] usb 4-1: Manufacturer: syz
[  130.366245][  T343] usb 10-1: config 0 descriptor??
[  130.371348][  T536] usb 4-1: SerialNumber: syz
[  130.386227][  T343] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  130.395404][  T343] usb 10-1: Detected FT232R
[  130.543451][ T2845] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.582720][  T343] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  130.713547][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'.
[  130.795504][   T28] audit: type=1400 audit(1761578570.071:392): avc:  denied  { mounton } for  pid=2850 comm="syz.1.887" path="/139/file0" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.819185][  T343] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  130.819972][  T536] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  130.996516][  T298] usb 10-1: USB disconnect, device number 9
[  131.008409][  T298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  131.032511][  T298] ftdi_sio 10-1:0.0: device disconnected
[  131.066394][ T2863] serio: Serial port ptm0
[  131.122360][ T2866] syz.7.893[2866] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.122438][ T2866] syz.7.893[2866] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.507506][ T2797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.600939][ T2797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.302155][ T2889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.899'.
[  132.316205][  T536] usb 4-1: current rate 12062720 is different from the runtime rate 9338507
[  132.543890][  T715] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  132.815774][  T536] usb 4-1: USB disconnect, device number 6
[  132.904949][  T715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.915954][  T715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.925749][  T715] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.938678][  T715] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.947991][  T715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.956721][  T715] usb 8-1: config 0 descriptor??
[  132.994812][ T2902] loop9: detected capacity change from 0 to 512
[  133.015586][ T2902] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  133.024787][ T2902] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.364839][  T715] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xe
[  133.372335][  T715] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  133.379781][  T715] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  133.387281][  T715] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  133.394797][  T715] plantronics 0003:047F:FFFF.000D: unbalanced collection at end of report description
[  133.404600][  T715] plantronics 0003:047F:FFFF.000D: parse failed
[  133.410858][  T715] plantronics: probe of 0003:047F:FFFF.000D failed with error -22
[  133.439669][ T2911] binder: 2910:2911 unknown command 0
[  133.445179][ T2911] binder: 2910:2911 ioctl c0306201 200000000080 returned -22
[  133.453515][   T28] audit: type=1400 audit(1761578572.721:393): avc:  denied  { write } for  pid=2910 comm="syz.2.907" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  133.476472][   T28] audit: type=1400 audit(1761578572.721:394): avc:  denied  { map } for  pid=2910 comm="syz.2.907" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  133.500344][   T28] audit: type=1400 audit(1761578572.721:395): avc:  denied  { call } for  pid=2910 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  133.727702][ T2918] netlink: 48 bytes leftover after parsing attributes in process `syz.7.900'.
[  133.831395][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  134.365826][ T2926] loop9: detected capacity change from 0 to 512
[  134.539182][ T2926] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  134.667709][ T2926] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.704062][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  134.888223][ T2937] loop9: detected capacity change from 0 to 128
[  134.902128][ T2937] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  134.911545][ T2937] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.930708][ T2937] EXT4-fs (loop9): shut down requested (2)
[  134.942527][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  134.951726][   T28] audit: type=1400 audit(1761578574.231:396): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  135.010065][   T28] audit: type=1400 audit(1761578574.231:397): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.015833][ T2947] binder: 2946:2947 ioctl c0306201 200000000080 returned -14
[  135.049620][   T28] audit: type=1400 audit(1761578574.231:398): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.090407][   T28] audit: type=1400 audit(1761578574.231:399): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.123884][   T28] audit: type=1400 audit(1761578574.231:400): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.165941][ T2951] device veth0 entered promiscuous mode
[  135.169373][   T28] audit: type=1400 audit(1761578574.231:401): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.197668][ T2950] device veth0 left promiscuous mode
[  135.205897][  T536] usb 8-1: USB disconnect, device number 3
[  135.302051][ T2959] kvm: pic: non byte write
[  135.404709][ T2972] netlink: 'syz.2.930': attribute type 6 has an invalid length.
[  136.488585][ T2982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.933'.
[  136.963862][   T60] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  137.154965][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.165921][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.175697][   T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.188735][   T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.197984][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.210835][   T60] usb 4-1: config 0 descriptor??
[  137.492205][ T3000] kvm: vcpu 0: requested 6 ns lapic timer period limited to 200000 ns
[  137.500523][ T3000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[  137.618817][   T60] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xe
[  137.627019][   T60] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  137.634711][   T60] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  137.642379][   T60] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  137.662912][   T60] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description
[  137.676192][   T60] plantronics 0003:047F:FFFF.000E: parse failed
[  137.682613][   T60] plantronics: probe of 0003:047F:FFFF.000E failed with error -22
[  137.746429][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  137.746444][   T28] audit: type=1400 audit(1761578577.021:405): avc:  denied  { mounton } for  pid=3014 comm="syz.7.946" path="/16/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  137.973629][ T3019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.937'.
[  138.332737][ T3027] loop1: detected capacity change from 0 to 128
[  138.345376][ T3027] EXT4-fs (loop1): Test dummy encryption mode enabled
[  138.353753][ T3027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  138.363142][ T3027] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  138.479549][  T287] EXT4-fs (loop1): unmounting filesystem.
[  138.496858][ T3032] loop1: detected capacity change from 0 to 512
[  138.507035][ T3032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.951: error while reading EA inode 32 err=-116
[  138.519589][ T3032] EXT4-fs (loop1): Remounting filesystem read-only
[  138.526771][ T3032] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  138.539938][ T3032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.951: error while reading EA inode 32 err=-116
[  138.552624][ T3032] EXT4-fs (loop1): Remounting filesystem read-only
[  138.559897][ T3032] EXT4-fs (loop1): 1 orphan inode deleted
[  138.567096][ T3032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  138.597670][  T287] EXT4-fs (loop1): unmounting filesystem.
[  138.627019][ T3041] loop1: detected capacity change from 0 to 1024
[  138.668318][ T3041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  138.676984][ T3041] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.714278][ T3041] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.954: lblock 0 mapped to illegal pblock 0 (length 1)
[  138.727908][ T3041] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.954: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  138.756945][  T287] EXT4-fs (loop1): unmounting filesystem.
