last executing test programs:

29.39907936s ago: executing program 3 (id=96):
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0xff, 0x1, 0x1, 0xf}})
fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "ea3aa996c1a17f7bf810e861bdc778c5ac231e43"}, 0x15, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000000c0)="3a7232c93a9e07fe8a664cd7b6d9d84ba3ee4eb6ddd6692fa5248d5068f5b274989030677346da738c8df8022becfcc8ad433816fd290788686fa23e47dc3018b7f33d37951c93109c680e67465de6429de0eb90c0802aaaa922b730b1de2d3c7289aeadf1572b8b3d659ced9156533618c841bcfdc2f53076133c6f7f8e6ebac79e17c1bb0c60791a45d8", 0x8b, 0x20040010, &(0x7f00000001c0)={0x11, 0x3, r2, 0x1, 0x10, 0x6, @local}, 0x14)
r3 = gettid()
r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/nfsfs\x00')
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
io_setup(0xc, &(0x7f0000000240))
write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000012c0))
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000001300))
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001340)={{r0}, "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"})
r5 = socket$packet(0x11, 0x2, 0x300)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x1, 0xa, &(0x7f0000002380)=@raw=[@generic={0x9, 0x1, 0x7, 0x3, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], &(0x7f0000002400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, @fallback=0x24, r4, 0x8, &(0x7f0000002440)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002480)={0x3, 0xa, 0xfffffffb, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000024c0)=[r4], 0x0, 0x10, 0x6}, 0x94)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
connect$inet6(r4, &(0x7f00000025c0)={0xa, 0x4e24, 0x80b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
fallocate$kvm_guest_memfd(r6, 0x30, 0x10000, 0x114000)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg$unix(r6, &(0x7f00000027c0)={&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002680)=""/88, 0x58}], 0x1, &(0x7f0000002740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x10002)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r7, 0xc0205867, &(0x7f0000002d40)={&(0x7f0000002840)=0x9, 0xd1d, &(0x7f0000002880)=[{}, {}, {}, {}, {}, {}], &(0x7f0000002d00)})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002d80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000002f80)={{r6}, r8, 0x6, @unused=[0xffff, 0xac8, 0x1, 0x1], @subvolid=0x9})
getpid()

29.288028943s ago: executing program 3 (id=97):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000fc0)='syzkaller\x00'}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r0, 0x0, 0xe, 0x0, &(0x7f0000001080)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fgetxattr(r0, &(0x7f00000010c0)=@known='user.incfs.id\x00', &(0x7f0000001100)=""/31, 0x1f)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0xaaaaaaaaaaaac9d, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000380)={0x1ff, 0x0, &(0x7f000052f000/0x4000)=nil})
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000011c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0)
syz_usb_control_io(r5, &(0x7f0000001240)={0x2c, &(0x7f0000001280)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000012c0)={0x84, &(0x7f0000001380)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f00000013c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="20014000000020"], 0x0})
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000000c0)={0x5, 0x5})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
r8 = eventfd2(0x10, 0x801)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000001140)={r8, 0x0, 0x3, r6})
r9 = gettid()
timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000000140)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r10, 0x1, &(0x7f0000000200), 0x0)

26.621609427s ago: executing program 3 (id=114):
r0 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00'})
socket(0x25, 0x3, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x80c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1cb842, 0xc0)
io_setup(0x20fe, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x200000000000600}])
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x200, 0x50bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xfff2}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200000c2)
mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB='read_timeout_ms=000000000040000000'])

26.531700419s ago: executing program 3 (id=115):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES64], 0x1, 0x5524, &(0x7f00000000c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==")
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000)
syz_emit_ethernet(0x7e, &(0x7f00000060c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6012000800483afffe8000000000000000000000000000bbff02000000000000000000000000000104009078000000046c7b2136000733fffc010000000000000000000000000000ff0100000000000000000000000000012f02000300000000fe880000000000000000000000000101e817af4b43e367956a23af78becfc88ac38dbfc0884eff680d077868ccce212a26c7764c0f8f55aef7315ff91d4694ae94120d32f87959b22276ba7ca8d6ab20eaf519617043ad31f63d8a84329be74a0633dc5e3b81a03091c15687d0b6d10a29cb02160ea37d386ce3cf0b6d1dcac1bd25183e1e8897e2217950a4310b6265d5068d6ad961dddac4f8cbefb0f82cd174bbb53e11c60fef0cb7a12ba6a6da084c2a96ed34d6e9325f66cfbbb01c00a3edbbb056cfd0"], 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000005600)={r0, 0x0, &(0x7f0000005640)=@udp, 0x1}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005680), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000056c0)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000005700)={0x3, 0x2b6, 0x0, &(0x7f0000005740)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000005800)=@x86={0x40, 0x3, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
syz_mount_image$ext4(&(0x7f0000005900)='ext3\x00', &(0x7f0000005940)='./file0\x00', 0x0, &(0x7f0000005980)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000005a00)="$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")
r4 = inotify_init1(0x80800)
inotify_add_watch(r4, &(0x7f0000005e80)='./file0\x00', 0x528)
syz_mount_image$fuse(0x0, &(0x7f0000005ec0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000005f00)='./file0\x00', &(0x7f0000005f40), 0x1000000, &(0x7f0000005f80)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000005fc0)=0x5)
sched_setscheduler(r5, 0x0, &(0x7f0000006000)=0x41fa)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000005880)={[{0x2, 0x2, 0x7, 0xe, 0x1, 0xf4, 0x1, 0x5, 0x3, 0xc, 0xf8, 0xe, 0x7}, {0x8, 0x7, 0x7, 0x7a, 0x43, 0xd7, 0x9, 0x43, 0x0, 0xb, 0x8, 0x6, 0x2}, {0x2, 0x3, 0x36, 0x91, 0xa, 0x2, 0x6, 0xa, 0x2, 0x6, 0xf7, 0x1, 0x900000000000000}], 0x4a0})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000005840)=0x9000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = eventfd2(0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0)

26.053360061s ago: executing program 3 (id=119):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180050001"], 0x38}}, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
syz_usb_connect$uac2(0x0, 0x8e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x1c, 0xc5}, [@processing_unit={0x7, 0x24, 0x8, 0x6, 0x1, [0x2]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x5, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x80, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x30, 0xa, 0x2}}}}}}}}]}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

25.860108095s ago: executing program 3 (id=122):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_usb_connect$uac2(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x7, 0x1, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0xb, 0x40, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x42, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xbd, &(0x7f0000000240)=@string={0xbd, 0x3, "a6837c84a14ab15f3524a42d839b09bd82da68c8e8d38013e68e47117aebd5d17564ba10665d01f1bea1ff9ac0547f8612c72508843a005545cc9a2d4f87a3ed99b322dbdb75e1133dbda467f8c71813bc6ed04f46cad3981c82000986d63c9c348cfeb5ee7cd159d5f70290035cdd53df162e96066e64391ad4f4c6fff2ec9934a4521421b55d7a86e0767a10754893e60929f60e3d544b83a354bcf1b0e0e110cefcd994407190ae93f5142541ed7b0e5a00a99d0ab744a507d4"}}]})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

25.856474085s ago: executing program 32 (id=122):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_usb_connect$uac2(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x7, 0x1, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0xb, 0x40, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x42, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xbd, &(0x7f0000000240)=@string={0xbd, 0x3, "a6837c84a14ab15f3524a42d839b09bd82da68c8e8d38013e68e47117aebd5d17564ba10665d01f1bea1ff9ac0547f8612c72508843a005545cc9a2d4f87a3ed99b322dbdb75e1133dbda467f8c71813bc6ed04f46cad3981c82000986d63c9c348cfeb5ee7cd159d5f70290035cdd53df162e96066e64391ad4f4c6fff2ec9934a4521421b55d7a86e0767a10754893e60929f60e3d544b83a354bcf1b0e0e110cefcd994407190ae93f5142541ed7b0e5a00a99d0ab744a507d4"}}]})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

11.894262663s ago: executing program 2 (id=215):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x939e1000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000100)=0x7d, 0x44)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8000)
ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x20000)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x3004050, &(0x7f0000000100)=ANY=[], 0x3, 0x1063e, &(0x7f0000000500)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000010bc0)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000011700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000011740), 0x0, 0x10, &(0x7f0000011780), 0xffffffffffffff4f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000117c0)={r2, 0x18000000000002a0, 0x4b, 0x0, &(0x7f0000011840)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc5", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
listxattr(&(0x7f0000010b40)='./file1\x00', &(0x7f0000010b80)=""/42, 0x2a)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}})

11.881721023s ago: executing program 2 (id=217):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x80002, 0x0)
write$binfmt_aout(r1, &(0x7f0000000780)=ANY=[], 0xff70) (async)
r2 = gettid()
timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000800))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000840)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x30d800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000008c0)={0xa8, 0x0, 0x2}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000540008001c0001000000"], 0x9c}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x101}, {0xa, 0x1}}}, 0x24}}, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
shutdown(r10, 0x0) (async)
r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000340)={"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"}) (async)
syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xffffffffffffff72}], 0x1, 0x14, 0x0, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
fcntl$getownex(r8, 0x10, &(0x7f0000000300))

10.936109526s ago: executing program 2 (id=222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'rose0\x00', <r1=>0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0xa2831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000009, 0x6031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)

10.616114224s ago: executing program 2 (id=224):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000002c0)={[{@dmask={'dmask', 0x3d, 0xfc}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x5}}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@gid={'gid', 0x3d, 0xee01}}, {@discard}, {@fmask={'fmask', 0x3d, 0x9}}]}, 0xff, 0x1537, &(0x7f00000003c0)="$eJzs3AucjdUaMPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZMcSUgMuSUNSUguQ3IZQnKZmDTu9/slIUmaJAnJLVnfb2I+dep859I5Od/x/H+//Zv1zNrPep93ntl7r/3O5pvOQ2o0qlm1ARHBH4IXviQCQCwADACAawAgAICycWXjMuezS0z8Ywdh/14PpVzuCtjlxP2/snH/r2zc/ysb9//Kxv2/snH/r2zc/ysb95+xK9mmafmv5duVe+Pr/1cyfv3/H5JRcswXa0pe3wUg5h9N4f7//w//QC73/39W8I/cifv/P+Jf3Fdx/69UsZe7APZfgB//V4Jsf3OG+39l4/4zdiX75bXgWLj816P/7BtE/pN/A/E9L/yUL/95/s3zZ4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/gSn/SUKALLGl7suxhhjjDHGGGOM/fv4bJe7AsYYY4wxxhhjjP3nIQiQoCCAGMgGsZAdcoAAiMmavxbi4DrIDddDHsgL+SA/xEMBKAgaDFggCKEQFIYo3ABF4EYoCsWgOJQAByWhFNwEpeFmKAO3QFm4FcrBbVAeKkBFqAS3Q2W4A6rAnVAV7oJqUB1qQE24G2rBPVAb7oU6cB/UhfuhHjwA9eFBaAAPQUN4GBrBI9AYHoUm0BSaQXNo8S/lvwDd4UXoAT0hEXpBb3gJ+kBf6Af9YQC8DAPhFRgEr0ISDIYh8BoMhddhGLwBw2EEjIQ3YRS8BaNhDIyFcZAM42ECvA0T4R2YBJNhCkyFFJgG0+FdmAEzYRa8B7PhfZgDc2EezIdU+AAWwEJIgw9hEXwE6bAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB3wMO+ET2AW7YQ98Cnvhs38y/9Rf5XdBQECBAhUqjMEYjMVYzIE5MCfmxFyYCyMYwTiMw9yYG/NgHsyH+TAe47EgFkSDBgkJC2EhjGIUi2ARLIpFsTgWR4cOS2EpLI03Yxksg2WxLJbDclgeK2AFrISVsDJWxipYBatiVayG1bAG1sC78W7shbWxNtbBOlgX62ZdnsIG2AAbYkNshI2wMTbGJtgEm2EzbIEtsCW2xFbYCttgG2yLbbEdtsMETMD22B47YAfsiB2xE3bCztgZu2BX7JrxQjbAF/FF7InVRC/sjb2xDyZl64f9sT++jAPxFXwFX8UkHIxD8DV8DV/HYXgSh58fgSNxJFYWb+FoHIMkxmEyJuMEnIATcSJOwsk4GadiCk7D6TgdZ+BMnInv4Wx8H9/HuTgX52MqpuICXIhpmIaL8BSm42JcgktxGS7HZbgSV+FKXINrcQ2ux/W4ETfiZtyMW3Erbsft+DEqAPwEd+NuTMK9uBf34T7cj/vxAB7ADMzAg3gQD+EhPIyH8QgewaN4DI/jMTyBJ/AknsLTeBrP4lk8h8/Ff9Xw42Krk0BkUkKJGBEjYkWsyCFyiJwip8glcomIiIg4ESdyi9wij8gj8ol8Il7Ei4KioDDCCBJh5jOFiIqoKCKKiKKiqCguigsnnCglSonSorQoI8qIsuJWUU7cJsqLCqK1qyQqicqijasi7hRVRVVRTVQXNURNUVPUErVEbVFb1BF1RF1RV9QTD4j6ohf2w4dEZmcaicHYWAzBJqKpkBefoVqKYdhKtBZtxBNiBA7HdqKlSxBPi/ZiNHYQfxFj8FnRSYzDzuJ50UV0Fd3EC6K7aOV6iJ5iEvYSvcVU7CP6in6iv5iB1cV7ODt7DfGqSBKDxRDxmpiPr4th4g0xXIwQI8WbYpR4S4wWY8RYMU4ki/FignhbTBTviElispgipooUMU1MF++KGWKmmCXeE7PF+2KOmCsUAKSKD8QCsVCkiQ/FIvGRSBeLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDvGx2Ck+EbvEbrFHfCr2is/EPvG52C++EAfElyJDfCUOiq/FIfGNOCy+FUfEd+KoOCaOi+/FCfGDOClOidPijDgrfhTnxE/ivPACJEohpVQykDEym4yV2WUOeZXMKYOs538ZJ6+TueX1Mo/MK/PJ/DJeFpAFpZZGWkkylIVkYRmVN8gi8kZZVBaTxWUJ6WRJWUreJEvLm2UZeYssK2+V5eRtsrysICvKSvJ2WVneISFy4RjVZHVZQ9aUd8tEuEfWlvfKOvI+WVfeL+vJB2R9+aBsIB+SDeXDspF8RDaWj8omsqlsJpvLFvIx2VI+LlvJ1rKNfEK2lU/KdvIpmSCflu2lv/gr8qzsJJ+TneXzsovsKrvJn+R56WUP2VNCL5C95Uuyj+wr+8n+coB8WQ6Ur8hB8lWZJAfLIfI1OVS+LofJN+RwOUKOlG/KUfItOVqOkWPlOJksx8sJ8m05Ub4jJ8nJcoqcKlPkNNnv4kqzpPy7+W//Tv6gn4++UW6Sm+UWuVVuk9vlDvmx3Cl3yl1yl9wj98i9cq/cJ/fJ/XK/PCAPyAyZIQ/Kg/KQPCQPy8PyiDwij8pj8oz8Xp6QP8iT8pQ8Jc/Is/KsPHfxZwAKlVBSKRWoGJVNxarsKoe6SuVUV6tc6hoVUdeqOHWdyq2uV3lUXpVP5VfxqoAqqLQyyipSoSqkCquougEv/sKo4qqEcqqkKqVu+mfyVRF1oyqqiv0qP6u+xL9RXwvVQrVULVUr1Uq1UW1UW9VWtVPtVIJKUO1Ve9VBdVAdVUfVSXVSnVVn1UV1Ud1UN9VddVc9VA+VqBJVb/WS6qP6qn6qvxqgXhaZ5zBIDVJJKkkNUUPUUDVUDVPD1HA1XI1UI9UoNUqNVqPVWDVWJatkNUFNUBPVRDVJTVJT1BSVolLUdDVdzVAz1Cw1S81Ws9UcNUfNU/NUqkpVC9QClabS1CK1SKWrxWqxWqqWquVquVqpVqrVarVaq9aq9Wq9Sleb1Ca1RW1R29Q2tUPtUDvVTrVL7VJ71B61V+1V+9Q+tV/tVwfUAZWhMtRBdVAdUofUYXVYHVFH1FF1VB1Xx9UJdUKdVCfVaXVanVVn1Tl1Tp1X5zO3fYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6JBsaB4UCJwQcmgVHBTUDq4OSgT3BKUDW4NygW3BeWDCkHFoFJwe1A5uCOoEtwZVA3uCqoF1YMaQc3g7qBWcE9QO7g3qBPcF9QN7g/qBQ8E9YMHgwbBQ0HD4OGgUfBI0Dh4NGgSNA2aBc2DFv/W9b0/mfdx10P31Im6l+6tX9J9dF/dT/fXA/TLeqB+RQ/Sr+okPVgP0a/pofp1PUy/oYfrEXqkflOP0m/p0XqMHqvH6WQ9Xk/Qb+uJ+h09SU/WU/RUnaKn6en6XT1Dz9Sz9Ht6tn5fz9Fz9Tw9X6fqD/QCvVCn6Q/1Iv2RTteL9RK9VC/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqbL6O/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZm/vMl3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQ2uU0ek8fkM/lMvIk3BU1Bk4kMmUKmkImaqCliipiipqgpboobZ5wpZUqZ0qa0KWPKmLKmrClnypnyprypaCqa283t5g5zh7nT3GnuMneZ6qa6qWlqmlqmlqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWaamRamhWlpWppWppVpY9qYtqataWfamQSTYNqb9qaD6WA6mo6mk+lkOpvOpovpYrqZbqa76W56mB4m0SSa3qa36WP6mH6mnxlgBpiBZqAZZAaZJJNkhpghZqgZaoaZYWa4GWFGZm5UzVtmtBljxppxJtkkmwlmgploJppJZpKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPX7DP7zH6z3xwwB0yGyTAHzUFzyBwyh81hc8QcMUfNUXPcHDcnzAlz0pw0p81pc9bkvfh66U2szW5z2KtsTnu1zWWvsX8d57P5bbwtYAtabfPYvL+KjbW2qC1mi9sS1tmStpS96TdxeVvBVrSV7O22sr3DVvlNXMveY2vbe20de5+tae/+VVzX3m/r2UdsfUQA29Q2tM1tI/uIbWwftU1sU9vMNrdt7ZO2nX3KJtinbXv7zG/iBXahXWVX2zV2rd1ld9vT9ow9ZL+xZ+2PtoftaQfYl+1A+4odZF+1SXbwb+KR9k07yr5lR9sxdqwd95t4ip1qU+w0O92+a2fYmb+JU+0HdrZNs3PsXDvPzv85zqwpzX5oF9mPbLoNYIldapfZ5XaFXfl/a11q19sNdqPdaT+xW+xWu81utzuyNsJ2t91jP7V77Wf2oP3a7rdf2AP2sM2wX/0cZ57fYfutPWK/s0ftMXvcfm9P2B9UVnbmuX9vf7LnrbdASECSFAUUQ9kolrJTDrqKctLVlIuuoQhdS3F0HeWm6ykP5aV8lJ/iqQAVJE2GLBGFVIgKU5RuoKzyilMJclSSStFNVJpupjJ0C5WlW6kc3UblqQJVpEp0O1WmO6gK3UlV6S6qRtWpBtWku6kW3UO16V6qQ/dRXbqf6tEDVJ8epAb0EDWkh6kRPUKN6VFqQk2pGTWnFvQYtaTHqRW1pjb0BLWlJ6kdPUUJ9DS1p2eoA/2FOtKz1Imeo870PHWhrtSNXqDu9CL1oJ6USL2oN71Efagv9aP+NIBepoH0Cg2iVymJBtMQeo2G0us0jN6g4TSCRtKbNIreotE0hsbSOEqm8TSB3qaJ9A5Nosk0haZSCk2j6fQuzaCZNIveo9n0Ps2huTSP5lMqfUALaCGl0Ye0iD6idFpMS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20gz6mnfQJ7aLdtIc+pb30Ge2jz2k/fUEH6EvKoK/oIH1Nh+gbOkzf+p70HR2lY3ScvqcT9AOdpFN0ms7QWfqRztFPdJ48QYihCGWowiCMCbOFsWH2MEd4VZgzvDrMFV4TRsJrw7jwujB3eH2YJ8wb5gvzh/FhgbBgrA5NaEMKw7BQWDiMhjeERcIbw6JhsbB4WCJ0YcmwVHhTWDq8OSwT3hKWDW8Ny4W3heXDCuEj91UKbw8rh3eEVcI7w6rhXWG1sHpYI6wZ3h3WCu8Ja4f3hnXC+8Iy4f1hvfCBsH74YNggfChsGD4cNgofCRuHj4ZNwqZhs7B52CJ8LGwZPh62CluHbcKrwrbhk2G78KkwIXw6bB8+8/P8/Quz5p/4zXxi2CvsHb4UvhR6f6+cF50fTY1+EF0QXRhNi34YXRT9KJoeXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y9b5mNnDohJNOucDFuGwu1mV3OdxVLqe72uVy17iIu9bFuetcbne9y+Pyunwuv4t3BVxBp51x1pELXSFX2EXdDa6Iu9EVdcVccVfCOVfSlXLNXQvXwrV0j7tWrrVr455wT7gn3ZPuKfeUe9q1d8+4Du4vrqN71nVyz7nn3POui+vqurkXXHc3PteFx2Si6+16uz6uj+vn+rkBboAb6Aa6QW6QS3JJbogb4oa6oW6YG+aGu+FupBvpRrlRbrQb7ca6sS7ZJbsJboKb6Ca6SW6Sm+KmuBSX4qa76W6Gm+Eqz7xwlDlujpvn5rlUl+oWuMw9Y5pb5Ba5dJfulrglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+Z2uB1up9vpdvlrLizq9rp9bp/b7/a7A+5Ll+G+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZccGR+ZEHk7MjHyTmRSZHJkSmRqJCUyLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZHUyAeRBZGFkbTIh5FFkY8i6ZHFkSWRpZFlkeUR7wtsCX0hX9hH/Q2+iL/RF/XFfHFfwjtf0pfyN/nSF+pO9/5WX87f5sv7Cr6if9Q38U19M9/ct/CP+Zb+cY+A0MY/4dv6J307/5RP8E/79v4Z38H/xXf0z/pO/jnf2T/vu/iuvpt/wXf3L/oevqdP9L18b/+S7+P7+n6+vx/gX/YD/St+kH/VJ/nBfoh/zQ/1r/th/g0/3I/wI2Pe9KOy3iLDOJ/sx/sJ/m0/0b/jJ/nJfoqf6lP8ND/dv+tn+Jl+ln/Pz/bv+zl+rp/n5/tU/4Ff4Bf6NP+hX+Q/8ul+cdZFY7/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w3/sd/pP/C6/2+/xn/q9/jO/z3/u9/sv/AH/pc/wX/mD/mt/yH/jD/tv/RH/nT/qj/nj/nt/wv/gT/pT/rQ/48/6H/05/5M/z/9mjTHGGGPsHzL+0lD8eubC5fxev5MjfnHn3gBw9db8Gb+cz9xRrstzYdxXxMdmfn26Z+eHsm7VqiUmJl68b7qEoPBcgKy/BGX6+aMHF+PF0AaehARoDaV/t/6+outZ+jvrR28FyPGLnMyCsuJL638OgIm/s/5jT4xcUC48Hff/WH8uQNHCl3Kyw6V4MbT5+fpKayjzN+rP2/Lv1J/9i2SAVr/IyQmX4kv1l4LH4RlI+NU9GWOMMcYYY4yxC/qKih2z3n9mfeLz996fx6tLOdngUvz33p8zxhhjjDHGGGPs8nu2a7enHktIaN3xnx9U+Zey/uFBY/hPrcyD3x14D5D1HQUAf3BBgMyB/DPPYvOfcqykiw+dv55adsYH8N/RygsD8Uce3QmX+YmJMcYYY4wx9m93adP/6++ry1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2Bfoz/jeyy32OjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2OX2fwIAAP//aNX2aA==")
mkdir(&(0x7f0000001900)='./bus\x00', 0x1)
mount$incfs(&(0x7f0000001940)='\x00', &(0x7f0000001980)='./bus\x00', &(0x7f00000019c0), 0xc002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x11, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

