last executing test programs:

4.813840052s ago: executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x100, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r4}, 0x10)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)

4.800305654s ago: executing program 2:
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
r0 = io_uring_setup(0x34d, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x17, 0x20000007, r2)

4.769408149s ago: executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000b00)='syzkaller\x00'}, 0x90)

4.755516951s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="090000006004ab48772083a5387f077b4f500000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)

3.882009787s ago: executing program 2:
r0 = socket$inet(0x2, 0x3, 0x5)
getsockopt$inet_pktinfo(r0, 0x0, 0x18, &(0x7f0000002100)={0x0, @local, @local}, &(0x7f0000000100)=0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000001010101"], 0x50}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0xfe, 0x11f3, &(0x7f0000000980)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x208100, 0x0)
sendto$inet6(r4, &(0x7f0000000340)="398aa3bf4da8c3e1503468c422ff24e82172edddf3f7f7f8cf13281f583741503ececd449d7e226828edf3d6cc95fac1171a36a8a4e207107cac4a3ecfeb28a37d70848c6f5469df6579529dec7ea3bde52aa89d8336fa282979d9c8dc517c295ea0329c61d0ff101bfcdb7c4c8fa1089afa6ab700b0a65a016311db424942da0b27bf87bb11fa9479a57e249a2c5e7412e73428760123b57ced2e3090c290d048cc0d29a56118d9f9eb2b76505e263726aca6b5b44fb67d2287", 0xba, 0x8004, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @private1, 0x7}, 0x1c)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "12362b25"}]}}, 0x0}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000, 0x2000, &(0x7f0000000000/0x2000)=nil})

2.028661485s ago: executing program 4:
waitid(0x0, 0x0, 0x0, 0xc, 0x0)

2.009128088s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r3}, 0x10)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)

1.978665072s ago: executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x10)
dup(0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000300)={[{@data_err_abort}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000001200)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8953, &(0x7f0000000280))

1.908105854s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r2}, 0x10)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)

1.882648818s ago: executing program 4:
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000e00)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x554d, &(0x7f0000005e40)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TIOCGSID(r4, 0x5429, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1.490514738s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free_batched\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)

1.48137554s ago: executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})

1.375265787s ago: executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x3820490, 0x0, 0x0, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1.244721746s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000005c0), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(r4)

903.08472ms ago: executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000000700000000000000bf2000000000000095000000d303d400f825a5120b2837f32063e8efa85089b920df37ce028fb8e4ba7bc69a446b7b3e39fe755ad3b463318caa35168ac9bb39da4f98fa279deb65bf"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250}, 0x23)

881.273193ms ago: executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x11, 0x0, {0x0, 0x0, 0x0, 0x18, 0x4, 0x64}})

878.987823ms ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='sys_enter\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000900)={[{@numtail}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@tz_utc}, {@shortname_mixed}, {@rodir}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@nfs}, {@shortname_lower}, {@shortname_win95}]}, 0x26, 0x367, &(0x7f0000000b00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

878.774543ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})

864.717856ms ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x1e, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002060000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r11, 0x1, 0x3}], 0x1, 0x0, 0x0, 0x0)

852.716337ms ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000005c0)={0x1d, r2}, 0x10)
bind$can_raw(r1, &(0x7f00000001c0), 0x10)

831.37935ms ago: executing program 2:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5c, 0x64}, {0x16}]})
r3 = signalfd(r2, &(0x7f0000000080)={[0x8000000000000000]}, 0x8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="005c2000a0ffffff", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
poll(&(0x7f00000000c0)=[{r3, 0x40}, {r2, 0xc061}, {r2, 0x8000}, {r5, 0xa0}, {r2, 0x161}], 0x5, 0x7c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x20})
write$cgroup_int(r6, &(0x7f0000000040), 0xfea0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000300)={0x0, r7, 0x0, 0x2})
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0x3, 0x4, 0xa3f7})
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x2880008, r6, 0x0, 0x7, 0xa})
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b"], 0x6, 0x2a7, &(0x7f00000011c0)="$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")
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
creat(&(0x7f00000001c0)='./file1\x00', 0x0)
ftruncate(r8, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0x20, &(0x7f0000001c80)={&(0x7f0000000b80)=""/228, 0xe4, <r9=>0x0, &(0x7f0000000c80)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x9, 0x1b, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000500000000000000260600004d24f4ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000000000b7020000000000009500"/64], &(0x7f0000000380)='GPL\x00', 0x0, 0xf6, &(0x7f0000000a00)=""/246, 0x41100, 0x4, '\x00', 0x0, 0x1, r7, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xb, 0x7, 0xde3}, 0x10, r9, 0xffffffffffffffff, 0x4, &(0x7f0000001d00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001d40)=[{0x2, 0x5, 0x10, 0x3}, {0x4, 0x5, 0x6}, {0x3, 0x1, 0xc, 0x1}, {0x0, 0x1, 0xf}], 0x10, 0x400}, 0x90)

821.121682ms ago: executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x8208204)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x10, 0x0, 0x100000)
r3 = socket(0x11, 0x2, 0x0)
getsockopt$nfc_llcp(r3, 0x107, 0x6, 0x0, 0x20000000)

780.740368ms ago: executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x39, 0x0, 0x60)

728.941657ms ago: executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4b}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, 0x0}, 0x0)

559.720853ms ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e45000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x10d2})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0)

557.642353ms ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free_batched\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9)

526.498888ms ago: executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=@newsa={0x244, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@multicast1, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x10c, 0x14, {{'hmac(sha1)\x00'}, 0x600, 0x0, "bd9fbd045f9bc98ed55fde32c3d97b200f2ba3a27a01ac3679a263b6de7a7000020000000000003dadfa5257a22e8f7e34a5fc8881bda1a61663c8503f60fcca281320f809acfa4490549b0bf4090dd8c9bf372075d25a8d5b16695796012c4a71c3f4c4a516b8b23ff8744d42f23b6dc36bed74f66592d6b36ea26569a83d69265f3c8b97a50ac0a02df19e353f589f9eeaa7b29e4448f9201955deb03d97ffcc25b47d4df2e8b435d5b4ad779937eec43ae85725289a05e31bfe8df8cd4c3e"}}]}, 0x244}}, 0x0)

458.564439ms ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000005c0), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(r4)

444.315001ms ago: executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x5})