[  139.355221][ T3058] loop2: detected capacity change from 0 to 128
[  139.384812][ T3058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  139.409312][ T3058] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  139.444737][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  139.538663][ T3073] loop7: detected capacity change from 0 to 512
[  139.569620][ T3073] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.964: error while reading EA inode 32 err=-116
[  139.582572][ T3073] EXT4-fs (loop7): Remounting filesystem read-only
[  139.589860][ T3073] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.964: error while reading EA inode 32 err=-116
[  139.603497][ T3073] EXT4-fs (loop7): Remounting filesystem read-only
[  139.612395][ T3073] EXT4-fs (loop7): 1 orphan inode deleted
[  139.621631][ T3073] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  139.718507][  T298] usb 4-1: USB disconnect, device number 7
[  139.759990][ T3081] syz.9.969 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  139.840801][ T3086] kvm: pic: non byte write
[  139.863013][ T3092] loop2: detected capacity change from 0 to 512
[  139.869862][ T3092] EXT4-fs: Ignoring removed bh option
[  139.875721][ T3092] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  139.884754][ T3092] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  139.893288][ T3092] EXT4-fs (loop2): orphan cleanup on readonly fs
[  139.901296][ T3092] EXT4-fs (loop2): 1 truncate cleaned up
[  139.907200][ T3092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  139.917408][ T3090] netlink: 48 bytes leftover after parsing attributes in process `syz.9.972'.
[  139.941620][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  139.958047][ T3097] loop2: detected capacity change from 0 to 512
[  139.994644][ T3097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  140.004721][ T3097] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.015632][ T3095] tipc: Started in network mode
[  140.020652][ T3095] tipc: Node identity 866f69957527, cluster identity 4711
[  140.042584][ T3095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.043667][ T3097] fscrypt (loop2, inode 15): Error -61 getting encryption context
[  140.064952][ T3094] tipc: Resetting bearer <eth:syzkaller0>
[  140.072849][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  140.092791][ T3094] tipc: Disabling bearer <eth:syzkaller0>
[  140.187077][   T28] audit: type=1400 audit(1761578579.461:406): avc:  denied  { execute } for  pid=3107 comm="syz.1.979" path="/151/cpuacct.usage_percpu" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  140.833961][  T591] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  141.043912][  T591] usb 2-1: Using ep0 maxpacket: 16
[  141.062413][  T591] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024
[  141.151561][  T591] usb 2-1: config 0 interface 0 has no altsetting 0
[  141.158670][  T591] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  141.168027][  T591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.180232][  T591] usb 2-1: config 0 descriptor??
[  141.443975][  T591] usbhid 2-1:0.0: can't add hid device: -71
[  141.482765][  T591] usbhid: probe of 2-1:0.0 failed with error -71
[  141.510313][  T591] usb 2-1: USB disconnect, device number 14
[  141.773898][  T976] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  141.954984][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.966071][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.975921][  T976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  141.989570][  T976] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  141.998695][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.007902][  T976] usb 3-1: config 0 descriptor??
[  142.071417][ T3124] device pim6reg1 entered promiscuous mode
[  142.195608][   T28] audit: type=1400 audit(1761578581.471:407): avc:  denied  { bind } for  pid=3133 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  142.216700][   T28] audit: type=1400 audit(1761578581.491:408): avc:  denied  { listen } for  pid=3133 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  142.417193][  T976] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xe
[  142.424730][  T976] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  142.432137][  T976] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  142.439609][  T976] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  142.447088][  T591] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  142.447163][  T976] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description
[  142.470277][  T976] plantronics 0003:047F:FFFF.000F: parse failed
[  142.476643][  T976] plantronics: probe of 0003:047F:FFFF.000F failed with error -22
[  142.477522][ T2750] EXT4-fs (loop7): unmounting filesystem.
[  142.531680][ T3146] loop7: detected capacity change from 0 to 1024
[  142.633917][  T976] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  142.643880][  T591] usb 4-1: Using ep0 maxpacket: 8
[  142.665937][  T591] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  142.680943][  T591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.689039][  T591] usb 4-1: Product: syz
[  142.695568][  T591] usb 4-1: Manufacturer: syz
[  142.700184][  T591] usb 4-1: SerialNumber: syz
[  142.705692][  T591] usb 4-1: config 0 descriptor??
[  142.792498][ T3148] netlink: 48 bytes leftover after parsing attributes in process `syz.2.982'.
[  142.823996][  T976] usb 2-1: Using ep0 maxpacket: 16
[  142.831660][  T976] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  142.859291][  T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.879781][  T976] usb 2-1: Product: syz
[  142.884207][  T976] usb 2-1: Manufacturer: syz
[  142.884435][ T3154] syz.9.999[3154] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.888899][ T3154] syz.9.999[3154] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.888924][  T976] usb 2-1: SerialNumber: syz
[  142.921105][  T976] r8152-cfgselector 2-1: config 0 descriptor??
[  142.975000][ T3156] tipc: Started in network mode
[  142.979997][ T3156] tipc: Node identity 5ac06ba87b8a, cluster identity 4711
[  142.987523][ T3156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.002595][ T3155] tipc: Resetting bearer <eth:syzkaller0>
[  143.017133][ T3155] tipc: Disabling bearer <eth:syzkaller0>
[  143.205996][   T28] audit: type=1400 audit(1761578582.481:409): avc:  denied  { create } for  pid=3167 comm="syz.7.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  143.308903][   T28] audit: type=1400 audit(1761578582.581:410): avc:  denied  { write } for  pid=3173 comm="syz.7.1006" path="socket:[34019]" dev="sockfs" ino=34019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  143.342664][  T976] r8152-cfgselector 2-1: Unknown version 0x0000
[  143.350009][  T976] r8152-cfgselector 2-1: bad CDC descriptors
[  143.356648][  T976] r8152-cfgselector 2-1: Unknown version 0x0000
[  143.369927][  T976] r8152-cfgselector 2-1: USB disconnect, device number 15
[  143.633883][   T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  143.813864][   T60] usb 8-1: Using ep0 maxpacket: 32
[  143.820183][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.831304][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.841085][   T60] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  143.850152][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.859810][   T60] usb 8-1: config 0 descriptor??