10.474559617s ago: executing program 2 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000040)='incremental-fs\x00', 0x14f008, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='27', 0x2)
unshare(0x40000000)

10.339949691s ago: executing program 2 (id=227):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0xc)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000000540)="$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")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='.\x00', 0x80000, 0x0)
getdents64(r3, &(0x7f0000001ac0)=""/4128, 0x1020)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r2, 0x16, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x5, &(0x7f0000000000)='\x00', 0x1)

10.324674471s ago: executing program 33 (id=227):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0xc)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000000540)="$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")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='.\x00', 0x80000, 0x0)
getdents64(r3, &(0x7f0000001ac0)=""/4128, 0x1020)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r2, 0x16, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x5, &(0x7f0000000000)='\x00', 0x1)

9.349670114s ago: executing program 6 (id=228):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002e96953a5dc3a5dcf4da93fa65dc256a05e7bb67444b65db202f"], 0x34)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

8.502282655s ago: executing program 6 (id=236):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x6, &(0x7f0000000880)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x50}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000008c0)='GPL\x00', 0x4, 0x29e, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70)
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x10, &(0x7f0000000740)={[{@bsdgroups}, {@errors_remount}, {@nombcache}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x101042, 0x0)
r1 = open(&(0x7f0000001100)='./file1\x00', 0x14d142, 0x82)
mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./dev\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r1, 0x0, 0x12, 0xc, &(0x7f0000000ac0)="45da118f71f31cdaaad60bc0512d4e46d236", &(0x7f0000000b00)=""/12, 0x8, 0x0, 0xf9, 0x9b, &(0x7f00000012c0)="93a29480d856d9e16cfb0f0ad0c6606cfd4efb21f5ef0db7d86f8d6ad008869a1f6c60b4e46ec6958cfc03f149eb475c8b28282fa6523b81f061711abfb8f9115db605c627de5c8bdfac246e55f1e99e3d31ee6eacceba34cad926403e906d8edd7d365ee0b520c63f8baddfca649d7474ed483fd695ecdec0daf13145f3fd8e72840d26ad2fa2a796ebf54eb1a3646cf3a16904941af382f252ee04e0829fde75aa883bdd20ec23bf1827d1e55fa70945edbaeb336155a83721ee5c5642fc85a1b15729ac244d47a5f1844423e538dfa4dddb0cf14ae7d53ee98dfdab473a3eea8e09e6172e988c89bc82ff60137d69dbbf7966cb10a87d67", &(0x7f00000013c0)="544e3e9047799a3eae953988a88f720c8fb5a38cdc7b1d92a91ad68c7fa817aa7e099eb548cea5071aef6253ee3c9818624a98456230256ab0e8c7928209caf9423b1369654e1bcc3489802f57010f162540dfd2caa9072cb0fa50bc0ba74e72a68c076a9642a618d82bdc4b03ccf586470cd48efda2b0acf078d5ed69c601648ef36ca5fc3b095c616c176b9d611f6922c53819187a64f284614e", 0x0, 0x0, 0x9}, 0x50)
mount(0x0, &(0x7f0000001180)='./dev\x00', &(0x7f00000011c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001240)=@filename='./dev/sda1\x00', &(0x7f0000001280)='./mnt\x00', 0x0, 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="34020000120025002cbd7000ffdbdf25ac141442000000000000000000000000000004d30a00ff"], 0x234}, 0x1, 0x0, 0x0, 0x4800}, 0x40008000)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000b40)=ANY=[@ANYRES16=r2], 0x15)
r5 = dup(r4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r5, &(0x7f0000000580)="6038fc86027ee0470f0df162d7ef06385afe80a1c00ac3d641e8fb52d5ae0661f55b420a6a2101981ab85ef8fca01d94a4562c2007cf7affba5bd2bc2701e01a01a0e2", &(0x7f0000000680)=""/75, 0x4}, 0x20)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000100))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, &(0x7f0000000180)}, 0x20)
write$FUSE_BMAP(r5, &(0x7f0000000240)={0x18}, 0x18)
lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000540)=@v2={0x5, 0x3, 0x0, 0xff}, 0x9, 0x3)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])

8.067750685s ago: executing program 6 (id=242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getresuid(&(0x7f0000000140), &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200))
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in=@private=0xa010101, 0x4e21, 0x1, 0x4e23, 0x3, 0x2, 0x0, 0x20, 0x11, 0x0, r2}, {0x100, 0x7fff, 0x4, 0x3, 0x1c00, 0x55d2, 0x8, 0x9}, {0x2, 0x4, 0xbe, 0xfffffffffffffff5}, 0xd, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x35d3d9ff1c5d3aef}, 0xa, @in=@loopback, 0x0, 0x4, 0x0, 0xe7, 0x5, 0xfffffffa, 0x2325}}, 0xe8)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x40000, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}], [{@obj_role={'obj_role', 0x3d, 'veth0_vlan\x00'}}, {@appraise}, {@hash}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0xa63}}, {@dont_hash}, {@appraise}, {@uid_gt={'uid>', r2}}]}}, 0x1, 0x0, &(0x7f0000000480)="fcea3ab4082e2141855854691d4ca1f49986d662a7f1ae37a5d4b76f45f1fcd03689bda2f48635ece59af9e35eb32b6026a0258231438008e167d6a1d78a0998fea26d8a8b4f1a5884afa1fb3c80453ac3cd00a1981c8f864b378a89aca6b74860610ad701643cf32287cf65dda87c05cdea96337e5067a80227090fa181f1227d38cd6cbf3d56")
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_vlan\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b80)={r5, 0x0, 0x0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x6e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040804)

7.537369668s ago: executing program 6 (id=247):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00')
getdents64(r0, &(0x7f0000000140)=""/42, 0x2a)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000060000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x20000, &(0x7f00000004c0)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x100800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000300)={0xdddd1000, 0x10c000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000340)={0xe000, 0x93fe49f3aaf23814})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000204c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = fsopen(&(0x7f0000020540)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x80)
prlimit64(0x0, 0x7, &(0x7f0000020580)={0x8, 0xf34}, 0x0)
fcntl$dupfd(r3, 0x406, r3)
getdents(r0, &(0x7f00000001c0)=""/175, 0xaf)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)="306663353a313232373a620afaf6656f", 0x10)

7.536354328s ago: executing program 34 (id=247):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00')
getdents64(r0, &(0x7f0000000140)=""/42, 0x2a)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000060000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x20000, &(0x7f00000004c0)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x100800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000300)={0xdddd1000, 0x10c000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000340)={0xe000, 0x93fe49f3aaf23814})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000204c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = fsopen(&(0x7f0000020540)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x80)
prlimit64(0x0, 0x7, &(0x7f0000020580)={0x8, 0xf34}, 0x0)
fcntl$dupfd(r3, 0x406, r3)
getdents(r0, &(0x7f00000001c0)=""/175, 0xaf)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)="306663353a313232373a620afaf6656f", 0x10)

7.271899925s ago: executing program 0 (id=251):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000880)='.\x00', 0x8000004d)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000900)='./bus\x00', &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0xc402, 0x0)
chown(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
setxattr$security_capability(&(0x7f00000000c0)='./mnt/trace_pipe\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x74f, 0x1}, {0xd, 0x80000001}]}, 0x14, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/trace_pipe\x00', 0x88040, 0x0)
unshare(0x24020400)
setpriority(0x0, 0x0, 0x200002a14b56)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0x8003, 0x2003ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}}, 0x0)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000340)=""/190)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x40000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000480)=0xd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r1, 0x3, &(0x7f00000004c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000500))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/events/sched/filter\x00', 0x1, 0x15d)
write(r4, &(0x7f0000000580)='com', 0x3)
readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/103, 0x67}, {&(0x7f00000006c0)=""/38, 0x26}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/41, 0x29}], 0x5)
socket(0x10, 0x3, 0x0)

6.739282187s ago: executing program 5 (id=254):
r0 = userfaultfd(0x801)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = gettid()
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000100)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x3ed4, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
timer_settime(r3, 0x1, &(0x7f0000000180), 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r4 = socket(0x1e, 0x1, 0x0)
pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async)
connect$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r5, 0x4010e501, &(0x7f0000000080)) (async)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x0, 0x60000000000, 0x2})

6.65458596s ago: executing program 7 (id=248):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000180), 0x5, 0x4c7, &(0x7f0000003880)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20842, 0x63)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x8)
flock(r0, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000640), 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtaction={0x88c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xba96, 0x101, 0x7, 0x0, 0x8, 0x4, 0x5, 0x4, 0x0, 0x76b, 0x9, 0x8, 0x4, 0x5, 0x8, 0x766, 0x6, 0x5, 0xdb8d, 0x7ff, 0x0, 0x8, 0x4, 0x7, 0xffff, 0x70, 0xe, 0x6, 0x8000000, 0x4, 0x2, 0xff, 0x0, 0x400, 0x401, 0xb, 0x0, 0x8, 0x259, 0x2, 0x7, 0xfe04, 0x0, 0x1, 0xc, 0xdd, 0x7, 0x8, 0x31dc, 0x6, 0xe, 0x9, 0xb0, 0x7ce0ccc, 0x407c34, 0x4fa7, 0x7f, 0x1ad075d, 0x7fff, 0xba2e, 0x6, 0x0, 0x4, 0xfffffffb, 0x0, 0x1, 0x8, 0x6, 0x101, 0x60, 0x7, 0xab1, 0x9, 0x2684000, 0x7c3, 0x80000000, 0x2, 0x7, 0x1, 0x7, 0x6, 0x101, 0xa, 0x9dd9, 0x1, 0x2c3e9579, 0xd, 0x6, 0x1, 0x1, 0x3, 0x9, 0xff7e, 0xdf1, 0x4, 0xffffffff, 0x7, 0x0, 0x1, 0x1, 0x3, 0xc0, 0x6, 0x8000000, 0x5, 0x2, 0x7, 0x7, 0x2, 0x6, 0xfffffffc, 0x325, 0x0, 0xf, 0x7, 0x7, 0x1, 0x5, 0x4, 0x2, 0x5, 0x9, 0x100edc, 0x8, 0x2, 0x6, 0x19, 0xe, 0x9, 0x7, 0x5, 0x1, 0x8, 0x3, 0xd9df, 0x7ff, 0x9, 0x903, 0x8000, 0x3, 0xf, 0x2, 0x4, 0x0, 0x7, 0x8, 0x8, 0x9, 0x7, 0x1a7, 0xba1, 0xff, 0x3, 0x9, 0x9, 0x5, 0x7, 0x3, 0x0, 0x7, 0xf5c, 0xb98a, 0x4, 0x3, 0x480000, 0x7, 0x9, 0x7, 0x3, 0x7, 0x2, 0x4, 0x7fff, 0xffffffff, 0x0, 0x5, 0x2, 0xfffffe54, 0x6, 0x1, 0xa9f8, 0xc, 0x973d, 0x3, 0x3, 0x6, 0x2, 0x1e0, 0x7, 0x101, 0x3, 0x4, 0x7, 0x3, 0x3811, 0x1, 0xcd, 0x0, 0x0, 0x2c, 0x3, 0x9, 0x1, 0x8, 0x7b34, 0x5d, 0x101, 0x4, 0x8, 0x4, 0x80, 0x1, 0x100, 0x6, 0x1, 0x7, 0x8, 0x0, 0x5, 0x8, 0x9, 0x6, 0x40, 0x8, 0x4, 0x2, 0x8, 0x2, 0x7, 0x0, 0x9, 0xb, 0x0, 0x0, 0xa4, 0xe, 0xe038, 0x8, 0xb, 0x1, 0x8, 0xd656, 0x3, 0x0, 0x8, 0xc, 0x48000, 0x3, 0x80000000, 0x8, 0x3, 0xff, 0x2, 0x4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x1, 0x1, 0xff, 0xbd, 0x3, 0xffff, 0x200, 0x0, 0x7fff, 0x3, 0x0, 0xd, 0x3, 0x3, 0x5, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x401, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x3ff, 0x5f24, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0xd, 0xb1, 0x10, 0x2768, 0x200, 0xfffffff9, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0xd, 0x2, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0xa, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x0, 0x3, 0x401, 0xfffffffb, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x1000003c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x6f41, 0x6, 0x2, 0xa, 0x2, 0xec6e, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x9, 0x6, 0x5, 0x6, 0x2e80, 0x3, 0x4, 0x9, 0x0, 0xffffffab, 0x7, 0x1000, 0x3ff, 0x1, 0x3, 0x2e70, 0x8, 0xf3d6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x64a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x1, 0x93d0, 0x9, 0x3, 0xfffffff9, 0x3, 0x8, 0xf935, 0x7, 0x8, 0x2d, 0x40, 0x7, 0x4, 0x4, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0x1, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x6, 0x80000001, 0x6, 0x0, 0x1000, 0x2, 0x1, 0x8, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x1, 0x2, 0x6, 0x9, 0x10001}, {0x1, 0x0, 0x703, 0x2, 0x1, 0x1}, 0x0, 0x2a6, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40041}, 0x2400c800) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000003d80)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) (async)
fstatfs(0xffffffffffffffff, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0xc084}, 0x40) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
unshare(0x2040400)
fcntl$lock(r4, 0x24, &(0x7f00000006c0)={0x0, 0x3, 0x8, 0x4}) (async)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

6.418424725s ago: executing program 7 (id=260):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
mremap(&(0x7f0000dd2000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000e9f000/0x1000)=nil)
munlockall()

6.348160667s ago: executing program 0 (id=262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = syz_clone3(&(0x7f0000000400)={0x90011000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300), {0x3e}, &(0x7f0000000340)=""/57, 0x39, &(0x7f0000000380)=""/12, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58)
sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x2002)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x50)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x6020400)
setuid(0xee01)

6.319470617s ago: executing program 7 (id=263):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_rr_get_interval(0x0, &(0x7f0000000340))
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
sysinfo(&(0x7f00000002c0)=""/112)
r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)="81cd", 0x2, 0x0) (async)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)="81cd", 0x2, 0x0)
keyctl$search(0xb, r4, &(0x7f0000000240)='big_key\x00', &(0x7f0000000180)={'syz', 0x1}, r4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000068000600000000000c000200010000000500000004000b00"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) (async)
ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"})
write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x29f}}, 0x1006)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x2, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffef, 0x0, 0x9, 0xa}]}) (async)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x2, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffef, 0x0, 0x9, 0xa}]})

5.726941052s ago: executing program 5 (id=264):
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async)
syz_read_part_table(0x40a5, &(0x7f0000000000)="$eJzsz81N80AQBuB3E/v7HITEjzhTAzRABVwj7qmBeyR64RJRDzXQBCyyDYkj5QgCoec57LuaGa814WeVMWZ5PljvnY5xskj+DbfHWbJ6Oiv7XzQHXr+6TnvUlRwnuc980lne9sfma5YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sybJ+XCrta77LLNJu7zVujfffWQ7xqoMU5/TeZinvbksudgVR691eKg04z//Jy9Jlpvv2gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+EPm2yPJerFr3HVpky51W5k0S5J39ufYBmEYiALoN4WFEDPQsAI1YgnWYAnECgyQMjt4NkeOZ0j3XnWnrzvpX5Ms93yft5JzSR5tj34t6X18vMx9XtS8cprjCGvy+ee9Hl0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrgAAAP//ZccfNA==")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) (async)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000040c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) (async, rerun: 32)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000006140)) (rerun: 32)

5.263549533s ago: executing program 7 (id=266):
timer_create(0x6, 0x0, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
ioctl$VT_DISALLOCATE(r0, 0x5608) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x8, 0xfd, 0x0, 0x5}, {0x2, 0x8, 0x3, 0x7}]}) (async)
execve(0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=<r2=>0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x8001, 0x3ff}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) (async, rerun: 32)
symlinkat(&(0x7f0000000380)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x2) (rerun: 32)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file7/file0'}}], [{@euid_gt}, {@uid_gt}, {@measure}]}) (async)
chdir(&(0x7f00000004c0)='./bus\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x185)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7/file0\x00', 0x0) (async)
r3 = creat(&(0x7f0000000600)='./file0\x00', 0xc9a9c042ad77c5e5) (async)
setuid(0xee00)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r4, 0x0, 0x8001, 0x0) (async)
syz_emit_ethernet(0x8a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa9aaaaaaa000000000000080046f0007c000000000011909200000000000000009404010000004e2000649078020000000400000000000000ae1e1e99b9e8a215d399947bed66d7e2a90c057fc8bcfc6508d6c7aef41e1b8920366b5b152ff0744fee90221b4d5c48571cef076cf55e8fbc8710d065c5df180e0ff757f7926552f4871d7f2a29a4fd"], 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

4.703727187s ago: executing program 5 (id=272):
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') (async)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
munlockall()
openat(0xffffffffffffff9c, 0x0, 0x599e02, 0x0) (async)
r0 = openat(0xffffffffffffff9c, 0x0, 0x599e02, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x1218088, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x46, 0x2f0, &(0x7f0000000c00)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f00)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000780)={@multicast2, @loopback}, 0xc)
io_submit(0x0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}])
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000840)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000880)={@multicast2, @loopback, @empty}, 0xc) (async)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000880)={@multicast2, @loopback, @empty}, 0xc)
getdents64(r0, 0xfffffffffffffffe, 0x29)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x408280, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4b, 0x2, 0xffffffff}}]}, 0x40}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001300)={{{@in=@private, @in6=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001400)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001300)={{{@in=@private, @in6=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001400)=0xe8)
syz_clone(0x2010c80, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x2010c80, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$unix(r1, &(0x7f00000012c0)={&(0x7f00000008c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000f40)="28915b", 0x3}, {&(0x7f0000000f80)="e3b324390473ee7696909ea22d7a6d0f21d603ab9f157f85261ae379dfe737dfc54e7ea5ca6c48da579a391a137e9e42c58c4ee8947eafb789b79d84c29b00a4b1572ab5ba30f1855af9300c0f43f8d0a622f86603221b1d031f1e55f532340d2701e820f1e90c676ec8ede71457841b0480f5e0220736e28540b4ce1a87b28a8818372a2d7401d3b97b97c3e524ca9e6360903219efce920dbc0c6eb741a02f131dc1dd8cdd01e962b451bb30758786e545bedb88d73be2a24af0c2f2dbbde8df10bf11944413126d424119", 0xcc}, {&(0x7f0000001080)="f6eac360cd31ea93f7eb14e33f1f592aed81ece5ca60379a14beffbc2a59", 0x1e}, {&(0x7f00000010c0)="754e87a39375756ccb49696fe937c3f72aedd72d5200eefa57009d3cd51da31fe480352aa8fa7db1e8c89360a2588a325bca2d931c35581dde4c91eb246abffd875d2d33a9054af6c4b84da9cb0296b4d9bb70e20898ad5a3d3f7f8d9e8e837e0ad0342744014ecde971376267c263ceaac1664ac824a9f8792e408422b3d829e9794c975672b972aaa69549785b798de09ef334e29c6002829dea44a46a866f97318c12c490613c5ce7118cd15b262a01562aa203", 0xb5}, {&(0x7f0000001180)="2044f9029ad305779aeb111582a7d004c9a58bab0fbe3f1d6313e5d7dab7c6a470d006a6c4124f116e6e741fe0f0ff729a01505f0fd8e11eaa739eacab51fb0944a2ada11f1851df34674a4ed95f9edff577bc1d8943acaf3029295869cc84044ed21f5d881c3e626f9dff65ac30921e080a9a", 0x73}], 0x5, &(0x7f0000001280)=ANY=[@ANYBLOB="140000000000000201040000c0880000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x10000}, 0x20040800) (async)
sendmsg$unix(r1, &(0x7f00000012c0)={&(0x7f00000008c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000f40)="28915b", 0x3}, {&(0x7f0000000f80)="e3b324390473ee7696909ea22d7a6d0f21d603ab9f157f85261ae379dfe737dfc54e7ea5ca6c48da579a391a137e9e42c58c4ee8947eafb789b79d84c29b00a4b1572ab5ba30f1855af9300c0f43f8d0a622f86603221b1d031f1e55f532340d2701e820f1e90c676ec8ede71457841b0480f5e0220736e28540b4ce1a87b28a8818372a2d7401d3b97b97c3e524ca9e6360903219efce920dbc0c6eb741a02f131dc1dd8cdd01e962b451bb30758786e545bedb88d73be2a24af0c2f2dbbde8df10bf11944413126d424119", 0xcc}, {&(0x7f0000001080)="f6eac360cd31ea93f7eb14e33f1f592aed81ece5ca60379a14beffbc2a59", 0x1e}, {&(0x7f00000010c0)="754e87a39375756ccb49696fe937c3f72aedd72d5200eefa57009d3cd51da31fe480352aa8fa7db1e8c89360a2588a325bca2d931c35581dde4c91eb246abffd875d2d33a9054af6c4b84da9cb0296b4d9bb70e20898ad5a3d3f7f8d9e8e837e0ad0342744014ecde971376267c263ceaac1664ac824a9f8792e408422b3d829e9794c975672b972aaa69549785b798de09ef334e29c6002829dea44a46a866f97318c12c490613c5ce7118cd15b262a01562aa203", 0xb5}, {&(0x7f0000001180)="2044f9029ad305779aeb111582a7d004c9a58bab0fbe3f1d6313e5d7dab7c6a470d006a6c4124f116e6e741fe0f0ff729a01505f0fd8e11eaa739eacab51fb0944a2ada11f1851df34674a4ed95f9edff577bc1d8943acaf3029295869cc84044ed21f5d881c3e626f9dff65ac30921e080a9a", 0x73}], 0x5, &(0x7f0000001280)=ANY=[@ANYBLOB="140000000000000201040000c0880000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x10000}, 0x20040800)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000781000/0x4000)=nil, 0x4000, 0xb)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r5, 0xa4}, 0x0, &(0x7f0000000940)="b0f5ec01e02085467da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e4340010000000000000e5eae2a670b23de93f4ded4ee5fba0a399dc0261", 0x0) (async)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r5, 0xa4}, 0x0, &(0x7f0000000940)="b0f5ec01e02085467da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e4340010000000000000e5eae2a670b23de93f4ded4ee5fba0a399dc0261", 0x0)

