last executing test programs:

43.983409577s ago: executing program 2 (id=160):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001f40)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x14, 0x0, 0x5, [0x8, 0xe5, 0x2]}]}}}], 0x20}}], 0x1, 0x20008840)

43.977665648s ago: executing program 2 (id=161):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3451, &(0x7f0000000180)={0x0, 0x1539, 0x0, 0x2, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}, 0x20)

43.932384769s ago: executing program 2 (id=162):
io_uring_setup(0x650b, &(0x7f0000001400)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
sendmsg$key(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={0x0}}, 0x8810) (async, rerun: 64)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001500)={0x4, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) (rerun: 64)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000001600), 0x2c8, 0x0) (async)
setns(0xc9, 0x0) (async, rerun: 64)
socket(0x8, 0x2, 0x0) (async, rerun: 64)
r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x7fa) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
mkdirat(0xffffff9c, &(0x7f0000001240)='./proc\x00', 0x1ed) (async, rerun: 64)
mount(0x0, &(0x7f0000001600)='./proc\x00', &(0x7f0000001640)='proc\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./file1\x00', 0x2043, 0xd3)
write$tcp_mem(r3, &(0x7f00000016c0)={0x2, 0x20, 0x6, 0x20, 0x8}, 0x48) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x101040, 0x177) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
socket$inet(0x2, 0x2, 0x1) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xd, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000791210000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x19, 0x4, &(0x7f0000001240)=ANY=[], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
socketpair(0x1, 0x5, 0x0, &(0x7f00000012c0)) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001300)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2040800) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951eff0f3f64323723e7eecdf40c23eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f557ff3e24852548deb01efd54f11ed2c41d078b9cf1fc7972566173c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2233f9d5c3b90400000000000000c279f04b81083900666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103e5056e320a68e528329d3658c3612e325c1eb4a3ab2e156a97444800", "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"}) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x2c, 0x0, 0x0)

43.862335431s ago: executing program 2 (id=164):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==")
symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000540)='./bus\x00')
listxattr(&(0x7f0000000580)='./file0\x00', 0x0, 0x0)

43.665584036s ago: executing program 2 (id=166):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030300000000000000000000020000050800034000000005fe1c41c01f84541e634b1e923be18b8a518984cd60ad3aa85717ecbd07b378393e9d0a79bbec1d50cb9747db9e0348303caa6ebdeedbef37f0426ea484fe3a952609930395e4d4fe46da702dd18e8cf8f601c03f9a59375165d31294707f092e44755e80bb58a7e310539fb2235b2ef72959858a180f1be03cb58d4288be213b3913362f537baa0ff4a1425985a552ea0b252eae5d3159b118ecb23bc34fcdf0a2363204fe"], 0x1c}, 0x1, 0x0, 0x0, 0xc00}, 0x40)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x109303)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000600)="a8af795587f3b6ead2c23a297aa5172adc8515ff6e3b4caf483226fa5b40204948106ce0b23982ef3385321bdbb7ff439b2e438f16279f89d25b4aca1632c7ced638678f331ac2e79a64a1186127c5e689", 0x51}], 0x1)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000580))

43.485987511s ago: executing program 2 (id=167):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="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", 0x1cc}, {&(0x7f00000006c0)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250300fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a38d5abeeb414d11cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0x2d}, {&(0x7f0000000780)="55bbeefbb9a13c80fa527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e958f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb", 0x8a}, {&(0x7f0000000e00)="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", 0x139}, {&(0x7f0000000bc0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec4", 0xd3}, {&(0x7f0000000ac0)="ac6aed94fb91107ac1f4799c9389e2e168b340ef6a73acae72f58b8ab8c7fecccfb79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e235ca62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb0b15d8f259864a1d3011faecd81fa8e08a74ed81ae415eccb7bac25198e94", 0xd4}], 0x6}}], 0x2, 0x200080d4) (async)
writev(r1, &(0x7f0000003800)=[{&(0x7f0000000080)="9dafffb55e515ba3", 0x8}, {&(0x7f00000000c0)="5768f60a50352a6a0f2fd0804132b9698520106d94239facd30abd340f59c301413f4a55926c99ff589411826778e3543bdbbff026d310b79f84488ea06b7d87e2c6e84b73d483d6ad40e2417a4cc1e3ba18f112b79f834ea67acb03f17020c51d480c6db5e23893335dd2c607efa472553759304aa076645f9488df8768328259d3b7351c9b037cefdceecb6355a02e7d8bcf8ef993af45286c0d2bfd86e40ed55b8ead1e6cbc436814b6fd7fbdbf75", 0xb0}, {&(0x7f0000000180)="be4952f54a31999fc5d8520b59cb816ca59d635a25451a55ee0a76f627d87d5caf2a1902101343a9bcf7bb63bd567b0fea1337fb8711798e42dadb359249e1732f386e8e12acab275b887e720d09eb9a", 0x50}, {&(0x7f0000000200)="1e97602750d7d5473462", 0xa}, {&(0x7f00000009c0)="fc343e2ef52be437f7efaed5435280728c504c90df5293f3e1c7cbedb584bbb9a3757414127f18db2e05dcb8e3b2e86f4069e2620cec89f9ed1639f04af2524c574337e868e96b80909cb255dfa6d318e751d80e0fa224bc12083c00abd847dbd083dca37a2250fe3979a569b0576872ae1ec098b59583c1764312b17d41985bb22aa0a3a1b8c30a11c72453d18a6dfa75bb5e2bceb9b9f29e7293c476d04fc47374b8262edefb71d277838279cea048d2620bad4e4269b4eb19c95ef2e8216d8ea1c557c8214a716464ebf76a058285afa1965eecb4875b5369ed3580a181d7cedc2c10ab5b1ffab6d322554ac815d00e141d34d1b0f3", 0xf7}, {&(0x7f0000003880)="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", 0x3bf}], 0x6)

43.468314871s ago: executing program 32 (id=167):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="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", 0x1cc}, {&(0x7f00000006c0)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250300fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a38d5abeeb414d11cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0x2d}, {&(0x7f0000000780)="55bbeefbb9a13c80fa527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e958f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb", 0x8a}, {&(0x7f0000000e00)="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", 0x139}, {&(0x7f0000000bc0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec4", 0xd3}, {&(0x7f0000000ac0)="ac6aed94fb91107ac1f4799c9389e2e168b340ef6a73acae72f58b8ab8c7fecccfb79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e235ca62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb0b15d8f259864a1d3011faecd81fa8e08a74ed81ae415eccb7bac25198e94", 0xd4}], 0x6}}], 0x2, 0x200080d4) (async)
writev(r1, &(0x7f0000003800)=[{&(0x7f0000000080)="9dafffb55e515ba3", 0x8}, {&(0x7f00000000c0)="5768f60a50352a6a0f2fd0804132b9698520106d94239facd30abd340f59c301413f4a55926c99ff589411826778e3543bdbbff026d310b79f84488ea06b7d87e2c6e84b73d483d6ad40e2417a4cc1e3ba18f112b79f834ea67acb03f17020c51d480c6db5e23893335dd2c607efa472553759304aa076645f9488df8768328259d3b7351c9b037cefdceecb6355a02e7d8bcf8ef993af45286c0d2bfd86e40ed55b8ead1e6cbc436814b6fd7fbdbf75", 0xb0}, {&(0x7f0000000180)="be4952f54a31999fc5d8520b59cb816ca59d635a25451a55ee0a76f627d87d5caf2a1902101343a9bcf7bb63bd567b0fea1337fb8711798e42dadb359249e1732f386e8e12acab275b887e720d09eb9a", 0x50}, {&(0x7f0000000200)="1e97602750d7d5473462", 0xa}, {&(0x7f00000009c0)="fc343e2ef52be437f7efaed5435280728c504c90df5293f3e1c7cbedb584bbb9a3757414127f18db2e05dcb8e3b2e86f4069e2620cec89f9ed1639f04af2524c574337e868e96b80909cb255dfa6d318e751d80e0fa224bc12083c00abd847dbd083dca37a2250fe3979a569b0576872ae1ec098b59583c1764312b17d41985bb22aa0a3a1b8c30a11c72453d18a6dfa75bb5e2bceb9b9f29e7293c476d04fc47374b8262edefb71d277838279cea048d2620bad4e4269b4eb19c95ef2e8216d8ea1c557c8214a716464ebf76a058285afa1965eecb4875b5369ed3580a181d7cedc2c10ab5b1ffab6d322554ac815d00e141d34d1b0f3", 0xf7}, {&(0x7f0000003880)="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", 0x3bf}], 0x6)

39.488448817s ago: executing program 5 (id=168):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_clone(0x4000, &(0x7f0000000540)="16b3edca026ad8b5ae590800c697785933db8db63f220b3f599473ba05c409721c47daa03af43958fd4584faf25cb593872e9ebd2bd8469a5f831698a8c4ae6d4a30ffd9837e95555eecfd875b939f22a32e9a98c29e7b72639f6552f1f5b853607372aa0158", 0x66, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="ca1e40da11bc4aa0cdd2cc3e95a4e757ff66c74a75991bd1a6e5756791351f59de1b0a1e6b0bf93022903877e6e08f639120c457404f34dbec3c6ccef13d5362a9b066402a7b18425c3db62ef503a24d063ad42b5868769791941b7ae93feaaedc353bdcb1a2e63c63924ece01fdc317cb1fe98ad552b71faf38fdf60cdf9ee30425ec10")
prlimit64(r3, 0x3, 0x0, &(0x7f0000000700))
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000740)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0)
sendmmsg(r4, &(0x7f0000001800)=[{{0x0, 0xa9cc7003, &(0x7f0000001840)=[{&(0x7f0000001880)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getrlimit(0x3, &(0x7f0000001b80))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001940)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r6)
syz_mount_image$vfat(&(0x7f0000001bc0), &(0x7f0000001c00)='./file1\x00', 0x300005a, &(0x7f0000001c40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0xfc, 0x2d4, &(0x7f0000002240)="$eJzs3b9rJFUcAPDv7E42G0V2ERtFcEALq+Nia5MoJ4iplBXUxsU7QXbDwR0sXARzV11hbSn+G7Z21v4Hgp0IdnfFycj82h/njtkkmHjk82ny5r33ffPNvMdutd/5/NXDyc3bSTx49Gv0+0l09mIvHicxjE407kcaLTptAwDA/9fjPI8/84jYqq6TjSNT3/0A8Iyqvv8rl50LAHAxPvrk0w/2Dw5ufJhl/Xh58HA2SiLi8OFsVI3vfxlfxTRuxfUYxJOIfK5qv/f+wY1Is8Iw3jg8no1mK+vv/xE7ZfxuDGK4Pn43q9Txo4ji7+/fVitsNUsN4qX18W+tiY9RL958fSn/F2IQv3wRt2MaN6OIXcR/s5tl7+bfPfr6s+I2RXzSidF2Oa+2E5F3L2ZHAAAAAAAAAAAAAAAAAAAAAAC4Cq5lWVKV7ynr9xRddf2d7nPl+LWsMVytz1PFz+sFV/WB8qhL9Bzn8X1TX+d6lmV5PXERn8YrafuLBQAAAAAAAAAAAAAAAAAAAOAquXvvaDKeTm/dOXejOxlPm2oAzc/6T4wqJs57evOovaU5r8XRZNxtX3B703vdO1quNlDk+q+TI03jbE8juR9xiqj4aafIp2XOD3W+p09je7G5H9fhzcacYp3OiYfkxXfmGWb1UPOQJ+PkpHv1m437cXmoFxtnmCQrPVGfqLw8Ek/y1T3ttzzM3tkPf7F5ZaM4o73n1875K8/zzRZ8+7dqj+qepCyxsVk+W3Wj9bT0/7kXP7cv2PqR0T3P5w0AAAAAAAAAAAAAAAAAANBu9YfTT3mwetlfvez8p4kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAVavP+/aqTlW/4XPcliaNE4roPXDD3d6MWdu5f8LwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAF/B0AAP//DxE7Eg==")
r9 = openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x842, 0x40)
fallocate(r9, 0x0, 0x8e14, 0x8ffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf256a00000008000300", @ANYRES32=r7, @ANYBLOB="58e0908c62ca6cbf62e32dd4625893a6ad2110cad0090be1370ca525be63b88365c8f5c0dfd16cc9e99d8a55c65f4706e901fc3eaa27c3dd72263c78567c20"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000001b40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x75}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x24000801)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x7a201, 0x128)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsopen(&(0x7f0000000280)='exfat\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x48000)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001900a063fcdac45b134550f70cff1001000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/77, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xb8}}, 0x64)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getnexthop={0x28, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000895}, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

38.673807249s ago: executing program 5 (id=190):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000f00)='asymmetric\x00', 0x0, &(0x7f0000000f40)="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", 0x559, r1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000014c0)={r2, 0xf}, 0x0, &(0x7f0000001540)="929835e740d6a60000000300000000", 0x0)

38.521667253s ago: executing program 5 (id=198):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000780)='GPL\x00', 0x4, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000030000000b00000000000007000000000e0000000000000c02000000050000000000000b050000000e00000007630000000300000800000000000000f10000000b00c20cf1f5537fbe3900000d000000010000000e0000000b00000002000000040000000600000001000000020000000b00000001000000dbe60000050000000000000003000000002e00"], &(0x7f0000000480)=""/59, 0x9f, 0x3b, 0x1, 0x4, 0x10000}, 0x28)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=0x0, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000ff0f0000000000000000000071111f000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc)
r4 = open$dir(&(0x7f0000000380)='./file2\x00', 0x18000, 0x0)
openat(r4, &(0x7f0000000100)='./file1\x00', 0x321101, 0xebb8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000002c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000300)='./file2\x00', &(0x7f0000000340)='./file1\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000540))
r6 = syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00')
setsockopt(0xffffffffffffffff, 0x108, 0x42020054, &(0x7f0000000a00)="0100", 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1000000004000093e228398a1729eca9bfd42d98a0aa053773f64df8294aea49ce211909ed11a43af02b4938160fc05de9b7c914db27463cd674748b5f0db66d6319e5773cc1ddd09e234a0640d880cb7a9300e2d1f3ce3624ef0546258ada73815880c0e22bf579b9d2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ac0)={r7, &(0x7f0000000b00), 0x0}, 0x20)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000005c0)={0xa0000016})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000600)={0x2000000b})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f00009fb000/0x1000)=nil, 0x1000)

38.28226644s ago: executing program 5 (id=201):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0)
mount(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380)='tracefs\x00', 0x10005, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000005b40)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000005bc0), &(0x7f0000005c00)='./file0\x00', 0x4c, &(0x7f0000000000)=ANY=[], 0x3, 0x3a2, &(0x7f0000005cc0)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000006080)={@id={0x2, 0x0, @d}})
sched_setscheduler(r0, 0x1, &(0x7f00000060c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000006140)=@abs, 0x6e)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000061c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000006240)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38)
sendmmsg$unix(r2, &(0x7f0000006280), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000062c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000006300), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000006340)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000006380)={'pim6reg\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000063c0), 0x80400, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000006400)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000006440)={'nicvf0\x00', 0x1432})
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg(r7, 0x0, 0x0, 0x40000)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x1000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5535, &(0x7f0000000600)="$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")
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)