[  143.866673][   T60] hub 8-1:0.0: USB hub found
[  143.983651][ T3180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1008'.
[  143.999799][ T3185] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  144.067926][   T60] hub 8-1:0.0: config failed, can't read hub descriptor (err -22)
[  144.085191][   T60] usbhid 8-1:0.0: can't add hid device: -71
[  144.091159][   T60] usbhid: probe of 8-1:0.0 failed with error -71
[  144.098732][ T3188] device syzkaller0 entered promiscuous mode
[  144.115373][ T3188] tipc: Started in network mode
[  144.120319][ T3188] tipc: Node identity ae9d7aa887ce, cluster identity 4711
[  144.127593][ T3188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.134349][   T60] usb 8-1: USB disconnect, device number 4
[  144.141107][ T3187] tipc: Resetting bearer <eth:syzkaller0>
[  144.153683][ T3187] tipc: Disabling bearer <eth:syzkaller0>
[  144.400658][ T3198] loop9: detected capacity change from 0 to 2048
[  144.434424][ T3198]  loop9: p1 < > p4
[  144.438963][ T3198] loop9: p4 size 722688 extends beyond EOD, truncated
[  144.498567][   T39] usb 3-1: USB disconnect, device number 6
[  145.020079][  T536] usb 4-1: USB disconnect, device number 8
[  145.943913][   T28] audit: type=1400 audit(1761578585.211:411): avc:  denied  { create } for  pid=3223 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  146.011277][   T28] audit: type=1400 audit(1761578585.211:412): avc:  denied  { sys_admin } for  pid=3223 comm="syz.3.1027" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  146.230027][ T3235] loop2: detected capacity change from 0 to 2048
[  146.267265][ T3238] kvm: emulating exchange as write
[  146.275994][ T3235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  146.306790][ T3235] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.1031: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  146.333626][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  146.417319][   T28] audit: type=1400 audit(1761578585.691:413): avc:  denied  { read } for  pid=3251 comm="syz.2.1036" name="/" dev="configfs" ino=13124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  146.444368][   T28] audit: type=1400 audit(1761578585.691:414): avc:  denied  { open } for  pid=3251 comm="syz.2.1036" path="/" dev="configfs" ino=13124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  147.486372][ T3278] binder: 3277:3278 unknown command 0
[  147.499397][ T3278] binder: 3277:3278 ioctl c0306201 200000000080 returned -22
[  147.516196][ T3278] binder_alloc: 3277: binder_alloc_buf, no vma
[  147.839153][ T3292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'.
[  149.439811][ T3318] binder: 3317:3318 unknown command 0
[  149.467317][ T3318] binder: 3317:3318 ioctl c0306201 200000000080 returned -22
[  149.812592][ T3321] loop7: detected capacity change from 0 to 512
[  150.035144][ T3331] netem: change failed
[  150.061296][ T3335] loop3: detected capacity change from 0 to 128
[  150.109724][ T3335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  150.118959][ T3335] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  150.141220][ T3335] fscrypt: loop3: 3 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14
[  150.160105][ T2332] EXT4-fs (loop3): unmounting filesystem.
[  150.187185][ T3344] loop2: detected capacity change from 0 to 512
[  150.428621][ T3344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  150.476207][ T3344] EXT4-fs (loop2): 1 truncate cleaned up
[  150.481985][ T3344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  150.501414][  T336] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  150.515191][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  150.530206][ T3349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1072'.
[  150.546249][ T3349] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  151.503129][   T39] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  151.579023][ T3367] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  151.586852][ T3367] overlayfs: failed to set xattr on upper
[  151.701670][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.725468][ T3375] loop2: detected capacity change from 0 to 128
[  151.741727][ T3375] EXT4-fs (loop2): Test dummy encryption mode enabled
[  151.754429][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.757782][ T3375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  151.767994][   T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  151.773004][ T3375] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.786102][   T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  151.807574][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.818668][ T3375] fscrypt: AES-256-XTS using blk-crypto-fallback
[  151.829507][   T39] usb 2-1: config 0 descriptor??
[  151.834561][ T3377] netlink: 'syz.3.1084': attribute type 12 has an invalid length.
[  151.883482][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  152.325454][   T39] usbhid 2-1:0.0: can't add hid device: -71
[  152.331848][   T39] usbhid: probe of 2-1:0.0 failed with error -71
[  152.342812][   T39] usb 2-1: USB disconnect, device number 16
[  152.613789][ T3401] loop9: detected capacity change from 0 to 1024
[  152.684457][ T3401] EXT4-fs: Ignoring removed nobh option
[  152.873630][ T3401] EXT4-fs: Ignoring removed bh option
[  152.967065][ T3401] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  153.085450][ T3408] syz.1.1091[3408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  153.085551][ T3408] syz.1.1091[3408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  153.295399][ T3401] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  153.732158][ T3411] loop3: detected capacity change from 0 to 4096
[  153.773948][ T3411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  153.782561][ T3411] EXT4-fs (loop3): Test dummy encryption mode enabled
[  153.832775][ T2006] EXT4-fs (loop9): unmounting filesystem.
[  153.869965][ T3411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  154.077555][ T3430] loop9: detected capacity change from 0 to 16
[  154.120064][ T3430] erofs: (device loop9): mounted with root inode @ nid 36.
[  154.155874][ T3430] erofs: (device loop9): z_erofs_readahead: readahead error at page 2 @ nid 89
[  154.175104][ T3430] syz.9.1097: attempt to access beyond end of device
[  154.175104][ T3430] loop9: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  154.204991][ T2332] EXT4-fs (loop3): unmounting filesystem.