0s ago: executing program 1:
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000e00)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x554d, &(0x7f0000005e40)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537S1EbiOMA/ks0av9RKX3vVfqmx+gR+ljoS/UAvYRHsFfoBTyD+7ZHWHQxGYQsBgQnG1Y+H8jEych3ZjQvM4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTpodou//359vfWnMPxNnlmAwAAAFyyr7bL+sO8qX9I1z+lS19SvYiIMiIurd1HMWlljlJO1fH96sUY/kfUCac+pul4HxHf0/H0ue9fAQAAAO7Xbr1ZNKv1ppgPPSBeU7NpU378kSmviIhq/pgprTwVXzOF1ff3OH5lSqs3sGaZwpott/HltkmuTtpGrVOayWxV/4l1reynXwAAYEjtlUDHKgQAAIA78HPoATCM4lycnzNOm1N6IPiuVQMAAADeoGLoAQAAAAC9q9f/3v8HAAAA9615/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92lfb5W69WXS1r67MORyv8DsiOpryzQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Zn/eUSAEwiAM9q7vTOb+h5UGDY1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnbvnjaMIAwA8t3t7+QCEMegKAwoSBTTEvoRASihAFgU/AclyzsFwIZC4IJEFcgMVch0hISgRQgKZLv8hNZbShC6FCyNRUQTNfjjrD+AUJbsX+3mk2Xl3vZ59Z+9k+fWsDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLL1dnghKeM0bqaKuDr2+/bqYuw39/TRzfXbM7HFuLNv5HT37tdvPZoJTK4X6zun+rWdL5tPBgAAgKMhrVXkd7KN+dgnU3n9n1XnxJr/+6eKuKrn99b9m9urx8svzVT1/2+/3n1u50JTxXXioEvLo+Hc/lS6j2iKE+/p/z2jm9/5/G8vaf6CJO+tPbuV5fez882tW+/08vBYE9kCAA/idNWXQfX7UOwHbSYGwJHRrRXeVf2fTrWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATttbCE1XcCSHMdO/H0eb26uJB/c312zNVe+PGjfX6mHGILISwtDwaZg3OZdJdvXb944XRaHil+eBUCKG9q5fBB2OcE8J/n1O+PUN7s/j3oDMZabQaJOXrMyn5PMygeu89/JFb+oEEAMChlZUt1vV3so35eKwzHcK9H3bX/69Ucb84PE79f/fDv+8Viu+t1/+Dxmc6uWZXLn06e/Xa9deWLy1cHF4cfvL6mcGbg7Pnz507Pxvv1dzsUkiGc22nCQAAwGOic8CxXtnq9X8yvX/9/+SeMcap/z/7bvBFefq3cZOq/w90f9Gv7UwAAACOot5O9MxLf/15UO3c6fXC5wsrK1cGxXZn/0yxbTTdB3SsbPX6P51uOysAAACgCVtrnV3r/xdqcRhz/f/JH5//uT5mGkI4EcLlEMLw9OLl0YXmpjPRmvhH5fxCvbZnCgAAQFtOlK2+/p/lz/8nO488JCGEV18u4uqzrsap/9N3v/qpfq368/9nm5viREr6xf3I+34I3X7bGQEAAHCYHS9bLPb/yDbmP/rl5Ps9z/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO2fAAAA//8Nujoo")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TIOCGSID(r4, 0x5429, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts.
2024/06/15 01:30:31 fuzzer started
2024/06/15 01:30:31 dialing manager at 10.128.0.163:30012
[   21.877326][   T28] audit: type=1400 audit(1718415031.753:66): avc:  denied  { node_bind } for  pid=285 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   21.900223][   T28] audit: type=1400 audit(1718415031.783:67): avc:  denied  { name_bind } for  pid=285 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   21.934502][   T28] audit: type=1400 audit(1718415031.813:68): avc:  denied  { mounton } for  pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.941076][  T294] cgroup: Unknown subsys name 'net'
[   21.977620][   T28] audit: type=1400 audit(1718415031.813:69): avc:  denied  { mount } for  pid=295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.000784][   T28] audit: type=1400 audit(1718415031.813:70): avc:  denied  { mounton } for  pid=294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.001270][  T294] cgroup: Unknown subsys name 'devices'
[   22.023377][   T28] audit: type=1400 audit(1718415031.823:71): avc:  denied  { mount } for  pid=294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.037939][  T300] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.051424][   T28] audit: type=1400 audit(1718415031.853:72): avc:  denied  { setattr } for  pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.081860][   T28] audit: type=1400 audit(1718415031.863:73): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.101463][   T28] audit: type=1400 audit(1718415031.933:74): avc:  denied  { relabelto } for  pid=300 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.126768][   T28] audit: type=1400 audit(1718415031.933:75): avc:  denied  { write } for  pid=300 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.129829][  T297] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.251984][  T294] cgroup: Unknown subsys name 'hugetlb'
[   22.257428][  T294] cgroup: Unknown subsys name 'rlimit'
2024/06/15 01:30:32 starting 5 executor processes
[   23.411066][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.418036][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.425544][  T313] device bridge_slave_0 entered promiscuous mode
[   23.433384][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.440287][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.447441][  T313] device bridge_slave_1 entered promiscuous mode
[   23.500086][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.507035][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.514393][  T312] device bridge_slave_0 entered promiscuous mode
[   23.548557][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.555450][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.562702][  T312] device bridge_slave_1 entered promiscuous mode
[   23.607891][  T316] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.615094][  T316] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.622707][  T316] device bridge_slave_0 entered promiscuous mode
[   23.641178][  T316] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.648158][  T316] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.655529][  T316] device bridge_slave_1 entered promiscuous mode
[   23.666264][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.673182][  T315] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.680374][  T315] device bridge_slave_0 entered promiscuous mode
[   23.702650][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.709507][  T315] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.716856][  T315] device bridge_slave_1 entered promiscuous mode
[   23.801806][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.808736][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.816116][  T314] device bridge_slave_0 entered promiscuous mode
[   23.833387][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.840421][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.847643][  T314] device bridge_slave_1 entered promiscuous mode
[   23.891037][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.897937][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.905115][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.911995][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.974082][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.980969][  T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.988044][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.994866][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.021865][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.028723][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.035866][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.042621][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.097408][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.105249][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.112448][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.119511][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.127939][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.134998][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.143561][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.150789][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.181084][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.188839][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.196814][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.204891][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.211734][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.219398][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.227436][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.234373][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.241585][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.249558][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.256410][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.263770][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.271808][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.278631][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.285879][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.293883][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.300726][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.307884][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.315734][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.323690][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.330530][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.345180][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.379846][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.387657][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.396556][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.404424][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.412345][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.420233][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.428319][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.447057][  T315] device veth0_vlan entered promiscuous mode
[   24.460358][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.468604][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.477242][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.485027][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.492834][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.500249][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.507583][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.514953][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.526450][  T312] device veth0_vlan entered promiscuous mode
[   24.540471][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.548265][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.556332][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.564554][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.572937][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.581094][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.589043][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.595902][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.603088][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.611252][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.619636][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.626510][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.633757][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.641437][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.649758][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.657040][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.664526][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.672012][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.679229][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.690777][  T313] device veth0_vlan entered promiscuous mode
[   24.699565][  T315] device veth1_macvtap entered promiscuous mode
[   24.711389][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.727615][  T313] device veth1_macvtap entered promiscuous mode
[   24.735884][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.743923][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.752278][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.760172][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.767871][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.775869][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.783931][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.804211][  T312] device veth1_macvtap entered promiscuous mode
[   24.811182][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.818450][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.826215][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.834383][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.842491][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.850652][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.858573][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.865418][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.872601][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.880592][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.888482][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.895979][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.904144][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.912379][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.930078][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.938338][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.946536][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.953407][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.960644][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.968417][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.983439][  T316] device veth0_vlan entered promiscuous mode
[   24.990812][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.998928][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.007442][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.015796][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.023994][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.031696][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.039600][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.046958][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.064551][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.072703][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.089043][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.097205][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.105681][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.113776][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.125564][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.146547][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.154676][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.162771][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.176407][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.187190][  T316] device veth1_macvtap entered promiscuous mode
[   25.199537][  T314] device veth0_vlan entered promiscuous mode
[   25.221084][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.229312][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.244041][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.252125][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.269980][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.280275][  T314] device veth1_macvtap entered promiscuous mode
[   25.308287][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.320092][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.342073][  T350] pim6reg0: tun_chr_ioctl cmd 1074025677
[   25.358112][  T350] pim6reg0: linktype set to 827
[   25.369982][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.378137][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.729250][  T341] loop1: detected capacity change from 0 to 40427
[   25.744088][  T341] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   25.755525][  T341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   25.768576][  T341] F2FS-fs (loop1): invalid crc value
[   25.776420][  T341] F2FS-fs (loop1): Found nat_bits in checkpoint
[   25.826296][  T341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   25.833260][  T341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   25.971626][  T315] syz-executor.2 (315) used greatest stack depth: 21040 bytes left