37.073978792s ago: executing program 5 (id=210):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000002040)=[{0x200000000006, 0x20, 0xff, 0x7ffc0002}]})
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@bsdgroups}]}, 0x3, 0x4d1, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x5)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x100000000e2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/diskstats\x00', 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000009c0)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x2, 0x4, 0x0, 0x6, 0x4, 0x0, 0x270bd2a, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd8, 0x0, 0xe0000000}]}, 0x20}, 0x1, 0x7}, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000008c0), 0x1, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe8c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000a80)={0x0, 0xb006}, 0x4)
syz_emit_ethernet(0x2e, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8)
getpid()

36.846626998s ago: executing program 5 (id=214):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3451, &(0x7f0000000180)={0x0, 0x1539, 0x0, 0x2, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x0, 0x1}, 0x20)

36.845917838s ago: executing program 33 (id=214):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3451, &(0x7f0000000180)={0x0, 0x1539, 0x0, 0x2, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x0, 0x1}, 0x20)

34.376508673s ago: executing program 1 (id=248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0xa, 0x10, 0x0, 0x0, 0xfe, 0x2, 0xfd, 0x9, 0x2900}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51267}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="74000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000300000000004000128009000100766c616e0000000030000280100003800100010000000000070000001c0000800c00010006000000000000000c000100060000008100000014000300766c616e30"], 0x74}}, 0x0)

34.370076314s ago: executing program 1 (id=249):
r0 = io_uring_setup(0x3f62, &(0x7f0000000000)={0x0, 0xe47, 0x4000, 0x2, 0x37a})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)}, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x80000001, 0x142)
connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x4}}, 0x10)
socket$inet(0x2, 0x3, 0x8)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x114, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbb00}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x114}, 0x1, 0x0, 0x0, 0x24048041}, 0x4000001)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
r4 = open(&(0x7f00000003c0)='./file0\x00', 0x529c03, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x100)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x84, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000740)=0x3, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x80)
getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000980), &(0x7f00000009c0)=0x4)
recvmsg$inet_nvme(r1, &(0x7f0000000ec0)={&(0x7f0000000a00)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/97, 0x61}, {&(0x7f0000000b00)=""/175, 0xaf}, {&(0x7f0000000bc0)=""/188, 0xbc}, {&(0x7f0000000c80)=""/158, 0x9e}, {&(0x7f0000000d40)=""/176, 0xb0}], 0x5, &(0x7f0000000e80)=""/35, 0x23}, 0x80)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @val={0xc, 0x99, {0xffff, 0x6c}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r12 = pidfd_getfd(r4, r0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001080)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r12, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x12000)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000001180), &(0x7f00000011c0)=0x4)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

34.358536284s ago: executing program 1 (id=250):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000f00)='asymmetric\x00', 0x0, &(0x7f0000000f40)="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", 0x559, r1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000014c0)={r2, 0xf}, 0x0, &(0x7f0000001540)="929835e740d6a60000000900000000", 0x0)

34.302709966s ago: executing program 1 (id=251):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3004006, &(0x7f00000001c0), 0x1, 0x576, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x35)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000c80)=0x8000000)
pwrite64(r0, 0x0, 0x0, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f00000007c0)=""/77, 0x23)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000f00)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000001f40)={r2}, 0x8)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0xd, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001f80)=[r1, r3], &(0x7f0000001fc0)=[{0x4, 0x3, 0xf, 0x1}, {0x4, 0x3, 0x5, 0xf32da79c733fe415}, {0x5, 0x5, 0x0, 0x6}, {0x4, 0x2, 0xa, 0x6}, {0x5, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xe, 0x9}, {0x1, 0x5, 0x6, 0x5}], 0x10, 0x5}, 0x94)
getdents64(r1, 0x0, 0xc00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000940)=[{&(0x7f0000000980)='9\x00', 0x2}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_clone3(&(0x7f0000000100)={0x20208000, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000010000000000000000000000711838000000000095"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='freezer.self_freezing\x00', 0x275a, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_mount_image$msdos(&(0x7f0000000a00), &(0x7f0000000a40)='.\x00', 0x129583b, &(0x7f0000000a80)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES64=r6, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES8=r5, @ANYRES32, @ANYRESDEC=r6, @ANYRESHEX], 0x4, 0x0, &(0x7f0000000b40))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x8}}]}}, &(0x7f0000000f40)=""/4076, 0x32, 0xfec, 0x1}, 0x28)
socket(0x1, 0x6, 0x6)

34.102597651s ago: executing program 1 (id=255):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48)
close(r0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000078a81fcf3bf45567000000009000000fb0d0000050000040600000000002e005f5f2e00"], &(0x7f0000000100)=""/252, 0x3c, 0xfc, 0x0, 0xc}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x13, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000000dc0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000e00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x1f2, 0x10, &(0x7f0000000f40), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22)

33.530868846s ago: executing program 1 (id=265):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
pwritev(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000008c0)="f6c9", 0x2}], 0x2, 0x0, 0x0) (async)
pwritev(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000008c0)="f6c9", 0x2}], 0x2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}}}, &(0x7f0000000440)=0xe8)
ioctl$TUNSETOWNER(r1, 0x400454cc, r3) (async)
ioctl$TUNSETOWNER(r1, 0x400454cc, r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x1})
openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000480)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000004c0)={0x6000200c})
syz_emit_ethernet(0x7e, &(0x7f0000000900)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0xff, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0041c, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c726f6469722c666c7573682c696f636861727365743d63703835322c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c636865636b3d7374726963742c757466383d312c64657466383d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c636f64e9b76a2154672d59302c726f6469722c00"/193], 0x3, 0x27b, &(0x7f0000000580)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x61)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3) (async)
close(0x3)
mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="687567653d6e657665722c6e725f696e6f6465733d2c39a48d1578b990a25ec50107ea43ee3026e326793e5be3ebcc402ad56821c724e904d75ae777fd6bbce7428db98aac6eeff7120b7c8daa194eaec338ffe507d849a3a29cba726c8572219a95f225a121387cb1432c36"])

33.521253057s ago: executing program 34 (id=265):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
pwritev(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000008c0)="f6c9", 0x2}], 0x2, 0x0, 0x0) (async)
pwritev(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000008c0)="f6c9", 0x2}], 0x2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}}}, &(0x7f0000000440)=0xe8)
ioctl$TUNSETOWNER(r1, 0x400454cc, r3) (async)
ioctl$TUNSETOWNER(r1, 0x400454cc, r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x1})
openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000480)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000004c0)={0x6000200c})
syz_emit_ethernet(0x7e, &(0x7f0000000900)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0xff, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0041c, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c726f6469722c666c7573682c696f636861727365743d63703835322c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c636865636b3d7374726963742c757466383d312c64657466383d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c636f64e9b76a2154672d59302c726f6469722c00"/193], 0x3, 0x27b, &(0x7f0000000580)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x61)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3) (async)
close(0x3)
mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="687567653d6e657665722c6e725f696e6f6465733d2c39a48d1578b990a25ec50107ea43ee3026e326793e5be3ebcc402ad56821c724e904d75ae777fd6bbce7428db98aac6eeff7120b7c8daa194eaec338ffe507d849a3a29cba726c8572219a95f225a121387cb1432c36"])

25.946817609s ago: executing program 0 (id=369):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f00000005c0)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth")
newfstatat(0xffffffffffffff9c, &(0x7f0000006080)='./file1\x00', 0x0, 0x0)

25.282534116s ago: executing program 0 (id=372):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x5, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
getrlimit(0x8, &(0x7f0000000440))
sendmmsg$unix(r4, &(0x7f0000000540), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x2)
recvmmsg(r3, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

24.37991112s ago: executing program 0 (id=395):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0)

24.356802011s ago: executing program 0 (id=396):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x5, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

24.270668723s ago: executing program 0 (id=397):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x17f)
mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

24.251616994s ago: executing program 0 (id=398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}}, 0x0)

12.358488221s ago: executing program 6 (id=530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)

12.354739591s ago: executing program 6 (id=532):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080), 0x3, 0x575, &(0x7f00000000c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000d80)='~', 0x1, 0x4fed0)
openat(0xffffffffffffffff, 0x0, 0x6042, 0x101)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x109142, 0x5)
fallocate(r1, 0x8, 0x4000, 0x4000)

12.110712227s ago: executing program 6 (id=534):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="89825290e5e79781ad3b26577ebaf9cb386e2acf9ffcf65317f6b140c42c62a0065b6e0c82873bfb9fc1a79130c5c160114985bfdfd8ddb8f0260ca22800ae67e3da083fd510783cea68f4f42931cad1c07ce54421d81da9298df777f5f98133f81177691b3c8e76a2a095bbf0c4d5fe284137b98860eb9e80401c33bec91df20aa7f2f0889327d475bfc60a68e76dfe84b2ed1e2a61e89955b7a772bdebf812ad3cbcc24131a0330ac6e73850b89c6fec526301d4d0bbbe88351f7a6923512fb2bfd2c15655351eb61a0d660ba645f1c1ec461719965ff3f0ece0e16b5e"], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000a40)='./file2\x00', &(0x7f0000000240)='./bus\x00')

10.803025322s ago: executing program 6 (id=544):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f0000000540)="$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")
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

10.086897281s ago: executing program 6 (id=549):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)

9.680526352s ago: executing program 6 (id=550):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
preadv2(r0, &(0x7f00000016c0)=[{&(0x7f0000000600)=""/74, 0x4a}], 0x1, 0x0, 0x7e, 0x10)

9.645269363s ago: executing program 35 (id=550):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
preadv2(r0, &(0x7f00000016c0)=[{&(0x7f0000000600)=""/74, 0x4a}], 0x1, 0x0, 0x7e, 0x10)

9.185329725s ago: executing program 36 (id=398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}}, 0x0)

2.786480576s ago: executing program 8 (id=638):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000039c0)=[@free_buffer]})

2.740254847s ago: executing program 8 (id=639):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x1ff)
mount(&(0x7f00000006c0)=@filename='./dev/sda1\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000780)='./mnt\x00')
chdir(&(0x7f0000000840)='./mnt\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0)

2.526599713s ago: executing program 8 (id=641):
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./security\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a40)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c6167730007", 0x2d)

2.501442274s ago: executing program 8 (id=642):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020)

2.494494884s ago: executing program 8 (id=643):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000002000000732a80ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000480)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.635772497s ago: executing program 8 (id=662):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./dev_mnt\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

804.904189ms ago: executing program 9 (id=731):
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
flock(r2, 0x1)
flock(r0, 0x5)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

309.609282ms ago: executing program 3 (id=750):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)

302.017522ms ago: executing program 3 (id=753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)

301.079812ms ago: executing program 9 (id=754):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000280)="7dcd80", 0x3}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000d40), 0x4)
recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x40002022)

270.247533ms ago: executing program 9 (id=757):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000ec0), 0x0)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1501c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

269.738683ms ago: executing program 9 (id=760):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

233.875974ms ago: executing program 9 (id=763):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x164000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x38, 0x0, &(0x7f0000001e80)='syzkaller\x00', 0x7143, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)

233.313474ms ago: executing program 3 (id=767):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

196.815845ms ago: executing program 3 (id=771):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x4}, {0x0, 0x0, 0x28}, {0x2, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000800)=0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

128.440987ms ago: executing program 7 (id=780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(0x3)
close(0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6b}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

117.709097ms ago: executing program 4 (id=781):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000ac0)={0x2, &(0x7f0000000b00)=[{0x20, 0x9, 0x3b, 0xfffff02c}, {0x16, 0x5, 0x6, 0xfffffffd}]})

116.760717ms ago: executing program 7 (id=782):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000240)=[{0x30, 0xfa, 0x0, 0xfffff02c}, {0x6, 0x5, 0x5, 0x552}]})

105.310757ms ago: executing program 3 (id=783):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9}, @exit], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x94)

105.123677ms ago: executing program 4 (id=784):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000007"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)

65.205859ms ago: executing program 3 (id=785):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "68b91d57"}]}}, 0x0}, 0x0)
syz_usb_connect(0x5, 0x196, &(0x7f0000000f00)={{0x12, 0x1, 0x310, 0x16, 0x94, 0x5a, 0x10, 0x1b3d, 0x157, 0x9fa1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x184, 0x1, 0x80, 0xff, 0x10, 0x1, "", [{{0x9, 0x4, 0x23, 0xce, 0x3, 0x4f, 0x1, 0x47, 0xc, [@hid_hid={0x9, 0x21, 0xba1, 0x8, 0x1, {0x22, 0x7f4}}], [{{0x9, 0x5, 0x4, 0xc, 0x200, 0xd, 0x8, 0x3, [@generic={0x7c, 0xf, "7525a60672e5e6796ef6a9dd02a87a3d7acc871277ae4782a060a3d175dfc543404137e823ca586132e83f6bd06049c871b83196682566708e8d910890e4e056e1d4ec1b1f36120b5b99c81fe3f2cdc4a8c1a01430f060d68313990723013c4984a1ad32bca4de05c486dc49bf31236e76e37a79422b4984f1d4"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x0, 0x2, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xc2}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x2, 0xf9, 0xf6, [@generic={0xc4, 0x13f9159a41581cb8, "5988d07cc9575ffbb5fb5fe8404912907346ca6863b59342ed023f7e3151fb57e677c1116c8f02ffea5becf57b8858c78db5b79aa4e10a9c0bc8b669e44fb7e37112591c6b2d8b574cd154088e99946258e360c5dce7913769d5ece72011d6a46bd3b67a7ab03b869eb7a151477a19d47c188e66918543d57a50a061f3f785dc50dcd5a39029fce1e2bccee01628a9177d0ce2b5f54511a72bb6d9fac9427adf1f314ff2b994a298e8ae73a36ab5f4d6e6cbe6525f1c4691ba214651a81064b3b953"}]}}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

65.002828ms ago: executing program 4 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)

64.864548ms ago: executing program 4 (id=787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

64.745159ms ago: executing program 9 (id=788):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

64.588619ms ago: executing program 4 (id=789):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}}, 0x24}}, 0x4040004)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0x5, 0xffff}, {0xb, 0xfff2}}}, 0x24}}, 0x10)

64.454288ms ago: executing program 7 (id=790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000071, 0x0, 0x3ff}]})

13.73631ms ago: executing program 4 (id=791):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6)
futex(0x0, 0x84, 0x3, 0x0, 0x0, 0x1)
socket$key(0xf, 0x3, 0x2)

13.53041ms ago: executing program 7 (id=792):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
membarrier(0x10, 0x0)