[  154.212173][ T3430] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.248251][ T3433] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.276802][ T3430] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.306739][ T3433] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.324084][ T3430] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.369688][ T3436] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.413014][ T3433] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.494742][ T3430] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.543691][ T3436] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  154.591851][ T3436] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  155.324790][   T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  155.534980][   T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.553853][   T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.573883][   T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  155.599851][   T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  155.609932][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.622066][   T39] usb 3-1: config 0 descriptor??
[  155.803957][ T3465] device syzkaller0 entered promiscuous mode
[  155.876869][ T3469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'.
[  156.003870][ T2672] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  156.068796][   T39] usbhid 3-1:0.0: can't add hid device: -71
[  156.075926][   T39] usbhid: probe of 3-1:0.0 failed with error -71
[  156.099122][   T39] usb 3-1: USB disconnect, device number 7
[  156.194938][ T2672] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  156.205350][ T2672] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  156.216448][ T2672] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  156.227303][ T2672] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.240413][ T2672] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  156.249597][ T2672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.279395][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'.
[  156.330211][ T2672] usb 2-1: invalid MIDI out EP 0
[  156.406509][ T2672] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  156.432247][  T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  156.822767][ T2672] usb 2-1: USB disconnect, device number 17
[  158.533853][   T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  158.610823][ T3498] bridge: RTM_NEWNEIGH with invalid ether address
[  158.776576][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.794270][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.808720][   T28] audit: type=1400 audit(1761578598.081:415): avc:  denied  { sqpoll } for  pid=3506 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  158.812286][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  158.841818][   T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  158.851210][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.864284][   T24] usb 10-1: config 0 descriptor??
[  159.055020][   T28] audit: type=1400 audit(1761578598.331:416): avc:  denied  { write } for  pid=3514 comm="syz.1.1129" name="mcfilter6" dev="proc" ino=4026532687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  159.587338][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  159.622095][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  159.660148][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  159.698044][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  159.736439][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  159.775718][   T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  160.126793][ T3528] syz.1.1134 (3528) used greatest stack depth: 19704 bytes left
[  160.143270][ T3489] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1121'.
[  160.198580][ T3534] syz.2.1136[3534] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.198663][ T3534] syz.2.1136[3534] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.283887][   T24] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description
[  160.287129][ T3536] loop7: detected capacity change from 0 to 4096
[  160.297631][   T24] plantronics 0003:047F:FFFF.0010: parse failed
[  160.308564][   T28] audit: type=1400 audit(1761578599.581:417): avc:  denied  { connect } for  pid=3539 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  160.311276][   T24] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22
[  160.349002][ T3536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  160.357536][ T3536] EXT4-fs (loop7): Test dummy encryption mode enabled
[  160.373179][   T24] usb 10-1: USB disconnect, device number 10
[  160.389040][ T3536] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  160.481331][ T3545] loop2: detected capacity change from 0 to 512
[  160.510137][ T2750] EXT4-fs (loop7): unmounting filesystem.
[  160.543886][ T3552] binder: 3551:3552 ioctl c0306201 200000000680 returned -14
[  160.595683][ T3545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  160.604967][ T3545] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.054685][ T2395] EXT4-fs (loop2): unmounting filesystem.
[  161.082279][   T28] audit: type=1400 audit(1761578600.351:418): avc:  denied  { getopt } for  pid=3565 comm="syz.9.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  162.087250][ T3581] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1149'.
[  162.288728][ T3603] binder_alloc: 3602: binder_alloc_buf, no vma
[  162.315049][   T28] audit: type=1326 audit(1761578601.591:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.7.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5abf8efc9 code=0x0
[  162.487374][  T536] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  162.823867][  T536] usb 4-1: Using ep0 maxpacket: 32
[  162.830270][  T536] usb 4-1: config 0 has an invalid interface number: 74 but max is 1
[  162.838417][  T536] usb 4-1: config 0 has no interface number 1
[  162.846052][  T536] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  162.856225][  T536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.864318][  T536] usb 4-1: Product: syz
[  162.868546][  T536] usb 4-1: Manufacturer: syz
[  162.873191][  T536] usb 4-1: SerialNumber: syz
[  162.878870][  T536] usb 4-1: config 0 descriptor??
[  162.887058][  T536] snd-usb-audio: probe of 4-1:0.74 failed with error -22
[  162.902606][  T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  163.091927][  T536] usb 4-1: USB disconnect, device number 9
[  163.112534][   T28] audit: type=1400 audit(1761578602.381:420): avc:  denied  { read } for  pid=3617 comm="syz.1.1167" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  163.135213][   T28] audit: type=1400 audit(1761578602.381:421): avc:  denied  { open } for  pid=3617 comm="syz.1.1167" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  163.214029][   T28] audit: type=1400 audit(1761578602.461:422): avc:  denied  { mounton } for  pid=3617 comm="syz.1.1167" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  163.573164][   T28] audit: type=1400 audit(1761578602.841:423): avc:  denied  { load_policy } for  pid=3628 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  163.603455][ T3629] SELinux: failed to load policy
[  163.889355][ T3643] syz.3.1175[3643] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.889719][ T3643] syz.3.1175[3643] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.116118][  T536] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  164.720627][ T3652] tipc: Failed to remove unknown binding: 66,1,1/0:1517308022/1517308024
[  164.756859][ T3652] tipc: Failed to remove unknown binding: 66,1,1/0:1517308022/1517308024
[  164.897587][ T3671] syz.3.1188[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.897663][ T3671] syz.3.1188[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.928331][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.947121][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.968711][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.989842][ T3675] device bridge_slave_1 left promiscuous mode
[  165.004641][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.019053][ T3675] device bridge_slave_0 left promiscuous mode
[  165.025317][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.063982][  T536] usb 2-1: Using ep0 maxpacket: 16
[  165.070431][  T536] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  165.087379][  T536] usb 2-1: config 0 has no interface number 0
[  165.099993][  T536] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.111143][  T536] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.121607][  T536] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.134792][  T536] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  165.150490][  T536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.161547][  T536] usb 2-1: config 0 descriptor??