[   25.987692][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.994737][  T371] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.006176][  T371] device bridge_slave_0 entered promiscuous mode
[   26.018036][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.027192][  T371] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.038121][  T371] device bridge_slave_1 entered promiscuous mode
[   26.314538][  T376] syz-executor.1: attempt to access beyond end of device
[   26.314538][  T376] loop1: rw=2049, sector=77824, nr_sectors = 544 limit=40427
[   26.421583][  T382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.470747][  T387] random: crng reseeded on system resumption
[   26.521495][  T346] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   26.534240][  T346] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   26.591794][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   26.599134][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.635019][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   26.643429][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.651828][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.658678][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.672235][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   26.680470][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.688536][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.695409][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.702859][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.727296][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   26.739486][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.762333][  T390] loop4: detected capacity change from 0 to 256
[   26.767013][  T371] device veth0_vlan entered promiscuous mode
[   26.798786][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.800122][  T390] FAT-fs (loop4): Directory bread(block 64) failed
[   26.814737][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.827263][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.832631][  T390] FAT-fs (loop4): Directory bread(block 65) failed
[   26.840967][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.848081][  T390] FAT-fs (loop4): Directory bread(block 66) failed
[   26.858956][  T390] FAT-fs (loop4): Directory bread(block 67) failed
[   26.872149][  T371] device veth1_macvtap entered promiscuous mode
[   26.878482][  T390] FAT-fs (loop4): Directory bread(block 68) failed
[   26.885128][  T390] FAT-fs (loop4): Directory bread(block 69) failed
[   26.891702][  T390] FAT-fs (loop4): Directory bread(block 70) failed
[   26.898207][  T390] FAT-fs (loop4): Directory bread(block 71) failed
[   26.905164][  T390] FAT-fs (loop4): Directory bread(block 72) failed
[   26.911718][  T390] FAT-fs (loop4): Directory bread(block 73) failed
[   26.928931][  T204] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.945856][   T28] kauditd_printk_skb: 48 callbacks suppressed
[   26.945880][   T28] audit: type=1400 audit(1718415036.823:124): avc:  denied  { mount } for  pid=389 comm="syz-executor.4" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   27.318252][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.340073][   T28] audit: type=1400 audit(1718415037.223:125): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   27.362958][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.371468][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.409345][   T28] audit: type=1400 audit(1718415037.273:126): avc:  denied  { mounton } for  pid=371 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   27.450458][  T420] random: crng reseeded on system resumption
[   27.474138][  T414] loop1: detected capacity change from 0 to 40427
[   27.486662][  T414] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   27.494654][  T414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   27.504271][  T414] F2FS-fs (loop1): invalid crc value
[   27.515421][  T414] F2FS-fs (loop1): Found nat_bits in checkpoint
[   27.521606][   T28] audit: type=1400 audit(1718415037.403:127): avc:  denied  { mount } for  pid=423 comm="syz-executor.2" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   27.546696][   T28] audit: type=1400 audit(1718415037.403:128): avc:  denied  { mounton } for  pid=423 comm="syz-executor.2" path="/root/syzkaller-testdir3953708360/syzkaller.vwvlRB/2/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   27.581032][   T28] audit: type=1400 audit(1718415037.423:129): avc:  denied  { unmount } for  pid=371 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.596445][  T414] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   27.602486][   T28] audit: type=1400 audit(1718415037.483:130): avc:  denied  { unmount } for  pid=371 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   27.608164][  T414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   27.628309][    T8] device bridge_slave_1 left promiscuous mode
[   27.653236][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.661929][    T8] device bridge_slave_0 left promiscuous mode
[   27.668223][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.674015][  T204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.685891][  T204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.695984][  T204] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   27.696110][    T8] device veth1_macvtap left promiscuous mode
[   27.705807][    T8] device veth0_vlan left promiscuous mode
[   27.711081][  T204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.725830][  T204] usb 1-1: config 0 descriptor??
[   28.004021][  T430] syz-executor.1: attempt to access beyond end of device
[   28.004021][  T430] loop1: rw=2049, sector=77824, nr_sectors = 544 limit=40427
[   28.113561][   T28] audit: type=1400 audit(1718415037.843:131): avc:  denied  { create } for  pid=413 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   28.143266][   T28] audit: type=1400 audit(1718415038.023:132): avc:  denied  { read } for  pid=431 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   28.165992][   T28] audit: type=1400 audit(1718415038.023:133): avc:  denied  { open } for  pid=431 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   28.284247][   T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   28.285398][  T443] syz-executor.3 (pid 443) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   28.298394][   T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   28.320038][  T443] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   28.330737][  T443] =======================================================
[   28.330737][  T443] WARNING: The mand mount option has been deprecated and
[   28.330737][  T443]          and is ignored by this kernel. Remove the mand
[   28.330737][  T443]          option from the mount to silence this warning.
[   28.330737][  T443] =======================================================
[   28.370121][  T204] hid (null): bogus close delimiter
[   28.370342][  T443] EXT4-fs (sda1): re-mounted. Quota mode: none.
[   28.427005][  T451] loop3: detected capacity change from 0 to 128
[   28.461794][  T451] FAT-fs (loop3): error, clusters badly computed (2 != 0)
[   28.468749][  T451] FAT-fs (loop3): Filesystem has been set read-only
[   28.521248][  T457] pim6reg0: tun_chr_ioctl cmd 1074025677
[   28.522057][  T456] random: crng reseeded on system resumption
[   28.529571][  T457] pim6reg0: linktype set to 827
[   28.561449][  T461] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[   28.586981][  T461] syz-executor.2 (461) used greatest stack depth: 20328 bytes left
[   28.737620][  T465] loop1: detected capacity change from 0 to 256
[   28.787616][  T465] FAT-fs (loop1): Directory bread(block 64) failed
[   28.794056][  T465] FAT-fs (loop1): Directory bread(block 65) failed
[   28.800767][  T465] FAT-fs (loop1): Directory bread(block 66) failed
[   28.803297][  T483] device syzkaller0 entered promiscuous mode
[   28.807141][  T465] FAT-fs (loop1): Directory bread(block 67) failed
[   28.820172][  T465] FAT-fs (loop1): Directory bread(block 68) failed
[   28.826554][  T465] FAT-fs (loop1): Directory bread(block 69) failed
[   28.838134][  T465] FAT-fs (loop1): Directory bread(block 70) failed
[   28.845952][  T465] FAT-fs (loop1): Directory bread(block 71) failed
[   28.853798][  T465] FAT-fs (loop1): Directory bread(block 72) failed
[   28.860880][  T465] FAT-fs (loop1): Directory bread(block 73) failed
[   28.870075][  T204] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71
[   28.961945][  T204] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   29.059510][  T204] uclogic: probe of 0003:256C:006D.0001 failed with error -71
[   29.265186][  T204] usb 1-1: USB disconnect, device number 2
[   29.356098][  T492] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[   29.524749][  T507] device syz_tun entered promiscuous mode
[   29.543386][  T509] loop2: detected capacity change from 0 to 256
[   29.549988][  T510] syz-executor.4[510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.550073][  T510] syz-executor.4[510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.554949][  T507] device syz_tun left promiscuous mode
[   29.644940][  T509] FAT-fs (loop2): Directory bread(block 64) failed
[   29.668556][  T509] FAT-fs (loop2): Directory bread(block 65) failed
[   29.679769][  T509] FAT-fs (loop2): Directory bread(block 66) failed
[   29.686128][  T509] FAT-fs (loop2): Directory bread(block 67) failed
[   29.686182][  T509] FAT-fs (loop2): Directory bread(block 68) failed
[   29.686204][  T509] FAT-fs (loop2): Directory bread(block 69) failed
[   29.686239][  T509] FAT-fs (loop2): Directory bread(block 70) failed
[   29.686260][  T509] FAT-fs (loop2): Directory bread(block 71) failed
[   29.686297][  T509] FAT-fs (loop2): Directory bread(block 72) failed
[   29.686317][  T509] FAT-fs (loop2): Directory bread(block 73) failed
[   29.766920][    T8] kworker/u4:0: attempt to access beyond end of device
[   29.766920][    T8] loop2: rw=1, sector=1224, nr_sectors = 128 limit=256
[   29.848246][  T530] loop2: detected capacity change from 0 to 2048
[   29.850393][  T534] loop3: detected capacity change from 0 to 256
[   29.869622][  T534] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   29.941761][  T539] device syz_tun entered promiscuous mode
[   29.947719][  T539] device syz_tun left promiscuous mode
[   29.960206][  T530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   30.556982][  T530] ext4 filesystem being mounted at /root/syzkaller-testdir3953708360/syzkaller.vwvlRB/18/bus supports timestamps until 2038 (0x7fffffff)
[   30.573458][  T536] loop0: detected capacity change from 0 to 256
[   30.581990][  T536] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.602886][  T371] EXT4-fs (loop2): unmounting filesystem.
[   30.651452][  T553] loop2: detected capacity change from 0 to 256
[   30.664822][  T553] FAT-fs (loop2): Directory bread(block 64) failed
[   30.671341][  T553] FAT-fs (loop2): Directory bread(block 65) failed
[   30.678190][  T553] FAT-fs (loop2): Directory bread(block 66) failed
[   30.684586][  T553] FAT-fs (loop2): Directory bread(block 67) failed
[   30.691142][  T553] FAT-fs (loop2): Directory bread(block 68) failed
[   30.697523][  T553] FAT-fs (loop2): Directory bread(block 69) failed
[   30.704007][  T553] FAT-fs (loop2): Directory bread(block 70) failed
[   30.710394][  T553] FAT-fs (loop2): Directory bread(block 71) failed
[   30.716697][  T553] FAT-fs (loop2): Directory bread(block 72) failed
[   30.723166][  T553] FAT-fs (loop2): Directory bread(block 73) failed
[   30.777864][  T378] kworker/u4:4: attempt to access beyond end of device
[   30.777864][  T378] loop2: rw=1, sector=1224, nr_sectors = 128 limit=256
[   30.803362][  T564] loop2: detected capacity change from 0 to 128
[   30.816020][  T564] FAT-fs (loop2): error, clusters badly computed (2 != 0)
[   30.823936][  T564] FAT-fs (loop2): Filesystem has been set read-only
[   30.869508][  T570] loop0: detected capacity change from 0 to 2048
[   30.899777][   T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   30.915634][  T570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   30.924038][  T416] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   30.929867][  T570] ext4 filesystem being mounted at /root/syzkaller-testdir2051757472/syzkaller.haOE5Z/19/bus supports timestamps until 2038 (0x7fffffff)
[   30.954420][  T316] EXT4-fs (loop0): unmounting filesystem.
[   30.980121][  T583] loop0: detected capacity change from 0 to 2048
[   30.989436][  T585] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[   31.007996][  T583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   31.210185][   T39] usb 5-1: Using ep0 maxpacket: 16
[   31.210223][  T416] usb 4-1: Using ep0 maxpacket: 8
[   31.379747][  T416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.405259][  T416] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   31.440002][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 26, changing to 8
[   31.450989][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17918, setting to 1024
[   31.462138][   T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   31.474936][   T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   31.483905][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.499990][   T39] usb 5-1: config 0 descriptor??
[   31.519873][  T546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   31.539783][  T416] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   31.549778][  T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   31.557589][  T416] usb 4-1: SerialNumber: syz
[   31.610172][  T416] cdc_ether 4-1:1.0: skipping garbage
[   31.615392][  T416] usb 4-1: bad CDC descriptors
[   31.620486][  T416] usb-storage 4-1:1.0: USB Mass Storage device detected
[   31.630304][  T416] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   31.815634][  T554] loop3: detected capacity change from 0 to 256
[   31.836628][  T554] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   31.859159][  T316] EXT4-fs (loop0): unmounting filesystem.
[   31.863354][  T416] usb 4-1: USB disconnect, device number 2
[   31.966570][   T39] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input4
[   31.981789][   T39] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   32.008550][  T615] pim6reg0: tun_chr_ioctl cmd 1074025677
[   32.008583][  T617] loop1: detected capacity change from 0 to 256
[   32.014171][  T615] pim6reg0: linktype set to 827
[   32.076858][  T627] loop2: detected capacity change from 0 to 256
[   32.087529][  T627] FAT-fs (loop2): Directory bread(block 64) failed
[   32.094034][  T627] FAT-fs (loop2): Directory bread(block 65) failed
[   32.100838][  T627] FAT-fs (loop2): Directory bread(block 66) failed
[   32.107241][  T627] FAT-fs (loop2): Directory bread(block 67) failed
[   32.113692][  T627] FAT-fs (loop2): Directory bread(block 68) failed
[   32.120112][  T627] FAT-fs (loop2): Directory bread(block 69) failed
[   32.126501][  T627] FAT-fs (loop2): Directory bread(block 70) failed
[   32.132836][  T627] FAT-fs (loop2): Directory bread(block 71) failed
[   32.139171][  T627] FAT-fs (loop2): Directory bread(block 72) failed
[   32.145489][  T627] FAT-fs (loop2): Directory bread(block 73) failed
[   32.162456][  T416] usb 5-1: USB disconnect, device number 2
[   32.181184][    T8] kworker/u4:0: attempt to access beyond end of device
[   32.181184][    T8] loop2: rw=1, sector=1224, nr_sectors = 128 limit=256