5.92471ms ago: executing program 7 (id=793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x0)

0s ago: executing program 7 (id=794):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc)

kernel console output (not intermixed with test programs):

trs: xattr_isize 12 of nid 36 is not supported yet
[   27.421700][  T508] SELinux: (dev loop0, type erofs) has no security xattr handler
[   27.434926][   T30] kauditd_printk_skb: 43 callbacks suppressed
[   27.435008][   T30] audit: type=1400 audit(1792713993.061:560): avc:  denied  { create } for  pid=517 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   27.488044][   T30] audit: type=1400 audit(1792713993.111:561): avc:  denied  { create } for  pid=507 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.516236][   T30] audit: type=1400 audit(1792713993.131:562): avc:  denied  { write } for  pid=507 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.539630][   T30] audit: type=1400 audit(1792713993.141:563): avc:  denied  { connect } for  pid=507 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   27.571677][   T30] audit: type=1400 audit(1792713993.141:564): avc:  denied  { write } for  pid=507 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   27.592385][  T526] loop0: detected capacity change from 0 to 512
[   27.660301][  T294] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   27.745597][  T526] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   27.761222][  T529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'.
[   27.785892][  T526] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.831827][   T30] audit: type=1400 audit(1792713993.461:565): avc:  denied  { mounton } for  pid=525 comm="syz.0.71" path="/proc/47/cgroup" dev="proc" ino=16893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   27.884982][  T536] loop1: detected capacity change from 0 to 512
[   27.891375][   T30] audit: type=1400 audit(1792713993.491:566): avc:  denied  { create } for  pid=525 comm="syz.0.71" dev="anon_inodefs" ino=16895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   27.934854][   T30] audit: type=1400 audit(1792713993.491:567): avc:  denied  { getopt } for  pid=525 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.956681][  T536] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.72: missing EA_INODE flag
[   27.968301][  T536] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.72: error while reading EA inode 2 err=-117
[   27.980817][  T536] EXT4-fs (loop1): 1 orphan inode deleted
[   27.986566][  T536] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   28.001390][   T30] audit: type=1400 audit(1792713993.631:568): avc:  denied  { create } for  pid=535 comm="syz.1.72" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   28.028316][   T30] audit: type=1400 audit(1792713993.651:569): avc:  denied  { read } for  pid=535 comm="syz.1.72" name="file0" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   28.379041][  T539] loop3: detected capacity change from 0 to 256
[   28.428621][  T539] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22
[   28.438168][  T539] SELinux:  duplicate or incompatible mount options
[   28.445316][  T539] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   28.455726][  T539] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   28.475596][  T562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'.
[   28.484465][  T562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'.
[   28.495985][  T562] loop0: detected capacity change from 0 to 512
[   28.500342][  T294] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   28.521508][  T562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   28.534707][  T562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   28.564810][  T562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c018, mo2=0002]
[   28.574307][  T562] System zones: 1-12
[   28.579506][  T562] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.79: bad orphan inode 16
[   28.582216][  T569] loop1: detected capacity change from 0 to 256
[   28.589878][  T562] ext4_test_bit(bit=15, block=4) = 0
[   28.601065][  T562] EXT4-fs (loop0): 1 orphan inode deleted
[   28.606779][  T562] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nolazytime,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,debug,data_err=abort,,errors=continue. Quota mode: writeback.
[   28.610331][  T294] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   28.641804][  T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   28.670645][  T569] FAT-fs (loop1): bogus logical sector size 11520
[   28.699729][  T571] Zero length message leads to an empty skb
[   28.720311][   T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   28.780676][  T569] FAT-fs (loop1): Can't find a valid FAT filesystem
[   28.871339][  T294] usb 3-1: SerialNumber: syz
[   28.970266][   T60] usb 5-1: Using ep0 maxpacket: 16
[   29.100289][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   29.111558][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   29.122697][   T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   29.135499][   T60] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   29.144546][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.153207][   T60] usb 5-1: config 0 descriptor??
[   29.170299][  T561] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   29.180270][   T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   29.230259][  T307] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   29.381199][  T576] loop3: detected capacity change from 0 to 1024
[   29.414061][  T576] cgroup: name respecified
[   29.421612][  T576] xt_hashlimit: size too large, truncated to 1048576
[   29.428298][  T576] xt_hashlimit: max too large, truncated to 1048576
[   29.450650][   T39] usb 2-1: device descriptor read/64, error -71
[   29.500272][  T307] usb 1-1: device descriptor read/64, error -71
[   29.554236][  T294] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   29.633113][   T60] microsoft 0003:045E:07DA.0001: No inputs registered, leaving
[   29.641521][   T60] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   29.653587][   T60] microsoft 0003:045E:07DA.0001: no inputs found
[   29.660043][   T60] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[   29.758692][  T294] usb 3-1: USB disconnect, device number 3
[   29.770464][  T294] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   29.833423][   T26] usb 5-1: USB disconnect, device number 2
[   29.840312][   T39] usb 2-1: device descriptor read/64, error -71
[   29.890321][  T307] usb 1-1: device descriptor read/64, error -71
[   30.030283][   T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   30.110272][   T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   30.160271][  T307] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   30.346682][  T651] loop4: detected capacity change from 0 to 512
[   30.380268][   T39] usb 2-1: device descriptor read/64, error -71
[   30.388891][  T651] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   30.401014][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.402326][  T651] EXT4-fs (loop4): 1 truncate cleaned up
[   30.411959][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.417787][  T651] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,journal_dev=0x0000000000000003,,errors=continue. Quota mode: none.
[   30.430268][  T307] usb 1-1: device descriptor read/64, error -71
[   30.510304][   T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   30.519405][   T60] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   30.527588][   T60] usb 4-1: Manufacturer: syz
[   30.532854][   T60] usb 4-1: config 0 descriptor??
[   30.770338][   T39] usb 2-1: device descriptor read/64, error -71
[   30.840273][  T307] usb 1-1: device descriptor read/64, error -71
[   30.890328][   T39] usb usb2-port1: attempt power cycle
[   30.960330][  T307] usb usb1-port1: attempt power cycle
[   31.250342][   T60] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71
[   31.259168][   T60] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[   31.266755][   T60] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[   31.275588][   T60] usb 4-1: USB disconnect, device number 3
[   31.311139][   T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   31.380316][  T307] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   31.480323][   T39] usb 2-1: device descriptor read/8, error -71
[   31.495013][  T675] loop4: detected capacity change from 0 to 1024
[   31.513070][  T675] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   31.531685][  T675] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,stripe=0x0000000000000000,errors=remount-ro,dioread_nolock,. Quota mode: none.
[   31.553235][  T675] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.570404][  T307] usb 1-1: device descriptor read/8, error -71
[   31.571367][  T679] Restarting kernel threads ... done.
[   31.587109][  T675] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.101: lblock 0 mapped to illegal pblock 0 (length 6)
[   31.600612][  T675] EXT4-fs (loop4): Remounting filesystem read-only
[   31.610556][  T675] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   31.629557][  T675] EXT4-fs (loop4): Remounting filesystem read-only
[   31.636168][  T675] EXT4-fs error (device loop4) in ext4_setattr:5676: Corrupt filesystem
[   31.644752][  T675] EXT4-fs (loop4): Remounting filesystem read-only
[   31.652070][  T675] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.101: lblock 0 mapped to illegal pblock 0 (length 1)
[   31.665484][  T675] EXT4-fs (loop4): Remounting filesystem read-only
[   31.672210][  T675] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   31.690515][  T675] EXT4-fs (loop4): Remounting filesystem read-only
[   31.750333][   T39] usb 2-1: device descriptor read/8, error -71
[   31.758068][  T685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'.
[   31.780297][  T307] usb 1-1: device descriptor read/8, error -71
[   31.806795][  T693] netlink: 100 bytes leftover after parsing attributes in process `syz.4.105'.
[   31.826266][  T693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.105'.
[   31.845272][  T693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'.
[   31.864088][  T693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'.
[   31.989184][  T698] loop1: detected capacity change from 0 to 512
[   32.030842][  T698] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿ00000000000000000000060" or missing value
[   32.095953][   T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   32.155652][  T709] loop4: detected capacity change from 0 to 512
[   32.350280][   T60] usb 4-1: Using ep0 maxpacket: 16
[   32.378310][  T709] EXT4-fs (loop4): Test dummy encryption mode enabled
[   32.433961][  T709] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   32.549421][  T709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0002]
[   32.560714][   T60] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 142, changing to 7
[   32.591512][  T709] System zones: 1-12
[   32.622952][  T709] EXT4-fs (loop4): orphan cleanup on readonly fs
[   32.661499][  T709] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.111: invalid indirect mapped block 12 (level 1)
[   32.732050][  T709] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.111: invalid indirect mapped block 2 (level 2)
[   32.750591][   T60] usb 4-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice= 0.40
[   32.860035][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.878396][   T60] usb 4-1: Product: 淾Ϣ㬆䬇쒕鴢긟䈃ꀨ쩳쒋猤�엊畜欥䨱�ꃀ曹련蜛�葘⽂ä⾎�ᰛ蔘뭚樯몖�籟댹
[   32.899607][  T709] EXT4-fs (loop4): 1 truncate cleaned up
[   32.909435][  T709] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,discard,data=writeback,,,errors=continue. Quota mode: none.
[   32.917742][   T60] usb 4-1: Manufacturer: 磷픾ಲ둶䛢�켅멋ⷬ笆Ἡ鴨霈䓆翗࢛⮘ｻ齣떯
[   32.938709][   T30] kauditd_printk_skb: 43 callbacks suppressed
[   32.938719][   T30] audit: type=1400 audit(1792713998.561:613): avc:  denied  { unmount } for  pid=708 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.954519][   T60] usb 4-1: SerialNumber: 렩笖뇛ꑑ炙ħ싄ꀧ㌵뻀㹥ᢋክ劾뽽蛞㔧칼롽㬖護ꡭ∋ࢰ鄑趄�紧�◼노ﻘ䵵휊蓰춧稈؈㎖蹯�傓⃋퓳Ცϱ䯴ᙴ㳃깟뻦騼퓜噵䳵䇥䬙给꜒�魺嗄ɗ�衼闆휤㚠礶컼⧀鱃９劇෩뼰胨窰鼡턂᪕䢴�仅ॖ푃慮谨긵築뵶⽨�〷갪⃎�㨮磀镑
[   33.070267][   T20] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   33.091725][   T30] audit: type=1400 audit(1792713998.721:614): avc:  denied  { append } for  pid=719 comm="syz.1.114" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   33.140648][   T30] audit: type=1400 audit(1792713998.771:615): avc:  denied  { name_bind } for  pid=717 comm="syz.4.113" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   33.280994][   T60] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[   33.299917][   T60] snd-usb-audio: probe of 4-1:1.1 failed with error -2
[   33.308356][   T60] snd-usb-audio: probe of 4-1:1.2 failed with error -2
[   33.329493][   T60] usb 4-1: USB disconnect, device number 4
[   33.338435][  T729] netlink: 64 bytes leftover after parsing attributes in process `syz.4.116'.
[   33.357531][  T729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'.
[   33.366813][  T729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'.
[   33.375653][  T729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'.
[   33.385302][   T30] audit: type=1400 audit(1792713999.011:616): avc:  denied  { ioctl } for  pid=728 comm="syz.4.116" path="socket:[17567]" dev="sockfs" ino=17567 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   33.419921][   T30] audit: type=1400 audit(1792713999.041:617): avc:  denied  { mount } for  pid=730 comm="syz.4.117" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   33.441712][  T312] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   33.480390][   T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.497204][   T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[   33.518249][   T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[   33.580411][  T722] loop1: detected capacity change from 0 to 131072
[   33.589892][   T30] audit: type=1400 audit(1792713999.211:618): avc:  denied  { mounton } for  pid=719 comm="syz.1.114" path="/19/file1" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   33.652295][  T735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'.
[   33.662014][  T722] F2FS-fs (loop1): invalid crc value
[   33.669078][  T722] F2FS-fs (loop1): Found nat_bits in checkpoint
[   33.687030][  T722] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   33.695999][  T312] usb 1-1: Using ep0 maxpacket: 8
[   33.699109][  T722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   33.767834][   T30] audit: type=1400 audit(1792713999.391:619): avc:  denied  { write } for  pid=740 comm="syz.3.120" name="packet" dev="proc" ino=4026532440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   33.830309][   T20] usb 3-1: string descriptor 0 read error: -22
[   33.836544][   T20] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[   33.845660][  T312] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   33.861447][  T312] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   33.880404][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.890269][  T312] usb 1-1: config 0 interface 0 has no altsetting 0
[   33.897421][  T312] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[   33.906520][  T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.919403][  T312] usb 1-1: config 0 descriptor??
[   33.931145][   T20] usb 3-1: MIDIStreaming interface descriptor not found
[   33.942745][   T30] audit: type=1400 audit(1792713999.571:620): avc:  denied  { create } for  pid=745 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   33.964297][  T312] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   34.029035][  T766] loop3: detected capacity change from 0 to 512
[   34.062990][  T766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   34.070989][  T766] System zones: 1-12
[   34.075559][  T766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.125: missing EA_INODE flag
[   34.087475][  T766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.125: error while reading EA inode 12 err=-117
[   34.099777][  T766] EXT4-fs (loop3): 1 orphan inode deleted
[   34.105567][  T766] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   34.122935][   T30] audit: type=1400 audit(1792713999.751:621): avc:  denied  { create } for  pid=765 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   34.130049][  T766] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[   34.147373][   T30] audit: type=1400 audit(1792713999.751:622): avc:  denied  { ioctl } for  pid=765 comm="syz.3.125" path="/25/file0/file1" dev="loop3" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.192977][  T788] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[   34.198628][  T790] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   34.291790][  T726] loop0: detected capacity change from 0 to 40427
[   34.301281][  T726] F2FS-fs (loop0): invalid crc value
[   34.310052][  T726] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   34.330921][  T726] F2FS-fs (loop0): recover fsync data on readonly fs
[   34.337822][  T726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   34.348699][  T307] usb 1-1: USB disconnect, device number 7
[   34.520299][   T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   34.659799][  T312] usb 3-1: USB disconnect, device number 4
[   34.760249][   T39] usb 4-1: Using ep0 maxpacket: 16