[  165.266045][ T3694] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  165.331634][  T336] Bluetooth: hci0: Frame reassembly failed (-84)
[  165.334439][   T28] audit: type=1400 audit(1761578604.611:424): avc:  denied  { ioctl } for  pid=3692 comm="syz.2.1196" path="socket:[37312]" dev="sockfs" ino=37312 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.569377][  T536] holtek_mouse 0003:04D9:A072.0011: item fetching failed at offset 3/4
[  165.577876][  T536] holtek_mouse 0003:04D9:A072.0011: hid parse failed: -22
[  165.585153][  T536] holtek_mouse: probe of 0003:04D9:A072.0011 failed with error -22
[  165.685953][ T3696] loop7: detected capacity change from 0 to 256
[  165.703531][ T3696] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  165.774670][  T536] usb 2-1: USB disconnect, device number 18
[  165.796981][   T28] audit: type=1400 audit(1761578605.071:425): avc:  denied  { create } for  pid=3698 comm="syz.7.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  165.817731][   T28] audit: type=1400 audit(1761578605.101:426): avc:  denied  { execmem } for  pid=3698 comm="syz.7.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  165.991876][ T3703] syz.7.1198[3703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.992366][ T3703] syz.7.1198[3703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.196943][ T3721] tipc: Enabled bearer <udp:syz2>, priority 10
[  167.343892][  T962] Bluetooth: hci0: command 0x1003 tx timeout
[  167.349974][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  167.357723][ T3693] Bluetooth: hci0: Opcode 0x080f failed: -4
[  167.463415][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'.
[  167.953945][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  167.994574][ T3735] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1211'.
[  168.193935][   T24] usb 2-1: Using ep0 maxpacket: 16
[  168.205606][   T24] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  168.227008][ T3739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.234305][ T3739] IPv6: NLM_F_CREATE should be set when creating new route
[  168.243304][ T3738] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  168.258367][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.266540][   T24] usb 2-1: Product: syz
[  168.270818][   T24] usb 2-1: Manufacturer: syz
[  168.280849][   T24] usb 2-1: SerialNumber: syz
[  168.308474][   T24] usb 2-1: config 0 descriptor??
[  168.331811][  T334] tipc: Node number set to 693336744
[  168.347639][   T24] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  168.360551][ T3741] loop9: detected capacity change from 0 to 512
[  168.530425][   T24] usb 2-1: USB disconnect, device number 19
[  168.780571][ T3756] loop2: detected capacity change from 0 to 8192
[  169.423830][    C1] ==================================================================
[  169.432043][    C1] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0
[  169.439096][    C1] Write of size 8 at addr ffff88813dbaca00 by task syz.7.1220/3755
[  169.446990][    C1] 
[  169.449335][    C1] CPU: 1 PID: 3755 Comm: syz.7.1220 Tainted: G        W          syzkaller #0
[  169.458163][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  169.468201][    C1] Call Trace:
[  169.471466][    C1]  <IRQ>
[  169.474318][    C1]  __dump_stack+0x21/0x24
[  169.478644][    C1]  dump_stack_lvl+0xee/0x150
[  169.483221][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[  169.488251][    C1]  ? __run_timers+0x32b/0x9a0
[  169.492923][    C1]  print_address_description+0x71/0x200
[  169.498466][    C1]  print_report+0x4a/0x60
[  169.502810][    C1]  kasan_report+0x122/0x150
[  169.507396][    C1]  ? __run_timers+0x32b/0x9a0
[  169.512069][    C1]  __asan_report_store8_noabort+0x17/0x20
[  169.517784][    C1]  __run_timers+0x32b/0x9a0
[  169.522318][    C1]  ? sched_clock+0x9/0x10
[  169.526641][    C1]  ? sched_clock_cpu+0x6e/0x250
[  169.531481][    C1]  ? calc_index+0x200/0x200
[  169.535978][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  169.541172][    C1]  run_timer_softirq+0x6a/0xf0
[  169.545927][    C1]  handle_softirqs+0x1d7/0x600
[  169.550683][    C1]  ? irqtime_account_irq+0xc4/0x240
[  169.555877][    C1]  __irq_exit_rcu+0x52/0xf0
[  169.560373][    C1]  irq_exit_rcu+0x9/0x10
[  169.564608][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  169.570237][    C1]  </IRQ>
[  169.573158][    C1]  <TASK>
[  169.576083][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  169.582062][    C1] RIP: 0010:avc_has_perm_noaudit+0xa8/0x460
[  169.587952][    C1] Code: 28 0b f3 f3 f3 f3 48 89 44 24 20 42 c6 44 28 0f f3 e8 3c f7 3a ff ba 38 00 00 00 48 89 df 31 f6 e8 4d 69 7f ff 31 ff 44 89 f6 <e8> 43 fb 3a ff 45 85 f6 0f 84 b7 02 00 00 e8 e5 a4 27 ff 4c 89 7c
[  169.607729][    C1] RSP: 0000:ffffc9000b8673a0 EFLAGS: 00000246
[  169.613791][    C1] RAX: ffffc9000b867400 RBX: ffffc9000b867400 RCX: 0000000000000000
[  169.621755][    C1] RDX: 0000000000000038 RSI: 0000000000080000 RDI: 0000000000000000
[  169.629712][    C1] RBP: ffffc9000b8674a8 R08: dffffc0000000000 R09: ffffc9000b867400
[  169.637673][    C1] R10: fffff5200170ce87 R11: 1ffff9200170ce80 R12: 0000000000000087
[  169.645636][    C1] R13: dffffc0000000000 R14: 0000000000080000 R15: ffffffff879d1c80