[   32.209741][  T304] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.280183][   T28] kauditd_printk_skb: 1760 callbacks suppressed
[   32.280199][   T28] audit: type=1400 audit(1718415042.163:1894): avc:  denied  { write } for  pid=628 comm="syz-executor.2" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   32.314121][  T629] kvm: emulating exchange as write
[   32.479701][  T304] usb 1-1: Using ep0 maxpacket: 8
[   32.541259][  T635] loop2: detected capacity change from 0 to 40427
[   32.548385][  T635] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   32.556010][  T635] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   32.566429][  T635] F2FS-fs (loop2): Found nat_bits in checkpoint
[   32.609733][  T304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   32.624169][  T635] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   32.631209][  T635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   32.650673][   T28] audit: type=1400 audit(1718415042.533:1895): avc:  denied  { create } for  pid=634 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   32.746828][  T304] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   32.758351][  T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   32.767124][  T304] usb 1-1: SerialNumber: syz
[   32.777119][  T304] usb 1-1: config 0 descriptor??
[   32.805980][  T647] loop4: detected capacity change from 0 to 128
[   32.832445][  T304] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   32.844452][  T304] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized!
[   32.882076][   T28] audit: type=1400 audit(1718415042.753:1896): avc:  denied  { mounton } for  pid=634 comm="syz-executor.2" path="/root/syzkaller-testdir3953708360/syzkaller.vwvlRB/35/bus/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   32.943785][  T647] FAT-fs (loop4): error, clusters badly computed (2 != 0)
[   32.957336][  T648] overlayfs: failed to resolve './file0': -2
[   33.058238][  T304] usb 1-1: Failed to create links for entity 255
[   33.070455][  T647] FAT-fs (loop4): Filesystem has been set read-only
[   33.078993][   T28] audit: type=1400 audit(1718415042.763:1897): avc:  denied  { write } for  pid=634 comm="syz-executor.2" name="bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.103168][  T304] usb 1-1: Failed to register entities (-22).
[   33.106447][  T650] loop1: detected capacity change from 0 to 256
[   33.116139][  T304] usb 1-1: USB disconnect, device number 3
[   33.119722][   T28] audit: type=1400 audit(1718415042.763:1898): avc:  denied  { add_name } for  pid=634 comm="syz-executor.2" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.149875][   T28] audit: type=1400 audit(1718415042.793:1899): avc:  denied  { setattr } for  pid=634 comm="syz-executor.2" name="work" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.172213][   T28] audit: type=1400 audit(1718415042.803:1900): avc:  denied  { remove_name } for  pid=634 comm="syz-executor.2" name="#1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.195108][   T28] audit: type=1400 audit(1718415042.803:1901): avc:  denied  { rename } for  pid=634 comm="syz-executor.2" name="#1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.223685][   T28] audit: type=1400 audit(1718415042.813:1902): avc:  denied  { unlink } for  pid=634 comm="syz-executor.2" name="#1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.262678][   T28] audit: type=1400 audit(1718415042.813:1903): avc:  denied  { unlink } for  pid=634 comm="syz-executor.2" name="#2" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.296876][  T654] overlayfs: missing 'lowerdir'
[   33.344686][  T662] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
[   33.375717][  T664] device syzkaller0 entered promiscuous mode
[   33.443523][  T672] loop4: detected capacity change from 0 to 128
[   33.458166][  T672] FAT-fs (loop4): error, clusters badly computed (2 != 0)
[   33.465409][  T672] FAT-fs (loop4): Filesystem has been set read-only
[   33.513184][  T680] overlayfs: missing 'lowerdir'
[   33.629800][   T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   33.666104][  T686] loop4: detected capacity change from 0 to 40427
[   33.666491][  T695] loop0: detected capacity change from 0 to 512
[   33.673467][  T686] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   33.687570][  T686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   33.712305][  T695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   33.722940][  T695] ext4 filesystem being mounted at /root/syzkaller-testdir2051757472/syzkaller.haOE5Z/25/file1 supports timestamps until 2038 (0x7fffffff)
[   33.873395][  T686] F2FS-fs (loop4): Found nat_bits in checkpoint
[   34.031597][  T686] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   34.043597][  T686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   34.052966][  T316] EXT4-fs (loop0): unmounting filesystem.
[   34.239739][   T39] usb 4-1: Using ep0 maxpacket: 8
[   34.332617][  T727] overlayfs: failed to resolve './file0': -2
[   34.689788][  T416] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   34.759718][  T204] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   34.759756][   T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.777324][   T39] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   34.879789][   T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   34.888665][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   34.896776][   T39] usb 4-1: SerialNumber: syz
[   34.950172][   T39] cdc_ether 4-1:1.0: skipping garbage
[   34.955840][   T39] usb 4-1: bad CDC descriptors
[   34.960694][   T39] usb-storage 4-1:1.0: USB Mass Storage device detected
[   35.160062][  T204] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.183079][  T204] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.229170][  T204] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   35.269398][  T661] loop3: detected capacity change from 0 to 256
[   35.316943][  T661] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   35.361440][  T416] usb 1-1: Using ep0 maxpacket: 8
[   35.369407][   T39] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   35.401295][   T39] usb 4-1: USB disconnect, device number 3
[   35.489764][  T416] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   35.489766][  T204] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   35.489790][  T204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.516970][  T204] usb 3-1: Product: syz
[   35.521005][  T204] usb 3-1: Manufacturer: syz
[   35.525409][  T204] usb 3-1: SerialNumber: syz
[   35.579761][  T416] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   35.588703][  T416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   35.599839][  T416] usb 1-1: SerialNumber: syz
[   35.609093][  T416] usb 1-1: config 0 descriptor??
[   35.660224][  T416] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   35.666933][  T416] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized!
[   35.675424][  T416] usb 1-1: Failed to create links for entity 255
[   35.681512][  T416] usb 1-1: Failed to register entities (-22).
[   35.728070][  T776] EXT4-fs (sda1): re-mounted. Quota mode: none.
[   35.863371][  T332] usb 1-1: USB disconnect, device number 4
[   36.029706][  T416] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   36.141738][  T802] EXT4-fs (sda1): re-mounted. Quota mode: none.
[   36.209737][  T335] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   36.429778][  T416] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   36.439804][  T416] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[   36.449357][  T416] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   36.449842][  T335] usb 4-1: Using ep0 maxpacket: 32
[   36.462321][   T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   36.496592][  T810] loop0: detected capacity change from 0 to 40427
[   36.503838][  T810] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   36.511412][  T810] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   36.520258][  T810] F2FS-fs (loop0): invalid crc value
[   36.526652][  T810] F2FS-fs (loop0): Found nat_bits in checkpoint
[   36.559773][  T810] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   36.566841][  T810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   36.579770][  T416] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   36.588776][  T416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   36.596787][  T416] usb 2-1: SerialNumber: syz
[   36.599979][  T335] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.612061][  T335] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.629805][  T780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   36.636885][  T780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   36.669770][  T204] cdc_ncm 3-1:1.0: bind() failure
[   36.699820][  T204] cdc_ncm: probe of 3-1:1.1 failed with error -71
[   36.719760][  T204] cdc_mbim: probe of 3-1:1.1 failed with error -71
[   36.727011][  T204] usb 3-1: USB disconnect, device number 2
[   36.739683][   T39] usb 5-1: Using ep0 maxpacket: 16
[   36.851313][  T816] syz-executor.0: attempt to access beyond end of device
[   36.851313][  T816] loop0: rw=2049, sector=77824, nr_sectors = 544 limit=40427
[   36.993848][  T335] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   37.002946][  T335] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   37.011726][  T335] usb 4-1: Product: syz
[   37.016480][  T780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   37.023437][  T335] usb 4-1: Manufacturer: syz
[   37.023942][  T780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   37.060140][  T335] hub 4-1:4.0: USB hub found
[   37.109730][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.120550][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.130123][   T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   37.143089][   T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   37.151961][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.160380][   T39] usb 5-1: config 0 descriptor??
[   37.248345][    T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   37.257675][    T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   37.279801][  T335] hub 4-1:4.0: 2 ports detected
[   37.353246][  T818] process 'syz-executor.0' launched '/dev/fd/3' with NULL argv: empty string added
[   37.362817][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   37.362831][   T28] audit: type=1400 audit(1718415047.243:1916): avc:  denied  { execute_no_trans } for  pid=817 comm="syz-executor.0" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   37.365214][  T818] overlayfs: unrecognized mount option "8" or missing value
[   37.439475][   T28] audit: type=1400 audit(1718415047.313:1917): avc:  denied  { connect } for  pid=821 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.473264][   T28] audit: type=1326 audit(1718415047.353:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=826 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f350087cea9 code=0x0
[   37.501631][  T416] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   37.640653][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.647854][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.654966][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.662070][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.669136][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.676243][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.683309][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.690407][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.697557][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.708221][   T39] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   37.715670][   T39] microsoft 0003:045E:07DA.0003: No inputs registered, leaving
[   37.723545][  T416] usb 2-1: USB disconnect, device number 2
[   37.729798][  T416] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   37.739462][   T39] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   37.751028][   T39] microsoft 0003:045E:07DA.0003: no inputs found
[   37.758989][   T39] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[   37.846042][   T39] usb 5-1: USB disconnect, device number 3
[   37.950760][  T335] usb 4-1: USB disconnect, device number 4
[   38.232793][  T832] loop1: detected capacity change from 0 to 2048
[   38.270287][  T832]  loop1: p1 < > p4
[   38.274855][  T832] loop1: p4 size 8388608 extends beyond EOD, truncated
[   38.285067][   T28] audit: type=1400 audit(1718415048.163:1919): avc:  denied  { read write } for  pid=831 comm="syz-executor.1" name="loop1p4" dev="devtmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   38.316799][   T28] audit: type=1400 audit(1718415048.163:1920): avc:  denied  { open } for  pid=831 comm="syz-executor.1" path="/dev/loop1p4" dev="devtmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   38.362636][   T28] audit: type=1400 audit(1718415048.243:1921): avc:  denied  { mount } for  pid=839 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   38.384928][   T28] audit: type=1400 audit(1718415048.243:1922): avc:  denied  { mounton } for  pid=839 comm="syz-executor.1" path="/root/syzkaller-testdir2096965412/syzkaller.rRPZbW/38/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   38.412213][   T28] audit: type=1400 audit(1718415048.243:1923): avc:  denied  { unmount } for  pid=839 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   38.472360][   T28] audit: type=1400 audit(1718415048.353:1924): avc:  denied  { read } for  pid=851 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.494544][  T847] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   38.524268][  T856] Invalid ELF header type: 0 != 1
[   38.529210][   T28] audit: type=1400 audit(1718415048.403:1925): avc:  denied  { sys_module } for  pid=851 comm="syz-executor.2" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   38.559242][  T858] hub 6-0:1.0: USB hub found
[   38.571845][  T858] hub 6-0:1.0: 1 port detected
[   38.888075][  T891] hub 6-0:1.0: USB hub found
[   38.892624][  T891] hub 6-0:1.0: 1 port detected
[   39.090662][   T10] device bridge_slave_1 left promiscuous mode
[   39.096680][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.104308][   T10] device bridge_slave_0 left promiscuous mode
[   39.110359][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.118056][   T10] device veth1_macvtap left promiscuous mode
[   39.123929][   T10] device veth0_vlan left promiscuous mode
[   39.511951][  T932] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.518859][  T932] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.526152][  T932] device bridge_slave_0 entered promiscuous mode
[   39.655452][  T932] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.663279][  T932] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.672645][  T932] device bridge_slave_1 entered promiscuous mode
[   39.867816][  T934] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.874822][  T934] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.881999][  T934] device bridge_slave_0 entered promiscuous mode
[   39.894024][  T934] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.900889][  T934] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.908153][  T934] device bridge_slave_1 entered promiscuous mode
[   39.951028][  T933] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.957929][  T933] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.965116][  T933] device bridge_slave_0 entered promiscuous mode