[   34.801948][  T803] loop2: detected capacity change from 0 to 40427
[   34.842881][  T803] F2FS-fs (loop2): invalid crc value
[   34.849525][  T803] F2FS-fs (loop2): Found nat_bits in checkpoint
[   34.880295][   T39] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   34.883380][  T803] F2FS-fs (loop2): Start checkpoint disabled!
[   34.890275][   T39] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   34.896965][  T803] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   34.906285][   T39] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   34.926615][   T39] usb 4-1: config 1 interface 0 has no altsetting 0
[   35.130266][  T307] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   35.140550][   T39] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[   35.149855][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.158098][   T39] usb 4-1: Product: syz
[   35.162466][   T39] usb 4-1: Manufacturer: syz
[   35.167091][   T39] usb 4-1: SerialNumber: syz
[   35.237064][  T814] loop0: detected capacity change from 0 to 131072
[   35.283447][  T814] F2FS-fs (loop0): invalid crc value
[   35.290372][  T814] F2FS-fs (loop0): Found nat_bits in checkpoint
[   35.317061][  T814] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   35.370316][  T307] usb 2-1: Using ep0 maxpacket: 8
[   35.431737][   T39] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[   35.490294][  T307] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[   35.522682][  T823] loop0: detected capacity change from 0 to 512
[   35.580319][  T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   35.589429][  T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   35.597743][  T307] usb 2-1: SerialNumber: syz
[   35.639223][   T60] usb 4-1: USB disconnect, device number 5
[   35.648685][   T60] usblp0: removed
[   35.860307][  T307] cdc_ether: probe of 2-1:1.0 failed with error -71
[   35.867058][  T307] usb-storage 2-1:1.0: USB Mass Storage device detected
[   35.875060][  T307] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   35.913564][  T307] usb 2-1: USB disconnect, device number 7
[   35.920333][  T312] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   36.165415][  T834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=834 comm=syz.3.140
[   36.186968][  T837] loop3: detected capacity change from 0 to 512
[   36.271802][  T837] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   36.282871][  T837] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.330298][  T312] usb 3-1: unable to get BOS descriptor or descriptor too short
[   36.370302][  T312] usb 3-1: not running at top speed; connect to a high speed hub
[   36.399174][  T853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 66 vs 96 free clusters
[   36.414263][  T855] FAT-fs (loop1): Unrecognized mount option "shortnamewinnt" or missing value
[   36.424426][  T853] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.141: Failed to acquire dquot type 1
[   36.450356][  T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   36.461947][  T855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   36.469172][  T855] IPv6: NLM_F_CREATE should be set when creating new route
[   36.476685][  T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   36.556082][  T860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'.
[   36.565529][  T860] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22
[   36.574993][  T860] 9pnet: Insufficient options for proto=fd
[   36.598958][  T862] set_capacity_and_notify: 1 callbacks suppressed
[   36.598973][  T862] loop1: detected capacity change from 0 to 4096
[   36.615753][  T862] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   36.626296][  T862] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   36.636601][  T862] EXT4-fs (loop1): Ignoring removed orlov option
[   36.640313][  T312] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[   36.652150][  T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.660639][  T312] usb 3-1: Product: syz
[   36.665125][  T312] usb 3-1: Manufacturer: syz
[   36.670045][  T312] usb 3-1: SerialNumber: syz
[   36.676987][  T862] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec12c, mo2=0002]
[   36.692561][  T862] System zones: 0-5
[   36.697108][  T862] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,i_version,bsdgroups,user_xattr,nolazytime,norecovery,jqfmt=vfsold,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,orlov,. Quota mode: writeback.
[   37.040340][  T312] usb 3-1: unit 3 not found!
[   37.060316][  T312] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x500, type = 0
[   37.060367][  T294] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   37.113548][  T312] usb 3-1: USB disconnect, device number 5
[   37.321435][  T429] udevd[429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.321876][  T888] loop0: detected capacity change from 0 to 256
[   37.337587][  T294] usb 2-1: Using ep0 maxpacket: 16
[   37.417485][  T888] loop0: detected capacity change from 0 to 128
[   37.460302][  T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.477485][  T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   37.488538][  T294] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   37.501994][  T294] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   37.522539][  T907] loop0: detected capacity change from 0 to 16
[   37.523607][  T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.539329][  T907] erofs: (device loop0): mounted with root inode @ nid 36.
[   37.546931][  T908] process 'syz.0.163' launched '/dev/fd/3' with NULL argv: empty string added
[   37.550273][   T20] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   37.573747][  T294] usb 2-1: config 0 descriptor??
[   37.659745][  T910] loop2: detected capacity change from 0 to 40427
[   37.676541][  T910] F2FS-fs (loop2): invalid crc value
[   37.693932][  T910] F2FS-fs (loop2): Found nat_bits in checkpoint
[   37.727676][  T910] F2FS-fs (loop2): Start checkpoint disabled!
[   37.734495][  T910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   37.758713][  T289] attempt to access beyond end of device
[   37.758713][  T289] loop2: rw=524288, want=45072, limit=40427
[   37.770322][  T289] attempt to access beyond end of device
[   37.770322][  T289] loop2: rw=0, want=45072, limit=40427
[   37.799698][   T10] attempt to access beyond end of device
[   37.799698][   T10] loop2: rw=2049, want=40992, limit=40427
[   37.931095][  T912] loop0: detected capacity change from 0 to 131072
[   37.950296][   T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.960538][   T20] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   37.963516][  T912] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[   37.981849][  T912] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   37.991604][  T912] F2FS-fs (loop0): invalid crc value
[   38.009783][  T912] F2FS-fs (loop0): Found nat_bits in checkpoint
[   38.025345][   T30] kauditd_printk_skb: 56 callbacks suppressed
[   38.025358][   T30] audit: type=1400 audit(1792714003.651:676): avc:  denied  { mounton } for  pid=919 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   38.052978][   T30] audit: type=1400 audit(1792714003.651:677): avc:  denied  { create } for  pid=919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   38.073593][  T294] hid-generic 0003:057E:2019.0003: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0
[   38.087415][  T919] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.094606][  T919] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.101934][  T912] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   38.102321][  T919] device bridge_slave_0 entered promiscuous mode
[   38.108960][  T912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   38.123425][  T919] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.130579][   T30] audit: type=1400 audit(1792714003.751:678): avc:  denied  { ioctl } for  pid=911 comm="syz.0.165" path="/37/file2/file1" dev="loop0" ino=7 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.132723][  T919] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.162192][  T919] device bridge_slave_1 entered promiscuous mode
[   38.175820][   T20] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   38.186185][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.201744][  T926] netlink: 'syz.4.170': attribute type 3 has an invalid length.
[   38.218559][   T20] usb 4-1: Product: syz
[   38.224344][   T20] usb 4-1: Manufacturer: syz
[   38.228946][   T20] usb 4-1: SerialNumber: syz
[   38.254664][  T919] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.261708][  T919] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.268924][  T919] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.275948][  T919] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.292917][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.301958][  T470] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.309454][   T20] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[   38.317648][  T470] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.333071][   T20] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   38.333071][   T20]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   38.359085][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.367346][  T470] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.374389][  T470] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.382971][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.391270][  T470] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.398315][  T470] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.416398][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.424737][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.436380][   T30] audit: type=1400 audit(1792714004.061:679): avc:  denied  { bind } for  pid=934 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   38.444930][  T919] device veth0_vlan entered promiscuous mode
[   38.461753][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.470080][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.478027][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.485604][  T867] UDC core: couldn't find an available UDC or it's busy: -16
[   38.485755][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.493648][  T867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   38.508988][  T934] mmap: syz.0.169 (934): VmData 29184000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   38.512101][  T294] usb 2-1: USB disconnect, device number 8
[   38.531971][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.542602][  T919] device veth1_macvtap entered promiscuous mode
[   38.565490][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.107761][   T30] audit: type=1400 audit(1792714004.721:680): avc:  denied  { getopt } for  pid=942 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.352157][   T30] audit: type=1400 audit(1792714005.981:681): avc:  denied  { setopt } for  pid=953 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   41.327958][   T30] audit: type=1400 audit(1792714006.951:682): avc:  denied  { create } for  pid=957 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   41.367324][    T6] usb 4-1: USB disconnect, device number 6
[   41.377252][  T961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'.
[   41.389747][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.401544][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.402830][  T967] loop3: detected capacity change from 0 to 512
[   41.415959][  T961] loop1: detected capacity change from 0 to 512
[   41.415966][  T954] syz.4.178 uses obsolete (PF_INET,SOCK_PACKET)
[   41.432604][   T10] device bridge_slave_1 left promiscuous mode
[   41.438729][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.450541][   T30] audit: type=1400 audit(1792714007.061:683): avc:  denied  { mount } for  pid=919 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   41.472862][   T30] audit: type=1400 audit(1792714007.061:684): avc:  denied  { mounton } for  pid=919 comm="syz-executor" path="/root/syzkaller.lepklq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   41.511426][  T961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.511782][   T10] device bridge_slave_0 left promiscuous mode
[   41.529917][  T961] EXT4-fs (loop1): 1 truncate cleaned up
[   41.536915][  T967] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   41.544457][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.554832][  T961] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none.
[   41.573703][   T10] device veth1_macvtap left promiscuous mode
[   41.581807][   T10] device veth0_vlan left promiscuous mode
[   41.649862][  T961] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.180: Logical block already allocated
[   41.661429][  T961] EXT4-fs (loop1): Remounting filesystem read-only
[   41.710304][   T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   41.787815][  T972] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #2: comm syz.1.180: invalid size
[   41.798902][  T972] EXT4-fs (loop1): Remounting filesystem read-only
[   41.988695][  T967] capability: warning: `syz.3.182' uses deprecated v2 capabilities in a way that may be insecure
[   42.044882][   T30] audit: type=1400 audit(1792714007.671:685): avc:  denied  { read } for  pid=986 comm="syz.3.187" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   42.075499][  T998] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0000000000000000000000000000000000000000000'
[   42.075561][  T989] binder: 986:989 unknown command 0
[   42.092637][  T989] binder: 986:989 ioctl c0306201 200000000280 returned -22
[   42.099962][   T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   42.124307][  T990] loop3: detected capacity change from 0 to 512
[   42.151820][  T991] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.168255][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.177307][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.185939][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.193875][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.201744][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.209489][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.255154][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.263504][  T992] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   42.300318][   T39] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[   42.309420][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.329689][  T991] syz.3.187 (991) used greatest stack depth: 21184 bytes left
[   42.337261][   T39] usb 1-1: Product: syz
[   42.341731][   T39] usb 1-1: Manufacturer: syz
[   42.346329][   T39] usb 1-1: SerialNumber: syz
[   42.368242][ T1000] FAULT_INJECTION: forcing a failure.
[   42.368242][ T1000] name fail_futex, interval 1, probability 0, space 0, times 1
[   42.381322][ T1000] CPU: 0 PID: 1000 Comm: syz.1.188 Not tainted syzkaller #0
[   42.388618][ T1000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   42.398668][ T1000] Call Trace:
[   42.401942][ T1000]  <TASK>
[   42.404873][ T1000]  __dump_stack+0x21/0x30
[   42.409205][ T1000]  dump_stack_lvl+0x110/0x170
[   42.413887][ T1000]  ? show_regs_print_info+0x20/0x20
[   42.419090][ T1000]  dump_stack+0x15/0x20
[   42.423249][ T1000]  should_fail+0x3ab/0x500
[   42.427675][ T1000]  get_futex_key+0x143/0xb60
[   42.432265][ T1000]  ? kasan_save_stack+0x3a/0x60
[   42.437114][ T1000]  ? call_rcu+0x10b/0xf60
[   42.441441][ T1000]  ? put_task_struct_rcu_user+0x5b/0x90
[   42.446982][ T1000]  ? futex_wait_restart+0x250/0x250
[   42.452163][ T1000]  ? irqentry_exit+0x37/0x40
[   42.456731][ T1000]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   42.462857][ T1000]  ? selinux_bpf+0x52/0xf0
[   42.467246][ T1000]  ? security_bpf+0x72/0xa0
[   42.471721][ T1000]  ? __x64_sys_bpf+0x7c/0x90
[   42.476350][ T1000]  ? x64_sys_call+0x4b9/0x9a0
[   42.481014][ T1000]  ? do_syscall_64+0x4c/0xa0
[   42.485589][ T1000]  futex_wait_setup+0x52/0x510
[   42.490329][ T1000]  futex_wait+0x235/0x8f0
[   42.494636][ T1000]  ? do_futex+0x2800/0x2800
[   42.499118][ T1000]  ? fcntl_setlk+0x1070/0x1070
[   42.503861][ T1000]  do_futex+0xdb1/0x2800
[   42.508086][ T1000]  ? __kasan_check_write+0x14/0x20
[   42.513187][ T1000]  ? _raw_spin_lock+0x94/0xf0
[   42.517845][ T1000]  ? _raw_spin_trylock_bh+0x150/0x150
[   42.523191][ T1000]  ? futex_exit_release+0x1e0/0x1e0
[   42.528368][ T1000]  ? migrate_enable+0x1a5/0x2a0
[   42.533194][ T1000]  ? migrate_disable+0x180/0x180
[   42.538107][ T1000]  ? migrate_enable+0x1a5/0x2a0
[   42.542933][ T1000]  ? migrate_disable+0x180/0x180
[   42.547846][ T1000]  ? bpf_prog_test_run_syscall+0x3fa/0x4f0
[   42.553633][ T1000]  ? __seccomp_filter+0x8c4/0x1930
[   42.558719][ T1000]  ? fput_many+0x15a/0x1a0
[   42.563111][ T1000]  ? bpf_prog_test_run+0x424/0x5b0
[   42.568199][ T1000]  ? __secure_computing+0x290/0x290
[   42.573375][ T1000]  ? selinux_bpf+0xce/0xf0
[   42.577766][ T1000]  ? security_bpf+0x82/0xa0
[   42.582246][ T1000]  __se_sys_futex+0x135/0x330
[   42.586903][ T1000]  ? __x64_sys_futex+0x100/0x100
[   42.591813][ T1000]  ? __secure_computing+0xea/0x290
[   42.596904][ T1000]  __x64_sys_futex+0xe5/0x100
[   42.601563][ T1000]  x64_sys_call+0x251/0x9a0
[   42.606070][ T1000]  do_syscall_64+0x4c/0xa0
[   42.610481][ T1000]  ? clear_bhb_loop+0x50/0xa0
[   42.615151][ T1000]  ? clear_bhb_loop+0x50/0xa0
[   42.619818][ T1000]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   42.625700][ T1000] RIP: 0033:0x7f1dcc249559