[  169.653603][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  169.658621][    C1]  ? __cfi_push_rt_tasks+0x10/0x10
[  169.663753][    C1]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  169.669470][    C1]  ? selinux_socket_sock_rcv_skb+0x2c5/0x7c0
[  169.675451][    C1]  avc_has_perm+0xd2/0x240
[  169.679875][    C1]  ? __cfi_avc_has_perm+0x10/0x10
[  169.684897][    C1]  ? schedule_timeout+0xa6/0x2e0
[  169.689919][    C1]  selinux_socket_unix_may_send+0x1be/0x280
[  169.695812][    C1]  ? __cfi_selinux_socket_unix_may_send+0x10/0x10
[  169.702244][    C1]  ? __kasan_check_write+0x14/0x20
[  169.707354][    C1]  ? _raw_spin_lock+0x8e/0xe0
[  169.712024][    C1]  ? __cfi__raw_spin_lock+0x10/0x10
[  169.717226][    C1]  security_unix_may_send+0x7c/0xb0
[  169.722420][    C1]  unix_dgram_sendmsg+0xad0/0x16d0
[  169.727530][    C1]  ? __cfi_unix_dgram_sendmsg+0x10/0x10
[  169.733076][    C1]  ? security_socket_sendmsg+0x93/0xb0
[  169.738525][    C1]  ? __cfi_unix_dgram_sendmsg+0x10/0x10
[  169.744099][    C1]  ____sys_sendmsg+0x5a9/0x990
[  169.748855][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  169.753696][    C1]  ? __cfi_push_rt_tasks+0x10/0x10
[  169.758799][    C1]  ? __sys_sendmsg_sock+0x40/0x40
[  169.763820][    C1]  ? __schedule+0xb8f/0x14e0
[  169.768403][    C1]  ? import_iovec+0x7c/0xb0
[  169.772902][    C1]  ___sys_sendmsg+0x21c/0x290
[  169.777582][    C1]  ? __sys_sendmsg+0x270/0x270
[  169.782344][    C1]  ? futex_unqueue+0x132/0x160
[  169.787109][    C1]  ? __cfi_futex_wait+0x10/0x10
[  169.791950][    C1]  ? __fdget+0x19c/0x220
[  169.796184][    C1]  __sys_sendmmsg+0x274/0x460
[  169.800857][    C1]  ? __cfi___sys_sendmmsg+0x10/0x10
[  169.806056][    C1]  ? fpregs_restore_userregs+0x128/0x260
[  169.811688][    C1]  __x64_sys_sendmmsg+0xa0/0xb0
[  169.816533][    C1]  x64_sys_call+0x3f5/0x9a0
[  169.821034][    C1]  do_syscall_64+0x4c/0xa0
[  169.825440][    C1]  ? clear_bhb_loop+0x30/0x80
[  169.830164][    C1]  ? clear_bhb_loop+0x30/0x80
[  169.834846][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.840733][    C1] RIP: 0033:0x7fc5abf8efc9
[  169.845154][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.864765][    C1] RSP: 002b:00007fc5aceae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  169.873167][    C1] RAX: ffffffffffffffda RBX: 00007fc5ac1e5fa0 RCX: 00007fc5abf8efc9
[  169.881133][    C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005
[  169.889100][    C1] RBP: 00007fc5ac011f91 R08: 0000000000000000 R09: 0000000000000000
[  169.897086][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.905058][    C1] R13: 00007fc5ac1e6038 R14: 00007fc5ac1e5fa0 R15: 00007ffc7bd10da8
[  169.913027][    C1]  </TASK>
[  169.916034][    C1] 
[  169.918342][    C1] Allocated by task 3693:
[  169.922655][    C1]  kasan_set_track+0x4b/0x70
[  169.927236][    C1]  kasan_save_alloc_info+0x25/0x30
[  169.932350][    C1]  __kasan_kmalloc+0x95/0xb0
[  169.936934][    C1]  __kmalloc+0xb1/0x1e0
[  169.941087][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[  169.946107][    C1]  hci_uart_tty_ioctl+0x3d6/0xa20
[  169.951126][    C1]  tty_ioctl+0x8ef/0xc60
[  169.955365][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  169.960038][    C1]  __x64_sys_ioctl+0x7b/0x90
[  169.964617][    C1]  x64_sys_call+0x58b/0x9a0
[  169.969112][    C1]  do_syscall_64+0x4c/0xa0
[  169.973516][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.979412][    C1] 
[  169.981734][    C1] Freed by task 3693:
[  169.985704][    C1]  kasan_set_track+0x4b/0x70
[  169.990285][    C1]  kasan_save_free_info+0x31/0x50
[  169.995309][    C1]  ____kasan_slab_free+0x132/0x180
[  170.000415][    C1]  __kasan_slab_free+0x11/0x20
[  170.005261][    C1]  slab_free_freelist_hook+0xc2/0x190
[  170.010717][    C1]  __kmem_cache_free+0xb7/0x1b0
[  170.015567][    C1]  kfree+0x6f/0xf0
[  170.019290][    C1]  hci_release_dev+0x12a3/0x13b0
[  170.024228][    C1]  bt_host_release+0x82/0x90
[  170.028814][    C1]  device_release+0xa4/0x1d0
[  170.033422][    C1]  kobject_put+0x19d/0x280
[  170.037833][    C1]  put_device+0x1f/0x30
[  170.041987][    C1]  hci_dev_cmd+0x265/0x720
[  170.046403][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  170.051162][    C1]  sock_do_ioctl+0x101/0x310
[  170.055752][    C1]  sock_ioctl+0x4d8/0x6e0
[  170.060093][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  170.064762][    C1]  __x64_sys_ioctl+0x7b/0x90
[  170.069340][    C1]  x64_sys_call+0x58b/0x9a0
[  170.073854][    C1]  do_syscall_64+0x4c/0xa0
[  170.078263][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.084150][    C1] 
[  170.086461][    C1] Last potentially related work creation:
[  170.092160][    C1]  kasan_save_stack+0x3a/0x60
[  170.096826][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  170.102199][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  170.108010][    C1]  insert_work+0x51/0x300
[  170.112332][    C1]  __queue_work+0x9b1/0xd30
[  170.116825][    C1]  queue_work_on+0xd2/0x140
[  170.121325][    C1]  __hci_cmd_sync_sk+0xa3e/0xcf0
[  170.126253][    C1]  hci_cmd_sync_status+0x53/0x120
[  170.131268][    C1]  hci_dev_cmd+0x628/0x720
[  170.135679][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  170.140350][    C1]  sock_do_ioctl+0x101/0x310