[   39.972125][  T933] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.979002][  T933] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.986213][  T933] device bridge_slave_1 entered promiscuous mode
[   40.084514][  T932] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.091386][  T932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.098450][  T932] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.105256][  T932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.129606][  T934] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.136609][  T934] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.143678][  T934] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.150456][  T934] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.160025][  T933] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.166896][  T933] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.174112][  T933] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.180977][  T933] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.238285][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.246091][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.253375][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.260605][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.268148][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.275543][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.283308][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.300460][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.318315][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.326370][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.333229][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.353595][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.361672][  T204] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.368494][  T204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.376410][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.384007][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.391948][  T204] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.398770][  T204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.405952][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.413907][  T204] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.420735][  T204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.427983][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.435968][  T204] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.442802][  T204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.449964][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.457872][  T204] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.464705][  T204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.484774][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.489701][  T332] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   40.492915][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.507539][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.515705][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.523462][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.531436][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.539213][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.547012][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.562222][   T10] device bridge_slave_1 left promiscuous mode
[   40.568303][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.575887][   T10] device bridge_slave_0 left promiscuous mode
[   40.582002][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.592292][   T10] device bridge_slave_1 left promiscuous mode
[   40.599096][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.606607][   T10] device bridge_slave_0 left promiscuous mode
[   40.612719][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.621144][   T10] device veth1_macvtap left promiscuous mode
[   40.627029][   T10] device veth0_vlan left promiscuous mode
[   40.632732][   T10] device veth1_macvtap left promiscuous mode
[   40.638570][   T10] device veth0_vlan left promiscuous mode
[   40.739749][  T332] usb 4-1: Using ep0 maxpacket: 8
[   40.814428][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.822605][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.830355][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.838185][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.853350][  T932] device veth0_vlan entered promiscuous mode
[   40.859734][  T332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   40.873921][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.882074][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.890285][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.897944][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.905793][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.914209][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.922134][    T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   40.929813][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.937071][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.946335][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.949760][  T332] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   40.954480][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.963011][  T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   40.971028][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.980769][  T332] usb 4-1: SerialNumber: syz
[   40.985966][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.990683][  T332] usb 4-1: config 0 descriptor??
[   41.001068][  T932] device veth1_macvtap entered promiscuous mode
[   41.008764][  T934] device veth0_vlan entered promiscuous mode
[   41.014931][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.023336][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.031286][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.040337][  T332] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   41.046189][  T934] device veth1_macvtap entered promiscuous mode
[   41.047033][  T332] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized!
[   41.062190][  T332] usb 4-1: Failed to create links for entity 255
[   41.068346][  T332] usb 4-1: Failed to register entities (-22).
[   41.074958][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.082973][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.091887][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.099240][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.107291][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.115383][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.123382][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.131494][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.139553][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.155150][  T933] device veth0_vlan entered promiscuous mode
[   41.162406][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.170168][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.177991][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.179814][    T6] usb 3-1: Using ep0 maxpacket: 8
[   41.186315][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.198892][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.206180][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.223244][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.231580][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.252699][  T933] device veth1_macvtap entered promiscuous mode
[   41.264590][   T19] usb 4-1: USB disconnect, device number 5
[   41.279195][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.287553][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.295928][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.309806][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.325577][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.348600][    T6] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   41.357619][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.366596][    T6] usb 3-1: config 0 descriptor??
[   41.380070][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.388311][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.396522][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.405081][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.619886][  T334] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   41.717222][  T980] loop4: detected capacity change from 0 to 40427
[   41.724414][  T980] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   41.731976][  T980] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   41.740848][  T980] F2FS-fs (loop4): invalid crc value
[   41.747506][  T980] F2FS-fs (loop4): Found nat_bits in checkpoint
[   41.785360][  T980] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   41.792401][  T980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   42.973070][  T990] syz-executor.4: attempt to access beyond end of device
[   42.973070][  T990] loop4: rw=2049, sector=77824, nr_sectors = 544 limit=40427
[   43.250829][    T6] belkin 0003:1020:0006.0004: unexpected long global item
[   43.257980][    T6] belkin 0003:1020:0006.0004: parse failed
[   43.263806][    T6] belkin: probe of 0003:1020:0006.0004 failed with error -22
[   43.268052][  T334] usb 2-1: Using ep0 maxpacket: 16
[   43.279006][    T6] usb 3-1: USB disconnect, device number 3
[   43.422249][  T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.433422][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   43.433441][   T28] audit: type=1400 audit(1718415053.303:1937): avc:  denied  { map } for  pid=999 comm="syz-executor.3" path="socket:[17695]" dev="sockfs" ino=17695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   43.465915][  T346] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   43.469444][  T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.484653][  T334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   43.486185][  T346] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   43.500453][  T334] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   43.529364][  T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.548185][  T334] usb 2-1: config 0 descriptor??
[   43.566884][ T1002] loop0: detected capacity change from 0 to 40427
[   43.574082][ T1002] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   43.582110][ T1002] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   43.670817][ T1002] F2FS-fs (loop0): Found nat_bits in checkpoint
[   43.721228][ T1002] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   43.728604][ T1002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   44.055939][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.069230][ T1022] overlayfs: failed to resolve './file0': -2
[   44.139893][   T28] audit: type=1400 audit(1718415054.003:1938): avc:  denied  { connect } for  pid=1021 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   44.189969][   T28] audit: type=1400 audit(1718415054.013:1939): avc:  denied  { write } for  pid=1021 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   44.215875][   T28] audit: type=1400 audit(1718415054.043:1940): avc:  denied  { read } for  pid=1021 comm="syz-executor.2" path="socket:[16978]" dev="sockfs" ino=16978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   44.224671][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.283511][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.290822][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.297858][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.304939][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.312849][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.321956][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.329220][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.338468][  T334] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   44.338842][   T28] audit: type=1400 audit(1718415054.213:1941): avc:  denied  { getopt } for  pid=1033 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.346223][  T334] microsoft 0003:045E:07DA.0005: No inputs registered, leaving
[   44.377757][ T1032] loop4: detected capacity change from 0 to 512
[   44.385743][   T28] audit: type=1400 audit(1718415054.253:1942): avc:  denied  { unlink } for  pid=1031 comm="syz-executor.4" name="#7" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[   44.419125][ T1032] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 15
[   44.429622][  T334] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   44.449829][ T1032] EXT4-fs (loop4): Remounting filesystem read-only
[   44.456369][  T334] microsoft 0003:045E:07DA.0005: no inputs found
[   44.466473][  T334] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway
[   44.476567][ T1032] ext4_test_bit(bit=14, block=5) = 0
[   44.486477][ T1032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   44.495015][  T334] usb 2-1: USB disconnect, device number 3
[   44.509614][   T28] audit: type=1400 audit(1718415054.383:1943): avc:  denied  { mounton } for  pid=1031 comm="syz-executor.4" path="/root/syzkaller-testdir81358250/syzkaller.g0HJIN/9/bus/file2/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   44.769683][  T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   44.969982][   T28] audit: type=1326 audit(1718415054.853:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1047 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46f47cea9 code=0x7fc00000
[   45.023690][   T28] audit: type=1400 audit(1718415054.903:1945): avc:  denied  { create } for  pid=932 comm="syz-executor.4" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[   45.044199][  T992] usb 3-1: Using ep0 maxpacket: 8
[   45.139440][   T28] audit: type=1400 audit(1718415054.933:1946): avc:  denied  { link } for  pid=932 comm="syz-executor.4" name="#9" dev="sda1" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[   45.221104][  T932] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 20: comm syz-executor.4: path /root/syzkaller-testdir81358250/syzkaller.g0HJIN/9/bus/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[   45.251138][ T1053] loop3: detected capacity change from 0 to 2048
[   45.259137][  T932] EXT4-fs (loop4): Remounting filesystem read-only
[   45.266231][  T932] EXT4-fs error (device loop4): ext4_lookup:1855: inode #17: comm syz-executor.4: iget: bad extra_isize 255 (inode size 256)
[   45.279589][  T932] EXT4-fs error (device loop4): ext4_lookup:1855: inode #17: comm syz-executor.4: iget: bad extra_isize 255 (inode size 256)
[   45.302115][ T1053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   45.469812][  T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   45.557728][ T1063] Zero length message leads to an empty skb
[   45.859902][  T992] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   45.876841][  T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   45.903450][  T992] usb 3-1: SerialNumber: syz
[   45.908773][  T992] usb 3-1: config 0 descriptor??
[   45.928806][  T932] EXT4-fs (loop4): unmounting filesystem.
[   45.951436][  T992] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   45.958166][  T992] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized!
[   45.976725][  T992] usb 3-1: Failed to create links for entity 255
[   45.992927][  T992] usb 3-1: Failed to register entities (-22).
[   46.109711][   T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   46.149263][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.159991][  T992] usb 3-1: USB disconnect, device number 4