4.693636007s ago: executing program 4 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) (async)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) (async)
syz_emit_ethernet(0x15d, &(0x7f00000006c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x127, 0x6, 0x0, @remote, @local, {[@hopopts={0x32, 0x21, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xf, 0xdb, "2cd11138450f6cb49c725c94a73a36d55beba571a5493c4cab055f8aa277c031fd7207f4df85794e44f1413b124c39d0d3f859b49541e360ed12b92bdda8c26e52af123335b6b4cb37750079c28a7297ee372a3b19f7ff812a2b6511353b5164151506f115ba39bce493062e7bfb3293dfc83300c00cdd8a559cc02235e8386e5c52faf5afce3f0972566ae3b4ac6d79441e76baf619196543b33fed6dc67cc4d562efa37f40f21e04b9985872bd91fe14d75a3e739a25857df07aa3413ec58b21ebce55bb29412d4aa8a61f06f7277c937cabd9c4309d2b22ad66"}, @jumbo={0xc2, 0x4, 0x2b5}, @pad1, @generic={0xa, 0x16, "d48c40b9f3332de5f6c08d6b4149cf9f3485e199dac1"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}, {"61f100"}}}}}}}, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r5, 0x40044591, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000080057007d0300000800570008000000080022015b01000008009f000500000008009f7e6547c4620159583c7c5ff21b00040000000800a1"], 0x60}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)

4.488091402s ago: executing program 5 (id=275):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000800)=@file={0x1, './file0/file0\x00'}, 0x6e)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000880))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12011001000000084c05d50300000000000109022400010000000009040000020300000009210000ff012218000905810300000000fe1af18e8fd5288fe3841a0b612a092a68020215e962e28094f7bff061efb28a05897bab5126dbaa92e4661d730e128bde8efd3c18e133ae38cabd26c863612ba4353c25d7560cc9e7a0be82c5b711db6d12c48a3bd385fc161495d5eb99"], 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000010e198081ded431371308668000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r4}, 0xc)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1810714, &(0x7f00000008c0)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f00000001c0)="$eJzs281vFOUfAPDvTLfAD/jRioiCIFU0aXxpaUHloDEaTTxoYqIHPNa2EKRQQ2sipNFqDB4NiXfj0cS/wJMno55MvOLRxJAQJSaiF9fM7kzZLrtlF7bs2v18kmWfZ55nnpeZeabPzsME0LdGsn+SiO0RcSkihqrR1RlGql/Xri5N/3V1aTqJcvn135JKvj+vLk2Xc8V+2/IyR9OI9OMkryQGa4tdOHf+1NTc3OzZPD6+ePqd8YVz5584eXrqxOyJ2TOTR48eOTzx9FOTTzZo9S8X2+rkQP699/35fXtefvPiq9PHLr71/VdZe3fvryZl/WirzBaMZB3/vXps6tMe6XRlXfZP+Xo/k1K3W0OrsqFRygfnpRiKgbh+8obipY+62jhgXWX37M3Nk5fLwAaWRLdbAHRH8Yc++/1bfO7Q1KMnXHm++gMo6/e1/FNNKUWa5xlcx/pHIuLY8t+fZ59n69LKDZ4bAADcrm+y+c/jjeZ/aeyuybcjXxsajoi7ImJnRNwdEbsi4p6ISt57I+K+NusfqYvfOP9ML99Sx1qUzf+eyde2Vs//itlfDA/ksf9X+j+YHD85N3soPyajMbg5i080Krwo4sWfPm1Wf+38L/tk9WffNYVcLlUf0G0ptsxMLU51alJ65cOIvaVG/U9WVgKSiNgTEXvbK3pHETj56Jf7mmW6ef/X0IF1pvIXRSFLy1HX/0Ky9vrk+JaYmz00XlwVN/rhxwuvNav/tvrfAdn537r6+q/LMfRHUrteu7CS8FyrdVz4+ZOmvylLrV//K7Lrf1PyRmXNelO+7b2pxcWzExGbklcq8VXbJ6/vW8SL/Fn/Rw82Hv87832y/t8fEdlFvD8iHoiIA/m5ezAiHoqIg2v0/7sXHn67WVovnP+Zhve/let/ePX5bz8wcOrbr5vV39r970glNJpvqdz/bqJ5c4rbaLbl2MKtHjcAAAD4L0kjYnsk6dhKOE3Hxqr/h39XbE3n5hcWHzs+/+6Zmeo7AsMxmBZPuoZqnodOJMt5idX4ZP6suEg/nD83/mzgf5X42PT83EyX+w79bluT8Z/5daDbrQPWnfe1oH/Vj/+0S+0A7jx//6F/Gf/Qv24Y/24I0DcaDfcP6uLWAmAjKg+1vYsHhLBhmO5D/zL+oX8Z/9CXbue9/vUKlNZ4e3+NQBK90PiNHtgaUT3OkfZEe3omcKCHRlOpA6O7yzcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACADvk3AAD//1im8xU=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000680)={@id={0x2, 0x0, @c}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r7, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e1f}, 0x6e)
r8 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack(&(0x7f0000000d80)={0x0, 0x0, 0xfffffffffffffed8}, 0x0)
sigaltstack(&(0x7f0000000dc0)={0x0}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="8b3300000000fffff0000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ea0b00001000000004001d80b5"], 0x2c}}, 0x10000040)

4.487876542s ago: executing program 0 (id=276):
r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
lseek(r1, 0xee, 0x2)
setresgid(0x0, 0xee00, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
open(&(0x7f0000000100)='.\x00', 0x8000, 0x112)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x350, 0x10000)

4.486576702s ago: executing program 0 (id=277):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x4, 0x8}, 0x50) (async, rerun: 64)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2d0, 0x1e0, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x300}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xfd, 0x2}, [@RTA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x20004000)
close(0x3) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
mount(0x0, &(0x7f0000000580)='./debug\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000bc0)='./config\x00', &(0x7f0000000c00)='configfs\x00', 0x0, 0x0) (rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000c80)='\n', 0x1)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x400, 0x4, 0xf8, 0x80000000}, {0x20, 0x20, 0x5, 0x8}, {0x7, 0xff, 0x5, 0x4}, {0x5, 0x6, 0xcf, 0x9b}]}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)

4.447087533s ago: executing program 4 (id=278):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r2, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
syz_open_procfs(0x0, &(0x7f0000000400)='net/protocols\x00')
timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x2}, &(0x7f0000000480))
syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f0000000d80)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@dioread_lock}]}, 0x5, 0x491, &(0x7f0000000e40)="$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")
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x0)
mount$bind(&(0x7f0000001340)='.\x00', &(0x7f0000001380)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000013c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000001440)='.\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x200)
umount2(&(0x7f00000014c0)='.\x00', 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x5})
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000500)=0x5)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x5be, &(0x7f0000000600)="$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")
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000c00), 0x208e24b)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x10)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x23)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
fsync(0xffffffffffffffff)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
pwrite64(0xffffffffffffffff, &(0x7f0000001500)="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", 0x1000, 0x8)

4.333587426s ago: executing program 4 (id=279):
socket(0x1e, 0x4, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = getpid()
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000002c0)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

3.974113844s ago: executing program 0 (id=281):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000200)=@abs, 0x6e)
clock_getres(0xffffffffffffffed, 0x0)
sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000002c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x6, 0x0)
r6 = dup3(r4, 0xffffffffffffffff, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x110000000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x28}}, 0x40040)

3.451078797s ago: executing program 4 (id=282):
r0 = socket(0x1e, 0x4, 0x0)
setpriority(0x0, 0x0, 0x200002a14b56)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f00000003c0)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000c1d4628f55c2ade00", @ANYRES32=0x0, @ANYBLOB="c19905002840000024001280090001007866726d000000001400028008000200000000000800010003000000140003007866726d30000000"], 0x58}}, 0x4008894)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r7, 0x1, 0x5, 0x0, &(0x7f0000000640)=0x21)
r8 = dup(r6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/zoneinfo\x00', 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="9b399d2cd799d61d878e932db5eac7d0abb67c3014a31fd877f3c02b03677ee87a5d5786a25d7e0d10aeb65ff3166c9eca1f6a2ac70d83a478b186c664db08c7cf0800406f897fe30b08703da314d209cfdb69c6b5b345d4491c670fa742795423c1b95186e6ca4420d40264b1263157e49328e2ad5d7518fd3359d4bb75b4ce996742112c13a831b51c31f339ca35f8f781291d6817b29801378513a8064d01b4f98e73213a57880e700487c67db59ef7996f44c2", @ANYRES8=r4])
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/drivers\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e1f, @remote}, 0x10)
sendto$inet(r10, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
r11 = fcntl$dupfd(r10, 0x406, r10)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
sendmmsg$inet(r11, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="907f", 0x2}], 0x1, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe1f}}], 0x18}}], 0x1, 0x20008004)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r10, @ANYRES16=r9, @ANYBLOB="f9f9716becf1c7b10002046146cc83c7b8a39800fa94d5c65997f5790b7f10d92627534d0aa8e5c28f8dab4d0bd2bf9c0d8ae282ae1d89f956f31b9174d0947c28a51cd1c5112bc8d2ba7f043ca91bcee1c1f82c93f557"], 0x14}, 0x1, 0x0, 0x0, 0x24000844}, 0x51)

2.950568779s ago: executing program 0 (id=285):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000081805020000000000000109022400010000a0020904000502030084000921f10040012218000905810340"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r1 = socket(0x9, 0x8080f, 0x5)
setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000200)=0x6568, 0x4)
recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x18042, 0x0)
mkdir(&(0x7f0000000680)='./cgroup/../file0\x00', 0x8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0)
syz_clone3(&(0x7f0000000700)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000)
rmdir(&(0x7f0000000780)='./cgroup/../file0\x00')
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
pipe2(&(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000980))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
fcntl$setpipe(r4, 0x407, 0x0)
read$FUSE(r3, &(0x7f00000009c0)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2)
write$FUSE_ENTRY(r4, &(0x7f0000002a00)={0x90, 0x0, 0x0, {0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xb3b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r6, r7, 0x3, 0x5}}}, 0x90)
syz_usb_connect(0x3, 0xc7, &(0x7f0000002ac0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b71100100000000182405"], &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0})
ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000940)={{[0x1, 0xfffffff6, 0x80000000, 0x7f]}, 0x0, 0x1, 0x6, 0x0, &(0x7f00000007c0)=[{{@_ha_fsid={[0x9, 0x700]}, {0xf608, 0x4, 0x1, 0x1}}, 0x3, 0x0, '\x00'}, {{@align=0xb, {0xd, 0x7f, 0x7, 0x101}}, 0x6, 0x0, '-^\x00'}, {{@align=0x9, {0x7f, 0x8000, 0x2, 0x81}}, 0x0, 0x0, '}\x00'}, {{@_ha_fsid={[0x8]}, {0x5, 0x1ff, 0xfb, 0x5}}, 0x2, 0x0, '\x1c!\\\\,\\)\x00'}, {{@align=0x1, {0x4, 0x2, 0x8, 0xfff}}, 0x4, 0x0, '$@:^{+:*L\x00'}, {{@_ha_fsid={[0x10, 0x9]}, {0xfffd, 0xa, 0x9, 0x1}}, 0x21, 0x0, '\x00'}, {{@align=0x2, {0x2, 0x1, 0x4, 0x400}}, 0x864, 0x0, '\x00'}, {{@align=0x4, {0x8, 0x0, 0xffff, 0x6}}, 0x6, 0x0, '.]^\x00'}, {{@align=0x10, {0x9, 0x5, 0x4}}, 0x2, 0x0, '\x8d\x00'}, {{@_ha_fsid={[0x1, 0x1]}, {0x1e29, 0x7, 0xff, 0x5}}, 0x7f, 0x0, ']\x00'}]})
r8 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x6e, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x460, 0x1, 0x80, 0xd}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x210, 0xa, 0xff, 0x6, 0x40, 0xfc}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x62, &(0x7f0000000140)=@string={0x62, 0x3, "bb5c1484f2f8b3e0c8af3d90e67eeda7558feca1a0bbdce1568851687ae0fa80a4cffa14abb4d60026a90ea6d6592cdec2cb33c42fb3c9e7895f2feed445f7c0dd58577ac33cf593c92c0537cfc6a56bfe4b0d2de77ab0d1dd150190e3046f6a"}}]})
syz_usb_control_io$printer(r8, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x0, 0xa, 0x63, {0x63, 0xd, "3f02ee85358fddbb68880003a579d36aee1397f1908b8c644ff2f968d4a58fb018409f6f71532a335feee38c42db187910f54617a8b4c66815ab31dd1ed6df2b5eb5b2c68a5bc12ccbcc95e4d0bf318148055533c6f11b98e047f2b8f6a806e6cf"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000600)={0x34, &(0x7f0000000380)={0x40, 0x3, 0xe0, "f0133bf76c6404435e0f8dd7875fce2eccda8f52c421610612007e6e7fb0c94914e5c685cb47398467fc85dc03652debdbb7b2c6ebeb89f4f2311b174df8447c9c0c915f4e71ac354cb19c2f07344251d948430166e2af6cb81debe9344b3e31bea9b28b6b6590c042744b01c957c02e1ae4312b64a6e48036ddad405f75efbd77f96e59d447d96bba8a20fc0b520ed9865417a31185fa4c2f15a6ed2e1bde3bf892b2f43937e2b51054ee2951002701222402b7940b70f6064defda21a93e077f58f0ed3e4502a6f5af1c2944c3094804940b448ca898bd6dc78d7175ec44a4"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1c}, &(0x7f0000000500)={0x20, 0x0, 0x60, {0x5e, "b83b4f697afd01dfbff7e63b377fa7787aabcf921b3a827fb2065d261168f49cf582e3a72bb5f68a8660a83a9f98f0e1db1564d524ac1e6939c2b13791d328c6fb90dd006bd5602c405dc36af567c6e7deb43b5063fdd9d076ea467a5d12"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x9f}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x2}})

2.548054728s ago: executing program 4 (id=287):
r0 = socket(0x23, 0x6, 0x9)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006)
syz_usb_connect(0x5, 0x13f, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0)
keyctl$chown(0x4, r2, 0xee01, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001100)={'veth0_to_hsr\x00', {0x2, 0x4e20, @loopback}})
keyctl$setperm(0x5, r2, 0x27112333)
keyctl$KEYCTL_MOVE(0x3, r2, r2, r2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x401}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "7185e5a8da159bac", "9ac23f284dcc70292e911786bd11c0bf", "8360b000", "99bea2f913b8b2ba"}, 0x28)

2.389819942s ago: executing program 5 (id=288):
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x85132, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001)
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000000c0)=0x401, 0x4)
recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_to_hsr\x00', &(0x7f0000000040)=@ethtool_cmd={0x15, 0x6, 0x79, 0xa, 0x44, 0x1, 0x0, 0x5, 0xa, 0xfd, 0x6, 0x9, 0x6, 0xf, 0x8, 0x800000, [0xd044, 0xc13e]}})

2.333109854s ago: executing program 5 (id=289):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c0320904000002080650000705010200020007058202000200090400010508066200070501020002000324010705020200"], 0x0)

2.248106016s ago: executing program 1 (id=291):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x50800, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
fsopen(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r5, 0x0, 0xb)
splice(r6, 0x0, r0, 0x0, 0xf3a, 0x8)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.199973327s ago: executing program 1 (id=292):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x20000004})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000014})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,uni_xlate=0,dos1xfloppy,shortname=winnt,nfs=stale_rw,shortname=wrs=continue,shortname=winnt,\x00'], 0xfc, 0x2b8, &(0x7f0000000400)="$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")
signalfd(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000780)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000800)=@abs, 0x6e)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(r5, &(0x7f0000000880), 0x651, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x0, 0x400)
recvmmsg(r4, &(0x7f0000000900), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000940)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26})
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x1049017, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00'], 0x1, 0x14eb, &(0x7f0000001fc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001f80)='./file1\x00', 0x143441, 0x98)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

1.995495252s ago: executing program 7 (id=293):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async)
r6 = fsmount(r5, 0x0, 0x82)
fchdir(r6)
r7 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x15a, 0xfffffffffffffffe)
keyctl$search(0xa, 0x0, 0x0, &(0x7f00000011c0)={'syz', 0x3}, r7) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000472e675fc5"], 0x50) (async)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async)
fcntl$lock(r9, 0x26, &(0x7f0000000280)={0x1, 0x0, 0xba, 0x9}) (async, rerun: 32)
syz_read_part_table(0x105f, &(0x7f0000000000)="$eJzsz7FtwkAYBeB3duLYktNkglTZKJkgPSPgPWio2YCKAdiEJYx8ICQWAIrvK+493enu9Ien6pJ8N/mfM+7HZePtejCvsylJpi75Ku3twvRRo1+WIaehpMmq9jvH/pJD+17yV+t2ebXN4Scp9efP/O4eMiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLhzAAAA///2qAvy") (rerun: 32)

1.912083034s ago: executing program 4 (id=294):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000002c0)=0x6, 0x4)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009be1a08560833acf8000102030109024000010000000009042e04"], 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000ec0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000007880)=""/4085, 0xff5, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmmsg$inet6(r5, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="852200", 0x3}], 0x1}}], 0x1, 0x20000000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r0, 0x8, &(0x7f0000000180)="d1fbfd15eb599558c30c97a3cb2d2bb3e1edfe88bdae9af972")
bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000a00), 0x0, 0x4040881)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$UHID_INPUT(r1, 0x0, 0x0)

1.078897424s ago: executing program 1 (id=295):
mlockall(0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
unlink(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus/file0\x00')
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000600), 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000640)=0x2)
recvmmsg(r2, &(0x7f0000000680), 0x80002c1, 0x2, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000700)='.\x00', &(0x7f00000007c0), 0x2208000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x100, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="09000000080000000400000004000000000000005dfe1c61aefc3e97c4958fe4c7a4a1e9865f97e03a2d87c6ec4629716c674b739060979a3723c70fe99b5f9604004ad67cec8009226108fe991c8db3c542bd4329dbd709850200000000000000946d45643822f148512616255cda50803a0a084d1df515512d1983cd327571b0bcc7884f9719a584bc32ba3fa83003d19b80987ccb973bcbd8988c9dc0a83eb74e269aca11cf09adb3246b31cebaa0e6af78788139703a110cebb35178da12941c921e7b1f573df75e26aa48703eb46209c5a7d72c935480c93b9441f2f7a2e7402302", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x340f}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r5, 0x4068aea3, &(0x7f0000000340))
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)

748.103782ms ago: executing program 7 (id=296):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) (async)
mount(0x0, &(0x7f00000001c0)='myproc\x00', 0x0, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001000000406a0531030000000000010902398743d90050000904000002030000000921000000010664e22f05810308"], 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB=',\t'], 0x8) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x3, &(0x7f0000000840)=[{0x4c}, {0x4d}, {0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace\x00', 0x1ff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x2f, 0x0, @loopback, @multicast1}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000005c0)={'syztnl0\x00', 0x0}) (async)
socket(0x200000000000011, 0x2, 0x0) (async)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000600), &(0x7f0000000640)='./trace/error_log\x00', 0x12, 0x1) (async)
mount(0x0, &(0x7f0000000680)='./trace\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./trace/error_log\x00', 0x20000, 0x4)
pread64(r4, &(0x7f0000000740)=""/144, 0x90, 0x7d)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='Mid', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x20001, 0xdd)
write(r6, &(0x7f0000000400)='2\n', 0x2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)