[   42.630100][ T1000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.649689][ T1000] RSP: 002b:00007f1dcaca10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   42.658090][ T1000] RAX: ffffffffffffffda RBX: 00007f1dcc4cffa8 RCX: 00007f1dcc249559
[   42.666053][ T1000] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1dcc4cffa8
[   42.674014][ T1000] RBP: 00007f1dcc4cffa0 R08: 0000000000000000 R09: 0000000000000000
[   42.681970][ T1000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.689925][ T1000] R13: 00007f1dcc4d0038 R14: 00007ffe920ca5e0 R15: 00007ffe920ca6c8
[   42.697887][ T1000]  </TASK>
[   42.820906][  T966] syz.0.183 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   42.836753][   T39] usb 1-1: USB disconnect, device number 8
[   42.890063][ T1027] overlayfs: failed to clone upperpath
[   42.999463][ T1036] 9pnet: Insufficient options for proto=fd
[   43.113701][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   43.113715][   T30] audit: type=1400 audit(1792714008.741:691): avc:  denied  { mount } for  pid=1046 comm="syz.5.201" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   43.119928][ T1047] loop5: detected capacity change from 0 to 512
[   43.204060][   T30] audit: type=1400 audit(1792714008.831:692): avc:  denied  { mount } for  pid=1046 comm="syz.5.201" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   43.290270][    T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   44.244278][ T1056] loop3: detected capacity change from 0 to 512
[   44.260632][ T1058] loop0: detected capacity change from 0 to 128
[   44.296812][ T1065] fuse: Bad value for 'fd'
[   44.345752][   T30] audit: type=1400 audit(1792714009.971:693): avc:  denied  { unmount } for  pid=919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   44.366464][  T919] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   44.385708][  T919] FAT-fs (loop5): Filesystem has been set read-only
[   44.394134][  T919] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   44.402644][ T1072] loop3: detected capacity change from 0 to 512
[   44.410316][   T30] audit: type=1400 audit(1792714010.001:694): avc:  denied  { unmount } for  pid=919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   44.461516][    T6] usb 2-1: device descriptor read/64, error -71
[   44.481042][   T30] audit: type=1400 audit(1792714010.111:695): avc:  denied  { read } for  pid=1071 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.549372][ T1082] loop0: detected capacity change from 0 to 512
[   44.603471][ T1082] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   44.620966][ T1082] EXT4-fs (loop0): 1 truncate cleaned up
[   44.632217][ T1082] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,auto_da_alloc=0x0000000000000007,usrjquota=,. Quota mode: none.
[   44.672072][   T30] audit: type=1400 audit(1792714010.301:696): avc:  denied  { rename } for  pid=1081 comm="syz.0.213" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.685889][ T1082] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.213: invalid indirect mapped block 4294967295 (level 1)
[   44.714050][ T1082] EXT4-fs (loop0): Remounting filesystem read-only
[   44.722389][ T1082] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.213: invalid indirect mapped block 65535 (level 2)
[   44.737747][ T1082] EXT4-fs (loop0): Remounting filesystem read-only
[   44.762365][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.769862][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.779017][ T1086] device bridge_slave_0 entered promiscuous mode
[   44.786164][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.793373][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.800937][ T1086] device bridge_slave_1 entered promiscuous mode
[   44.823810][   T30] audit: type=1400 audit(1792714010.451:697): avc:  denied  { mount } for  pid=1090 comm="syz.0.215" name="/" dev="configfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   44.849600][ T1092] Config c/1 of g1 needs at least one function.
[   44.860300][    T6] usb 2-1: device descriptor read/64, error -71
[   44.866747][ T1092] udc dummy_udc.0: failed to start g1: -22
[   44.878517][   T30] audit: type=1400 audit(1792714010.471:698): avc:  denied  { search } for  pid=1090 comm="syz.0.215" name="/" dev="configfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.901610][   T30] audit: type=1400 audit(1792714010.471:699): avc:  denied  { write } for  pid=1090 comm="syz.0.215" name="usb_gadget" dev="configfs" ino=13277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.924694][   T30] audit: type=1400 audit(1792714010.471:700): avc:  denied  { add_name } for  pid=1090 comm="syz.0.215" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.973236][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.980309][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.987574][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.994638][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.026711][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.028318][ T1104] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[   45.043925][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.052479][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.067237][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.079867][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.086931][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.102828][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.111019][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.118040][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.131700][  T470] device bridge_slave_1 left promiscuous mode
[   45.137869][  T470] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.145683][  T470] device bridge_slave_0 left promiscuous mode
[   45.151780][    T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   45.160379][  T470] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.168814][  T470] device veth1_macvtap left promiscuous mode
[   45.174888][  T470] device veth0_vlan left promiscuous mode
[   45.235133][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.243706][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.258753][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.275445][ T1086] device veth0_vlan entered promiscuous mode
[   45.283179][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.293836][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.302476][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.310436][   T60] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   45.317884][ T1086] device veth1_macvtap entered promiscuous mode
[   45.331197][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.345317][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.366718][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.420360][    T6] usb 2-1: device descriptor read/64, error -71
[   45.465539][ T1116] loop3: detected capacity change from 0 to 8192
[   45.560748][  T310]  loop3: p2 p3 < > p4 < p5 >
[   45.565817][  T310] loop3: p2 size 134217988 extends beyond EOD, truncated
[   45.594049][  T310] loop3: p5 size 134217988 extends beyond EOD, truncated
[   45.700442][  T959] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   45.810311][    T6] usb 2-1: device descriptor read/64, error -71
[   45.930344][    T6] usb usb2-port1: attempt power cycle
[   45.938162][ T1116]  loop3: p2 p3 < > p4 < p5 >
[   45.943644][ T1116] loop3: p2 size 134217988 extends beyond EOD, truncated
[   45.952609][ T1116] loop3: p5 size 134217988 extends beyond EOD, truncated
[   45.980412][  T959] usb 7-1: device descriptor read/64, error -71
[   46.050246][   T60] usb 1-1: Using ep0 maxpacket: 16
[   46.307011][ T1183] tipc: Started in network mode
[   46.312415][ T1183] tipc: Node identity 4, cluster identity 4711
[   46.318681][ T1183] tipc: Node number set to 4
[   46.323914][ T1183] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   46.350370][   T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   46.359623][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.367661][   T60] usb 1-1: Product: syz
[   46.371857][   T60] usb 1-1: Manufacturer: syz
[   46.376456][   T60] usb 1-1: SerialNumber: syz
[   46.390267][  T959] usb 7-1: device descriptor read/64, error -71
[   46.612649][ T1189] netlink: 72 bytes leftover after parsing attributes in process `syz.4.238'.
[   46.660727][  T959] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   46.740330][   T60] usb 1-1: 1:1 : format type 0 is detected, processed as PCM
[   46.747816][   T60] usb 1-1: 1:1 : unsupported sample bitwidth 0 in 13 bytes
[   46.780279][   T60] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   46.801488][ T1205] loop3: detected capacity change from 0 to 1024
[   46.812983][   T60] usb 1-1: USB disconnect, device number 9
[   46.822277][ T1205] EXT4-fs (loop3): Ignoring removed bh option
[   46.842310][ T1205] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,min_batch_time=0x0000000000000006,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,acl,journal_ioprio=0x0000000000000005,stripe=0x0000000000000013,bh,init_itable,,errors=continue. Quota mode: none.
[   46.930547][  T959] usb 7-1: device descriptor read/64, error -71
[   46.937771][ T1205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.244'.
[   47.029446][    T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   47.037640][ T1214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'.
[   47.054079][ T1217] UDC core: couldn't find an available UDC or it's busy: -16
[   47.062123][ T1217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   47.085818][ T1223] loop1: detected capacity change from 0 to 1024
[   47.172883][ T1223] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   47.203101][ T1231] loop0: detected capacity change from 0 to 512
[   47.251718][ T1231] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.254: inode #0: comm syz.0.254: iget: illegal inode #
[   47.264882][ T1231] EXT4-fs (loop0): get orphan inode failed
[   47.271276][ T1231] EXT4-fs (loop0): mount failed
[   47.278069][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.300018][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.322566][  T288] EXT4-fs error (device loop1): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=13, rec_len=0, size=60 fake=0
[   47.322676][  T959] usb 7-1: device descriptor read/64, error -71
[   47.343928][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.348456][    T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   47.362387][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.391498][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.413610][  T288] EXT4-fs error (device loop1): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=13, rec_len=0, size=60 fake=0
[   47.433066][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.447159][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.475517][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.498609][  T288] EXT4-fs error (device loop1): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=13, rec_len=0, size=60 fake=0
[   47.518346][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.519393][  T959] usb usb7-port1: attempt power cycle
[   47.532622][  T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /44/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0
[   47.560229][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.576189][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.600308][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.615244][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.630418][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.645473][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.663943][  T288] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 0, name_len 5inline size 60
[   47.790303][    T6] usb 4-1: unable to get BOS descriptor or descriptor too short
[   47.823852][ T1250] x_tables: duplicate underflow at hook 3
[   47.880330][    T6] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   47.949473][ T1258] device veth1_to_bond entered promiscuous mode
[   47.990366][  T959] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   48.041527][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.045240][ T1255] loop0: detected capacity change from 0 to 40427
[   48.048603][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.062869][ T1259] device bridge_slave_0 entered promiscuous mode
[   48.073040][ T1255] F2FS-fs (loop0): invalid crc value
[   48.076453][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.085541][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.088860][ T1255] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   48.093280][ T1259] device bridge_slave_1 entered promiscuous mode
[   48.103911][    T6] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   48.121803][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.130302][    T6] usb 4-1: Product: syz
[   48.134523][    T6] usb 4-1: Manufacturer: syz
[   48.139138][    T6] usb 4-1: SerialNumber: syz
[   48.156072][ T1255] F2FS-fs (loop0): Start checkpoint disabled!
[   48.166853][ T1255] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   48.180682][  T959] usb 7-1: device descriptor read/8, error -71
[   48.214187][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   48.223787][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.239824][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   48.249130][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.257472][  T470] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.264543][  T470] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.283347][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   48.291847][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.299996][  T470] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.307032][  T470] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.314477][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   48.327849][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.341976][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   48.341988][   T30] audit: type=1400 audit(1792714013.971:716): avc:  denied  { create } for  pid=1283 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   48.343382][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.490989][  T306] device bridge_slave_1 left promiscuous mode
[   48.499066][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.535413][  T959] usb 7-1: device descriptor read/8, error -71
[   48.679632][  T306] device bridge_slave_0 left promiscuous mode
[   48.730271][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.738724][  T306] device veth1_macvtap left promiscuous mode
[   49.048929][  T306] device veth0_vlan left promiscuous mode
[   49.168622][    T6] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[   49.198897][    T6] usb 4-1: USB disconnect, device number 7
[   49.344247][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.356390][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.371361][ T1309] loop3: detected capacity change from 0 to 512
[   49.373802][ T1259] device veth0_vlan entered promiscuous mode
[   49.384614][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.392713][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.401524][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.408909][  T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.425941][ T1259] device veth1_macvtap entered promiscuous mode
[   49.435100][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.443707][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.451131][ T1309] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.285: missing EA_INODE flag
[   49.453025][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.463709][ T1309] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.285: error while reading EA inode 2 err=-117
[   49.470607][  T959] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   49.486492][ T1309] EXT4-fs (loop3): 1 orphan inode deleted
[   49.495713][ T1309] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   49.508633][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.517181][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.523612][   T30] audit: type=1400 audit(1792714015.151:717): avc:  denied  { write } for  pid=1308 comm="syz.3.285" path="/48/file0/file2" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.525544][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.556404][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.556999][   T30] audit: type=1400 audit(1792714015.181:718): avc:  denied  { ioctl } for  pid=1308 comm="syz.3.285" path="/48/file0/file2" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.620307][  T959] usb 7-1: Using ep0 maxpacket: 16
[   49.656604][   T30] audit: type=1400 audit(1792714015.281:719): avc:  denied  { mounton } for  pid=1324 comm="syz.3.289" path="/51/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   50.054633][ T1334] overlayfs: failed to clone upperpath
[   50.090286][  T959] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   50.099327][  T959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.107654][  T959] usb 7-1: Product: syz
[   50.112348][  T959] usb 7-1: Manufacturer: syz
[   50.116941][  T959] usb 7-1: SerialNumber: syz
[   50.379162][ T1356] loop0: detected capacity change from 0 to 8192