[   46.166314][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.174838][ T1082] device bridge_slave_0 entered promiscuous mode
[   46.184530][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.191524][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.198877][ T1082] device bridge_slave_1 entered promiscuous mode
[   46.241166][  T346] device bridge_slave_1 left promiscuous mode
[   46.247201][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.254807][  T346] device bridge_slave_0 left promiscuous mode
[   46.260970][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.269043][  T346] device veth1_macvtap left promiscuous mode
[   46.274979][  T346] device veth0_vlan left promiscuous mode
[   46.393617][ T1099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   46.433105][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.441233][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.451318][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.459834][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.461857][ T1105] loop0: detected capacity change from 0 to 256
[   46.470162][  T334] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.476969][ T1105] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   46.480598][  T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.489103][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   46.492542][   T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.500093][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.509722][   T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   46.518281][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.539158][   T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   46.546200][  T992] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.561571][  T992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.569039][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   46.569749][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.577506][  T992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.593071][   T19] usb 2-1: config 0 descriptor??
[   46.602094][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   46.610345][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.626341][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.635419][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.643376][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.651149][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.659212][ T1082] device veth0_vlan entered promiscuous mode
[   46.667831][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready
[   46.691951][ T1082] device veth1_macvtap entered promiscuous mode
[   46.698916][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.718477][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.727307][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.735853][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.744640][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.361993][   T19] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[   47.394644][   T19] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[   47.492171][   T19] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   47.598945][   T19] usb 2-1: USB disconnect, device number 4
[   47.770169][ T1133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   47.803774][ T1140] incfs: Can't find or create .index dir in ./file0
[   47.810484][ T1140] incfs: mount failed -14
[   48.067691][  T334] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   48.315898][  T314] EXT4-fs (loop3): unmounting filesystem.
[   48.679512][ T1180] loop1: detected capacity change from 0 to 512
[   48.701434][ T1180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   48.711056][ T1180] ext4 filesystem being mounted at /root/syzkaller-testdir1465339241/syzkaller.K0xWD5/8/file0 supports timestamps until 2038 (0x7fffffff)
[   48.741386][  T933] EXT4-fs (loop1): unmounting filesystem.
[   48.743076][  T334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.758244][  T334] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   48.772178][  T334] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30
[   48.788412][  T334] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   48.801858][  T334] usb 3-1: config 1 interface 1 has no altsetting 0
[   48.811221][ T1193] loop3: detected capacity change from 0 to 256
[   48.829427][ T1193] exfat: Deprecated parameter 'utf8'
[   48.834712][ T1193] exfat: Bad value for 'gid'
[   48.840383][ T1195] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[   48.919995][ T1201] loop3: detected capacity change from 0 to 512
[   48.928662][ T1201] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15
[   48.939120][ T1201] EXT4-fs (loop3): Remounting filesystem read-only
[   48.945662][ T1201] ext4_test_bit(bit=14, block=5) = 0
[   48.951138][ T1201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   48.969748][  T334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   48.978839][  T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.997542][  T334] usb 3-1: Product: syz
[   49.001554][  T334] usb 3-1: Manufacturer: syz
[   49.005951][  T334] usb 3-1: SerialNumber: syz
[   49.108074][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   49.108089][   T28] audit: type=1400 audit(1718415058.983:1957): avc:  denied  { create } for  pid=1213 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.134256][    T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   49.143064][ T1214] 9pnet_fd: Insufficient options for proto=fd
[   49.163449][ T1216] loop4: detected capacity change from 0 to 512
[   49.182009][ T1216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   49.190858][ T1216] ext4 filesystem being mounted at /root/syzkaller-testdir1697913136/syzkaller.fWWZjh/10/file0 supports timestamps until 2038 (0x7fffffff)
[   49.214839][ T1082] EXT4-fs (loop4): unmounting filesystem.
[   49.257956][ T1220] loop4: detected capacity change from 0 to 16
[   49.266359][ T1220] erofs: (device loop4): mounted with root inode @ nid 36.
[   49.308833][ T1220] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[   49.318204][ T1220] syz-executor.4: attempt to access beyond end of device
[   49.318204][ T1220] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[   49.331554][ T1220] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   49.359959][  T334] usb 3-1: 0:2 : does not exist
[   49.360392][ T1222] device syzkaller0 entered promiscuous mode
[   49.367097][  T334] usb 3-1: USB disconnect, device number 5
[   49.378652][ T1224] Illegal XDP return value 2114385893 on prog  (id 285) dev syz_tun, expect packet loss!
[   49.388449][    T6] usb 2-1: Using ep0 maxpacket: 8
[   49.509800][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.529717][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.539492][    T6] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   49.548709][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.575832][    T6] usb 2-1: config 0 descriptor??
[   49.610445][  T314] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 20: comm syz-executor.3: path /root/syzkaller-testdir599273575/syzkaller.iFfZH8/44/bus/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[   49.638356][  T314] EXT4-fs (loop3): Remounting filesystem read-only
[   49.646721][  T314] EXT4-fs error (device loop3): ext4_lookup:1855: inode #17: comm syz-executor.3: iget: bad extra_isize 255 (inode size 256)
[   49.662179][  T314] EXT4-fs error (device loop3): ext4_lookup:1855: inode #17: comm syz-executor.3: iget: bad extra_isize 255 (inode size 256)
[   49.915086][  T314] EXT4-fs (loop3): unmounting filesystem.
[   49.958898][ T1242] 9pnet_fd: Insufficient options for proto=fd
[   50.070506][    T6] belkin 0003:1020:0006.0007: unexpected long global item
[   50.080767][    T6] belkin 0003:1020:0006.0007: parse failed
[   50.094776][ T1256] device syzkaller0 entered promiscuous mode
[   50.101478][    T6] belkin: probe of 0003:1020:0006.0007 failed with error -22
[   50.207937][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.215019][ T1258] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.223056][ T1258] device bridge_slave_0 entered promiscuous mode
[   50.232210][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.239467][ T1258] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.247151][ T1258] device bridge_slave_1 entered promiscuous mode
[   50.273870][  T334] usb 2-1: USB disconnect, device number 5
[   50.429109][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.436010][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.443145][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.450018][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.460821][   T28] audit: type=1400 audit(1718415060.343:1958): avc:  denied  { ioctl } for  pid=1265 comm="syz-executor.4" path="socket:[18606]" dev="sockfs" ino=18606 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   50.500824][  T992] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.510103][  T992] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.583981][   T43] device bridge_slave_1 left promiscuous mode
[   50.599863][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.609245][   T43] device bridge_slave_0 left promiscuous mode
[   50.616446][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.624688][   T43] device veth1_macvtap left promiscuous mode
[   50.628570][ T1263] loop2: detected capacity change from 0 to 40427
[   50.630843][   T43] device veth0_vlan left promiscuous mode
[   50.637795][ T1263] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   50.650035][ T1263] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   50.658973][ T1263] F2FS-fs (loop2): invalid crc value
[   50.685526][ T1263] F2FS-fs (loop2): Found nat_bits in checkpoint
[   50.750952][ T1263] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   50.757953][ T1263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   50.879707][  T956] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   50.947187][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.100813][ T1282] syz-executor.2: attempt to access beyond end of device
[   51.100813][ T1282] loop2: rw=2049, sector=77824, nr_sectors = 544 limit=40427
[   51.242428][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.257333][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.265705][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.278949][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.285932][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.299345][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.309560][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.318042][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.324912][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.394435][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.396437][ T1286] 9pnet_fd: Insufficient options for proto=fd
[   51.402884][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.417112][  T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   51.427069][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.435091][  T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   51.444202][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.464109][  T956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   51.489693][  T956] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   51.501614][ T1258] device veth0_vlan entered promiscuous mode
[   51.523363][  T956] usb 1-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30
[   51.542785][ T1258] device veth1_macvtap entered promiscuous mode
[   51.565118][  T956] usb 1-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   51.578536][  T956] usb 1-1: config 1 interface 1 has no altsetting 0
[   51.586344][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.590892][   T28] audit: type=1400 audit(1718415061.463:1959): avc:  denied  { ioctl } for  pid=1292 comm="syz-executor.3" path="socket:[18732]" dev="sockfs" ino=18732 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   51.595588][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.850194][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.858029][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.866138][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.874194][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.882155][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.889638][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.897824][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.905978][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.914683][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.923196][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.930660][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.969958][  T956] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   51.982061][  T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.990240][  T956] usb 1-1: Product: syz
[   51.994351][  T956] usb 1-1: Manufacturer: syz
[   51.997077][   T28] audit: type=1400 audit(1718415061.873:1960): avc:  denied  { wake_alarm } for  pid=1302 comm="syz-executor.4" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.998798][  T956] usb 1-1: SerialNumber: syz
[   52.026679][   T28] audit: type=1326 audit(1718415061.903:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d4c7cea9 code=0x7fc00000
[   52.064585][ T1307] loop2: detected capacity change from 0 to 256
[   52.067560][ T1308] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[   52.138472][ T1308] loop4: detected capacity change from 0 to 1024
[   52.151571][ T1308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   52.163062][   T28] audit: type=1400 audit(1718415062.043:1962): avc:  denied  { mounton } for  pid=1302 comm="syz-executor.4" path="/root/syzkaller-testdir1697913136/syzkaller.fWWZjh/21/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.237160][ T1308] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz-executor.4: corrupted in-inode xattr
[   52.249939][ T1308] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr
[   52.262584][ T1308] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0
[   52.276616][ T1308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[   52.288984][ T1308] EXT4-fs (loop4): This should not happen!! Data will be lost
[   52.288984][ T1308] 
[   52.314282][ T1317] loop2: detected capacity change from 0 to 40427
[   52.322118][ T1317] F2FS-fs (loop2): invalid crc value
[   52.333080][ T1317] F2FS-fs (loop2): Found nat_bits in checkpoint
[   52.369888][  T956] usb 1-1: 0:2 : does not exist
[   52.372825][ T1317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   52.377105][  T956] usb 1-1: USB disconnect, device number 5
[   52.577942][ T1330] syz-executor.2: attempt to access beyond end of device
[   52.577942][ T1330] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   52.649773][   T28] audit: type=1400 audit(1718415062.443:1963): avc:  denied  { create } for  pid=1316 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   52.776892][   T28] audit: type=1400 audit(1718415062.653:1964): avc:  denied  { unlink } for  pid=1336 comm="syz-executor.1" name="#117" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   52.800739][   T28] audit: type=1326 audit(1718415062.673:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1298 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d4c7cea9 code=0x7fc00000