150.816216ms ago: executing program 1 (id=297):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x183081, 0x0)
close(r1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x40000000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000640)={0x2, {0x2, 0x101, 0x100, 0x9, 0x6}})
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000680)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6a0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf9fd95d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000805}, 0x800)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000ac0)=r7) (async)
write$cgroup_devices(r6, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000380)="40a957698d404439dae0a63e1378b244f09991fb3b9d136c19c0b5507732fa71a52ba5c0d1e5b8487b396bb3535b8dce060496ad975dbe59c1ab242c2d2d73a9ce9c82279d7edf6890e5ae8b50f9537763a46ec519dd79c8f63f0a38761817292bc1cbc9a7704831e420bdc94333521df70e28a4e67ec12120156a26f77d55880451feb9a8c6c8553881e6be09", 0x8d}], 0x1) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0xe40, 0xe40, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x1}], "b923"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1}, 0x20)

142.269547ms ago: executing program 1 (id=298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x1808, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@redirect_dir_nofollow}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000240)=0x7, 0x4) (async)
getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000280)=""/19, &(0x7f00000002c0)=0x13) (async)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x4008010)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
r3 = inotify_init1(0x80800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x44000160) (async, rerun: 32)
r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001540)={'ip6_vti0\x00', &(0x7f0000001580)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x9, 0xfffffffd, 0x18, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x700, 0x20, 0x5, 0x40}}) (async)
r5 = open(&(0x7f0000000340)='.\x00', 0x20000, 0x0)
preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x2, 0x5) (async)
socket$unix(0x1, 0x5, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async, rerun: 32)
r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_targets\x00') (rerun: 32)
pread64(r7, &(0x7f0000001480)=""/177, 0xb1, 0xe0)
copy_file_range(r6, &(0x7f00000003c0)=0x8000, r6, 0x0, 0xfffffffffffffdef, 0x0)

0s ago: executing program 1 (id=299):
open(&(0x7f0000000380)='./file1\x00', 0x14b042, 0x8c)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='fdinfo\x00')
getdents(r0, &(0x7f00000007c0)=""/4096, 0x1000)
mount$incfs(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x1804002, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_test', 0x42, 0x0) (async)
io_setup(0x20, &(0x7f0000000580)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000640)="0d32818e2cede722e23178db", 0xc, 0x4000000}]) (async, rerun: 64)
chdir(&(0x7f00000004c0)='./bus\x00') (rerun: 64)
unlink(&(0x7f0000000500)='./file1\x00') (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00223a00000008a3"], 0x0}, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=@newtfilter={0x25c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x3, 0xfff3}, {0xd, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x22c, 0x2, [@TCA_FLOW_EMATCHES={0x1c8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x9, 0x0, 0x0, {{0x994, 0x2, 0x7fff}, {0x101, 0x5, 0x0, "5b9ba2572f"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff, 0x1, 0x7f}, {0x4000000, 0xc415, 0x7f, 0x2, 0x8, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x8}, {0x0, 0x40, 0xd, 0x9}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0xd, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x400}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="0911"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1400, 0x6, 0x2}, {0x8, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="c227"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="8c", @TCF_META_TYPE_VAR="f7ab6a60", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1036, 0x8, 0x7ff}, {0x0, 0x6, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1}, {0x2, 0x3, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x101}, {0x0, 0x5, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x81}, {0x4, 0x5, 0x2, "bf455ec6b8"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf4ae, 0x3, 0x9}, {0xaf, 0xe8e, 0x7, 0x10}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0xf48}, {0xffffffff, 0x1, 0xffffffff, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xff7f, 0x1, 0x7}, {0x7, 0x8, 0x0, 0x6, 0x4, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x200, 0x8, 0x1}, {0x3, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0x30, 0x1, 0x0, 0x0, {{0xbd, 0x0, 0x3}, "5ec31de922f8d1aeeef77d394ff6dd703c994f65fc977045d15f7ca2d9987027277532"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x2, 0x101}, {0x5, 0x3, 0x1, "9b379a"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_skbedit={0x4c, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xe, 0x6, "91867a873a4386599efb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r7 = epoll_create1(0x0) (async)
r8 = fcntl$dupfd(r3, 0x0, r3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x2012}) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000080)={0x10000014}) (async, rerun: 64)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x1032})
r10 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000700)={'pimreg\x00', 0x1}) (async)
write(r9, &(0x7f0000000740)="ffffffffffff00112233445508004500002000014000401170c76401010264010101", 0x22) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r3) (rerun: 32)

kernel console output (not intermixed with test programs):