[  170.144935][    C1]  sock_ioctl+0x4d8/0x6e0
[  170.149254][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  170.153917][    C1]  __x64_sys_ioctl+0x7b/0x90
[  170.158581][    C1]  x64_sys_call+0x58b/0x9a0
[  170.163071][    C1]  do_syscall_64+0x4c/0xa0
[  170.167563][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.173481][    C1] 
[  170.175795][    C1] Second to last potentially related work creation:
[  170.182362][    C1]  kasan_save_stack+0x3a/0x60
[  170.187028][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  170.192393][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  170.198193][    C1]  insert_work+0x51/0x300
[  170.202522][    C1]  __queue_work+0x9b1/0xd30
[  170.207016][    C1]  queue_work_on+0xd2/0x140
[  170.211512][    C1]  hci_cmd_timeout+0x191/0x200
[  170.216272][    C1]  process_one_work+0x71f/0xc40
[  170.221110][    C1]  worker_thread+0xa29/0x11f0
[  170.225778][    C1]  kthread+0x281/0x320
[  170.229842][    C1]  ret_from_fork+0x1f/0x30
[  170.234276][    C1] 
[  170.236679][    C1] The buggy address belongs to the object at ffff88813dbac000
[  170.236679][    C1]  which belongs to the cache kmalloc-8k of size 8192
[  170.250720][    C1] The buggy address is located 2560 bytes inside of
[  170.250720][    C1]  8192-byte region [ffff88813dbac000, ffff88813dbae000)
[  170.264156][    C1] 
[  170.266483][    C1] The buggy address belongs to the physical page:
[  170.272880][    C1] page:ffffea0004f6ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13dba8
[  170.283103][    C1] head:ffffea0004f6ea00 order:3 compound_mapcount:0 compound_pincount:0
[  170.291413][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[  170.297484][    C1] raw: 4000000000010200 ffffea0004f6e800 dead000000000006 ffff888100043500
[  170.306053][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  170.314617][    C1] page dumped because: kasan: bad access detected
[  170.321017][    C1] page_owner tracks the page as allocated
[  170.326734][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3188, tgid 3187 (syz.9.1011), ts 144096792625, free_ts 0
[  170.348511][    C1]  post_alloc_hook+0x1f5/0x210
[  170.353269][    C1]  prep_new_page+0x1c/0x110
[  170.357765][    C1]  get_page_from_freelist+0x2c7b/0x2cf0
[  170.363302][    C1]  __alloc_pages+0x1c3/0x450
[  170.367910][    C1]  alloc_slab_page+0x6e/0xf0
[  170.372512][    C1]  new_slab+0x98/0x3d0
[  170.376579][    C1]  ___slab_alloc+0x6bd/0xb20
[  170.381162][    C1]  __slab_alloc+0x5e/0xa0
[  170.385483][    C1]  __kmem_cache_alloc_node+0x203/0x2c0
[  170.390949][    C1]  __kmalloc_node+0xa1/0x1e0
[  170.395540][    C1]  kvmalloc_node+0x294/0x480
[  170.400128][    C1]  pfifo_fast_init+0x3af/0x7a0
[  170.404879][    C1]  qdisc_create_dflt+0x150/0x3b0
[  170.409825][    C1]  mq_init+0x2df/0x670
[  170.413971][    C1]  qdisc_create_dflt+0x150/0x3b0
[  170.418915][    C1]  dev_activate+0x12d/0x1040
[  170.423504][    C1] page_owner free stack trace missing
[  170.428851][    C1] 
[  170.431163][    C1] Memory state around the buggy address:
[  170.436785][    C1]  ffff88813dbac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.444832][    C1]  ffff88813dbac980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.452876][    C1] >ffff88813dbaca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.460969][    C1]                    ^
[  170.465018][    C1]  ffff88813dbaca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.473070][    C1]  ffff88813dbacb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.481116][    C1] ==================================================================
[  170.489160][    C1] Disabling lock debugging due to kernel taint
[  170.495363][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  170.507605][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  170.516030][    C1] CPU: 1 PID: 3755 Comm: syz.7.1220 Tainted: G    B   W          syzkaller #0
[  170.524887][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  170.534949][    C1] RIP: 0010:__queue_work+0x575/0xd30
[  170.540249][    C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4b 6d 00 49 8b 7d 00 e8 53 d7
[  170.559859][    C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046
[  170.565928][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810cf2e540
[  170.573900][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  170.581866][    C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007
[  170.589835][    C1] R10: ffffed1027b75939 R11: 1ffff11027b75939 R12: dffffc0000000000
[  170.597804][    C1] R13: 0000000000000000 R14: ffff88813dbac9c8 R15: 0000000000000008
[  170.605783][    C1] FS:  00007fc5aceae6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  170.614732][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.621331][    C1] CR2: 0000001b3091dff8 CR3: 000000013738f000 CR4: 00000000003506a0
[  170.629306][    C1] Call Trace:
[  170.632591][    C1]  <IRQ>
[  170.635436][    C1]  delayed_work_timer_fn+0x61/0x80
[  170.640558][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  170.646366][    C1]  call_timer_fn+0x46/0x2a0
[  170.650874][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  170.656679][    C1]  __run_timers+0x667/0x9a0