[   52.852495][ T1341] loop3: detected capacity change from 0 to 8192
[   52.860062][ T1341] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.885073][ T1344] loop0: detected capacity change from 0 to 256
[   52.894964][ T1082] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir1697913136/syzkaller.fWWZjh/21/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   52.928688][   T10] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm kworker/u4:1: corrupted in-inode xattr
[   52.941486][   T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28
[   52.954006][   T10] EXT4-fs (loop4): This should not happen!! Data will be lost
[   52.954006][   T10] 
[   52.963563][   T10] EXT4-fs (loop4): Total free blocks count 0
[   52.971131][   T10] EXT4-fs (loop4): Free/Dirty block details
[   52.978543][   T10] EXT4-fs (loop4): free_blocks=68719476736
[   52.985615][   T10] EXT4-fs (loop4): dirty_blocks=16
[   52.990673][   T10] EXT4-fs (loop4): Block reservation details
[   53.000306][   T10] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm kworker/u4:1: corrupted in-inode xattr
[   53.140933][   T28] audit: type=1326 audit(1718415063.023:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78947cea9 code=0x7fc00000
[   53.199751][  T992] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   53.224705][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.231961][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.239314][ T1358] device bridge_slave_0 entered promiscuous mode
[   53.246958][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.254094][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.261332][ T1358] device bridge_slave_1 entered promiscuous mode
[   53.299731][   T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   53.335365][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.342253][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.349316][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.356132][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.393852][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.403013][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.411405][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.442378][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.450354][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.469211][ T1358] device veth0_vlan entered promiscuous mode
[   53.475819][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.484025][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.689918][  T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.700678][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.700951][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.707881][  T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.724414][  T992] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[   53.735821][  T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.745040][  T992] usb 4-1: config 0 descriptor??
[   53.751825][ T1358] device veth1_macvtap entered promiscuous mode
[   53.760169][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.771398][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.781951][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.827920][ T1376] gretap0: refused to change device tx_queue_len
[   53.834339][ T1376] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   53.871108][ T1380] loop4: detected capacity change from 0 to 256
[   53.889782][   T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.900067][   T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.932484][ T1386] �: renamed from pim6reg1
[   53.941050][ T1386] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'.
[   53.961286][   T10] device bridge_slave_1 left promiscuous mode
[   53.967310][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.975126][   T10] device bridge_slave_0 left promiscuous mode
[   53.981184][   T19] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   53.985030][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.990998][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   54.004819][   T19] usb 2-1: SerialNumber: syz
[   54.010382][   T10] device veth1_macvtap left promiscuous mode
[   54.016290][   T10] device veth0_vlan left promiscuous mode
[   54.225101][  T992] wacom 0003:056A:00F8.0008: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.3-1/input0
[   54.237134][ T1404] gretap0: refused to change device tx_queue_len
[   54.244114][ T1404] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   54.280948][ T1414] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[   54.290789][   T19] usb 2-1: 0:2 : does not exist
[   54.292061][ T1414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   54.297092][   T19] usb 2-1: USB disconnect, device number 6
[   54.324416][ T1416] device pim6reg1 entered promiscuous mode
[   54.532497][  T992] usb 4-1: USB disconnect, device number 6
[   55.190062][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.196925][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.210171][ T1428] device bridge_slave_0 entered promiscuous mode
[   55.223428][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.239700][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.247127][ T1428] device bridge_slave_1 entered promiscuous mode
[   55.273894][ T1439] gretap0: refused to change device tx_queue_len
[   55.287866][ T1439] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   55.399742][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.406733][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.413880][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.420657][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.458456][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.465941][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.481949][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.484041][ T1426] loop4: detected capacity change from 0 to 131072
[   55.489299][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.510918][   T10] device bridge_slave_1 left promiscuous mode
[   55.516954][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.524636][   T10] device bridge_slave_0 left promiscuous mode
[   55.531062][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.539279][   T10] device veth1_macvtap left promiscuous mode
[   55.545253][   T10] device veth0_vlan left promiscuous mode
[   55.551612][ T1426] F2FS-fs (loop4): Found nat_bits in checkpoint
[   55.600714][ T1426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   55.643474][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   55.643492][   T28] audit: type=1400 audit(1718415065.523:1969): avc:  denied  { mounton } for  pid=1425 comm="syz-executor.4" path="/root/syzkaller-testdir376483575/syzkaller.KZFQFN/14/file0/file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   55.686535][   T28] audit: type=1400 audit(1718415065.553:1970): avc:  denied  { ioctl } for  pid=1425 comm="syz-executor.4" path="/root/syzkaller-testdir376483575/syzkaller.KZFQFN/14/file0/file1" dev="loop4" ino=8 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   55.718722][   T28] audit: type=1400 audit(1718415065.563:1971): avc:  denied  { remove_name } for  pid=1358 comm="syz-executor.4" name="file0" dev="loop4" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.758967][   T28] audit: type=1400 audit(1718415065.563:1972): avc:  denied  { unlink } for  pid=1358 comm="syz-executor.4" name="file0" dev="loop4" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   55.781588][   T28] audit: type=1400 audit(1718415065.563:1973): avc:  denied  { unlink } for  pid=1358 comm="syz-executor.4" name="file1" dev="loop4" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   55.805533][   T28] audit: type=1400 audit(1718415065.563:1974): avc:  denied  { rmdir } for  pid=1358 comm="syz-executor.4" name="file0" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.831469][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.839540][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.846418][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.853644][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.861681][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.868542][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.886548][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.897349][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.912123][ T1428] device veth0_vlan entered promiscuous mode
[   55.920036][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.927892][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.935259][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.942561][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.956398][ T1428] device veth1_macvtap entered promiscuous mode
[   55.966204][  T204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.989719][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.998060][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.059063][ T1447] �: renamed from pim6reg1
[   56.081405][ T1447] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'.
[   59.575367][   T28] audit: type=1326 audit(1718415069.453:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9eb6e7cea9 code=0x0
[   60.424350][  T304] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   60.699731][   T28] audit: type=1400 audit(1718415070.563:1976): avc:  denied  { map } for  pid=1481 comm="syz-executor.2" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   60.729705][  T204] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   60.758372][   T28] audit: type=1400 audit(1718415070.633:1977): avc:  denied  { bind } for  pid=1488 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.050057][  T304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.095135][  T304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   61.189077][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.196457][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.203453][  T304] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   61.203971][ T1500] device bridge_slave_0 entered promiscuous mode
[   61.212442][  T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   61.218652][  T204] usb 1-1: Using ep0 maxpacket: 16
[   61.226543][  T304] usb 2-1: SerialNumber: syz
[   61.240302][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.247215][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.254407][ T1500] device bridge_slave_1 entered promiscuous mode
[   61.310368][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.317246][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.324368][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.331132][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.363183][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.371107][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.378309][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.393610][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.401861][  T335] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.408725][  T335] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.416836][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.436569][  T335] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.443444][  T335] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.471110][ T1500] device veth0_vlan entered promiscuous mode
[   61.484431][ T1500] device veth1_macvtap entered promiscuous mode
[   61.514120][  T304] usb 2-1: 0:2 : does not exist
[   61.575250][  T304] usb 2-1: USB disconnect, device number 7
[   61.777047][  T204] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.790814][  T204] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.800433][  T204] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   61.810008][  T204] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   61.819474][  T204] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   61.829012][  T204] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[   61.831089][   T28] audit: type=1326 audit(1718415071.713:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8d4c7cea9 code=0x0
[   61.866550][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.874952][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.883422][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.892171][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.900021][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.907224][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.914798][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.922909][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.930758][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.081006][ T1518] loop1: detected capacity change from 0 to 1024
[   62.088015][ T1518] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   62.097687][ T1518] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   62.108311][ T1518] EXT4-fs error (device loop1): ext4_get_journal_inode:5720: inode #5: comm syz-executor.1: unexpected bad inode w/o EXT4_IGET_BAD
[   62.121825][  T204] usb 1-1: string descriptor 0 read error: -22
[   62.122102][ T1518] EXT4-fs (loop1): no journal found
[   62.128158][  T204] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.134818][ T1518] EXT4-fs (loop1): can't get journal size
[   62.141809][  T204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.148884][ T1518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   62.200352][ T1518] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (42152!=20869)
[   62.228216][ T1428] EXT4-fs (loop1): unmounting filesystem.
[   62.240986][   T43] device bridge_slave_1 left promiscuous mode
[   62.247935][ T1526] incfs: Options parsing error. -22
[   62.248836][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.253364][ T1526] incfs: mount failed -22
[   62.266698][   T43] device bridge_slave_0 left promiscuous mode
[   62.273457][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.288636][   T43] device veth1_macvtap left promiscuous mode
[   62.294651][   T43] device veth0_vlan left promiscuous mode
[   62.747370][   T28] audit: type=1400 audit(1718415072.623:1979): avc:  denied  { write } for  pid=1547 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   62.747737][  T204] cdc_ncm 1-1:1.0: bind() failure
[   62.772749][  T204] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   62.779346][  T204] cdc_ncm 1-1:1.1: bind() failure
[   62.785436][  T204] usb 1-1: USB disconnect, device number 6
[   62.921059][   T28] audit: type=1400 audit(1718415072.803:1980): avc:  denied  { map } for  pid=1581 comm="syz-executor.4" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   62.948476][   T28] audit: type=1400 audit(1718415072.823:1981): avc:  denied  { execute } for  pid=1581 comm="syz-executor.4" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   63.013189][   T28] audit: type=1326 audit(1718415072.893:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1585 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8d4c7cea9 code=0x0
[   63.062325][ T1593] user requested TSC rate below hardware speed
[   63.275137][ T1605] loop4: detected capacity change from 0 to 40427
[   63.283142][ T1605] F2FS-fs (loop4): invalid crc value
[   63.290051][ T1605] F2FS-fs (loop4): Found nat_bits in checkpoint
[   63.344520][ T1605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   63.449801][   T28] audit: type=1400 audit(1718415073.323:1983): avc:  denied  { relabelfrom } for  pid=1637 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   63.470191][   T28] audit: type=1400 audit(1718415073.323:1984): avc:  denied  { relabelto } for  pid=1637 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   63.542519][ T1640] user requested TSC rate below hardware speed