ETDEV_CHANGE): vlan0: link becomes ready
[   23.458419][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.466405][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.474734][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.490681][  T280] request_module fs-gadgetfs succeeded, but still no fs?
[   23.493752][  T281] device veth1_macvtap entered promiscuous mode
[   23.512607][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.520795][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.528773][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.536453][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.544906][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.553277][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.561471][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.570976][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.579194][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.587987][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.596232][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.606125][  T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   23.643022][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.654403][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.745907][  T304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.772478][  T317] tipc: Started in network mode
[   23.777458][  T317] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711
[   23.786932][  T317] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[   23.795328][  T317] tipc: Enabled bearer <udp:syz0>, priority 10
[   24.010188][  T313] EXT4-fs (loop4): Ignoring removed bh option
[   24.029970][  T313] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,sysvgroups,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,
[   24.929308][   T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   24.945578][  T282] EXT4-fs error (device loop4): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   24.954189][   T25] tipc: 32-bit node address hash set to 1000000
[   24.974699][  T282] EXT4-fs (loop4): Remounting filesystem read-only
[   24.981514][  T282] EXT4-fs error (device loop4): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   25.039351][    T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   25.126224][  T351] process 'syz.0.11' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   25.139623][  T349] EXT4-fs (loop4): Test dummy encryption mode enabled
[   25.234897][  T349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   25.248103][  T349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   25.260234][  T349] EXT4-fs (loop4): 1 truncate cleaned up
[   25.265900][  T349] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,test_dummy_encryption,nogrpid,,errors=continue
[   25.290474][  T349] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.9: missing EA_INODE flag
[   25.302119][  T349] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.9: error while reading EA inode 2 err=-117
[   25.314572][  T349] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   25.349336][    T5] usb 3-1: Using ep0 maxpacket: 32
[   25.399386][   T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.562476][  T365] ======================================================
[   25.562476][  T365] WARNING: the mand mount option is being deprecated and
[   25.562476][  T365]          will be removed in v5.15!
[   25.562476][  T365] ======================================================
[   25.588846][  T365] EXT4-fs (loop4): Ignoring removed oldalloc option
[   25.601067][  T365] EXT4-fs (loop4): Ignoring removed orlov option
[   25.609382][  T365] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   25.619797][  T365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e02c, mo2=0002]
[   25.627721][  T365] System zones: 1-12
[   25.632582][  T365] EXT4-fs (loop4): orphan cleanup on readonly fs
[   25.638924][  T365] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.12: bad orphan inode 267
[   25.649298][   T25] usb 2-1: Using ep0 maxpacket: 16
[   25.649444][  T365] EXT4-fs (loop4): Remounting filesystem read-only
[   25.661191][  T365] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,orlov,discard,errors=remount-ro,lazytime
[   25.676087][   T24] kauditd_printk_skb: 90 callbacks suppressed
[   25.676096][   T24] audit: type=1400 audit(1791786185.750:164): avc:  denied  { name_bind } for  pid=364 comm="syz.4.12" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   25.709572][    T5] usb 3-1: config 6 has an invalid interface number: 48 but max is 0
[   25.717943][    T5] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[   25.726827][    T5] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[   25.735783][    T5] usb 3-1: config 6 has no interface number 0
[   25.741999][    T5] usb 3-1: config 6 interface 48 altsetting 12 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   25.757168][    T5] usb 3-1: config 6 interface 48 altsetting 12 endpoint 0x5 has invalid maxpacket 1584, setting to 64
[   25.768192][    T5] usb 3-1: config 6 interface 48 altsetting 12 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[   25.779647][    T5] usb 3-1: config 6 interface 48 altsetting 12 has an invalid endpoint with address 0x80, skipping
[   25.790483][    T5] usb 3-1: config 6 interface 48 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 1024
[   25.800622][    T5] usb 3-1: config 6 interface 48 altsetting 12 has a duplicate endpoint with address 0x1, skipping
[   25.812481][    T5] usb 3-1: config 6 interface 48 altsetting 12 has a duplicate endpoint with address 0x7, skipping
[   25.819392][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   25.823427][    T5] usb 3-1: config 6 interface 48 altsetting 12 has a duplicate endpoint with address 0x1, skipping
[   25.833582][   T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   26.025894][   T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   26.054835][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.063920][   T25] usb 2-1: Product: syz
[   26.068108][   T25] usb 2-1: Manufacturer: syz
[   26.073696][   T25] usb 2-1: SerialNumber: syz
[   26.199387][   T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   26.539710][   T25] usb 2-1: 0:2 : does not exist
[   26.559399][   T20] usb 5-1: config 4 has an invalid interface number: 106 but max is 0
[   26.591162][   T25] usb 2-1: USB disconnect, device number 2
[   26.603599][   T20] usb 5-1: config 4 has no interface number 0
[   26.643965][   T20] usb 5-1: config 4 interface 106 has no altsetting 0
[   26.647334][    T5] usb 3-1: config 6 interface 48 altsetting 12 endpoint 0xD has an invalid bInterval 127, changing to 7
[   26.662015][    T5] usb 3-1: config 6 interface 48 altsetting 12 has a duplicate endpoint with address 0xE, skipping
[   26.672713][    T5] usb 3-1: config 6 interface 48 altsetting 12 endpoint 0x6 has an invalid bInterval 128, changing to 11
[   26.683915][    T5] usb 3-1: config 6 interface 48 altsetting 12 endpoint 0xF has invalid maxpacket 512, setting to 64
[   26.694820][    T5] usb 3-1: config 6 interface 48 has no altsetting 0
[   26.809456][   T20] usb 5-1: New USB device found, idVendor=04e2, idProduct=1411, bcdDevice=7a.3d
[   26.818660][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.826763][   T20] usb 5-1: Product: syz
[   26.831047][   T20] usb 5-1: Manufacturer: ��狞緤ꗮ겄疦櫥션㞅ᖤ뙠鳘��⚗箥┞䋆㌧䞂≔镰
[   26.841896][   T20] usb 5-1: SerialNumber: syz
[   26.869359][    T5] usb 3-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=cb.c0
[   26.878420][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.886713][    T5] usb 3-1: Product: Ỿ扤畅猪巩鞳킎�盭᪳꣪䑿쌲芡轮
[   26.894945][    T5] usb 3-1: Manufacturer: â ‰
[   26.899546][    T5] usb 3-1: SerialNumber: à ’
[   26.929437][  T342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   27.149880][   T24] audit: type=1400 audit(1791786187.230:165): avc:  denied  { ioctl } for  pid=337 comm="syz.2.8" path="socket:[15294]" dev="sockfs" ino=15294 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.150190][  T338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   27.183943][  T338] device bridge_slave_1 left promiscuous mode
[   27.190188][  T338] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.197729][  T338] device bridge_slave_0 left promiscuous mode
[   27.204008][  T338] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.392403][    T5] usb 3-1: USB disconnect, device number 2
[   28.470042][   T20] usb 5-1: USB disconnect, device number 2
[   42.509134][   T24] audit: type=1400 audit(1791786202.580:166): avc:  denied  { unlink } for  pid=384 comm="syz.2.17" name="#3" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   42.531242][   T24] audit: type=1400 audit(1791786202.600:167): avc:  denied  { bind } for  pid=384 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.532152][  T386] overlayfs: filesystem on './file0' not supported as upperdir
[   42.569743][   T24] audit: type=1400 audit(1791786202.650:168): avc:  denied  { create } for  pid=384 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   42.570657][  T386] fuse: Bad value for 'fd'
[   42.600224][  T383] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #2: comm syz.1.16: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 5, max 0(0), depth 0(0)
[   42.623280][  T383] EXT4-fs (loop1): get root inode failed
[   42.628990][  T383] EXT4-fs (loop1): mount failed
[   42.641039][  T387] EXT4-fs (loop3): Unrecognized mount option "subj_user=audit" or missing value
[   42.657524][   T24] audit: type=1400 audit(1791786202.740:169): avc:  denied  { create } for  pid=382 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.718141][  T392] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   42.726095][  T392] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   42.735694][  T387] capability: warning: `syz.3.18' uses 32-bit capabilities (legacy support in use)
[   42.736153][  T392] F2FS-fs (loop0): invalid crc value
[   42.752790][  T392] F2FS-fs (loop0): Found nat_bits in checkpoint
[   42.778547][  T392] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   42.785666][  T344] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   42.785710][  T392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   42.814075][   T24] audit: type=1400 audit(1791786202.890:170): avc:  denied  { wake_alarm } for  pid=390 comm="syz.0.20" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   42.899339][    T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   42.929351][   T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   42.978444][   T24] audit: type=1400 audit(1791786203.050:171): avc:  denied  { lock } for  pid=390 comm="syz.0.20" path="socket:[15510]" dev="sockfs" ino=15510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   43.009321][   T24] audit: type=1400 audit(1791786203.050:172): avc:  denied  { read open } for  pid=390 comm="syz.0.20" path="/6/file0/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.031857][  T396] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   43.045363][   T24] audit: type=1400 audit(1791786203.050:173): avc:  denied  { write } for  pid=390 comm="syz.0.20" name="bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.139336][  T344] usb 5-1: not running at top speed; connect to a high speed hub
[   43.149365][    T5] usb 3-1: Using ep0 maxpacket: 8
[   43.219366][  T344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.229721][  T344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   43.238591][  T344] usb 5-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00
[   43.247961][  T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.269323][    T5] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[   43.283161][    T5] usb 3-1: config 0 has no interface number 0
[   43.319388][   T20] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.319910][  T344] uvcvideo: Found UVC 1.00 device <unnamed> (0000:d970)
[   43.334830][   T20] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   43.350673][   T20] usb 2-1: config 0 interface 0 has no altsetting 0
[   43.357647][   T20] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   43.367061][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.377373][   T20] usb 2-1: config 0 descriptor??
[   43.409334][  T396] usb 4-1: not running at top speed; connect to a high speed hub
[   43.449350][    T5] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   43.461919][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.479287][    T5] usb 3-1: Product: syz
[   43.483534][    T5] usb 3-1: Manufacturer: syz
[   43.488130][    T5] usb 3-1: SerialNumber: syz
[   43.497695][    T5] usb 3-1: config 0 descriptor??
[   43.509352][  T396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.525552][  T396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   43.539330][  T344] uvcvideo: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1).
[   43.545726][  T396] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   43.558141][  T344] uvcvideo: No valid video chain found.
[   43.566936][  T344] usb 5-1: USB disconnect, device number 3
[   43.573790][  T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.625770][   T24] audit: type=1400 audit(1791786203.700:174): avc:  denied  { create } for  pid=382 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   43.647483][  T396] uvcvideo: Found UVC 1.00 device <unnamed> (046d:0825)
[   43.655727][  T396] uvcvideo: Failed to create links for entity 1
[   43.662610][  T396] uvcvideo: Failed to register entities (-22).
[   43.682658][  T396] uvcvideo: No streaming interface found for terminal 2.
[   43.691833][   T24] audit: type=1400 audit(1791786203.730:175): avc:  denied  { write } for  pid=382 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   43.786636][    T5] usb 3-1: USB disconnect, device number 3
[   43.855470][  T387] netlink: 'syz.3.18': attribute type 298 has an invalid length.
[   43.864992][  T344] usb 4-1: USB disconnect, device number 3
[   44.125001][  T413] cgroup: fork rejected by pids controller in /syz4
[   44.150835][  T416] FAT-fs (loop0): bogus number of reserved sectors
[   44.159343][  T416] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[   44.170381][   T20] usbhid 2-1:0.0: can't add hid device: -71
[   44.170430][  T416] FAT-fs (loop0): Can't find a valid FAT filesystem
[   44.176343][   T20] usbhid: probe of 2-1:0.0 failed with error -71
[   44.192363][   T20] usb 2-1: USB disconnect, device number 3
[   44.460152][  T466] fuse: Unknown parameter '÷[Bðyß’é@�¾¯Ã›™CTìI.ó—'
[   44.523720][  T468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   44.541158][  T468] xt_hashlimit: max too large, truncated to 1048576
[   44.550934][  T468] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[   44.673411][  T470] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue
[   44.686707][  T470] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.735142][  T477] pit: kvm: requested 40228 ns i8254 timer period limited to 200000 ns
[   44.743595][   T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   44.744109][  T477] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   44.759776][  T477] pit: kvm: requested 50285 ns i8254 timer period limited to 200000 ns
[   44.768184][  T477] pit: kvm: requested 189409 ns i8254 timer period limited to 200000 ns
[   44.776931][  T477] pit: kvm: requested 108114 ns i8254 timer period limited to 200000 ns
[   44.786038][  T477] pit: kvm: requested 185219 ns i8254 timer period limited to 200000 ns
[   44.797265][  T477] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[   44.804117][  T396] kernel write not supported for file /input/event2 (pid: 396 comm: kworker/1:5)
[   44.807190][  T477] pit: kvm: requested 99733 ns i8254 timer period limited to 200000 ns
[   44.815588][  T470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[   44.824086][  T477] pit: kvm: requested 127390 ns i8254 timer period limited to 200000 ns
[   44.841052][  T477] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[   44.842840][  T480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31'.
[   44.858347][  T480] netlink: 35 bytes leftover after parsing attributes in process `syz.1.31'.
[   44.867275][  T480] netlink: 'syz.1.31': attribute type 5 has an invalid length.
[   44.875001][  T480] netlink: 'syz.1.31': attribute type 6 has an invalid length.
[   44.882844][  T480] netlink: 35 bytes leftover after parsing attributes in process `syz.1.31'.
[   44.989299][   T55] usb 3-1: Using ep0 maxpacket: 32
[   45.070894][  T482] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   45.080170][  T482] F2FS-fs (loop4): invalid crc value
[   45.085740][  T482] F2FS-fs (loop4): invalid crc value
[   45.091119][  T482] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   45.095462][  T484] F2FS-fs (loop1): invalid crc value
[   45.111442][  T484] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   45.142678][  T484] F2FS-fs (loop1): Start checkpoint disabled!
[   45.149565][   T55] usb 3-1: unable to get BOS descriptor or descriptor too short
[   45.157519][  T484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   45.165076][   T55] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   45.179181][  T484] TCP: TCP_TX_DELAY enabled
[   45.197659][    T7] attempt to access beyond end of device
[   45.197659][    T7] loop1: rw=2049, want=40984, limit=40427
[   45.264922][  T494] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext3
[   45.289394][   T55] usb 3-1: unable to read config index 0 descriptor/start: -61
[   45.297443][   T55] usb 3-1: can't read configurations, error -61
[   45.459414][   T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   45.529313][  T360] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   45.579318][   T20] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   45.586948][  T396] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   45.709335][   T55] usb 3-1: Using ep0 maxpacket: 32
[   45.769355][  T360] usb 5-1: Using ep0 maxpacket: 16
[   45.829361][  T396] usb 1-1: Using ep0 maxpacket: 8
[   45.869411][   T55] usb 3-1: unable to get BOS descriptor or descriptor too short
[   45.877146][   T55] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   45.889355][  T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.900297][  T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.910023][  T360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   45.922860][  T360] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   45.931951][  T360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.940465][  T360] usb 5-1: config 0 descriptor??
[   45.959395][   T20] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   45.970282][   T20] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   45.983180][   T20] usb 2-1: config 0 interface 0 has no altsetting 0
[   45.989833][   T20] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[   45.998870][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.999339][   T55] usb 3-1: unable to read config index 0 descriptor/start: -61
[   46.007673][   T20] usb 2-1: config 0 descriptor??
[   46.019588][  T396] usb 1-1: unable to get BOS descriptor or descriptor too short
[   46.020063][   T55] usb 3-1: can't read configurations, error -61
[   46.033613][   T55] usb usb3-port1: attempt power cycle
[   46.039349][  T497] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   46.109370][  T396] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   46.149044][  T502] netlink: 79 bytes leftover after parsing attributes in process `syz.3.38'.
[   46.389343][  T396] usb 1-1: string descriptor 0 read error: -22
[   46.395687][  T396] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[   46.404926][  T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.410666][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.420210][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.427416][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.434694][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.441922][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.449144][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.450205][  T396] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   46.456384][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.470317][   T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   46.477805][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.485076][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.492362][  T360] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   46.501401][  T360] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5
[   46.513749][  T360] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   46.520453][  T497] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   46.550709][   T20] input: HID 1b1c:1c0d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:1C0D.0002/input/input6
[   46.569443][   T55] usb 3-1: Using ep0 maxpacket: 32
[   46.632833][   T20] hid-generic 0003:1B1C:1C0D.0002: input,hidraw1: USB HID v0.31 Joystick [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0
[   46.652010][  T499] udc-core: couldn't find an available UDC or it's busy
[   46.659000][  T499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   46.679354][  T396] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   46.712645][  T396] usb 1-1: USB disconnect, device number 2
[   46.749366][   T55] usb 3-1: unable to get BOS descriptor or descriptor too short
[   46.754563][   T20] usb 2-1: USB disconnect, device number 4
[   46.757434][   T55] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   46.889386][   T55] usb 3-1: unable to read config index 0 descriptor/start: -61
[   46.897148][   T55] usb 3-1: can't read configurations, error -61
[   46.930171][  T516] udevd[516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.049317][   T55] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   47.159451][   T55] usb 3-1: Using ep0 maxpacket: 32
[   47.369400][   T55] usb 3-1: unable to get BOS descriptor or descriptor too short
[   47.417262][   T55] usb 3-1: too many configurations: 88, using maximum allowed: 8
[   47.476671][  T527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'.
[   47.549934][  T526] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   47.559055][   T55] usb 3-1: unable to read config index 0 descriptor/start: -71
[   47.633865][   T55] usb 3-1: can't read configurations, error -71
[   47.648669][   T24] kauditd_printk_skb: 45 callbacks suppressed
[   47.648678][   T24] audit: type=1400 audit(1791786207.730:221): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   47.707235][   T55] usb usb3-port1: unable to enumerate USB device
[   47.750679][  T530] device ip6_vti0 entered promiscuous mode
[   47.891243][  T539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'.
[   47.931202][  T526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   47.940255][  T526] ext2 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.991825][   T24] audit: type=1400 audit(1791786208.070:222): avc:  denied  { create } for  pid=525 comm="syz.2.41" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   48.019673][   T24] audit: type=1400 audit(1791786208.100:223): avc:  denied  { write } for  pid=525 comm="syz.2.41" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   48.043401][   T24] audit: type=1400 audit(1791786208.100:224): avc:  denied  { open } for  pid=525 comm="syz.2.41" path="/5/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   48.083691][   T24] audit: type=1400 audit(1791786208.130:225): avc:  denied  { create } for  pid=550 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   48.114425][  T551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.44'.
[   48.141048][   T55] usb 5-1: USB disconnect, device number 4
[   48.155485][   T24] audit: type=1400 audit(1791786208.230:226): avc:  denied  { bind } for  pid=559 comm="syz.3.45" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.211161][  T560] sit: non-ECT from 0.0.0.0 with TOS=0x3
[   48.219726][   T24] audit: type=1400 audit(1791786208.260:227): avc:  denied  { name_bind } for  pid=559 comm="syz.3.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   48.250993][  T560] Zero length message leads to an empty skb
[   48.296781][   T24] audit: type=1400 audit(1791786208.260:228): avc:  denied  { node_bind } for  pid=559 comm="syz.3.45" saddr=fe80::bb src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   48.349747][  T571] EXT4-fs (loop2): Test dummy encryption mode enabled
[   48.356658][  T571] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   48.371885][  T571] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   48.389369][  T360] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   48.399430][   T24] audit: type=1400 audit(1791786208.260:229): avc:  denied  { mount } for  pid=559 comm="syz.3.45" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   48.407058][  T571] System zones: 
[   48.421845][   T24] audit: type=1400 audit(1791786208.260:230): avc:  denied  { block_suspend } for  pid=561 comm="syz.4.46" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   48.446764][  T571] 0-5
[   48.475135][  T571] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   48.509287][   T25] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   48.598380][  T571] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   48.638767][  T593] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.52: iget: bad i_size value: 38620345925642
[   48.639346][  T360] usb 2-1: Using ep0 maxpacket: 32
[   48.656755][  T593] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.52: couldn't read orphan inode 15 (err -117)
[   48.668928][  T593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   48.849351][  T360] usb 2-1: config 1 interface 0 has no altsetting 0
[   49.007235][  T615] fusectl: Unknown parameter 'username'
[   49.009410][  T360] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[   49.021925][  T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.029961][  T360] usb 2-1: Product: syz
[   49.034139][  T360] usb 2-1: Manufacturer: syz
[   49.038720][  T360] usb 2-1: SerialNumber: syz
[   49.075733][  T618] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=618 comm=syz.3.55
[   49.088110][  T618] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=618 comm=syz.3.55
[   49.320415][  T622]  loop4: p1 p2 < > p3 < p5 p6 > p4
[   49.325688][  T622] loop4: partition table partially beyond EOD, truncated
[   49.333681][  T622] loop4: p2 start 4278190080 is beyond EOD, truncated
[   49.340980][  T622] loop4: p4 size 8192 extends beyond EOD, truncated
[   49.348267][  T622] loop4: p6 size 8192 extends beyond EOD, truncated
[   49.411096][  T360] usb 2-1: USB disconnect, device number 5
[   49.420513][  T381] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   49.423342][  T282] __loop_clr_fd: partition scan of loop4 failed (rc=-16)
[   49.433455][  T515] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   49.446447][  T381] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.451509][  T393] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   49.461416][  T381] Buffer I/O error on dev loop4p1, logical block 1, async page read
[   49.472621][  T393] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.482000][  T517] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   49.491932][  T393] Buffer I/O error on dev loop4p4, logical block 1, async page read
[   49.504109][  T512] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   49.523872][  T515] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.523920][  T512] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.535153][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   49.545869][  T517] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.554203][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   49.565100][  T512] Buffer I/O error on dev loop4p6, logical block 1, async page read
[   49.573227][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   49.581763][  T517] Buffer I/O error on dev loop4p5, logical block 1, async page read
[   49.598757][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   49.630115][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   49.642565][  T627] Illegal XDP return value 4294967282, expect packet loss!
[   49.709302][    T5] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   49.807080][  T635] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   50.079370][    T5] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   50.090247][    T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   50.101372][    T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64
[   50.112294][    T5] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   50.199361][    T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   50.208458][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   50.216477][    T5] usb 5-1: SerialNumber: syz
[   50.239371][  T625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   50.460237][  T625] udc-core: couldn't find an available UDC or it's busy
[   50.467258][  T625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   50.519874][    T5] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[   50.527280][    T5] usb 5-1: USB disconnect, device number 5
[   50.603380][  T646] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012095, chksum : 0x19cac1d4, utbl_chksum : 0xe619d30d)
[   50.678536][  T649] EXT4-fs (loop2): Ignoring removed bh option
[   50.684873][  T649] EXT4-fs (loop2): Unrecognized mount option "fowner=00000000000000000000" or missing value
[   51.410126][  T654] EXT4-fs (loop1): Ignoring removed bh option
[   51.421829][  T654] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   51.457002][  T654] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue
[   51.595430][  T515] Buffer I/O error on dev loop4p4, logical block 1, async page read
[   52.079292][   T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   52.230795][  T691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'.
[   52.239580][  T691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'.
[   52.466540][  T700] syz.4.74 (700) used obsolete PPPIOCDETACH ioctl
[   52.580034][  T688] udc-core: couldn't find an available UDC or it's busy
[   52.587323][  T688] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   52.659293][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   53.429329][   T25] usb 1-1: Using ep0 maxpacket: 8
[   53.549408][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.590789][   T24] kauditd_printk_skb: 25 callbacks suppressed