[   50.469965][   T30] audit: type=1400 audit(1792714016.071:720): avc:  denied  { associate } for  pid=1365 comm="syz.4.306" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   50.950910][   T30] audit: type=1326 audit(1792714016.581:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.4.312" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a63c7559 code=0x7ffc0000
[   50.978355][   T30] audit: type=1326 audit(1792714016.601:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.4.312" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a63c7559 code=0x7ffc0000
[   51.003919][   T30] audit: type=1326 audit(1792714016.601:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.4.312" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f45a63c7559 code=0x7ffc0000
[   51.029245][   T30] audit: type=1326 audit(1792714016.601:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.4.312" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a63c7559 code=0x7ffc0000
[   51.222830][   T30] audit: type=1400 audit(1792714016.851:725): avc:  denied  { bind } for  pid=1385 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.145059][ T1171] usb 7-1: USB disconnect, device number 5
[   52.161165][ T1401] loop6: detected capacity change from 0 to 512
[   52.518554][ T1409] loop0: detected capacity change from 0 to 512
[   52.576599][ T1409] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.740594][ T1431] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   52.868217][ T1442] loop3: detected capacity change from 0 to 128
[   52.950870][ T1442] FAT-fs (loop3): Unrecognized mount option "ÿÿ" or missing value
[   53.044951][ T1442] loop3: detected capacity change from 0 to 128
[   53.183716][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.191023][ T1448] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.198473][ T1448] device bridge_slave_0 entered promiscuous mode
[   53.206207][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.213402][ T1448] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.221051][ T1448] device bridge_slave_1 entered promiscuous mode
[   53.291035][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.298074][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.305347][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.312373][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.177830][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.185224][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.205698][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.218946][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.235342][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.247811][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.285361][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.292442][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.345770][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.354873][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   54.354885][   T30] audit: type=1400 audit(1792714019.981:742): avc:  denied  { write } for  pid=1496 comm="syz.3.354" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.461154][   T30] audit: type=1400 audit(1792714020.021:743): avc:  denied  { open } for  pid=1496 comm="syz.3.354" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.494802][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.503362][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.510414][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.566243][ T1448] device veth0_vlan entered promiscuous mode
[   54.591963][ T1448] device veth1_macvtap entered promiscuous mode
[   54.732638][ T1514] device-mapper: table: 253:1: crypt: Device lookup failed
[   54.757921][ T1514] device-mapper: ioctl: error adding target to table
[   54.820615][ T1171] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   54.847208][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.871195][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.894180][   T30] audit: type=1400 audit(1792714020.521:744): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   54.915067][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.924316][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.933562][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.942681][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.952293][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.960803][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.969953][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.979139][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.002668][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   55.025442][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   55.034507][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.051987][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.061776][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.070879][ T1504] validate_nla: 25 callbacks suppressed
[   55.071002][ T1504] netlink: 'syz.4.356': attribute type 4 has an invalid length.
[   55.090922][ T1507] netlink: 'syz.4.356': attribute type 4 has an invalid length.
[   55.095074][   T30] audit: type=1400 audit(1792714020.721:745): avc:  denied  { write } for  pid=1518 comm="syz.7.361" name="001" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   55.123576][ T1527] hub 5-0:1.0: USB hub found
[   55.128340][ T1527] hub 5-0:1.0: 1 port detected
[   55.243679][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.258949][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.310422][ T1171] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.339634][ T1171] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   55.365503][ T1171] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   55.405123][ T1171] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   55.416878][    T8] device bridge_slave_1 left promiscuous mode
[   55.423703][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.441470][ T1171] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   55.455123][ T1171] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   55.487766][ T1537] loop0: detected capacity change from 0 to 512
[   55.494381][ T1171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.516217][    T8] device bridge_slave_0 left promiscuous mode
[   55.525137][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.533519][ T1506] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.549084][    T8] device veth1_macvtap left promiscuous mode
[   55.586990][ T1537] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   55.587135][    T8] device veth0_vlan left promiscuous mode
[   55.605291][ T1537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   55.646887][ T1537] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.369: Invalid block bitmap block 0 in block_group 0
[   55.721870][ T1537] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   55.816569][ T1171] usb 4-1: USB disconnect, device number 8
[   55.835933][ T1537] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.369: attempt to clear invalid blocks 983261 len 1
[   55.954997][ T1537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.369: Invalid inode table block 0 in block_group 0
[   55.968837][ T1537] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   55.978495][ T1537] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   55.987310][ T1537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.369: Invalid inode table block 0 in block_group 0
[   56.000556][ T1537] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   56.010079][ T1537] EXT4-fs error (device loop0): ext4_truncate:4317: inode #11: comm syz.0.369: mark_inode_dirty error
[   56.021438][ T1537] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   56.030777][ T1537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.369: Invalid inode table block 0 in block_group 0
[   56.043649][ T1537] EXT4-fs (loop0): 1 truncate cleaned up
[   56.049324][ T1537] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[   56.080881][ T1537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.369: Invalid inode table block 0 in block_group 0
[   56.483880][   T30] audit: type=1400 audit(1792714022.111:746): avc:  denied  { watch watch_reads } for  pid=1557 comm="syz.3.374" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   56.496154][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'.
[   56.536597][   T30] audit: type=1400 audit(1792714022.161:747): avc:  denied  { mounton } for  pid=1565 comm="syz.3.378" path="/62/file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   56.846869][ T1590] netlink: 16 bytes leftover after parsing attributes in process `syz.7.389'.
[   56.927822][ T1598] loop3: detected capacity change from 0 to 2048
[   57.095444][ T1598] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none.
[   57.266562][   T30] audit: type=1400 audit(1792714022.891:748): avc:  denied  { append } for  pid=1597 comm="syz.3.393" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.640326][  T294] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   58.000318][  T294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.010293][  T294] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   58.020079][  T294] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[   58.029882][  T294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.043165][   T30] audit: type=1400 audit(1792714023.671:749): avc:  denied  { search } for  pid=1627 comm="syz.3.405" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   58.073971][   T30] audit: type=1400 audit(1792714023.701:750): avc:  denied  { read } for  pid=1627 comm="syz.3.405" name="trace_pipe" dev="tracefs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   58.097037][   T30] audit: type=1400 audit(1792714023.701:751): avc:  denied  { open } for  pid=1627 comm="syz.3.405" path="/72/mnt/trace_pipe" dev="tracefs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   58.304707][ T1171] usb 7-1: USB disconnect, device number 6
[   58.862046][ T1658] netlink: 20 bytes leftover after parsing attributes in process `syz.6.418'.
[   58.967255][ T1662] mmap: syz.6.420 (1662) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   59.555423][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   59.555440][   T30] audit: type=1400 audit(1792714025.171:753): avc:  denied  { shutdown } for  pid=1673 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   59.584779][   T30] audit: type=1400 audit(1792714025.171:754): avc:  denied  { read } for  pid=1673 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.010242][  T312] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   60.043787][ T1701] FAULT_INJECTION: forcing a failure.
[   60.043787][ T1701] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   60.057102][ T1701] CPU: 0 PID: 1701 Comm: syz.6.433 Not tainted syzkaller #0
[   60.064392][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   60.074454][ T1701] Call Trace:
[   60.077725][ T1701]  <TASK>
[   60.080645][ T1701]  __dump_stack+0x21/0x30
[   60.084975][ T1701]  dump_stack_lvl+0x110/0x170
[   60.089649][ T1701]  ? show_regs_print_info+0x20/0x20
[   60.094841][ T1701]  ? 0xffffffffa0028000
[   60.098990][ T1701]  dump_stack+0x15/0x20
[   60.103144][ T1701]  should_fail+0x3ab/0x500
[   60.107562][ T1701]  should_fail_alloc_page+0x55/0x80
[   60.112756][ T1701]  prepare_alloc_pages+0x13f/0x590
[   60.117855][ T1701]  ? __alloc_pages_bulk+0xab0/0xab0
[   60.123038][ T1701]  ? __update_load_avg_cfs_rq+0xb1/0x2e0
[   60.128656][ T1701]  __alloc_pages+0x11d/0x460
[   60.133225][ T1701]  ? unlock_page_memcg+0x114/0x130
[   60.138320][ T1701]  ? prep_new_page+0x110/0x110
[   60.143060][ T1701]  ? page_remove_rmap+0xc6d/0xf40
[   60.148067][ T1701]  ? page_add_file_rmap+0x700/0x700
[   60.153241][ T1701]  ? mark_page_accessed+0x3a8/0x8e0
[   60.158417][ T1701]  __get_free_pages+0x10/0x30
[   60.163071][ T1701]  __tlb_remove_page_size+0x18a/0x310
[   60.168423][ T1701]  unmap_page_range+0x1059/0x1e00
[   60.173428][ T1701]  ? mmu_notifier_invalidate_range_end+0xe0/0xe0
[   60.179732][ T1701]  ? lru_cache_add+0x7e0/0x7e0
[   60.184476][ T1701]  ? schedule_preempt_disabled+0x20/0x20
[   60.190088][ T1701]  unmap_vmas+0x26d/0x380
[   60.194398][ T1701]  ? unmap_page_range+0x1e00/0x1e00
[   60.199575][ T1701]  ? __kasan_check_write+0x14/0x20
[   60.204664][ T1701]  ? tlb_gather_mmu_fullmm+0x144/0x1c0
[   60.210105][ T1701]  exit_mmap+0x412/0x8b0
[   60.214331][ T1701]  ? vm_brk+0x30/0x30
[   60.218293][ T1701]  ? mutex_unlock+0x8f/0x230
[   60.222866][ T1701]  ? uprobe_clear_state+0x2c6/0x320
[   60.228047][ T1701]  __mmput+0x92/0x300
[   60.232011][ T1701]  mmput+0x50/0x150
[   60.235802][ T1701]  do_exit+0xacc/0x29a0
[   60.239938][ T1701]  ? do_syscall_64+0x58/0xa0
[   60.244504][ T1701]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   60.250555][ T1701]  ? put_task_struct+0x90/0x90
[   60.255300][ T1701]  ? __kasan_check_write+0x14/0x20
[   60.260397][ T1701]  ? _raw_spin_lock_irq+0x95/0xf0
[   60.265402][ T1701]  do_group_exit+0x149/0x310
[   60.269971][ T1701]  ? __kasan_check_write+0x14/0x20
[   60.275064][ T1701]  ? recalc_sigpending+0x1ac/0x230
[   60.280159][ T1701]  get_signal+0x64f/0x1430
[   60.284558][ T1701]  arch_do_signal_or_restart+0xe2/0x1100
[   60.290168][ T1701]  ? rcu_gp_kthread_wake+0x90/0x90
[   60.295258][ T1701]  ? kmem_cache_free+0x100/0x320
[   60.300179][ T1701]  ? get_sigframe_size+0x10/0x10
[   60.305095][ T1701]  ? __se_sys_futex+0x135/0x330
[   60.309929][ T1701]  ? ____fput+0x15/0x20
[   60.314064][ T1701]  exit_to_user_mode_loop+0xa7/0xe0
[   60.319241][ T1701]  exit_to_user_mode_prepare+0x87/0xd0
[   60.324678][ T1701]  syscall_exit_to_user_mode+0x1a/0x30
[   60.330115][ T1701]  do_syscall_64+0x58/0xa0
[   60.334515][ T1701]  ? clear_bhb_loop+0x50/0xa0
[   60.339169][ T1701]  ? clear_bhb_loop+0x50/0xa0
[   60.343837][ T1701]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   60.349722][ T1701] RIP: 0033:0x7ff4cc199559
[   60.354118][ T1701] Code: Unable to access opcode bytes at RIP 0x7ff4cc19952f.
[   60.361461][ T1701] RSP: 002b:00007ff4cabf10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   60.369861][ T1701] RAX: 0000000000000001 RBX: 00007ff4cc41ffa8 RCX: 00007ff4cc199559
[   60.377810][ T1701] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff4cc41ffac
[   60.385763][ T1701] RBP: 00007ff4cc41ffa0 R08: 0000d8497ba348e0 R09: 0000000000000000
[   60.393716][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.401663][ T1701] R13: 00007ff4cc420038 R14: 00007ffca5b63200 R15: 00007ffca5b632e8
[   60.409618][ T1701]  </TASK>
[   60.692413][   T30] audit: type=1400 audit(1792714026.321:755): avc:  denied  { write } for  pid=1715 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.751629][   T30] audit: type=1400 audit(1792714026.351:756): avc:  denied  { nlmsg_write } for  pid=1715 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.990328][  T312] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.014411][  T312] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   61.351718][ T1747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.418171][ T1753] loop6: detected capacity change from 0 to 512
[   61.461948][ T1758] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.487134][ T1758] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.531399][ T1753] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x00000000000000d8,nodelalloc,quota,,errors=continue. Quota mode: writeback.
[   61.581118][ T1767] loop3: detected capacity change from 0 to 256
[   61.593646][ T1753] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.669224][ T1777] loop6: detected capacity change from 0 to 512
[   61.675742][  T312] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[   61.686847][  T312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.688796][ T1779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'.
[   61.695064][ T1767] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.720350][  T312] usb 8-1: Product: syz
[   61.726248][  T312] usb 8-1: Manufacturer: syz
[   61.729477][ T1767] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048)
[   61.738742][ T1767] FAT-fs (loop3): Filesystem has been set read-only
[   61.743996][  T312] usb 8-1: SerialNumber: syz
[   61.761811][ T1777] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   61.775406][ T1777] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.789708][   T30] audit: type=1400 audit(1792714027.411:757): avc:  denied  { map } for  pid=1776 comm="syz.6.466" path="/32/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.881045][ T1789] loop6: detected capacity change from 0 to 1024
[   61.896566][ T1789] EXT4-fs (loop6): Ignoring removed bh option
[   61.911638][ T1789] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[   61.939404][ T1789] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   62.077204][   T30] audit: type=1400 audit(1792714027.701:758): avc:  denied  { create } for  pid=1794 comm="syz.6.475" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.107529][   T30] audit: type=1400 audit(1792714027.721:759): avc:  denied  { read write } for  pid=1794 comm="syz.6.475" name="md0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.130590][   T30] audit: type=1400 audit(1792714027.721:760): avc:  denied  { open } for  pid=1794 comm="syz.6.475" path="/36/md0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.153456][   T30] audit: type=1400 audit(1792714027.731:761): avc:  denied  { unlink } for  pid=1086 comm="syz-executor" name="md0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.160291][ T1172] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   62.176365][   T30] audit: type=1400 audit(1792714027.781:762): avc:  denied  { create } for  pid=1796 comm="syz.6.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   62.264234][ T1801] overlayfs: failed to clone upperpath