[  170.661192][    C1]  ? calc_index+0x200/0x200
[  170.665698][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  170.670919][    C1]  run_timer_softirq+0x6a/0xf0
[  170.675683][    C1]  handle_softirqs+0x1d7/0x600
[  170.680461][    C1]  ? irqtime_account_irq+0xc4/0x240
[  170.685679][    C1]  __irq_exit_rcu+0x52/0xf0
[  170.690197][    C1]  irq_exit_rcu+0x9/0x10
[  170.694436][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  170.700074][    C1]  </IRQ>
[  170.703000][    C1]  <TASK>
[  170.705927][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  170.711914][    C1] RIP: 0010:avc_has_perm_noaudit+0xa8/0x460
[  170.717810][    C1] Code: 28 0b f3 f3 f3 f3 48 89 44 24 20 42 c6 44 28 0f f3 e8 3c f7 3a ff ba 38 00 00 00 48 89 df 31 f6 e8 4d 69 7f ff 31 ff 44 89 f6 <e8> 43 fb 3a ff 45 85 f6 0f 84 b7 02 00 00 e8 e5 a4 27 ff 4c 89 7c
[  170.737407][    C1] RSP: 0000:ffffc9000b8673a0 EFLAGS: 00000246
[  170.743475][    C1] RAX: ffffc9000b867400 RBX: ffffc9000b867400 RCX: 0000000000000000
[  170.751443][    C1] RDX: 0000000000000038 RSI: 0000000000080000 RDI: 0000000000000000
[  170.759408][    C1] RBP: ffffc9000b8674a8 R08: dffffc0000000000 R09: ffffc9000b867400
[  170.767376][    C1] R10: fffff5200170ce87 R11: 1ffff9200170ce80 R12: 0000000000000087
[  170.775344][    C1] R13: dffffc0000000000 R14: 0000000000080000 R15: ffffffff879d1c80
[  170.783312][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  170.788177][    C1]  ? __cfi_push_rt_tasks+0x10/0x10
[  170.793301][    C1]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  170.799035][    C1]  ? selinux_socket_sock_rcv_skb+0x2c5/0x7c0
[  170.805037][    C1]  avc_has_perm+0xd2/0x240
[  170.809488][    C1]  ? __cfi_avc_has_perm+0x10/0x10
[  170.814515][    C1]  ? schedule_timeout+0xa6/0x2e0
[  170.819461][    C1]  selinux_socket_unix_may_send+0x1be/0x280
[  170.825356][    C1]  ? __cfi_selinux_socket_unix_may_send+0x10/0x10
[  170.831777][    C1]  ? __kasan_check_write+0x14/0x20
[  170.836977][    C1]  ? _raw_spin_lock+0x8e/0xe0
[  170.841655][    C1]  ? __cfi__raw_spin_lock+0x10/0x10
[  170.846852][    C1]  security_unix_may_send+0x7c/0xb0
[  170.852050][    C1]  unix_dgram_sendmsg+0xad0/0x16d0
[  170.857186][    C1]  ? __cfi_unix_dgram_sendmsg+0x10/0x10
[  170.862739][    C1]  ? security_socket_sendmsg+0x93/0xb0
[  170.868194][    C1]  ? __cfi_unix_dgram_sendmsg+0x10/0x10
[  170.873831][    C1]  ____sys_sendmsg+0x5a9/0x990
[  170.878620][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  170.883470][    C1]  ? __cfi_push_rt_tasks+0x10/0x10
[  170.888593][    C1]  ? __sys_sendmsg_sock+0x40/0x40
[  170.893620][    C1]  ? __schedule+0xb8f/0x14e0
[  170.898207][    C1]  ? import_iovec+0x7c/0xb0
[  170.903239][    C1]  ___sys_sendmsg+0x21c/0x290
[  170.907913][    C1]  ? __sys_sendmsg+0x270/0x270
[  170.912675][    C1]  ? futex_unqueue+0x132/0x160
[  170.917455][    C1]  ? __cfi_futex_wait+0x10/0x10
[  170.922315][    C1]  ? __fdget+0x19c/0x220
[  170.926553][    C1]  __sys_sendmmsg+0x274/0x460
[  170.931234][    C1]  ? __cfi___sys_sendmmsg+0x10/0x10
[  170.936444][    C1]  ? fpregs_restore_userregs+0x128/0x260
[  170.942089][    C1]  __x64_sys_sendmmsg+0xa0/0xb0
[  170.946946][    C1]  x64_sys_call+0x3f5/0x9a0
[  170.951473][    C1]  do_syscall_64+0x4c/0xa0
[  170.955885][    C1]  ? clear_bhb_loop+0x30/0x80
[  170.960580][    C1]  ? clear_bhb_loop+0x30/0x80
[  170.965260][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.971154][    C1] RIP: 0033:0x7fc5abf8efc9
[  170.975566][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.995303][    C1] RSP: 002b:00007fc5aceae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  171.003732][    C1] RAX: ffffffffffffffda RBX: 00007fc5ac1e5fa0 RCX: 00007fc5abf8efc9
[  171.011733][    C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005
[  171.019707][    C1] RBP: 00007fc5ac011f91 R08: 0000000000000000 R09: 0000000000000000
[  171.027855][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.035825][    C1] R13: 00007fc5ac1e6038 R14: 00007fc5ac1e5fa0 R15: 00007ffc7bd10da8
[  171.043798][    C1]  </TASK>
[  171.046815][    C1] Modules linked in:
[  171.050711][    C1] ---[ end trace 0000000000000000 ]---
[  171.056161][    C1] RIP: 0010:__queue_work+0x575/0xd30
[  171.061456][    C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4b 6d 00 49 8b 7d 00 e8 53 d7
[  171.081092][    C1] RSP: 0000:ffffc900001b0c70 EFLAGS: 00010046
[  171.087184][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810cf2e540
[  171.095181][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  171.103173][    C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007
[  171.111151][    C1] R10: ffffed1027b75939 R11: 1ffff11027b75939 R12: dffffc0000000000
[  171.119214][    C1] R13: 0000000000000000 R14: ffff88813dbac9c8 R15: 0000000000000008
[  171.127188][    C1] FS:  00007fc5aceae6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  171.136136][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.142716][    C1] CR2: 0000001b3091dff8 CR3: 000000013738f000 CR4: 00000000003506a0
[  171.150688][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  171.158197][    C1] Kernel Offset: disabled
[  171.162520][    C1] Rebooting in 86400 seconds..