[   53.590799][   T24] audit: type=1400 audit(1791786213.670:256): avc:  denied  { mounton } for  pid=730 comm="syz.3.77" path="/13/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   53.729449][   T25] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   53.739452][  T742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.766808][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.778522][   T25] usb 1-1: Product: syz
[   53.784032][  T742] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.78: invalid indirect mapped block 32768 (level 2)
[   53.797769][   T25] usb 1-1: Manufacturer: syz
[   53.802595][   T25] usb 1-1: SerialNumber: syz
[   53.808046][  T742] EXT4-fs (loop4): 1 orphan inode deleted
[   53.818575][  T742] EXT4-fs (loop4): 1 truncate cleaned up
[   53.824472][  T742] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   53.975351][  T747] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue
[   53.990168][  T747] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.070143][  T757] exfat: Bad value for 'uid'
[   54.122079][  T761] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   54.131773][  T761] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.145176][  T761] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   54.146750][   T24] audit: type=1400 audit(1791786214.220:257): avc:  denied  { create } for  pid=763 comm="syz.2.84" dev="anon_inodefs" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   54.154049][  T761] System zones: 
[   54.174961][   T24] audit: type=1400 audit(1791786214.240:258): avc:  denied  { ioctl } for  pid=763 comm="syz.2.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17239 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   54.175174][   T25] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   54.178587][  T761] 0-1
[   54.205330][   T24] audit: type=1400 audit(1791786214.290:259): avc:  denied  { read } for  pid=763 comm="syz.2.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   54.215057][  T761] , 3-36
[   54.222060][  T761] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue
[   54.241889][   T25] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   54.248965][  T761] netlink: 260 bytes leftover after parsing attributes in process `syz.3.83'.
[   54.275249][  T761] netlink: 104 bytes leftover after parsing attributes in process `syz.3.83'.
[   54.284163][  T761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'.
[   54.339375][   T25] usb 1-1: 1:1 : bogus bTerminalLink 7
[   54.347904][  T772] EXT4-fs (loop3): Online resizing not supported with bigalloc
[   54.368171][   T25] usb 1-1: USB disconnect, device number 4
[   54.457136][   T24] audit: type=1400 audit(1791786214.530:260): avc:  denied  { bind } for  pid=774 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.540452][  T778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.86'.
[   54.549527][   T24] audit: type=1400 audit(1791786214.620:261): avc:  denied  { map } for  pid=776 comm="syz.4.86" path="socket:[17495]" dev="sockfs" ino=17495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   54.574337][   T24] audit: type=1400 audit(1791786214.660:262): avc:  denied  { ioctl } for  pid=776 comm="syz.4.86" path="socket:[17501]" dev="sockfs" ino=17501 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   54.693321][   T24] audit: type=1400 audit(1791786214.770:263): avc:  denied  { accept } for  pid=779 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   54.886547][   T20] usb 2-1: unable to get BOS descriptor or descriptor too short
[   54.949319][   T20] usb 2-1: unable to read config index 0 descriptor/start: -71
[   54.957039][   T20] usb 2-1: can't read configurations, error -71
[   54.973436][  T792] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.986156][  T787] udc-core: couldn't find an available UDC or it's busy
[   54.993320][  T787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   55.025897][  T792] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,jqfmt=vfsv0,dioread_lock,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   55.147970][   T24] audit: type=1400 audit(1791786215.220:264): avc:  denied  { mount } for  pid=791 comm="syz.3.90" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   55.170480][   T24] audit: type=1400 audit(1791786215.240:265): avc:  denied  { search } for  pid=791 comm="syz.3.90" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   55.275482][  T858] tipc: Started in network mode
[   55.280441][  T858] tipc: Own node identity , cluster identity 4711
[   55.286908][  T858] tipc: Failed to set node id, please configure manually
[   55.294043][  T858] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   55.329360][   T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   55.351889][  T858] ip_tables: iptables: counters copy to user failed while replacing table
[   55.363891][  T858] exfat: Deprecated parameter 'utf8'
[   55.411670][  T858] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d)
[   55.469393][  T853] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   55.498375][  T860] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   55.513475][  T860] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   55.534262][  T860] F2FS-fs (loop4): invalid crc value
[   55.568465][  T860] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   55.589417][   T20] usb 2-1: Using ep0 maxpacket: 32
[   55.604882][  T860] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   55.612521][  T860] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   55.630875][  T282] attempt to access beyond end of device
[   55.630875][  T282] loop4: rw=2049, want=45104, limit=40427
[   55.709355][  T853] usb 3-1: Using ep0 maxpacket: 32
[   55.709363][   T20] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   55.709378][   T20] usb 2-1: config 0 has no interface number 0
[   55.734111][   T20] usb 2-1: config 0 interface 184 has no altsetting 0
[   55.795480][  T873] 9pnet: Could not find request transport: fdÅê:)>tŽ
[   55.803579][  T871] exfat: Unknown parameter ''
[   55.829368][  T853] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30
[   55.840272][  T853] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.851413][  T853] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   55.858304][  T516] print_req_error: 16 callbacks suppressed
[   55.858318][  T516] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   55.883817][  T853] usb 3-1: config 0 interface 0 has no altsetting 0
[   55.883994][  T381] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   55.897200][  T853] usb 3-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00
[   55.903501][  T515] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   55.916140][  T853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.922506][   T20] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   55.930314][  T516] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.940684][  T393] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   55.950840][  T516] buffer_io_error: 7 callbacks suppressed
[   55.950849][  T516] Buffer I/O error on dev loop4p1, logical block 1, async page read
[   55.963164][  T517] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   55.967867][  T853] usb 3-1: config 0 descriptor??
[   55.975912][  T517] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.987404][  T381] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.991613][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.002616][  T515] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.013661][  T517] Buffer I/O error on dev loop4p6, logical block 1, async page read
[   56.022236][  T393] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.032994][   T20] usb 2-1: Product: syz
[   56.055776][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   56.059544][   T20] usb 2-1: Manufacturer: syz
[   56.064826][  T515] Buffer I/O error on dev loop4p4, logical block 1, async page read
[   56.068819][   T20] usb 2-1: SerialNumber: syz
[   56.076584][  T393] Buffer I/O error on dev loop4p5, logical block 1, async page read
[   56.082164][   T20] usb 2-1: config 0 descriptor??
[   56.090885][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   56.102134][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   56.110403][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   56.110412][  T836] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   56.126143][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   56.134706][   T20] smsc75xx v1.0.0
[   56.369354][  T837] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   56.400345][   T20] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   56.400359][   T20] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   56.400370][   T20] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   56.400454][   T20] smsc75xx: probe of 2-1:0.184 failed with error -32
[   56.479349][  T836] usb 5-1: config 1 has an invalid interface number: 176 but max is 0
[   56.487822][  T836] usb 5-1: config 1 has no interface number 0
[   56.494750][  T836] usb 5-1: config 1 interface 176 has no altsetting 0
[   56.501900][  T836] usb 5-1: New USB device found, idVendor=0bda, idProduct=0179, bcdDevice=2d.01
[   56.511290][  T824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   56.520369][  T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.528658][  T825] tc_dump_action: action bad kind
[   56.533906][  T824] tc_dump_action: action bad kind
[   56.609322][  T853] usbhid 3-1:0.0: can't add hid device: -71
[   56.615302][  T853] usbhid: probe of 3-1:0.0 failed with error -71
[   56.628191][  T853] usb 3-1: USB disconnect, device number 8
[   56.749348][  T837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.760336][  T837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.761721][  T850] usb 5-1: USB disconnect, device number 6
[   56.771176][  T837] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   56.784974][  T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.793450][  T837] usb 4-1: config 0 descriptor??
[   57.009315][  T851] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   57.132036][  T916] fuse: Bad value for 'fd'
[   57.214620][  T920] device gretap0 entered promiscuous mode
[   57.217101][  T919] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   57.220765][  T920] device vlan2 entered promiscuous mode
[   57.230269][  T919] EXT4-fs (loop2): ea_inode feature is not supported for Hurd
[   57.249362][  T851] usb 1-1: Using ep0 maxpacket: 32
[   57.249823][  T884] udc-core: couldn't find an available UDC or it's busy
[   57.261480][  T884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   57.300103][  T837] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   57.307610][  T837] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   57.315169][  T837] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   57.323093][  T837] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   57.330598][  T837] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   57.341100][  T837] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[   57.369605][  T851] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   57.377833][  T851] usb 1-1: config 0 has no interface number 0
[   57.383984][  T851] usb 1-1: config 0 interface 184 has no altsetting 0
[   57.455976][  T933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[   57.549416][  T851] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   57.558614][  T851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.566707][  T851] usb 1-1: Product: syz
[   57.570918][  T851] usb 1-1: Manufacturer: syz
[   57.575490][  T851] usb 1-1: SerialNumber: syz
[   57.581073][  T851] usb 1-1: config 0 descriptor??
[   57.619361][  T850] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   57.627228][  T851] smsc75xx v1.0.0
[   57.759305][  T849] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   57.950044][  T837] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 5: -71
[   57.959405][  T837] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense calibration info: -71
[   57.968971][  T837] playstation 0003:054C:0DF2.0003: Failed to get calibration data from DualSense
[   57.978144][  T837] playstation 0003:054C:0DF2.0003: Failed to create dualsense.
[   57.986381][  T837] playstation: probe of 0003:054C:0DF2.0003 failed with error -71
[   57.995686][  T837] usb 4-1: USB disconnect, device number 4
[   58.010007][  T940] fido_id[940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   58.029350][  T850] usb 5-1: unable to get BOS descriptor or descriptor too short
[   58.069344][  T850] usb 5-1: not running at top speed; connect to a high speed hub
[   58.149364][  T850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.159582][  T850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.168422][  T850] usb 5-1: config 1 has no interface number 0
[   58.174544][  T850] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   58.184258][  T850] usb 5-1: config 1 interface 1 has no altsetting 0
[   58.199385][  T849] usb 3-1: unable to get BOS descriptor or descriptor too short
[   58.269419][  T851] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   58.280331][  T851] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   58.319379][  T849] usb 3-1: unable to read config index 0 descriptor/start: -71
[   58.326970][  T849] usb 3-1: can't read configurations, error -71
[   58.369363][  T850] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   58.378417][  T850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.386432][  T850] usb 5-1: Product: syz
[   58.390605][  T850] usb 5-1: Manufacturer: syz
[   58.395173][  T850] usb 5-1: SerialNumber: syz
[   58.518026][  T943] incfs: Options parsing error. -22
[   58.523338][  T943] incfs: mount failed -22
[   58.616855][  T853] usb 2-1: USB disconnect, device number 7
[   58.668559][   T24] kauditd_printk_skb: 19 callbacks suppressed
[   58.668581][   T24] audit: type=1400 audit(1791786218.740:285): avc:  denied  { create } for  pid=947 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   58.694873][  T850] usb 5-1: selecting invalid altsetting 0
[   58.701686][  T850] usb 5-1: selecting invalid altsetting 0
[   58.707747][  T948] overlayfs: './file0' not a directory
[   58.708895][   T24] audit: type=1400 audit(1791786218.790:286): avc:  denied  { watch watch_reads } for  pid=946 comm="syz.2.116" path="/28" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   58.741568][  T850] usb 5-1: USB disconnect, device number 7
[   58.748620][   T24] audit: type=1400 audit(1791786218.800:287): avc:  denied  { setopt } for  pid=947 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   58.802927][  T945] F2FS-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value
[   58.960146][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   58.977996][  T945] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   58.996642][  T945] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   59.005726][  T945] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   59.015909][  T945] EXT4-fs (loop3): 1 truncate cleaned up
[   59.021790][  T945] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue
[   59.040645][   T24] audit: type=1400 audit(1791786219.120:288): avc:  denied  { watch } for  pid=944 comm="syz.3.115" path="/21/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.064573][  T945] overlayfs: upper fs needs to support d_type.
[   59.088130][  T279] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   59.104007][  T279] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   59.118407][  T279] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   59.231293][  T963] FAT-fs (loop4): Unrecognized mount option "i61" or missing value
[   59.276067][  T516] Buffer I/O error on dev loop4p1, logical block 1, async page read
[   59.349054][   T24] audit: type=1400 audit(1791786219.420:289): avc:  denied  { mounton } for  pid=972 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   59.405848][  T967] EXT4-fs (loop1): Ignoring removed bh option
[   59.424092][  T967] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   59.451886][  T972] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.458943][  T972] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.476663][  T967] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue
[   59.497043][  T972] device bridge_slave_0 entered promiscuous mode
[   59.514627][  T972] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.521983][  T972] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.530906][  T972] device bridge_slave_1 entered promiscuous mode
[   59.531033][   T24] audit: type=1400 audit(1791786219.610:290): avc:  denied  { search } for  pid=979 comm="syz.2.125" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   59.564718][   T24] audit: type=1400 audit(1791786219.640:291): avc:  denied  { write } for  pid=979 comm="syz.2.125" name="usb_gadget" dev="configfs" ino=14099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   59.593010][   T24] audit: type=1400 audit(1791786219.640:292): avc:  denied  { add_name } for  pid=979 comm="syz.2.125" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   59.614425][   T24] audit: type=1400 audit(1791786219.640:293): avc:  denied  { create } for  pid=979 comm="syz.2.125" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   59.635978][   T24] audit: type=1400 audit(1791786219.640:294): avc:  denied  { remove_name } for  pid=979 comm="syz.2.125" name="g1" dev="configfs" ino=18777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   59.699452][  T851] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   59.714768][  T851] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   59.725133][  T851] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   59.742034][  T851] smsc75xx: probe of 1-1:0.184 failed with error -71
[   59.766977][  T851] usb 1-1: USB disconnect, device number 5
[   59.809124][  T972] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.816222][  T972] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.823512][  T972] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.830553][  T972] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.857890][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.866537][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.874956][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.895121][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.903591][  T300] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.910753][  T300] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.920902][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.929199][  T300] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.936880][  T300] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.965348][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.975183][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.993831][  T991] SELinux:  Context system_u:object_r: is not valid (left unmapped).
[   60.007679][  T972] device veth0_vlan entered promiscuous mode
[   60.019946][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.030788][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.038329][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.045956][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.059227][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.069595][  T990] EXT4-fs (loop1): orphan cleanup on readonly fs
[   60.075444][  T972] device veth1_macvtap entered promiscuous mode
[   60.084391][  T990] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   60.099550][  T990] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   60.106376][  T990] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #13: comm syz.1.129: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   60.124738][  T990] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.129: couldn't read orphan inode 13 (err -117)
[   60.136665][  T990] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,journal_dev=0x0000000000000005,barrier=0x0000000000000000,resuid=0x0000000000000000,journal_ioprio=0x0000000000000006,grpid,,errors=continue
[   60.160226][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.168816][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.178060][    T7] device bridge_slave_1 left promiscuous mode
[   60.184249][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.192326][    T7] device bridge_slave_0 left promiscuous mode
[   60.198519][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.199346][  T837] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[   60.213836][    T7] device veth1_macvtap left promiscuous mode
[   60.220067][    T7] device veth0_vlan left promiscuous mode
[   60.292192][  T998] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   60.366261][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   60.374258][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   60.383097][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.393190][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   60.401587][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.410774][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.412601][ T1008] capability: warning: `syz.0.132' uses deprecated v2 capabilities in a way that may be insecure
[   60.419137][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.437635][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.445824][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.473239][ T1002] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[   60.489973][ T1002] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   60.499321][  T837] usb 3-1: device descriptor read/64, error -71
[   60.639362][   T25] usb 5-1: Using ep0 maxpacket: 16
[   60.739453][   T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   60.806264][ T1032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   60.818469][ T1032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   60.849414][   T25] usb 5-1: config 3 has an invalid interface number: 211 but max is 2
[   60.857726][   T25] usb 5-1: config 3 has an invalid interface number: 57 but max is 2
[   60.866519][   T25] usb 5-1: config 3 has an invalid interface number: 43 but max is 2
[   60.875399][   T25] usb 5-1: config 3 has no interface number 0
[   60.881920][   T25] usb 5-1: config 3 has no interface number 1
[   60.888193][   T25] usb 5-1: config 3 has no interface number 2
[   60.894489][   T25] usb 5-1: config 3 interface 211 altsetting 246 endpoint 0x5 has invalid maxpacket 512, setting to 64
[   60.905803][  T837] usb 3-1: device descriptor read/64, error -71
[   60.912210][   T25] usb 5-1: config 3 interface 211 altsetting 246 endpoint 0x9 has invalid maxpacket 512, setting to 64
[   60.923483][   T25] usb 5-1: config 3 interface 211 altsetting 246 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[   60.935104][   T25] usb 5-1: config 3 interface 211 altsetting 246 has a duplicate endpoint with address 0x1, skipping
[   60.946206][   T25] usb 5-1: config 3 interface 211 altsetting 246 has a duplicate endpoint with address 0xC, skipping
[   60.957356][   T25] usb 5-1: config 3 interface 211 altsetting 246 has a duplicate endpoint with address 0xB, skipping
[   60.968578][   T25] usb 5-1: config 3 interface 211 altsetting 246 has a duplicate endpoint with address 0x9, skipping
[   60.980012][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[   60.990938][   T25] usb 5-1: config 3 interface 43 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   61.002332][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[   61.013140][   T25] usb 5-1: config 3 interface 43 altsetting 9 has an invalid endpoint with address 0x0, skipping
[   61.024203][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[   61.035322][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[   61.046386][   T25] usb 5-1: config 3 interface 43 altsetting 9 endpoint 0x8 has an invalid bInterval 87, changing to 10
[   61.058808][   T25] usb 5-1: config 3 interface 43 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64
[   61.070305][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[   61.081941][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[   61.092960][   T25] usb 5-1: config 3 interface 43 altsetting 9 has an invalid endpoint with address 0xB4, skipping
[   61.104379][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[   61.115191][   T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.125612][   T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.137112][   T25] usb 5-1: config 3 interface 43 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[   61.147934][   T20] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   61.157744][   T25] usb 5-1: config 3 interface 43 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   61.168726][   T20] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   61.181750][   T25] usb 5-1: config 3 interface 43 altsetting 9 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[   61.195016][  T837] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[   61.202714][   T20] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   61.212201][   T25] usb 5-1: config 3 interface 211 has no altsetting 0
[   61.219111][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.227316][   T25] usb 5-1: config 3 interface 57 has no altsetting 0
[   61.234292][   T25] usb 5-1: config 3 interface 43 has no altsetting 0
[   61.279910][   T20] pl2303 1-1:1.0: required endpoints missing
[   61.329355][  T853] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   61.399448][   T25] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a74, bcdDevice=14.37
[   61.408553][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.416600][   T25] usb 5-1: Product: ﯤ췜�誦즊俵圕�멛⃾溋쟽،㳿蛴崡�ዄ∼׼颰튟尀浚�苼┪僃羺䲒疱孲ㄧΊⰙ쀲鰦圢톥┚鱈☑鈙힯�骟雹᎗�ଽ䵸Λ텠⿧㻫駘‱뱔�ꬺ﨧剖┳舭褰ჯ劘n船宜饿庨�꒱㲖볠觘౻↊瓞밚樨葙䒌脴ᢉ↬峌뺅ᱞ䊕���쉜籩᳃帓鯚�謸쓨ྗ》Ԍ�Ű
[   61.451036][   T25] usb 5-1: Manufacturer: ã Š
[   61.455650][   T25] usb 5-1: SerialNumber: 椑䩪僋¨僩䮻㷼煰蚇�ㅫ邧궤헗ૣԣ첱螟튭嫡�躱죭ꕛ轞ﾩⷠ�抖䜵��赌푑頨佛暻�힉픵촥驹殜㘴ⱌ◜�潕牧簵ꦼ뀱艹煭꟪土ꢯ⪜㎘꾯⥪茠�즬ཀྵ밀�
[   61.480888][  T849] usb 1-1: USB disconnect, device number 6
[   61.489290][  T837] usb 3-1: device descriptor read/64, error -71
[   61.699329][  T853] usb 2-1: config 72 has too many interfaces: 124, using maximum allowed: 32
[   61.708217][  T853] usb 2-1: config 72 has an invalid descriptor of length 0, skipping remainder of the config
[   61.718705][  T853] usb 2-1: config 72 has 1 interface, different from the descriptor's value: 124
[   61.729556][  T853] usb 2-1: config 72 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   61.811931][ T1061] netlink: 300 bytes leftover after parsing attributes in process `syz.5.143'.
[   61.821089][  T853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   61.830150][  T853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   61.838269][  T853] usb 2-1: SerialNumber: syz
[   61.879430][  T837] usb 3-1: device descriptor read/64, error -71
[   61.900793][ T1061] EXT4-fs (loop5): invalid inodes per group: 0
[   61.900793][ T1061] 
[   61.999378][  T837] usb usb3-port1: attempt power cycle
[   62.161882][ T1077] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[   62.171747][ T1077] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[   62.171747][ T1077] 
[   62.181541][ T1077] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   62.190174][  T853] usb 2-1: bad CDC descriptors
[   62.191468][ T1077] EXT4-fs warning (device loop5): empty_inline_dir:1865: bad inline directory (dir #12) - no `..'
[   62.206076][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.149'.
[   62.279373][  T838] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   62.397438][   T20] usb 2-1: USB disconnect, device number 8
[   62.409663][  T837] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[   62.479339][  T835] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   62.519397][  T838] usb 1-1: Using ep0 maxpacket: 8
[   62.579473][  T837] usb 3-1: device descriptor read/8, error -71
[   62.679362][  T838] usb 1-1: unable to get BOS descriptor or descriptor too short
[   62.759524][  T838] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[   62.839360][  T835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64
[   62.850248][  T837] usb 3-1: device descriptor read/8, error -71
[   62.856449][  T835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   62.866112][  T835] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   62.929385][  T838] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   62.938718][  T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.947109][  T838] usb 1-1: Product: syz
[   62.951496][  T835] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.960608][  T838] usb 1-1: Manufacturer: syz
[   62.965201][  T838] usb 1-1: SerialNumber: syz
[   62.969999][  T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   62.977981][  T835] usb 6-1: SerialNumber: syz
[   63.019807][  T835] cdc_ether: probe of 6-1:1.0 failed with error -22
[   63.220732][ T1092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.149'.
[   63.230666][   T25] usb 5-1: USB disconnect, device number 8
[   63.237164][ T1089] EXT4-fs warning (device loop5): empty_inline_dir:1865: bad inline directory (dir #12) - no `..'
[   63.240291][ T1094] udc-core: couldn't find an available UDC or it's busy
[   63.255656][ T1094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   63.267014][  T853] usb 6-1: USB disconnect, device number 2
[   63.339328][  T837] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   63.429358][  T837] usb 3-1: Using ep0 maxpacket: 16
[   63.589341][  T837] usb 3-1: unable to get BOS descriptor or descriptor too short
[   63.599416][   T25] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   63.669368][  T837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 73, changing to 10
[   63.680561][  T837] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   63.699375][  T838] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   63.707618][  T838] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   63.716094][  T838] usb 1-1: USB disconnect, device number 7
[   63.737518][ T1096] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   63.782373][ T1098] cgroup: fork rejected by pids controller in /syz1
[   63.837552][   T24] kauditd_printk_skb: 29 callbacks suppressed
[   63.837563][   T24] audit: type=1400 audit(1791786223.910:324): avc:  denied  { read write } for  pid=1134 comm="syz.5.154" name="report_desc" dev="configfs" ino=18127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   63.867733][   T24] audit: type=1400 audit(1791786223.910:325): avc:  denied  { open } for  pid=1134 comm="syz.5.154" path="/8/config/usb_gadget/g1/functions/hid.usb0/report_desc" dev="configfs" ino=18127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   63.879344][  T837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.894467][   T24] audit: type=1400 audit(1791786223.920:326): avc:  denied  { create } for  pid=1134 comm="syz.5.154" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[   63.926011][  T837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.942848][  T837] usb 3-1: Product: syz