[   62.281050][ T1803] overlayfs: failed to clone upperpath
[   62.500248][ T1169] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   62.590311][ T1172] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   62.690324][ T1172] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   62.870324][ T1172] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[   62.879494][ T1169] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   62.889704][ T1169] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   62.900606][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.908662][ T1172] usb 4-1: Product: syz
[   62.913173][ T1172] usb 4-1: Manufacturer: syz
[   62.917830][ T1172] usb 4-1: SerialNumber: syz
[   62.975838][ T1169] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   62.984883][ T1169] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   62.995860][ T1169] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   63.104925][ T1171] usb 8-1: USB disconnect, device number 2
[   63.120293][ T1169] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   63.145687][ T1169] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   63.174043][ T1169] usb 7-1: Product: syz
[   63.178234][ T1169] usb 7-1: Manufacturer: syz
[   63.235355][ T1821] loop7: detected capacity change from 0 to 256
[   63.242140][ T1169] cdc_wdm 7-1:1.0: skipping garbage
[   63.247964][ T1169] cdc_wdm 7-1:1.0: skipping garbage
[   63.261789][ T1169] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   63.280926][ T1821] FAT-fs (loop7): Directory bread(block 1285) failed
[   63.287643][ T1821] FAT-fs (loop7): Directory bread(block 1286) failed
[   63.304524][ T1821] FAT-fs (loop7): Directory bread(block 1287) failed
[   63.311446][ T1821] FAT-fs (loop7): Directory bread(block 1288) failed
[   63.318545][ T1811] overlayfs: failed to clone upperpath
[   63.411403][ T1823] usb usb7: usbfs: process 1823 (syz.7.486) did not claim interface 0 before use
[   63.444411][ T1171] usb 7-1: USB disconnect, device number 7
[   64.303975][ T1842] loop6: detected capacity change from 0 to 8192
[   64.527291][  T312] usb 4-1: USB disconnect, device number 9
[   64.608720][ T1855] loop3: detected capacity change from 0 to 256
[   64.657909][ T1859] loop6: detected capacity change from 0 to 512
[   64.684068][ T1855] exfat: Deprecated parameter 'namecase'
[   64.752587][ T1855] exfat: Deprecated parameter 'namecase'
[   64.923844][ T1859] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   64.953856][ T1855] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   64.971408][ T1859] EXT4-fs (loop6): 1 truncate cleaned up
[   64.977168][ T1859] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[   65.003139][   T30] audit: type=1400 audit(1792714030.631:763): avc:  denied  { write } for  pid=1853 comm="syz.3.498" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.055068][   T30] audit: type=1400 audit(1792714030.661:764): avc:  denied  { add_name } for  pid=1853 comm="syz.3.498" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.098430][   T30] audit: type=1400 audit(1792714030.661:765): avc:  denied  { associate } for  pid=1853 comm="syz.3.498" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   65.143006][   T30] audit: type=1400 audit(1792714030.661:766): avc:  denied  { write } for  pid=1853 comm="syz.3.498" path=2F38342FE91F7189591E9233614B2F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop3" ino=1048717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.172601][ T1875] fuse: Bad value for 'fd'
[   66.187984][ T1878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'.
[   66.208051][ T1878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.509'.
[   66.218433][ T1878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.509'.
[   66.398127][   T30] audit: type=1400 audit(1792714031.911:767): avc:  denied  { sys_admin } for  pid=1873 comm="syz.3.507" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   66.690372][   T30] audit: type=1400 audit(1792714032.321:768): avc:  denied  { bind } for  pid=1895 comm="syz.7.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   66.754593][ T1900] FAULT_INJECTION: forcing a failure.
[   66.754593][ T1900] name failslab, interval 1, probability 0, space 0, times 1
[   66.782740][ T1900] CPU: 1 PID: 1900 Comm: syz.7.516 Not tainted syzkaller #0
[   66.790057][ T1900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   66.800118][ T1900] Call Trace:
[   66.803399][ T1900]  <TASK>
[   66.806341][ T1900]  __dump_stack+0x21/0x30
[   66.810680][ T1900]  dump_stack_lvl+0x110/0x170
[   66.815361][ T1900]  ? show_regs_print_info+0x20/0x20
[   66.820565][ T1900]  dump_stack+0x15/0x20
[   66.824726][ T1900]  should_fail+0x3ab/0x500
[   66.829155][ T1900]  __should_failslab+0xa4/0xe0
[   66.833924][ T1900]  should_failslab+0x9/0x20
[   66.838437][ T1900]  slab_pre_alloc_hook+0x39/0xd0
[   66.843378][ T1900]  kmem_cache_alloc_trace+0x48/0x270
[   66.848677][ T1900]  ? selinux_key_alloc+0x56/0x190
[   66.853708][ T1900]  selinux_key_alloc+0x56/0x190
[   66.858566][ T1900]  security_key_alloc+0x74/0xa0
[   66.863416][ T1900]  key_alloc+0x72c/0xef0
[   66.867665][ T1900]  keyring_alloc+0x47/0xb0
[   66.872085][ T1900]  lookup_user_key+0x448/0x11b0
[   66.876940][ T1900]  ? lookup_user_key_possessed+0x40/0x40
[   66.882583][ T1900]  ? search_process_keyrings_rcu+0x280/0x280
[   66.888571][ T1900]  ? __kasan_check_write+0x14/0x20
[   66.893693][ T1900]  ? _copy_from_user+0x95/0xd0
[   66.898461][ T1900]  __se_sys_add_key+0x311/0x410
[   66.903326][ T1900]  ? __x64_sys_add_key+0xd0/0xd0
[   66.908275][ T1900]  ? ksys_write+0x1fa/0x260
[   66.912782][ T1900]  ? __kasan_check_write+0x14/0x20
[   66.917989][ T1900]  __x64_sys_add_key+0xbf/0xd0
[   66.922756][ T1900]  x64_sys_call+0x713/0x9a0
[   66.927264][ T1900]  do_syscall_64+0x4c/0xa0
[   66.931681][ T1900]  ? clear_bhb_loop+0x50/0xa0
[   66.936358][ T1900]  ? clear_bhb_loop+0x50/0xa0
[   66.941035][ T1900]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   66.946928][ T1900] RIP: 0033:0x7fa8f98ca559
[   66.951349][ T1900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.970955][ T1900] RSP: 002b:00007fa8f8322028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   66.979382][ T1900] RAX: ffffffffffffffda RBX: 00007fa8f9b50fa0 RCX: 00007fa8f98ca559
[   66.987358][ T1900] RDX: 00002000000018c0 RSI: 0000000000000000 RDI: 0000200000000200
[   66.995333][ T1900] RBP: 00007fa8f9961b20 R08: ffffffffffffffff R09: 0000000000000000
[   67.003303][ T1900] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   67.011272][ T1900] R13: 00007fa8f9b51038 R14: 00007fa8f9b50fa0 R15: 00007fffd1dce638
[   67.019249][ T1900]  </TASK>
[   67.126752][ T1903] loop3: detected capacity change from 0 to 256
[   67.789463][ T1915] loop7: detected capacity change from 0 to 512
[   67.840825][ T1915] EXT4-fs (loop7): old and new quota format mixing
[   68.381680][   T30] audit: type=1400 audit(1792714033.621:769): avc:  denied  { mounton } for  pid=1884 comm="syz.6.510" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   68.538654][   T30] audit: type=1400 audit(1792714034.011:770): avc:  denied  { bind } for  pid=1916 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.550040][ T1922] loop7: detected capacity change from 0 to 2048
[   68.681220][  T429]  loop7: p1 p3 < > p4 < p5 >
[   68.686100][  T429] loop7: partition table partially beyond EOD, truncated
[   68.707757][  T429] loop7: p1 size 196608 extends beyond EOD, truncated
[   68.731988][  T429] loop7: p3 start 614273 is beyond EOD, truncated
[   68.846112][  T429] loop7: p5 size 196608 extends beyond EOD, truncated
[   68.867662][ T1922]  loop7: p1 p3 < > p4 < p5 >
[   68.880236][ T1922] loop7: partition table partially beyond EOD, truncated
[   68.887366][ T1922] loop7: p1 size 196608 extends beyond EOD, truncated
[   68.977843][ T1922] loop7: p3 start 614273 is beyond EOD, truncated
[   69.004215][ T1922] loop7: p5 size 196608 extends beyond EOD, truncated
[   69.043722][ T1933] loop3: detected capacity change from 0 to 128
[   69.074962][ T1939] loop6: detected capacity change from 0 to 1024
[   69.137045][  T429] udevd[429]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   69.137045][  T326] udevd[326]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[   69.157137][  T310] udevd[310]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   69.163031][ T1944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.173979][ T1944] IPv6: NLM_F_CREATE should be set when creating new route
[   69.191738][ T1939] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   69.204475][  T310] udevd[310]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[   69.215041][ T1941] udevd[1941]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   69.226379][  T429] udevd[429]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   69.358578][ T1944] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.333220][ T1971] loop6: detected capacity change from 0 to 16
[   70.492219][ T1971] erofs: (device loop6): mounted with root inode @ nid 36.
[   70.543642][   T30] audit: type=1400 audit(1792714036.171:771): avc:  denied  { rename } for  pid=1970 comm="syz.6.534" name="file2" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.624443][   T30] audit: type=1400 audit(1792714036.191:772): avc:  denied  { setattr } for  pid=1970 comm="syz.6.534" name="#291" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.670088][   T30] audit: type=1400 audit(1792714036.191:773): avc:  denied  { write open } for  pid=1970 comm="syz.6.534" name="#291" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.731083][ T1979] loop7: detected capacity change from 0 to 1024
[   70.761895][   T30] audit: type=1400 audit(1792714036.191:774): avc:  denied  { link } for  pid=1970 comm="syz.6.534" name="#291" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.785309][ T1981] loop6: detected capacity change from 0 to 512
[   70.867250][ T1981] EXT4-fs (loop6): Test dummy encryption mode enabled
[   70.867363][ T1979] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,bsddf,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none.
[   70.912971][ T1981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   70.925008][ T1979] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.941787][ T1981] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.544: bad orphan inode 131072
[   70.981900][ T1981] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,data=journal,norecovery,,errors=continue. Quota mode: none.
[   71.040387][ T1981] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   71.074435][ T1981] overlayfs: upper fs needs to support d_type.
[   71.149377][ T1981] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   71.300445][   T30] audit: type=1400 audit(1792714036.901:775): avc:  denied  { write } for  pid=1987 comm="syz.7.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   71.342847][ T1992] FAULT_INJECTION: forcing a failure.
[   71.342847][ T1992] name failslab, interval 1, probability 0, space 0, times 0
[   71.374911][ T1992] CPU: 1 PID: 1992 Comm: syz.3.548 Not tainted syzkaller #0
[   71.382224][ T1992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   71.392276][ T1992] Call Trace:
[   71.395553][ T1992]  <TASK>
[   71.398478][ T1992]  __dump_stack+0x21/0x30
[   71.402810][ T1992]  dump_stack_lvl+0x110/0x170
[   71.407486][ T1992]  ? show_regs_print_info+0x20/0x20
[   71.412684][ T1992]  dump_stack+0x15/0x20
[   71.416835][ T1992]  should_fail+0x3ab/0x500
[   71.421252][ T1992]  __should_failslab+0xa4/0xe0
[   71.426016][ T1992]  should_failslab+0x9/0x20
[   71.430521][ T1992]  slab_pre_alloc_hook+0x39/0xd0
[   71.435457][ T1992]  kmem_cache_alloc_trace+0x48/0x270
[   71.440740][ T1992]  ? blkg_alloc+0x82/0x5d0
[   71.445152][ T1992]  blkg_alloc+0x82/0x5d0
[   71.449392][ T1992]  ? blk_timeout_work+0x10/0x10
[   71.454253][ T1992]  blkcg_init_queue+0x29/0x210
[   71.459019][ T1992]  blk_alloc_queue+0x3be/0x550
[   71.463794][ T1992]  __blk_alloc_disk+0x17/0x60
[   71.468472][ T1992]  dm_create+0x4d6/0xd20
[   71.472724][ T1992]  dev_create+0x12e/0x2c0
[   71.477056][ T1992]  ? list_devices+0x820/0x820
[   71.481737][ T1992]  ? __kasan_check_write+0x14/0x20
[   71.486851][ T1992]  ? _copy_from_user+0x95/0xd0
[   71.491612][ T1992]  dm_ctl_ioctl+0x8ee/0xca0
[   71.496119][ T1992]  ? list_devices+0x820/0x820
[   71.500793][ T1992]  ? dm_poll+0x120/0x120
[   71.505027][ T1992]  ? kernfs_node_from_dentry+0x60/0xc0
[   71.510498][ T1992]  ? security_file_ioctl+0x84/0xa0
[   71.515614][ T1992]  ? dm_poll+0x120/0x120
[   71.519855][ T1992]  __se_sys_ioctl+0x121/0x1a0
[   71.524531][ T1992]  __x64_sys_ioctl+0x7b/0x90
[   71.529123][ T1992]  x64_sys_call+0x2f/0x9a0
[   71.533549][ T1992]  do_syscall_64+0x4c/0xa0
[   71.537969][ T1992]  ? clear_bhb_loop+0x50/0xa0
[   71.542651][ T1992]  ? clear_bhb_loop+0x50/0xa0
[   71.547330][ T1992]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   71.553226][ T1992] RIP: 0033:0x7f1883955559
[   71.557636][ T1992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.577242][ T1992] RSP: 002b:00007f18823ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.585657][ T1992] RAX: ffffffffffffffda RBX: 00007f1883bdbfa0 RCX: 00007f1883955559
[   71.593630][ T1992] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000004
[   71.601600][ T1992] RBP: 00007f18839ecb20 R08: 0000000000000000 R09: 0000000000000000
[   71.609568][ T1992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.617536][ T1992] R13: 00007f1883bdc038 R14: 00007f1883bdbfa0 R15: 00007ffd66a1c1c8
[   71.625505][ T1992]  </TASK>
[   71.823557][ T2000] loop3: detected capacity change from 0 to 2048
[   71.963276][ T2000] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[   72.098212][   T30] audit: type=1400 audit(1792714037.721:776): avc:  denied  { connect } for  pid=2009 comm="syz.7.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.151372][ T2016] usb usb8: usbfs: process 2016 (syz.7.558) did not claim interface 0 before use
[   72.174676][   T30] audit: type=1400 audit(1792714037.801:777): avc:  denied  { read write } for  pid=2019 comm="syz.7.559" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.177146][ T1286] hid-generic 0009:046D:C082.0004: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[   72.238602][   T30] audit: type=1400 audit(1792714037.801:778): avc:  denied  { open } for  pid=2019 comm="syz.7.559" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.297901][ T2005] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.321038][ T2005] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.352756][ T2005] device bridge_slave_0 entered promiscuous mode
[   72.363563][    T8] device bridge_slave_1 left promiscuous mode
[   72.371219][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.373433][   T30] audit: type=1326 audit(1792714038.001:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.7.562" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8f98ca559 code=0x0
[   72.407712][    T8] device bridge_slave_0 left promiscuous mode
[   72.444896][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.453657][ T2030] loop7: detected capacity change from 0 to 512
[   72.456008][ T2027] fido_id[2027]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   72.487954][    T8] device veth1_macvtap left promiscuous mode
[   72.490863][ T2030] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.562: missing EA_INODE flag
[   72.506186][ T2030] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.562: error while reading EA inode 2 err=-117
[   72.515648][    T8] device veth0_vlan left promiscuous mode
[   72.525471][ T2030] EXT4-fs (loop7): 1 orphan inode deleted
[   72.532005][ T2030] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   72.755589][ T2005] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.762737][ T2005] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.772403][ T2005] device bridge_slave_1 entered promiscuous mode
[   72.834686][  T285] syz-executor (285) used greatest stack depth: 20864 bytes left
[   73.016728][ T2031] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.024696][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.032170][ T2031] device bridge_slave_0 entered promiscuous mode
[   73.046893][ T2031] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.053993][ T2031] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.061573][ T2031] device bridge_slave_1 entered promiscuous mode
[   73.074533][   T30] audit: type=1326 audit(1792714038.701:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883955559 code=0x7ffc0000