[   63.582346][ T1642] syz-executor.4: attempt to access beyond end of device
[   63.582346][ T1642] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   63.603636][  T992] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   63.829144][ T1644] loop2: detected capacity change from 0 to 8192
[   63.836759][ T1644] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.849686][  T992] usb 2-1: Using ep0 maxpacket: 16
[   63.893409][ T1651] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.893544][   T28] audit: type=1400 audit(1718415073.773:1985): avc:  denied  { create } for  pid=1650 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[   63.902522][ T1651] FAT-fs (loop1): unable to read boot sector
[   64.059944][  T992] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.085441][  T992] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.108679][  T992] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   64.118639][  T992] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   64.129713][    T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   64.131281][  T992] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   64.149153][  T992] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[   64.211289][ T1676] user requested TSC rate below hardware speed
[   64.325313][ T1674] loop3: detected capacity change from 0 to 40427
[   64.332654][ T1674] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   64.340655][ T1674] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   64.351787][ T1674] F2FS-fs (loop3): Found nat_bits in checkpoint
[   64.400207][ T1674] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   64.407080][ T1674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   64.450073][  T992] usb 2-1: string descriptor 0 read error: -22
[   64.456285][  T992] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   64.465301][  T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.050462][ T1707] overlayfs: failed to resolve './file0': -2
[   65.085923][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.097721][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.108350][    T6] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[   65.119287][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.246162][    T6] usb 3-1: config 0 descriptor??
[   65.273843][ T1710] loop4: detected capacity change from 0 to 512
[   65.281171][ T1710] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 2048
[   65.334741][ T1710] loop4: detected capacity change from 0 to 512
[   65.359771][  T992] cdc_ncm 2-1:1.0: bind() failure
[   65.365852][  T992] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   65.368381][ T1710] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   65.372586][  T992] cdc_ncm 2-1:1.1: bind() failure
[   65.373700][  T992] usb 2-1: USB disconnect, device number 8
[   65.385437][ T1710] EXT4-fs (loop4): orphan cleanup on readonly fs
[   65.406384][ T1710] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[   65.420854][ T1710] EXT4-fs (loop4): 1 truncate cleaned up
[   65.433335][ T1715] user requested TSC rate below hardware speed
[   65.461209][ T1710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   65.482090][ T1500] EXT4-fs (loop4): unmounting filesystem.
[   65.498222][ T1719] loop4: detected capacity change from 0 to 256
[   65.509554][ T1719] FAT-fs (loop4): Directory bread(block 64) failed
[   65.516246][ T1719] FAT-fs (loop4): Directory bread(block 65) failed
[   65.522801][ T1719] FAT-fs (loop4): Directory bread(block 66) failed
[   65.531667][ T1719] FAT-fs (loop4): Directory bread(block 67) failed
[   65.541356][ T1719] FAT-fs (loop4): Directory bread(block 68) failed
[   65.547738][ T1719] FAT-fs (loop4): Directory bread(block 69) failed
[   65.554911][ T1719] FAT-fs (loop4): Directory bread(block 70) failed
[   65.561714][ T1719] FAT-fs (loop4): Directory bread(block 71) failed
[   65.568092][ T1719] FAT-fs (loop4): Directory bread(block 72) failed
[   65.574606][ T1719] FAT-fs (loop4): Directory bread(block 73) failed
[   65.666653][ T1734] loop4: detected capacity change from 0 to 512
[   65.673955][ T1734] EXT4-fs: Ignoring removed bh option
[   65.679232][ T1734] EXT4-fs: quotafile must be on filesystem root
[   65.732021][    T6] wacom 0003:056A:00F8.0009: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.2-1/input0
[   66.012132][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   66.012147][   T28] audit: type=1400 audit(1718415075.893:1990): avc:  denied  { write } for  pid=1748 comm="syz-executor.3" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   66.064486][ T1740] loop4: detected capacity change from 0 to 40427
[   66.071506][ T1740] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   66.079098][ T1740] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   66.108125][ T1740] F2FS-fs (loop4): Found nat_bits in checkpoint
[   66.119707][  T416] usb 3-1: USB disconnect, device number 6
[   66.194385][ T1785] device veth0_vlan left promiscuous mode
[   66.202602][ T1740] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   66.206437][ T1785] device veth0_vlan entered promiscuous mode
[   66.210811][ T1740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   66.224378][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.241355][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.248764][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.359548][   T28] audit: type=1400 audit(1718415076.233:1991): avc:  denied  { setattr } for  pid=1787 comm="syz-executor.1" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   66.548271][ T1794] overlayfs: failed to resolve './file0': -2
[   66.770520][   T28] audit: type=1400 audit(1718415076.653:1992): avc:  denied  { read } for  pid=1802 comm="syz-executor.0" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.794737][   T28] audit: type=1400 audit(1718415076.673:1993): avc:  denied  { open } for  pid=1802 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.818538][   T28] audit: type=1400 audit(1718415076.673:1994): avc:  denied  { ioctl } for  pid=1802 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.849379][   T28] audit: type=1400 audit(1718415076.723:1995): avc:  denied  { ioctl } for  pid=1808 comm="syz-executor.3" path="socket:[21819]" dev="sockfs" ino=21819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.875050][ T1806] loop1: detected capacity change from 0 to 256
[   66.889276][ T1806] FAT-fs (loop1): Directory bread(block 64) failed
[   66.895774][ T1806] FAT-fs (loop1): Directory bread(block 65) failed
[   66.911686][ T1806] FAT-fs (loop1): Directory bread(block 66) failed
[   66.920626][ T1806] FAT-fs (loop1): Directory bread(block 67) failed
[   66.924716][   T28] audit: type=1400 audit(1718415076.723:1996): avc:  denied  { bind } for  pid=1808 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.926994][ T1806] FAT-fs (loop1): Directory bread(block 68) failed
[   66.961004][ T1806] FAT-fs (loop1): Directory bread(block 69) failed
[   66.967380][ T1806] FAT-fs (loop1): Directory bread(block 70) failed
[   66.973798][ T1806] FAT-fs (loop1): Directory bread(block 71) failed
[   66.980394][ T1806] FAT-fs (loop1): Directory bread(block 72) failed
[   66.983389][   T28] audit: type=1326 audit(1718415076.763:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1812 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f350087cea9 code=0x0
[   66.986718][ T1806] FAT-fs (loop1): Directory bread(block 73) failed
[   67.043175][   T28] audit: type=1400 audit(1718415076.913:1998): avc:  denied  { getopt } for  pid=1810 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   67.165006][ T1818] loop2: detected capacity change from 0 to 256
[   67.191889][ T1818] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[   67.198007][   T28] audit: type=1326 audit(1718415077.073:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc78947cea9 code=0x0
[   67.210031][ T1818] FAT-fs (loop2): Filesystem has been set read-only
[   67.229817][  T304] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   67.439658][    C0] softirq: huh, entered softirq 9 RCU ffffffff8160d1a0 with preempt_count 00000103, exited with 00000102?
[   67.469766][  T304] usb 4-1: Using ep0 maxpacket: 8
[   67.539777][    C0] ------------[ cut here ]------------
[   67.545091][    C0] timer: neigh_timer_handler+0x0/0xe70 preempt leak: 00000104 -> 00000103
[   67.553480][    C0] WARNING: CPU: 0 PID: 1832 at kernel/time/timer.c:1487 call_timer_fn+0xa3/0x2d0
[   67.562354][    C0] Modules linked in:
[   67.566085][    C0] CPU: 0 PID: 1832 Comm: syz-executor.4 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0
[   67.575974][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   67.585874][    C0] RIP: 0010:call_timer_fn+0xa3/0x2d0
[   67.589792][  T304] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   67.591114][    C0] Code: 43 ba 0e 00 c6 05 6c 74 05 06 01 65 8b 0d fd b3 9b 7e 81 e1 ff ff ff 7f 48 c7 c7 e0 ef 6a 85 4c 89 f6 44 89 ea e8 5d bb dd ff <0f> 0b eb 05 e8 14 ba 0e 00 65 8b 0d d5 b3 9b 7e 89 ca 81 e2 00 00
[   67.623111][    C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00010246
[   67.628993][    C0] RAX: d56b84dc2ddd8700 RBX: 0000000000000103 RCX: ffff88811a279440
[   67.634638][    C1] softirq: huh, entered softirq 3 NET_RX ffffffff840ba070 with preempt_count 00000103, exited with 00000102?
[   67.636818][    C0] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000
[   67.648368][ T1428] BUG: scheduling while atomic: syz-executor.1/1428/0x00000002
[   67.656232][    C0] RBP: ffffc90000007d70 R08: ffffffff814477ce R09: fffff52000000f01
[   67.656255][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffa4e0
[   67.656268][    C0] R13: 0000000000000104 R14: ffffffff840d3470 R15: ffff888132028450
[   67.656281][    C0] FS:  00007f6c8277a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   67.656297][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.656310][    C0] CR2: 0000000020000140 CR3: 0000000132ade000 CR4: 00000000003506b0
[   67.656326][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   67.656336][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   67.656348][    C0] Call Trace:
[   67.656353][    C0]  <IRQ>
[   67.656360][    C0]  ? show_regs+0x58/0x60
[   67.656382][    C0]  ? __warn+0x160/0x3d0
[   67.656407][    C0]  ? call_timer_fn+0xa3/0x2d0
[   67.656435][    C0]  ? report_bug+0x4d5/0x7d0
[   67.656460][    C0]  ? call_timer_fn+0xa3/0x2d0
[   67.656485][    C0]  ? handle_bug+0x41/0x70
[   67.656504][    C0]  ? exc_invalid_op+0x1b/0x50
[   67.663865][ T1428] Modules linked in:
[   67.671668][    C0]  ? asm_exc_invalid_op+0x1b/0x20
[   67.679478][ T1428] Preemption disabled at:
[   67.679485][ T1428] [<ffffffff8163eaaf>] is_module_text_address+0x1f/0x360
[   67.687329][    C0]  ? neigh_release+0x80/0x80
[   67.696216][ T1428] CPU: 1 PID: 1428 Comm: syz-executor.1 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0
[   67.702480][    C0]  ? __warn_printk+0x28e/0x350
[   67.710276][ T1428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   67.710289][ T1428] Call Trace:
[   67.710295][ T1428]  <TASK>
[   67.718088][    C0]  ? call_timer_fn+0xa3/0x2d0
[   67.725898][ T1428]  dump_stack_lvl+0x151/0x1b7
[   67.729027][    C0]  ? neigh_release+0x80/0x80
[   67.731713][ T1428]  ? is_module_text_address+0x1f/0x360
[   67.735792][    C0]  __run_timers+0x72a/0xa10
[   67.739784][ T1428]  ? is_module_text_address+0x1f/0x360
[   67.744304][    C0]  ? calc_index+0x270/0x270
[   67.748637][ T1428]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   67.753171][    C0]  ? sched_clock+0x9/0x10
[   67.757319][ T1428]  ? __ext4_expand_extra_isize+0x420/0x420
[   67.761841][    C0]  ? sched_clock_cpu+0x71/0x2b0
[   67.765569][ T1428]  ? is_module_text_address+0x1f/0x360
[   67.770435][    C0]  run_timer_softirq+0x69/0xf0
[   67.774591][ T1428]  dump_stack+0x15/0x1b
[   67.781454][    C0]  __do_softirq+0x1d8/0x661
[   67.785873][ T1428]  __schedule_bug+0x195/0x260
[   67.795778][    C0]  ? irqtime_account_irq+0xdc/0x260
[   67.800365][ T1428]  ? cpu_util_update_eff+0x10e0/0x10e0
[   67.810276][    C0]  __irq_exit_rcu+0x50/0xf0
[   67.813382][ T1428]  ? mutex_unlock+0xb2/0x260
[   67.816172][    C0]  irq_exit_rcu+0x9/0x10
[   67.820677][ T1428]  ? __mutex_lock_slowpath+0x10/0x10
[   67.825189][    C0]  sysvec_apic_timer_interrupt+0x9a/0xc0
[   67.829615][ T1428]  __schedule+0xcf7/0x1550
[   67.834919][    C0]  </IRQ>
[   67.839247][ T1428]  ? ext4_dir_llseek+0x540/0x540
[   67.844557][    C0]  <TASK>
[   67.848886][ T1428]  ? __se_sys_getdents64+0x346/0x460
[   67.854206][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   67.858343][ T1428]  ? __sched_text_start+0x8/0x8
[   67.863996][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[   67.868675][ T1428]  ? __x64_sys_getdents64+0x90/0x90
[   67.873977][    C0] Code: ef ed 86 e8 ec 2d bc fc 48 83 3d 24 ac ed 01 00 74 34 48 89 df e8 6e 0f 00 00 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e5 12 4f fc 65 8b 05 26 2a 02 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   67.878564][ T1428]  ? filldir+0x670/0x670
[   67.882570][    C0] RSP: 0018:ffffc90005447820 EFLAGS: 00000206
[   67.886900][ T1428]  schedule+0xc3/0x180
[   67.891419][    C0] 
[   67.896445][ T1428]  exit_to_user_mode_loop+0x4e/0xa0
[   67.901751][    C0] RAX: 0000000000000001 RBX: ffffffff87962cc0 RCX: dffffc0000000000
[   67.906080][ T1428]  exit_to_user_mode_prepare+0x5a/0xa0
[   67.910524][    C0] RDX: ffffc9000122a000 RSI: 0000000000000246 RDI: 0000000000000001
[   67.914586][ T1428]  syscall_exit_to_user_mode+0x26/0x140
[   67.919720][    C0] RBP: ffffc90005447830 R08: ffffffff81812891 R09: ffffed102000ab17
2024/06/15 01:31:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[   67.925178][ T1428]  do_syscall_64+0x49/0xb0
[   67.929427][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a88f0c
[   67.932207][ T1428]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   67.936978][    C0] R13: 0000000000000000 R14: 0000000000000246 R15: 0000000000000002
[   67.939757][ T1428] RIP: 0033:0x7f34a60a83a3
[   67.944880][    C0]  ? bpf_trace_printk+0x2e1/0x300
[   67.950696][ T1428] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8
[   67.950715][ T1428] RSP: 002b:00007fff8f3b3038 EFLAGS: 00000293
[   67.955391][    C0]  bpf_trace_printk+0x1b9/0x300
[   67.961635][ T1428]  ORIG_RAX: 00000000000000d9
[   67.961645][ T1428] RAX: 00000000000000b0 RBX: 0000555555bf9810 RCX: 00007f34a60a83a3
[   67.966661][    C0]  ? bpf_trace_run2+0xe9/0x290
[   67.986104][ T1428] RDX: 0000000000008000 RSI: 0000555555bf9810 RDI: 0000000000000003
[   67.986122][ T1428] RBP: 0000555555bf97e4 R08: 00007fff8f3df080 R09: 00007fff8f3df0b0
[   67.990193][    C0]  ? bpf_probe_write_user+0xf0/0xf0
[   67.996082][ T1428] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0
[   67.999999][    C0]  ? bpf_trace_run2+0xe9/0x290
[   68.002170][ T1428] R13: 0000000000000016 R14: 0000555555bf97e0 R15: 0000000000000006
[   68.007193][    C0]  ? unix_dgram_recvmsg+0xb7/0xd0
[   68.015015][ T1428]  </TASK>
[   68.171687][    C0]  ? unix_dgram_sendmsg+0x2050/0x2050
[   68.176878][    C0]  bpf_prog_9e1c00255e17e72e+0x30/0x32
[   68.182198][    C0]  bpf_trace_run2+0x133/0x290
[   68.186696][    C0]  ? bpf_trace_run1+0x240/0x240
[   68.191410][