[   63.949542][  T837] usb 3-1: Manufacturer: �存洄購樫誔햓怙ᘼ㣭��긤첚줚ⵚ皠䎢�䟈�猫⒜೼�㹉�톜꧶�밟춘朷﫵탼뒗溎嚀⦘轾⭊浉�嚡힦篂頿�砯켽覛ꥴᱣ⊣唻ⷘⸯṅ櫘羉仲䖽ە�K
[   63.989359][   T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   64.005733][  T837] usb 3-1: SerialNumber: syz
[   64.010531][   T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.027032][   T25] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   64.045840][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[   64.052610][   T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   64.066457][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.078417][   T25] usb 5-1: config 0 descriptor??
[   64.109837][ T1145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   64.128057][ T1145] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.140207][ T1145] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.156: corrupted xattr block 33
[   64.152098][ T1145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   64.162405][ T1145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=1145 comm=syz.1.156
[   64.186340][   T24] audit: type=1400 audit(1791786224.260:327): avc:  denied  { connect } for  pid=1150 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.209718][   T24] audit: type=1400 audit(1791786224.260:328): avc:  denied  { write } for  pid=1150 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.239799][   T24] audit: type=1326 audit(1791786224.310:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   64.294875][   T24] audit: type=1326 audit(1791786224.310:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   64.335720][   T24] audit: type=1326 audit(1791786224.350:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   64.360812][   T24] audit: type=1326 audit(1791786224.360:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   64.385868][  T837] cdc_ncm 3-1:1.0: bind() failure
[   64.394322][  T837] cdc_ncm 3-1:1.1: bind() failure
[   64.400344][   T24] audit: type=1326 audit(1791786224.360:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   64.439422][  T837] usb 3-1: USB disconnect, device number 14
[   64.581190][   T25] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.0004/input/input7
[   64.681541][   T25] lenovo 0003:17EF:6047.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[   64.685948][  T300] Bluetooth: hci0: Frame reassembly failed (-84)
[   64.769786][ T1153] F2FS-fs (loop0): Zoned block device path is missing
[   64.781041][ T1153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   64.790850][ T1153] F2FS-fs (loop0): invalid crc value
[   64.798421][ T1153] F2FS-fs (loop0): Found nat_bits in checkpoint
[   64.846276][ T1153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   64.854812][ T1153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   64.890052][ T1182] EXT4-fs (loop2): Test dummy encryption mode enabled
[   64.904335][ T1182] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #11: comm syz.2.163: casefold flag without casefold feature
[   64.917579][ T1153] 9pnet: Insufficient options for proto=fd
[   64.917833][ T1182] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.163: couldn't read orphan inode 11 (err -117)
[   64.923859][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[   64.935851][ T1182] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue
[   65.311041][ T1192] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   65.340039][ T1192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.163: bg 0: block 7: invalid block bitmap
[   66.049138][  T853] usb 5-1: USB disconnect, device number 9
[   66.196951][ T1210] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   66.209932][ T1210] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[   66.729309][  T853] Bluetooth: hci0: command 0x1003 tx timeout
[   66.759888][ T1164] Bluetooth: hci0: sending frame failed (-49)
[   67.144496][ T1217] overlayfs: filesystem on './file0' not supported as upperdir
[   67.163925][ T1220] xt_CT: No such helper "netbios-ns"
[   67.200732][ T1224] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue
[   67.309724][ T1228] exfat: Unknown parameter '
'
[   67.371657][ T1237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'.
[   67.380618][ T1237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'.
[   67.444251][ T1242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.451487][ T1242] IPv6: NLM_F_CREATE should be set when creating new route
[   67.458712][ T1242] IPv6: NLM_F_CREATE should be set when creating new route
[   67.571706][ T1243] EXT4-fs (loop0): Unsupported encryption level 1
[   68.091396][ T1248] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d)
[   68.103650][ T1248] exFAT-fs (loop4): failed to load alloc-bitmap
[   68.109924][ T1248] exFAT-fs (loop4): failed to recognize exfat type
[   68.240236][  T516] print_req_error: 31 callbacks suppressed
[   68.240251][  T516] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   68.260337][  T381] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   68.271764][   T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   68.289051][  T515] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   68.302494][  T393] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   68.315441][  T517] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   68.346427][  T515] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   68.357630][  T381] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   68.369180][  T393] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   68.381595][  T517] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   68.393038][ T1258] ip_tables: iptables: counters copy to user failed while replacing table
[   68.419171][  T516] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   68.436438][  T515] buffer_io_error: 17 callbacks suppressed
[   68.436448][  T515] Buffer I/O error on dev loop4p4, logical block 1, async page read
[   68.450553][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   68.458599][  T393] Buffer I/O error on dev loop4p5, logical block 1, async page read
[   68.466965][  T517] Buffer I/O error on dev loop4p6, logical block 1, async page read
[   68.479325][    C0] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   68.493638][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   68.514927][  T516] Buffer I/O error on dev loop4p1, logical block 1, async page read
[   68.526528][ T1264] netlink: 'syz.0.182': attribute type 16 has an invalid length.
[   68.535618][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   68.543765][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   68.549471][ T1264] netlink: 'syz.0.182': attribute type 17 has an invalid length.
[   68.552027][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   68.568669][ T1264] device lo entered promiscuous mode
[   68.575140][ T1264] device tunl0 entered promiscuous mode
[   68.589370][   T25] usb 3-1: Using ep0 maxpacket: 32
[   68.590849][ T1264] device gre0 entered promiscuous mode
[   68.600981][ T1264] device gretap0 entered promiscuous mode
[   68.607802][ T1264] device erspan0 entered promiscuous mode
[   68.615019][ T1264] device ip_vti0 entered promiscuous mode
[   68.622328][ T1264] device sit0 entered promiscuous mode
[   68.629102][ T1264] device ip6tnl0 entered promiscuous mode
[   68.636038][ T1264] device ip6gre0 entered promiscuous mode
[   68.642808][ T1264] device syz_tun entered promiscuous mode
[   68.649896][ T1264] device ip6gretap0 entered promiscuous mode
[   68.656859][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.664091][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.671736][ T1264] device bridge0 entered promiscuous mode
[   68.678597][ T1264] device dummy0 entered promiscuous mode
[   68.685366][ T1264] device veth0 entered promiscuous mode
[   68.707674][ T1264] device veth1 entered promiscuous mode
[   68.714449][ T1264] device wg0 entered promiscuous mode
[   68.720851][ T1264] device wg1 entered promiscuous mode
[   68.727022][ T1264] device wg2 entered promiscuous mode
[   68.733078][ T1264] device veth0_to_bridge entered promiscuous mode
[   68.741266][ T1264] device veth1_to_bridge entered promiscuous mode
[   68.749127][ T1264] device veth0_to_bond entered promiscuous mode
[   68.756467][ T1264] device bond_slave_0 entered promiscuous mode
[   68.762995][ T1264] device veth1_to_bond entered promiscuous mode
[   68.769354][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[   68.770327][ T1264] device bond_slave_1 entered promiscuous mode
[   68.783231][ T1264] device veth0_to_team entered promiscuous mode
[   68.790020][ T1264] device team_slave_0 entered promiscuous mode
[   68.796236][ T1264] device veth1_to_team entered promiscuous mode
[   68.803010][ T1264] device team_slave_1 entered promiscuous mode
[   68.809302][  T837] Bluetooth: hci0: command 0x1001 tx timeout
[   68.815422][ T1164] Bluetooth: hci0: sending frame failed (-49)
[   68.815603][ T1264] device veth0_to_batadv entered promiscuous mode
[   68.828563][ T1264] device batadv_slave_0 entered promiscuous mode
[   68.835570][ T1264] device veth1_to_batadv entered promiscuous mode
[   68.842649][ T1264] device batadv_slave_1 entered promiscuous mode
[   68.849559][ T1264] device xfrm0 entered promiscuous mode
[   68.855524][ T1264] device veth0_to_hsr entered promiscuous mode
[   68.862469][ T1264] device hsr_slave_0 entered promiscuous mode
[   68.868987][ T1264] device veth1_to_hsr entered promiscuous mode
[   68.875828][ T1264] device hsr_slave_1 entered promiscuous mode
[   68.881996][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.892103][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 53
[   68.892109][ T1264] device veth1_virt_wifi entered promiscuous mode
[   68.908401][ T1264] device veth0_virt_wifi entered promiscuous mode
[   68.915780][ T1264] device veth1_vlan entered promiscuous mode
[   68.923717][ T1264] device vlan0 entered promiscuous mode
[   68.929500][ T1264] device vlan1 entered promiscuous mode
[   68.935747][ T1264] device veth0_macvtap entered promiscuous mode
[   68.942655][ T1264] device macsec0 entered promiscuous mode
[   69.079396][  T851] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   69.079441][   T25] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[   69.097133][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.105167][   T25] usb 3-1: Product: syz
[   69.119301][   T25] usb 3-1: Manufacturer: syz
[   69.123932][   T25] usb 3-1: SerialNumber: syz
[   69.149449][ T1252] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   69.369422][  T851] usb 5-1: too many configurations: 195, using maximum allowed: 8
[   69.378277][   T24] kauditd_printk_skb: 32 callbacks suppressed
[   69.378286][   T24] audit: type=1400 audit(1791786229.450:366): avc:  denied  { read } for  pid=1251 comm="syz.2.179" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   69.410859][   T24] audit: type=1400 audit(1791786229.450:367): avc:  denied  { open } for  pid=1251 comm="syz.2.179" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   69.539423][  T851] usb 5-1: unable to read config index 0 descriptor/start: -61
[   69.548318][  T851] usb 5-1: can't read configurations, error -61
[   69.605443][ T1306] netlink: 'syz.1.192': attribute type 12 has an invalid length.
[   69.633701][   T25] usb 3-1: USB disconnect, device number 15
[   69.699302][  T851] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   69.839676][  T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   69.962575][ T1309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'.
[   69.972674][ T1309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'.
[   69.979458][  T851] usb 5-1: too many configurations: 195, using maximum allowed: 8
[   70.002622][   T24] audit: type=1400 audit(1791786230.080:368): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   70.100443][ T1324] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d)
[   70.109493][  T851] usb 5-1: unable to read config index 0 descriptor/start: -61
[   70.120172][  T851] usb 5-1: can't read configurations, error -61
[   70.126496][  T851] usb usb5-port1: attempt power cycle
[   70.153667][   T24] audit: type=1400 audit(1791786230.230:369): avc:  denied  { write } for  pid=1326 comm="syz.0.196" name="mcfilter6" dev="proc" ino=4026532500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   70.219437][ T1332] syz.0.198 (1332): attempted to duplicate a private mapping with mremap.  This is not supported.
[   70.257194][   T24] audit: type=1400 audit(1791786230.330:370): avc:  denied  { create } for  pid=1333 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   70.619301][  T851] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   70.749362][  T851] usb 5-1: too many configurations: 195, using maximum allowed: 8
[   70.869383][  T851] usb 5-1: unable to read config index 0 descriptor/start: -61
[   70.879058][  T851] usb 5-1: can't read configurations, error -61
[   70.889292][  T837] Bluetooth: hci0: command 0x1009 tx timeout
[   71.022462][ T1359] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   71.031736][  T851] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   71.041080][ T1359] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   71.055788][ T1359] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.201: bg 0: block 248: padding at end of block bitmap is not set
[   71.070401][ T1359] Quota error (device loop0): write_blk: dquota write failed
[   71.077884][ T1359] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   71.087823][ T1359] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.201: Failed to acquire dquot type 1
[   71.099576][ T1359] EXT4-fs (loop0): 1 truncate cleaned up
[   71.105221][ T1359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   71.119819][   T24] audit: type=1400 audit(1791786231.200:371): avc:  denied  { read } for  pid=1358 comm="syz.0.201" path="socket:[19576]" dev="sockfs" ino=19576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.179358][  T851] usb 5-1: too many configurations: 195, using maximum allowed: 8
[   71.309671][  T851] usb 5-1: unable to read config index 0 descriptor/start: -61
[   71.317372][  T851] usb 5-1: can't read configurations, error -61
[   71.326012][  T851] usb usb5-port1: unable to enumerate USB device
[   71.449307][  T849] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   71.803285][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'.
[   71.820022][ T1374] device vlan2 entered promiscuous mode
[   71.825960][  T849] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[   71.826844][ T1374] device gretap0 entered promiscuous mode
[   71.840985][  T849] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[   71.851378][  T849] usb 1-1: config 0 has no interface number 0
[   71.945219][ T1379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'.
[   72.001333][   T24] audit: type=1400 audit(1791786232.080:372): avc:  denied  { setopt } for  pid=1383 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.020864][  T849] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[   72.030059][  T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.038093][  T849] usb 1-1: Product: syz
[   72.042353][  T849] usb 1-1: Manufacturer: syz
[   72.046996][  T849] usb 1-1: SerialNumber: syz
[   72.055129][  T849] usb 1-1: config 0 descriptor??
[   72.173301][   T24] audit: type=1400 audit(1791786232.250:373): avc:  denied  { connect } for  pid=1388 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   72.520487][ T1365] udc-core: couldn't find an available UDC or it's busy
[   72.520860][ T1391] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   72.536033][ T1391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   72.541846][ T1365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   72.545165][ T1391] F2FS-fs (loop4): invalid crc value
[   72.568163][ T1391] F2FS-fs (loop4): Found nat_bits in checkpoint
[   72.614430][ T1391] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   72.621513][ T1391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   73.083551][ T1415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'.
[   73.153564][ T1419] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   73.180974][ T1419] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue
[   73.191516][ T1419] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.286094][ T1427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.216'.
[   73.375625][ T1427] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[   73.699525][ T1440] configfs: Unknown parameter 'data_err'
[   73.774255][  T515] print_req_error: 4 callbacks suppressed
[   73.774270][  T515] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   73.781761][  T517] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   73.792442][  T512] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   73.803550][  T393] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   73.814370][  T515] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.830098][  T393] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.838539][  T381] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   73.847370][  T393] Buffer I/O error on dev loop4p4, logical block 1, async page read
[   73.858769][  T512] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.869409][  T517] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.877547][  T512] Buffer I/O error on dev loop4p6, logical block 1, async page read
[   73.888703][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   73.904781][  T381] blk_update_request: I/O error, dev loop4, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.909410][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   73.916226][  T381] Buffer I/O error on dev loop4p1, logical block 1, async page read
[   73.923878][  T517] Buffer I/O error on dev loop4p5, logical block 1, async page read
[   73.933406][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   73.947975][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   73.956433][  T515] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   74.043773][  T849] uvcvideo: Found UVC 0.00 device syz (046d:0823)
[   74.050303][  T849] uvcvideo: No valid video chain found.
[   74.058177][  T849] usb 1-1: USB disconnect, device number 8
[   74.153988][ T1450] hub 5-0:1.0: USB hub found
[   74.158780][ T1450] hub 5-0:1.0: 1 port detected
[   74.165333][ T1451] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.221' sets config #1
[   74.431250][  T381] Buffer I/O error on dev loop4p3, logical block 0, async page read
[   74.549648][ T1463] exfat: Deprecated parameter 'namecase'
[   74.595313][ T1463] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[   74.634784][ T1463] incfs: ino conflict with backing FS 1
[   74.659418][   T24] kauditd_printk_skb: 7 callbacks suppressed
[   74.659429][   T24] audit: type=1400 audit(1791786234.740:381): avc:  denied  { remove_name } for  pid=283 comm="syz-executor" name="file0" dev="loop2" ino=1048671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.725337][   T24] audit: type=1400 audit(1791786234.770:382): avc:  denied  { unlink } for  pid=283 comm="syz-executor" name="file0" dev="loop2" ino=1048671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   74.791996][   T24] audit: type=1400 audit(1791786234.770:383): avc:  denied  { rmdir } for  pid=283 comm="syz-executor" name=".index" dev="loop2" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.887773][ T1469] FAT-fs (loop5): bogus number of FAT sectors
[   74.889630][ T1472] ip_tables: iptables: counters copy to user failed while replacing table
[   74.896357][ T1469] FAT-fs (loop5): Can't find a valid FAT filesystem
[   75.064441][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.099394][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.106835][ T1474] device bridge_slave_0 entered promiscuous mode
[   75.161555][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.168604][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.192257][ T1474] device bridge_slave_1 entered promiscuous mode
[   75.251928][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.259016][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.266300][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.273332][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.294266][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.302947][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.311401][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.329922][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.338164][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.345231][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.353523][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.361953][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.369005][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.377632][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.385663][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.400022][    T7] device veth1_macvtap left promiscuous mode
[   75.406154][    T7] device veth0_vlan left promiscuous mode
[   75.538041][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.570294][ T1474] device veth0_vlan entered promiscuous mode
[   75.577992][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.588125][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.618307][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.634403][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.659498][ T1474] device veth1_macvtap entered promiscuous mode
[   75.692969][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.709853][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.746898][   T24] audit: type=1400 audit(1791786235.820:384): avc:  denied  { mount } for  pid=1474 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   75.819027][   T24] audit: type=1400 audit(1791786235.880:385): avc:  denied  { map } for  pid=1483 comm="syz.4.233" path="socket:[20908]" dev="sockfs" ino=20908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   75.820619][ T1484] FAULT_INJECTION: forcing a failure.
[   75.820619][ T1484] name failslab, interval 1, probability 0, space 0, times 1
[   75.855596][ T1484] CPU: 1 PID: 1484 Comm: syz.4.233 Not tainted syzkaller #0
[   75.862886][ T1484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   75.872952][ T1484] Call Trace:
[   75.876253][ T1484]  __dump_stack+0x21/0x24
[   75.880592][ T1484]  dump_stack_lvl+0x1a7/0x208
[   75.885269][ T1484]  ? thaw_kernel_threads+0x220/0x220
[   75.890553][ T1484]  ? show_regs_print_info+0x18/0x18
[   75.895747][ T1484]  dump_stack+0x15/0x1c
[   75.899899][ T1484]  should_fail+0x3ab/0x500
[   75.904317][ T1484]  ? security_file_alloc+0x33/0x120
[   75.909519][ T1484]  __should_failslab+0xa4/0xe0
[   75.914295][ T1484]  should_failslab+0x9/0x20
[   75.918807][ T1484]  kmem_cache_alloc+0x3d/0x2d0
[   75.923572][ T1484]  ? __alloc_file+0x28/0x320
[   75.928146][ T1484]  security_file_alloc+0x33/0x120
[   75.933207][ T1484]  __alloc_file+0xb5/0x320
[   75.937600][ T1484]  alloc_empty_file+0x97/0x180
[   75.942340][ T1484]  path_openat+0xf4/0x3040
[   75.946738][ T1484]  ? __kasan_slab_alloc+0xc9/0xe0
[   75.951746][ T1484]  ? __kasan_slab_alloc+0xb7/0xe0
[   75.956749][ T1484]  ? kmem_cache_alloc+0x15a/0x2d0
[   75.961752][ T1484]  ? getname_flags+0xba/0x510
[   75.966408][ T1484]  ? getname+0x19/0x20
[   75.970453][ T1484]  ? do_sys_openat2+0xde/0x750
[   75.975193][ T1484]  ? __x64_sys_openat+0x136/0x160
[   75.980193][ T1484]  ? do_syscall_64+0x31/0x40
[   75.984762][ T1484]  ? do_filp_open+0x400/0x400
[   75.989415][ T1484]  do_filp_open+0x1df/0x400
[   75.993897][ T1484]  ? vfs_tmpfile+0x2c0/0x2c0
[   75.998469][ T1484]  ? get_unused_fd_flags+0x92/0xa0
[   76.003554][ T1484]  do_sys_openat2+0x19f/0x750
[   76.008206][ T1484]  ? do_sys_open+0xe0/0xe0
[   76.012602][ T1484]  ? __kasan_check_write+0x14/0x20
[   76.017692][ T1484]  ? switch_fpu_return+0x19c/0x330
[   76.022788][ T1484]  ? fpu__clear_all+0x20/0x20
[   76.027442][ T1484]  __x64_sys_openat+0x136/0x160
[   76.032271][ T1484]  do_syscall_64+0x31/0x40
[   76.036666][ T1484]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   76.042543][ T1484] RIP: 0033:0x7fde330821d9
[   76.046936][ T1484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.066523][ T1484] RSP: 002b:00007fde31adb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   76.074919][ T1484] RAX: ffffffffffffffda RBX: 00007fde33309fa0 RCX: 00007fde330821d9
[   76.082871][ T1484] RDX: 0000000000101002 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[   76.090822][ T1484] RBP: 00007fde33119888 R08: 0000000000000000 R09: 0000000000000000
[   76.098771][ T1484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.106723][ T1484] R13: 00007fde3330a038 R14: 00007fde33309fa0 R15: 00007fff93cdb3d8
[   76.160705][ T1500] fuse: Unknown parameter '0x0000000000000003'
[   76.170721][ T1491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   76.242557][ T1491] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.234: invalid indirect mapped block 32768 (level 2)
[   76.270087][ T1491] EXT4-fs (loop4): 1 orphan inode deleted
[   76.283038][ T1491] EXT4-fs (loop4): 1 truncate cleaned up
[   76.294884][ T1491] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,data_err=abort,inode_readahead_blks=0x0000000000000100,noload,nolazytime,,errors=continue
[   76.434309][ T1478] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[   76.459302][ T1478] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   76.467647][ T1478] F2FS-fs (loop5): Test dummy encryption mode enabled
[   76.475620][ T1478] F2FS-fs (loop5): invalid crc value
[   76.503957][ T1478] F2FS-fs (loop5): Found nat_bits in checkpoint
[   76.570949][ T1478] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   76.593657][ T1478] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[   76.607382][ T1478] F2FS-fs (loop5): Start checkpoint disabled!
[   76.628220][ T1478] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   76.637469][ T1478] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   76.994321][   T24] audit: type=1400 audit(1791786237.070:386): avc:  denied  { mounton } for  pid=1513 comm="syz.6.236" path="/1/file2/dev" dev="loop6" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   77.019164][ T1514] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[   77.039984][ T1514] FAT-fs (loop6): Filesystem has been set read-only
[   77.053183][ T1474] FAT-fs (loop6): error, corrupted directory (invalid entries)
[   77.060993][ T1474] FAT-fs (loop6): error, corrupted directory (invalid entries)
[   77.102416][ T1523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   77.360494][ T1523] netlink: 'syz.0.241': attribute type 29 has an invalid length.
[   77.368348][   T24] audit: type=1400 audit(1791786237.440:387): avc:  denied  { sys_module } for  pid=1522 comm="syz.0.241" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   77.408763][ T1523] netlink: 'syz.0.241': attribute type 29 has an invalid length.
[   77.660042][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.667148][ T1541] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.674782][ T1541] device bridge_slave_0 entered promiscuous mode
[   77.684175][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.691550][ T1541] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.699158][ T1541] device bridge_slave_1 entered promiscuous mode
[   77.710352][ T1544] EXT4-fs (loop0): Ignoring removed oldalloc option
[   77.719307][   T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   77.719392][ T1544] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   77.756320][ T1544] EXT4-fs (loop0): 1 truncate cleaned up
[   77.762223][ T1544] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue
[   77.809297][   T24] audit: type=1400 audit(1791786237.880:388): avc:  denied  { map } for  pid=1543 comm="syz.0.249" path="/54/bus/blkio.bfq.empty_time" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   77.895922][   T24] audit: type=1400 audit(1791786237.970:389): avc:  denied  { setattr } for  pid=1556 comm="syz.0.251" name="/" dev="incremental-fs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   77.918444][ T1553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   77.928182][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.936505][ T1553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'.
[   77.945581][ T1551] exfat: Unknown parameter '0xffffffffffffffff'
[   77.946125][   T24] audit: type=1400 audit(1791786238.000:390): avc:  denied  { setattr } for  pid=1556 comm="syz.0.251" name="trace_pipe" dev="tracefs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   77.952288][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.982154][   T25] usb 5-1: Using ep0 maxpacket: 32
[   77.988727][   T48] device bridge_slave_1 left promiscuous mode
[   77.994959][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.002482][   T48] device bridge_slave_0 left promiscuous mode
[   78.008596][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.016813][   T48] device veth1_macvtap left promiscuous mode
[   78.022950][   T48] device veth0_vlan left promiscuous mode
[   78.074127][ T1551] EXT4-fs (loop5): Unrecognized mount option "euid>00000000000000000000" or missing value
[   78.124557][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.139326][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[   78.151689][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.161184][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.168224][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.176000][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.184814][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.193192][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.200263][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.207783][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.218834][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.226965][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.229332][   T25] usb 5-1: config 178 has an invalid interface number: 183 but max is 0
[   78.237981][ T1562] device erspan0 entered promiscuous mode
[   78.244000][   T25] usb 5-1: config 178 contains an unexpected descriptor of type 0x2, skipping
[   78.249113][ T1562] device macsec1 entered promiscuous mode
[   78.259991][   T25] usb 5-1: config 178 has no interface number 0
[   78.270350][   T25] usb 5-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023
[   78.281116][ T1562] device erspan0 left promiscuous mode
[   78.288962][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.302376][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.319022][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.327611][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.335097][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.343441][ T1541] device veth0_vlan entered promiscuous mode
[   78.351395][ T1565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.253'.
[   78.355816][ T1541] device veth1_macvtap entered promiscuous mode
[   78.367825][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.377212][ T1565] netlink: 116 bytes leftover after parsing attributes in process `syz.5.253'.
[   78.398524][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.413583][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.430864][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.439520][   T25] usb 5-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27
[   78.440054][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.455930][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.467753][   T25] usb 5-1: Product: syz
[   78.485909][   T25] usb 5-1: Manufacturer: syz
[   78.500554][ T1586] overlayfs: './file0' not a directory
[   78.508342][   T25] usb 5-1: SerialNumber: syz
[   78.539476][ T1534] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.556245][ T1576] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.248: inode has both inline data and extents flags
[   78.586167][ T1576] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.248: couldn't read orphan inode 15 (err -117)
[   78.610724][ T1576] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[   78.735325][ T1606] syz.1.261 uses obsolete (PF_INET,SOCK_PACKET)
[   78.772657][ T1534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'.
[   78.871723][ T1611] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.263: bad orphan inode 15
[   78.881784][ T1611] ext4_test_bit(bit=14, block=5) = 0
[   78.887075][ T1611] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue
[   79.062837][   T25] usb 5-1: USB disconnect, device number 14
[   79.835943][   T24] kauditd_printk_skb: 7 callbacks suppressed
[   79.835955][   T24] audit: type=1326 audit(1791786239.660:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   79.983801][   T24] audit: type=1326 audit(1791786239.660:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.065490][   T24] audit: type=1326 audit(1791786239.660:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.096225][ T1627]  loop4: p1 < > p4
[   80.108871][ T1627] loop4: p4 size 722688 extends beyond EOD, truncated
[   80.171097][   T24] audit: type=1326 audit(1791786239.660:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.208569][   T24] audit: type=1326 audit(1791786239.660:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.237596][   T24] audit: type=1326 audit(1791786239.660:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.263816][   T24] audit: type=1326 audit(1791786239.660:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.289039][   T24] audit: type=1326 audit(1791786239.660:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.324283][   T24] audit: type=1326 audit(1791786239.660:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.381138][   T24] audit: type=1326 audit(1791786239.660:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.4.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde330821d9 code=0x7ffc0000
[   80.461810][ T1668] netlink: 5 bytes leftover after parsing attributes in process `syz.1.271'.
[   80.471710][ T1668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.553336][ T1670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'.
[   80.564886][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.272'.
[   80.688185][ T1698] netlink: 276 bytes leftover after parsing attributes in process `syz.4.278'.
[   80.731736][ T1698] EXT4-fs (loop4): Test dummy encryption mode enabled
[   80.738611][ T1698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   80.749470][ T1698] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.278: bad orphan inode 131083
[   80.760084][ T1698] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000007,test_dummy_encryption=v1,dioread_lock,,errors=continue
[   80.899331][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   81.111826][ T1708] 9pnet: Insufficient options for proto=fd
[   81.117825][ T1708] 9pnet: Insufficient options for proto=fd
[   81.123855][ T1708] 9pnet: Insufficient options for proto=fd
[   81.129846][ T1708] 9pnet: Insufficient options for proto=fd
[   81.136027][ T1708] 9pnet: Insufficient options for proto=fd
[   81.139301][   T25] usb 6-1: Using ep0 maxpacket: 8
[   81.142317][ T1708] 9pnet: Insufficient options for proto=fd
[   81.157529][ T1708] 9pnet: Insufficient options for proto=fd
[   81.164707][ T1708] 9pnet: Insufficient options for proto=fd
[   81.170732][ T1708] 9pnet: Insufficient options for proto=fd
[   81.176652][ T1708] 9pnet: Insufficient options for proto=fd
[   81.183615][ T1708] 9pnet: Insufficient options for proto=fd
[   81.189862][ T1708] 9pnet: Insufficient options for proto=fd
[   81.195885][ T1708] 9pnet: Insufficient options for proto=fd
[   81.201929][ T1708] 9pnet: Insufficient options for proto=fd
[   81.207950][ T1708] 9pnet: Insufficient options for proto=fd
[   81.214347][ T1708] 9pnet: Insufficient options for proto=fd
[   81.220878][ T1708] 9pnet: Insufficient options for proto=fd
[   81.226832][ T1708] 9pnet: Insufficient options for proto=fd
[   81.232986][ T1708] 9pnet: Insufficient options for proto=fd
[   81.239042][ T1708] 9pnet: Insufficient options for proto=fd
[   81.245186][ T1708] 9pnet: Insufficient options for proto=fd
[   81.251625][ T1708] 9pnet: Insufficient options for proto=fd
[   81.257616][ T1708] 9pnet: Insufficient options for proto=fd
[   81.263720][ T1708] 9pnet: Insufficient options for proto=fd
[   81.269716][ T1708] 9pnet: Insufficient options for proto=fd
[   81.275614][ T1708] 9pnet: Insufficient options for proto=fd
[   81.281574][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.281836][ T1708] 9pnet: Insufficient options for proto=fd
[   81.292552][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.298623][ T1708] 9pnet: Insufficient options for proto=fd
[   81.308090][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.314661][ T1708] 9pnet: Insufficient options for proto=fd
[   81.327091][   T25] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[   81.342727][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.357024][   T25] usb 6-1: config 0 descriptor??
[   81.390922][ T1708] 9pnet: Insufficient options for proto=fd
[   81.397754][ T1708] 9pnet: Insufficient options for proto=fd
[   81.410752][ T1708] 9pnet: Insufficient options for proto=fd
[   81.417670][ T1708] 9pnet: Insufficient options for proto=fd
[   81.997164][ T1680] EXT4-fs (loop5): Test dummy encryption mode enabled
[   82.083982][ T1680] EXT4-fs (loop5): Test dummy encryption mode enabled
[   82.111236][ T1680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e0ad, mo2=0002]
[   82.129891][ T1680] System zones: 1-12
[   82.145408][ T1734] xt_hashlimit: size too large, truncated to 1048576
[   82.152851][ T1680] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug,minixdf,nobarrier,min_batch_time=0x0000000000000005,nombcache,min_batch_time=0x0000000000000005,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,
[   82.184960][ T1680] EXT4-fs (loop5): shut down requested (2)
[   82.218944][ T1680] netlink: 'syz.5.275': attribute type 29 has an invalid length.
[   82.409326][   T25] usbhid 6-1:0.0: can't add hid device: -71
[   82.415342][   T25] usbhid: probe of 6-1:0.0 failed with error -71
[   82.437987][   T25] usb 6-1: USB disconnect, device number 3
[   82.449407][ T1719] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   82.689298][ T1719] usb 1-1: Using ep0 maxpacket: 8
[   82.809385][ T1719] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.820621][ T1719] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.833431][ T1719] usb 1-1: config 0 interface 0 has no altsetting 0
[   82.840044][ T1719] usb 1-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00
[   82.849314][ T1719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.857820][ T1719] usb 1-1: config 0 descriptor??
[   82.874584][ T1749] fuse: Bad value for 'fd'
[   84.139996][ T1720] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   84.239953][ T1719] input: HID 0518:0002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0518:0002.0005/input/input8
[   84.351851][ T1719] ezkey 0003:0518:0002.0005: input,hiddev96,hidraw0: USB HID v0.f1 Device [HID 0518:0002] on usb-dummy_hcd.0-1/input0
[   84.456054][ T1768] udc-core: couldn't find an available UDC or it's busy
[   84.463181][ T1768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   84.629350][  T838] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   84.649341][ T1720] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.659532][ T1720] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[   84.669202][ T1720] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[   84.678912][ T1720] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   84.869386][ T1720] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00
[   84.878906][ T1720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.887044][ T1720] usb 6-1: Product: syz
[   84.891480][ T1720] usb 6-1: Manufacturer: syz
[   84.896092][ T1720] usb 6-1: SerialNumber: syz
[   84.940188][ T1720] usb-storage 6-1:1.0: USB Mass Storage device detected
[   84.959339][ T1720] scsi host1: usb-storage 6-1:1.0
[   84.989325][  T838] usb 8-1: config index 0 descriptor too short (expected 34617, got 36)
[   84.998016][  T838] usb 8-1: config 217 has too many interfaces: 67, using maximum allowed: 32
[   85.006988][  T838] usb 8-1: config 217 has an invalid descriptor of length 47, skipping remainder of the config
[   85.017695][  T838] usb 8-1: config 217 has 1 interface, different from the descriptor's value: 67
[   85.028297][  T838] usb 8-1: config 217 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   85.041454][  T838] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   85.050923][  T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.088708][   T24] kauditd_printk_skb: 91 callbacks suppressed
[   85.088720][   T24] audit: type=1326 audit(1791786245.160:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.1.299" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   85.099907][  T838] usbhid 8-1:217.0: couldn't find an input interrupt endpoint
[   85.119948][   T24] audit: type=1326 audit(1791786245.160:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.1.299" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd1daf1d9 code=0x7ffc0000
[   85.153783][  T838] usb 6-1: USB disconnect, device number 4
[   85.300515][   T24] audit: type=1326 audit(1791786245.380:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.7.296" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f0020a1d9 code=0x0
[   85.351557][ T1776] ==================================================================
[   85.359646][ T1776] BUG: KASAN: use-after-free in kobject_get+0x113/0x120
[   85.366561][ T1776] Read of size 1 at addr ffff8881265e483c by task syz.7.296/1776
[   85.374347][ T1776] 
[   85.376678][ T1776] CPU: 1 PID: 1776 Comm: syz.7.296 Not tainted syzkaller #0
[   85.383962][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   85.394104][ T1776] Call Trace:
[   85.397431][ T1776]  __dump_stack+0x21/0x24
[   85.401777][ T1776]  dump_stack_lvl+0x1a7/0x208
[   85.406441][ T1776]  ? show_regs_print_info+0x18/0x18
[   85.411618][ T1776]  ? thaw_kernel_threads+0x220/0x220
[   85.416881][ T1776]  print_address_description+0x7f/0x2c0
[   85.422403][ T1776]  ? kobject_get+0x113/0x120
[   85.426994][ T1776]  kasan_report+0x100/0x140
[   85.431896][ T1776]  ? kobject_get+0x113/0x120
[   85.436723][ T1776]  __asan_report_load1_noabort+0x14/0x20
[   85.442350][ T1776]  kobject_get+0x113/0x120
[   85.446753][ T1776]  device_add+0x331/0xc00
[   85.451087][ T1776]  ? kobject_set_name_vargs+0xca/0x110
[   85.456529][ T1776]  device_create+0x26c/0x300
[   85.461129][ T1776]  ? root_device_unregister+0x80/0x80
[   85.466483][ T1776]  create_function_device+0x60/0x70
[   85.471756][ T1776]  f_midi_alloc_inst+0x1a8/0x380
[   85.476697][ T1776]  usb_get_function_instance+0xe2/0x2f0
[   85.482249][ T1776]  function_make+0x118/0x350
[   85.486834][ T1776]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   85.492860][ T1720] usb 1-1: USB disconnect, device number 9
[   85.493159][ T1776]  ? mutex_trylock+0xb0/0xb0
[   85.503521][ T1776]  ? configfs_mkdir+0x504/0xd90
[   85.508510][ T1776]  configfs_mkdir+0x5d2/0xd90
[   85.513188][ T1776]  ? show_sid+0x1b0/0x1b0
[   85.517512][ T1776]  ? configfs_lookup+0x500/0x500
[   85.522448][ T1776]  ? __lookup_hash+0x122/0x250
[   85.527221][ T1776]  ? security_inode_mkdir+0xbd/0x110
[   85.532503][ T1776]  vfs_mkdir+0x42c/0x600
[   85.536728][ T1776]  do_mkdirat+0x14c/0x340
[   85.541048][ T1776]  __x64_sys_mkdirat+0x7b/0x90
[   85.545791][ T1776]  do_syscall_64+0x31/0x40
[   85.550188][ T1776]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   85.556062][ T1776] RIP: 0033:0x7f8f0020a1d9
[   85.560457][ T1776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.580039][ T1776] RSP: 002b:00007f8efec21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   85.588770][ T1776] RAX: ffffffffffffffda RBX: 00007f8f00492180 RCX: 00007f8f0020a1d9
[   85.596731][ T1776] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c
[   85.604681][ T1776] RBP: 00007f8f002a1888 R08: 0000000000000000 R09: 0000000000000000
[   85.612646][ T1776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.620596][ T1776] R13: 00007f8f00492218 R14: 00007f8f00492180 R15: 00007ffcfef8f348
[   85.628546][ T1776] 
[   85.630861][ T1776] Allocated by task 980:
[   85.635084][ T1776]  __kasan_kmalloc+0xd4/0x100
[   85.639738][ T1776]  kmem_cache_alloc_trace+0x179/0x2e0
[   85.645086][ T1776]  device_create+0x13a/0x300
[   85.649659][ T1776]  gadgets_make+0x816/0xa70
[   85.654151][ T1776]  configfs_mkdir+0x5d2/0xd90
[   85.659089][ T1776]  vfs_mkdir+0x42c/0x600
[   85.663313][ T1776]  do_mkdirat+0x14c/0x340
[   85.667626][ T1776]  __x64_sys_mkdirat+0x7b/0x90
[   85.672479][ T1776]  do_syscall_64+0x31/0x40
[   85.676875][ T1776]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   85.682741][ T1776] 
[   85.685050][ T1776] Freed by task 850:
[   85.688931][ T1776]  kasan_set_track+0x4a/0x70
[   85.693500][ T1776]  kasan_set_free_info+0x23/0x40
[   85.698432][ T1776]  ____kasan_slab_free+0x125/0x160
[   85.703537][ T1776]  __kasan_slab_free+0x11/0x20
[   85.708314][ T1776]  slab_free_freelist_hook+0xc5/0x190
[   85.713939][ T1776]  kfree+0xc0/0x270
[   85.717740][ T1776]  skb_release_data+0x53b/0x690
[   85.722575][ T1776]  consume_skb+0xab/0x1f0
[   85.726883][ T1776]  netlink_broadcast_filtered+0x11ce/0x12c0
[   85.732756][ T1776]  nlmsg_notify+0xe9/0x1a0
[   85.737161][ T1776]  rtnl_notify+0x9a/0xc0
[   85.741394][ T1776]  inet6_rt_notify+0x375/0x480
[   85.746130][ T1776]  fib6_add+0x2174/0x3c60
[   85.750436][ T1776]  ip6_ins_rt+0xd3/0x130
[   85.754749][ T1776]  __ipv6_ifa_notify+0x4df/0xe70
[   85.759661][ T1776]  addrconf_dad_completed+0x18c/0xe30
[   85.765022][ T1776]  addrconf_dad_work+0xc5f/0x1480
[   85.770029][ T1776]  process_one_work+0x6fd/0xbc0
[   85.774865][ T1776]  worker_thread+0xa8e/0x13c0
[   85.779604][ T1776]  kthread+0x324/0x3b0
[   85.783648][ T1776]  ret_from_fork+0x1f/0x30
[   85.788035][ T1776] 
[   85.790343][ T1776] The buggy address belongs to the object at ffff8881265e4800
[   85.790343][ T1776]  which belongs to the cache kmalloc-1k of size 1024
[   85.804384][ T1776] The buggy address is located 60 bytes inside of
[   85.804384][ T1776]  1024-byte region [ffff8881265e4800, ffff8881265e4c00)
[   85.817633][ T1776] The buggy address belongs to the page:
[   85.823259][ T1776] page:ffffea0004997800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1265e0
[   85.833473][ T1776] head:ffffea0004997800 order:3 compound_mapcount:0 compound_pincount:0
[   85.841778][ T1776] flags: 0x4000000000010200(slab|head)
[   85.847224][ T1776] raw: 4000000000010200 ffffea0004999a00 0000000600000006 ffff888100042f00
[   85.855790][ T1776] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   85.864344][ T1776] page dumped because: kasan: bad access detected
[   85.870737][ T1776] page_owner tracks the page as allocated
[   85.876453][ T1776] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 21972139068, free_ts 0
[   85.894566][ T1776]  prep_new_page+0x176/0x190
[   85.899129][ T1776]  get_page_from_freelist+0x225f/0x23f0
[   85.904648][ T1776]  __alloc_pages_nodemask+0x29a/0x640
[   85.909995][ T1776]  new_slab+0x84/0x3f0
[   85.914041][ T1776]  ___slab_alloc+0x2f8/0x4c0
[   85.918607][ T1776]  __slab_alloc+0x63/0xa0
[   85.922913][ T1776]  __kmalloc_track_caller+0x1e4/0x310
[   85.928259][ T1776]  __alloc_skb+0xdc/0x520
[   85.932567][ T1776]  alloc_uevent_skb+0x85/0x240
[   85.937415][ T1776]  kobject_uevent_net_broadcast+0x1a6/0x5a0
[   85.943280][ T1776]  kobject_uevent_env+0x52b/0x700
[   85.948283][ T1776]  kobject_uevent+0x1d/0x30
[   85.952763][ T1776]  netdev_queue_update_kobjects+0x1a7/0x390
[   85.958733][ T1776]  netdev_register_kobject+0x281/0x330
[   85.964188][ T1776]  register_netdevice+0xdae/0x13a0
[   85.969282][ T1776]  __ip_tunnel_create+0x2c7/0x390
[   85.974292][ T1776] page_owner free stack trace missing
[   85.979671][ T1776] 
[   85.981973][ T1776] Memory state around the buggy address:
[   85.987578][ T1776]  ffff8881265e4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   85.995614][ T1776]  ffff8881265e4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   86.003650][ T1776] >ffff8881265e4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   86.011702][ T1776]                                         ^
[   86.017833][ T1776]  ffff8881265e4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   86.026001][ T1776]  ffff8881265e4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   86.034043][ T1776] ==================================================================
[   86.042083][ T1776] Disabling lock debugging due to kernel taint
[   86.048788][ T1776] ------------[ cut here ]------------
[   86.054443][ T1776] kobject: '' (ffff8881265e4800): is not initialized, yet kobject_get() is being called.
[   86.070750][ T1776] WARNING: CPU: 0 PID: 1776 at lib/kobject.c:666 kobject_get+0x7c/0x120
[   86.080223][ T1776] Modules linked in:
[   86.088002][ T1776] CPU: 0 PID: 1776 Comm: syz.7.296 Tainted: G    B             syzkaller #0
[   86.097463][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   86.107679][ T1776] RIP: 0010:kobject_get+0x7c/0x120
[   86.113028][ T1776] Code: 0a ff 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 56 40 45 ff 48 8b 33 48 c7 c7 80 a8 41 85 48 89 da e8 04 b1 1f 02 <0f> 0b eb 0c e8 ab bb 0a ff eb 4c e8 a4 bb 0a ff 4c 8d 73 38 4c 89
[   86.132721][ T1776] RSP: 0018:ffffc90000f2f970 EFLAGS: 00010246
[   86.138869][ T1776] RAX: a546f41dd0923c00 RBX: ffff8881265e4800 RCX: ffff88812f14bc00
[   86.146943][ T1776] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   86.155006][ T1776] RBP: ffffc90000f2f988 R08: ffff8881f7052fff R09: 1ffff1103ee0a5ff
[   86.163046][ T1776] R10: dffffc0000000000 R11: ffffed103ee0a600 R12: 0000000000000000
[   86.171332][ T1776] R13: ffff88810f416068 R14: 0000000000000000 R15: dffffc0000000000
[   86.183963][ T1776] FS:  00007f8efec216c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   86.193033][ T1776] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.199701][ T1776] CR2: 00007f9fbc31fff8 CR3: 000000013a52f000 CR4: 00000000003506b0
[   86.207875][ T1776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   86.216056][ T1776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   86.224232][ T1776] Call Trace:
[   86.227596][ T1776]  device_add+0x331/0xc00
[   86.232032][ T1776]  ? kobject_set_name_vargs+0xca/0x110
[   86.237548][ T1776]  device_create+0x26c/0x300
[   86.242202][ T1776]  ? root_device_unregister+0x80/0x80
[   86.247597][ T1776]  create_function_device+0x60/0x70
[   86.253127][ T1776]  f_midi_alloc_inst+0x1a8/0x380
[   86.258076][ T1776]  usb_get_function_instance+0xe2/0x2f0
[   86.267151][ T1776]  function_make+0x118/0x350
[   86.271991][ T1776]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   86.278433][ T1776]  ? mutex_trylock+0xb0/0xb0
[   86.283251][ T1776]  ? configfs_mkdir+0x504/0xd90
[   86.288145][ T1776]  configfs_mkdir+0x5d2/0xd90
[   86.293024][ T1776]  ? show_sid+0x1b0/0x1b0
[   86.297611][ T1776]  ? configfs_lookup+0x500/0x500
[   86.302797][ T1776]  ? __lookup_hash+0x122/0x250
[   86.307588][ T1776]  ? security_inode_mkdir+0xbd/0x110
[   86.313274][ T1776]  vfs_mkdir+0x42c/0x600
[   86.317519][ T1776]  do_mkdirat+0x14c/0x340
[   86.321858][ T1776]  __x64_sys_mkdirat+0x7b/0x90
[   86.328771][ T1776]  do_syscall_64+0x31/0x40
[   86.333602][ T1776]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   86.339519][ T1776] RIP: 0033:0x7f8f0020a1d9
[   86.343921][ T1776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.363628][ T1776] RSP: 002b:00007f8efec21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   86.372088][ T1776] RAX: ffffffffffffffda RBX: 00007f8f00492180 RCX: 00007f8f0020a1d9
[   86.380079][ T1776] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c
[   86.388063][ T1776] RBP: 00007f8f002a1888 R08: 0000000000000000 R09: 0000000000000000
[   86.396069][ T1776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.404074][ T1776] R13: 00007f8f00492218 R14: 00007f8f00492180 R15: 00007ffcfef8f348
[   86.412061][ T1776] ---[ end trace b4f1cac1462b5a85 ]---
[   86.417540][ T1776] ------------[ cut here ]------------
[   86.423006][ T1776] kobject: '' (ffff8881265e4800): is not initialized, yet kobject_get() is being called.
[   86.433510][ T1776] WARNING: CPU: 1 PID: 1776 at lib/kobject.c:666 kobject_add_internal+0x12e/0xde0
[   86.442812][ T1776] Modules linked in:
[   86.447013][ T1776] CPU: 1 PID: 1776 Comm: syz.7.296 Tainted: G    B   W         syzkaller #0
[   86.455698][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   86.465782][ T1776] RIP: 0010:kobject_add_internal+0x12e/0xde0
[   86.471793][ T1776] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 d5 27 45 ff 49 8b 34 24 48 c7 c7 80 a8 41 85 4c 89 e2 e8 82 98 1f 02 <0f> 0b e9 04 01 00 00 e8 26 a3 0a ff b8 fe ff ff ff e9 b0 09 00 00
[   86.491804][ T1776] RSP: 0018:ffffc90000f2f7d8 EFLAGS: 00010246
[   86.497879][ T1776] RAX: a546f41dd0923c00 RBX: ffff888108587e00 RCX: ffff88812f14bc00
[   86.505978][ T1776] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   86.515012][ T1776] RBP: ffffc90000f2f830 R08: ffff8881f7152fff R09: 1ffff1103ee2a5ff
[   86.523088][ T1776] R10: dffffc0000000000 R11: ffffed103ee2a600 R12: ffff8881265e4800
[   86.531085][ T1776] R13: ffff888108587e18 R14: 0000000000000000 R15: 1ffff110210b0fc0
[   86.539220][ T1776] FS:  00007f8efec216c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   86.548536][ T1776] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.555517][ T1776] CR2: 00007fde332d52f8 CR3: 000000013a52f000 CR4: 00000000003506a0
[   86.563627][ T1776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   86.571934][ T1776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   86.579918][ T1776] Call Trace:
[   86.583214][ T1776]  ? kobject_set_name_vargs+0xca/0x110
[   86.588663][ T1776]  kobject_add+0x165/0x230
[   86.593210][ T1776]  ? kobject_init+0x1d0/0x1d0
[   86.597881][ T1776]  ? __kasan_check_write+0x14/0x20
[   86.603174][ T1776]  ? kobject_init+0x83/0x1d0
[   86.607762][ T1776]  get_device_parent+0x3a6/0x410
[   86.612722][ T1776]  device_add+0x349/0xc00
[   86.617052][ T1776]  ? kobject_set_name_vargs+0xca/0x110
[   86.623041][ T1776]  device_create+0x26c/0x300
[   86.627630][ T1776]  ? root_device_unregister+0x80/0x80
[   86.633014][ T1776]  create_function_device+0x60/0x70
[   86.638618][ T1776]  f_midi_alloc_inst+0x1a8/0x380
[   86.644189][ T1776]  usb_get_function_instance+0xe2/0x2f0
[   86.650213][ T1776]  function_make+0x118/0x350
[   86.654812][ T1776]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   86.661160][ T1776]  ? mutex_trylock+0xb0/0xb0
[   86.665850][ T1776]  ? configfs_mkdir+0x504/0xd90
[   86.670762][ T1776]  configfs_mkdir+0x5d2/0xd90
[   86.675469][ T1776]  ? show_sid+0x1b0/0x1b0
[   86.679808][ T1776]  ? configfs_lookup+0x500/0x500
[   86.685200][ T1776]  ? __lookup_hash+0x122/0x250
[   86.689994][ T1776]  ? security_inode_mkdir+0xbd/0x110
[   86.695277][ T1776]  vfs_mkdir+0x42c/0x600
[   86.699528][ T1776]  do_mkdirat+0x14c/0x340
[   86.703873][ T1776]  __x64_sys_mkdirat+0x7b/0x90
[   86.708616][ T1776]  do_syscall_64+0x31/0x40
[   86.713082][ T1776]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   86.718966][ T1776] RIP: 0033:0x7f8f0020a1d9
[   86.723396][ T1776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.743019][ T1776] RSP: 002b:00007f8efec21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   86.751442][ T1776] RAX: ffffffffffffffda RBX: 00007f8f00492180 RCX: 00007f8f0020a1d9
[   86.759432][ T1776] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c
[   86.767387][ T1776] RBP: 00007f8f002a1888 R08: 0000000000000000 R09: 0000000000000000
[   86.775373][ T1776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.783359][ T1776] R13: 00007f8f00492218 R14: 00007f8f00492180 R15: 00007ffcfef8f348
[   86.791340][ T1776] ---[ end trace b4f1cac1462b5a86 ]---
[   86.796823][ T1776] general protection fault, probably for non-canonical address 0xdffffc0000001023: 0000 [#1] PREEMPT SMP KASAN
[   86.808509][ T1776] KASAN: probably user-memory-access in range [0x0000000000008118-0x000000000000811f]
[   86.818027][ T1776] CPU: 1 PID: 1776 Comm: syz.7.296 Tainted: G    B   W         syzkaller #0
[   86.826763][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   86.836915][ T1776] RIP: 0010:kobject_add_internal+0x5e3/0xde0
[   86.843488][ T1776] Code: 4c 89 e7 e8 2f 23 45 ff 4d 8b 24 24 4d 85 e4 0f 84 db 00 00 00 49 83 c4 20 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 ff 22 45 ff 49 8b 04 24 48 85 c0 0f
[   86.863523][ T1776] RSP: 0018:ffffc90000f2f7d8 EFLAGS: 00010203
[   86.870154][ T1776] RAX: 0000000000001023 RBX: ffff888108587e00 RCX: dffffc0000000000
[   86.878300][ T1776] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881265e4828
[   86.886308][ T1776] RBP: ffffc90000f2f830 R08: 0000000000000003 R09: 0000000000000004
[   86.894280][ T1776] R10: dffffc0000000000 R11: fffff520001e5eec R12: 000000000000811e
[   86.902243][ T1776] R13: ffff888108587e18 R14: ffffffff8681d180 R15: ffff8881265e4800
[   86.910914][ T1776] FS:  00007f8efec216c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   86.919822][ T1776] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.926382][ T1776] CR2: 00007fde332d52f8 CR3: 000000013a52f000 CR4: 00000000003506a0
[   86.934336][ T1776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   86.942287][ T1776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   86.950238][ T1776] Call Trace:
[   86.953505][ T1776]  kobject_add+0x165/0x230
[   86.957904][ T1776]  ? kobject_init+0x1d0/0x1d0
[   86.962559][ T1776]  ? __kasan_check_write+0x14/0x20
[   86.967672][ T1776]  ? kobject_init+0x83/0x1d0
[   86.972243][ T1776]  get_device_parent+0x3a6/0x410
[   86.977159][ T1776]  device_add+0x349/0xc00
[   86.981470][ T1776]  ? kobject_set_name_vargs+0xca/0x110
[   86.986907][ T1776]  device_create+0x26c/0x300
[   86.991481][ T1776]  ? root_device_unregister+0x80/0x80
[   86.996839][ T1776]  create_function_device+0x60/0x70
[   87.002113][ T1776]  f_midi_alloc_inst+0x1a8/0x380
[   87.007032][ T1776]  usb_get_function_instance+0xe2/0x2f0
[   87.012552][ T1776]  function_make+0x118/0x350
[   87.017123][ T1776]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   87.023445][ T1776]  ? mutex_trylock+0xb0/0xb0
[   87.028013][ T1776]  ? configfs_mkdir+0x504/0xd90
[   87.032851][ T1776]  configfs_mkdir+0x5d2/0xd90
[   87.037522][ T1776]  ? show_sid+0x1b0/0x1b0
[   87.041832][ T1776]  ? configfs_lookup+0x500/0x500
[   87.046746][ T1776]  ? __lookup_hash+0x122/0x250
[   87.051484][ T1776]  ? security_inode_mkdir+0xbd/0x110
[   87.056750][ T1776]  vfs_mkdir+0x42c/0x600
[   87.060977][ T1776]  do_mkdirat+0x14c/0x340
[   87.065288][ T1776]  __x64_sys_mkdirat+0x7b/0x90
[   87.070031][ T1776]  do_syscall_64+0x31/0x40
[   87.074430][ T1776]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   87.080302][ T1776] RIP: 0033:0x7f8f0020a1d9
[   87.084698][ T1776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.104282][ T1776] RSP: 002b:00007f8efec21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   87.112686][ T1776] RAX: ffffffffffffffda RBX: 00007f8f00492180 RCX: 00007f8f0020a1d9
[   87.120642][ T1776] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c
[   87.128595][ T1776] RBP: 00007f8f002a1888 R08: 0000000000000000 R09: 0000000000000000
[   87.136565][ T1776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.144515][ T1776] R13: 00007f8f00492218 R14: 00007f8f00492180 R15: 00007ffcfef8f348
[   87.152480][ T1776] Modules linked in:
[   87.156858][ T1776] ---[ end trace b4f1cac1462b5a87 ]---
[   87.162456][ T1776] RIP: 0010:kobject_add_internal+0x5e3/0xde0
[   87.168545][ T1776] Code: 4c 89 e7 e8 2f 23 45 ff 4d 8b 24 24 4d 85 e4 0f 84 db 00 00 00 49 83 c4 20 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 ff 22 45 ff 49 8b 04 24 48 85 c0 0f
[   87.188536][ T1776] RSP: 0018:ffffc90000f2f7d8 EFLAGS: 00010203
[   87.194673][ T1776] RAX: 0000000000001023 RBX: ffff888108587e00 RCX: dffffc0000000000
[   87.202727][ T1776] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881265e4828
[   87.210831][ T1776] RBP: ffffc90000f2f830 R08: 0000000000000003 R09: 0000000000000004
[   87.218927][ T1776] R10: dffffc0000000000 R11: fffff520001e5eec R12: 000000000000811e
[   87.226954][ T1776] R13: ffff888108587e18 R14: ffffffff8681d180 R15: ffff8881265e4800
[   87.234943][ T1776] FS:  00007f8efec216c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   87.243908][ T1776] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.250509][ T1776] CR2: 00007fecd20022f8 CR3: 000000013a52f000 CR4: 00000000003506b0
[   87.258647][ T1776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   87.266636][ T1776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   87.274630][ T1776] Kernel panic - not syncing: Fatal exception
[   87.280917][ T1776] Kernel Offset: disabled
[   87.285247][ T1776] Rebooting in 86400 seconds..