[   73.101788][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.109265][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.127720][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.136082][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.144456][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.151595][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.159737][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.168702][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.177198][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.184244][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.191949][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.248240][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.257577][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.303686][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.314432][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.323213][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.330269][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.363558][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.374543][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.382975][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.391450][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.399161][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.408060][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.416223][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.423238][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.431020][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.440595][ T2005] device veth0_vlan entered promiscuous mode
[   73.449721][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.458007][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.479211][ T2005] device veth1_macvtap entered promiscuous mode
[   73.488703][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.497419][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.506279][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.514181][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.522893][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.546486][ T2031] device veth0_vlan entered promiscuous mode
[   73.590755][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.599116][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.607524][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.616402][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.624982][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.633468][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.641979][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.649473][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.679964][ T2031] device veth1_macvtap entered promiscuous mode
[   73.749665][ T2087] loop9: detected capacity change from 0 to 256
[   74.001637][ T2087] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   74.214470][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.240510][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.260546][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.279019][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.300939][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.323360][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.344454][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.539997][    T8] device bridge_slave_1 left promiscuous mode
[   75.552555][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.559352][ T2126] loop3: detected capacity change from 0 to 512
[   75.566335][    T8] device bridge_slave_0 left promiscuous mode
[   75.572561][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.574333][ T2129] loop8: detected capacity change from 0 to 512
[   75.586542][    T8] device veth1_macvtap left promiscuous mode
[   75.592607][    T8] device veth0_vlan left promiscuous mode
[   75.593382][ T2126] EXT4-fs (loop3): Ignoring removed oldalloc option
[   75.621109][ T2129] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[   75.629424][ T2126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c018, mo2=0002]
[   75.629786][ T2129] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.599: invalid indirect mapped block 256 (level 1)
[   75.637406][ T2126] System zones: 1-3, 19-19, 35-38
[   75.651555][ T2129] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.599: invalid indirect mapped block 2683928664 (level 1)
[   75.656397][ T2126] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,debug,noinit_itable,,errors=continue. Quota mode: writeback.
[   75.670702][ T2129] EXT4-fs (loop8): 1 truncate cleaned up
[   75.683323][ T2126] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.698981][ T2129] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[   75.765528][ T1172] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   75.794120][   T30] kauditd_printk_skb: 12 callbacks suppressed
[   75.794134][   T30] audit: type=1400 audit(1792714041.421:793): avc:  denied  { execute } for  pid=2136 comm="syz.3.601" name="file0" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   75.800593][ T2137] Invalid argument reading file caps for ./file0
[   75.822792][   T30] audit: type=1400 audit(1792714041.431:794): avc:  denied  { execute_no_trans } for  pid=2136 comm="syz.3.601" path="/122/file0" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   76.058250][ T1172] usb 10-1: Using ep0 maxpacket: 16
[   76.392704][ T1171] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   76.520376][ T1172] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[   76.690375][ T1172] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   76.699562][ T1172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.707702][ T1172] usb 10-1: Product: syz
[   76.712000][ T1172] usb 10-1: Manufacturer: syz
[   76.716696][ T1172] usb 10-1: SerialNumber: syz
[   76.721988][ T1172] usb 10-1: config 0 descriptor??
[   76.770289][ T1171] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.780467][ T1171] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   76.789504][ T1171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.042988][ T1171] usb 4-1: USB disconnect, device number 10
[   77.506215][ T2190] FAULT_INJECTION: forcing a failure.
[   77.506215][ T2190] name failslab, interval 1, probability 0, space 0, times 0
[   77.519256][ T2190] CPU: 1 PID: 2190 Comm: syz.8.623 Not tainted syzkaller #0
[   77.526676][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   77.536738][ T2190] Call Trace:
[   77.540011][ T2190]  <TASK>
[   77.542938][ T2190]  __dump_stack+0x21/0x30
[   77.547281][ T2190]  dump_stack_lvl+0x110/0x170
[   77.551967][ T2190]  ? show_regs_print_info+0x20/0x20
[   77.557174][ T2190]  dump_stack+0x15/0x20
[   77.561338][ T2190]  should_fail+0x3ab/0x500
[   77.565752][ T2190]  __should_failslab+0xa4/0xe0
[   77.570517][ T2190]  should_failslab+0x9/0x20
[   77.575016][ T2190]  slab_pre_alloc_hook+0x39/0xd0
[   77.579956][ T2190]  ? security_file_alloc+0x33/0x120
[   77.585154][ T2190]  kmem_cache_alloc+0x44/0x260
[   77.589921][ T2190]  security_file_alloc+0x33/0x120
[   77.594950][ T2190]  __alloc_file+0xb5/0x2a0
[   77.599364][ T2190]  alloc_empty_file+0x97/0x180
[   77.604129][ T2190]  path_openat+0xf4/0x2f80
[   77.608557][ T2190]  ? __stack_depot_save+0x34/0x480
[   77.613669][ T2190]  ? __kasan_slab_alloc+0xc9/0xe0
[   77.618691][ T2190]  ? __kasan_slab_alloc+0xb7/0xe0
[   77.623709][ T2190]  ? slab_post_alloc_hook+0x4f/0x2b0
[   77.629000][ T2190]  ? kmem_cache_alloc+0xf7/0x260
[   77.633935][ T2190]  ? getname_flags+0xba/0x510
[   77.638610][ T2190]  ? getname+0x19/0x20
[   77.642670][ T2190]  ? do_sys_openat2+0xeb/0x7f0
[   77.647425][ T2190]  ? __x64_sys_openat+0x136/0x160
[   77.652442][ T2190]  ? x64_sys_call+0x219/0x9a0
[   77.657114][ T2190]  ? do_syscall_64+0x4c/0xa0
[   77.661694][ T2190]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   77.667758][ T2190]  ? do_filp_open+0x400/0x400
[   77.672432][ T2190]  do_filp_open+0x1df/0x400
[   77.676932][ T2190]  ? vfs_tmpfile+0x2d0/0x2d0
[   77.681524][ T2190]  do_sys_openat2+0x15e/0x7f0
[   77.686207][ T2190]  ? __se_sys_mount+0x353/0x390
[   77.691050][ T2190]  ? do_sys_open+0xe0/0xe0
[   77.695458][ T2190]  __x64_sys_openat+0x136/0x160
[   77.700299][ T2190]  x64_sys_call+0x219/0x9a0
[   77.704796][ T2190]  do_syscall_64+0x4c/0xa0
[   77.709208][ T2190]  ? clear_bhb_loop+0x50/0xa0
[   77.713883][ T2190]  ? clear_bhb_loop+0x50/0xa0
[   77.718553][ T2190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   77.724443][ T2190] RIP: 0033:0x7fe498c4cd8e
[   77.728849][ T2190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   77.748452][ T2190] RSP: 002b:00007fe4976e3da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   77.756864][ T2190] RAX: ffffffffffffffda RBX: 00007fe4976e46c0 RCX: 00007fe498c4cd8e
[   77.764829][ T2190] RDX: 0000000000010000 RSI: 0000200000000300 RDI: ffffffffffffff9c
[   77.772799][ T2190] RBP: 00002000000002c0 R08: 0000000000000000 R09: 0000000000000000
[   77.780762][ T2190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300
[   77.788730][ T2190] R13: 00007fe4976e3ea0 R14: 0000000000000000 R15: 0000200000000340
[   77.796701][ T2190]  </TASK>
[   77.822340][   T30] audit: type=1400 audit(1792714043.451:795): avc:  denied  { mount } for  pid=2193 comm="syz.3.625" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   77.882175][ T2201] loop8: detected capacity change from 0 to 256
[   77.901458][ T2201] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   78.090256][ T1169] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   78.234398][ T2212] loop8: detected capacity change from 0 to 16
[   78.330342][ T1169] usb 4-1: Using ep0 maxpacket: 32
[   78.340783][ T2212] erofs: (device loop8): mounted with root inode @ nid 36.
[   78.430254][ T2092] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   78.480279][ T1169] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   78.490595][ T1169] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[   78.502286][ T1286] usb 10-1: USB disconnect, device number 2
[   78.504993][ T1169] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   78.534356][   T30] audit: type=1400 audit(1792714044.161:796): avc:  denied  { read } for  pid=2220 comm="syz.9.636" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   78.559380][   T30] audit: type=1400 audit(1792714044.161:797): avc:  denied  { open } for  pid=2220 comm="syz.9.636" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   78.608274][ T2225] binder: 2224:2225 unknown command 0
[   78.615668][ T2225] binder: 2224:2225 ioctl c0306201 2000000001c0 returned -22
[   78.696134][   T30] audit: type=1400 audit(1792714044.291:798): avc:  denied  { ioctl } for  pid=2220 comm="syz.9.636" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   78.741047][ T1169] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   78.804419][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.832262][ T1169] usb 4-1: Product: syz
[   78.836538][ T1169] usb 4-1: Manufacturer: syz
[   78.841498][ T1169] usb 4-1: SerialNumber: syz
[   78.862770][   T30] audit: type=1400 audit(1792714044.491:799): avc:  denied  { mount } for  pid=2232 comm="syz.8.641" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   78.885307][ T2092] usb 8-1: Using ep0 maxpacket: 8
[   78.898225][   T30] audit: type=1400 audit(1792714044.521:800): avc:  denied  { unmount } for  pid=2005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   79.010290][ T2092] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.180302][ T2092] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   79.189384][ T2092] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.197391][ T2092] usb 8-1: Product: syz
[   79.201572][ T2092] usb 8-1: Manufacturer: syz
[   79.206166][ T2092] usb 8-1: SerialNumber: syz
[   79.402873][ T2250] capability: warning: `syz.9.648' uses 32-bit capabilities (legacy support in use)
[   79.418818][ T2252] binder: 2251:2252 unknown command 0
[   79.424339][ T2252] binder: 2251:2252 ioctl c0306201 2000000001c0 returned -22
[   79.501147][ T2264] overlayfs: failed to clone upperpath
[   79.580547][ T2092] usb 8-1: 1:1 : bogus bTerminalLink 7
[   79.600299][ T2092] usb 8-1: unit 119 not found!
[   79.611601][ T2092] usb 8-1: USB disconnect, device number 3
[   80.060256][ T1172] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   80.162319][ T2344] tun0: tun_chr_ioctl cmd 2147767520
[   80.335003][   T30] audit: type=1400 audit(1792714045.961:801): avc:  denied  { relabelfrom } for  pid=2354 comm="syz.7.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   80.364760][   T30] audit: type=1400 audit(1792714045.961:802): avc:  denied  { relabelto } for  pid=2354 comm="syz.7.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   80.369300][ T2358] overlayfs: failed to clone upperpath
[   80.430324][ T1172] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.442336][ T1172] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.452364][ T1172] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   80.464871][ T1172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.492963][ T1172] usb 9-1: config 0 descriptor??
[   80.615885][ T2420] FAULT_INJECTION: forcing a failure.
[   80.615885][ T2420] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   80.629236][ T2420] CPU: 0 PID: 2420 Comm: syz.7.730 Not tainted syzkaller #0
[   80.636528][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   80.646580][ T2420] Call Trace:
[   80.649849][ T2420]  <TASK>
[   80.652768][ T2420]  __dump_stack+0x21/0x30
[   80.657090][ T2420]  dump_stack_lvl+0x110/0x170
[   80.661755][ T2420]  ? show_regs_print_info+0x20/0x20
[   80.666941][ T2420]  dump_stack+0x15/0x20
[   80.671080][ T2420]  should_fail+0x3ab/0x500
[   80.675481][ T2420]  should_fail_alloc_page+0x55/0x80
[   80.680664][ T2420]  prepare_alloc_pages+0x13f/0x590
[   80.685762][ T2420]  ? __alloc_pages_bulk+0xab0/0xab0
[   80.690948][ T2420]  __alloc_pages+0x11d/0x460
[   80.695519][ T2420]  ? unlock_page_memcg+0x114/0x130
[   80.700616][ T2420]  ? prep_new_page+0x110/0x110
[   80.705359][ T2420]  ? page_remove_rmap+0xc6d/0xf40
[   80.710366][ T2420]  ? page_add_file_rmap+0x700/0x700
[   80.715549][ T2420]  ? __kasan_check_write+0x14/0x20
[   80.720646][ T2420]  ? _raw_spin_lock+0x94/0xf0
[   80.725381][ T2420]  __get_free_pages+0x10/0x30
[   80.730053][ T2420]  __tlb_remove_page_size+0x18a/0x310
[   80.735417][ T2420]  unmap_page_range+0x1059/0x1e00
[   80.740429][ T2420]  ? mmu_notifier_invalidate_range_end+0xe0/0xe0
[   80.746745][ T2420]  ? lru_cache_add+0x7e0/0x7e0
[   80.751491][ T2420]  ? schedule_preempt_disabled+0x20/0x20
[   80.757105][ T2420]  unmap_vmas+0x26d/0x380
[   80.761418][ T2420]  ? unmap_page_range+0x1e00/0x1e00
[   80.766598][ T2420]  ? __kasan_check_write+0x14/0x20
[   80.771692][ T2420]  ? tlb_gather_mmu_fullmm+0x144/0x1c0
[   80.777132][ T2420]  exit_mmap+0x412/0x8b0
[   80.781353][ T2420]  ? vm_brk+0x30/0x30
[   80.785316][ T2420]  ? mutex_unlock+0x8f/0x230
[   80.789887][ T2420]  ? uprobe_clear_state+0x2c6/0x320
[   80.795068][ T2420]  __mmput+0x92/0x300
[   80.799028][ T2420]  mmput+0x50/0x150
[   80.802817][ T2420]  do_exit+0xacc/0x29a0
[   80.806956][ T2420]  ? put_task_struct+0x90/0x90
[   80.811702][ T2420]  ? kstrtouint_from_user+0x1c4/0x220
[   80.817059][ T2420]  ? kstrtol_from_user+0x2a0/0x2a0
[   80.822147][ T2420]  ? __kasan_check_write+0x14/0x20
[   80.827242][ T2420]  ? _raw_spin_lock_irq+0x95/0xf0
[   80.832245][ T2420]  do_group_exit+0x149/0x310
[   80.836816][ T2420]  ? __kasan_check_write+0x14/0x20
[   80.841905][ T2420]  ? recalc_sigpending+0x1ac/0x230
[   80.847001][ T2420]  get_signal+0x64f/0x1430
[   80.851403][ T2420]  arch_do_signal_or_restart+0xe2/0x1100
[   80.857016][ T2420]  ? file_end_write+0x1b0/0x1b0
[   80.861846][ T2420]  ? __kasan_check_write+0x14/0x20
[   80.866939][ T2420]  ? mutex_unlock+0x8f/0x230
[   80.871507][ T2420]  ? get_sigframe_size+0x10/0x10
[   80.876425][ T2420]  ? __se_sys_futex+0x135/0x330
[   80.881255][ T2420]  ? __kasan_check_write+0x14/0x20
[   80.886350][ T2420]  exit_to_user_mode_loop+0xa7/0xe0
[   80.891531][ T2420]  exit_to_user_mode_prepare+0x87/0xd0
[   80.896967][ T2420]  syscall_exit_to_user_mode+0x1a/0x30
[   80.902403][ T2420]  do_syscall_64+0x58/0xa0
[   80.906799][ T2420]  ? clear_bhb_loop+0x50/0xa0
[   80.911453][ T2420]  ? clear_bhb_loop+0x50/0xa0
[   80.916107][ T2420]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.921981][ T2420] RIP: 0033:0x7fa8f98ca559
[   80.926377][ T2420] Code: Unable to access opcode bytes at RIP 0x7fa8f98ca52f.
[   80.933717][ T2420] RSP: 002b:00007fa8f83220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   80.942107][ T2420] RAX: 0000000000000001 RBX: 00007fa8f9b50fa8 RCX: 00007fa8f98ca559
[   80.950056][ T2420] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8f9b50fac
[   80.958008][ T2420] RBP: 00007fa8f9b50fa0 R08: 00223935969e5910 R09: 0000000000000000
[   80.965958][ T2420] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   80.973909][ T2420] R13: 00007fa8f9b51038 R14: 00007fffd1dce550 R15: 00007fffd1dce638
[   80.981863][ T2420]  </TASK>
[   80.992767][  T959] usb 4-1: USB disconnect, device number 11
[   80.999650][   T30] audit: type=1400 audit(1792714046.621:803): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   81.223930][ T1172] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[   81.481227][ T1169] usb 9-1: USB disconnect, device number 2
[   81.501794][ T1169] ==================================================================
[   81.509884][ T1169] BUG: KASAN: use-after-free in roccat_disconnect+0x22d/0x240
[   81.517345][ T1169] Read of size 4 at addr ffff888125fecc08 by task kworker/1:30/1169
[   81.525300][ T1169] 
[   81.527604][ T1169] CPU: 1 PID: 1169 Comm: kworker/1:30 Not tainted syzkaller #0
[   81.535125][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   81.545170][ T1169] Workqueue: usb_hub_wq hub_event
[   81.550189][ T1169] Call Trace:
[   81.553456][ T1169]  <TASK>
[   81.556378][ T1169]  __dump_stack+0x21/0x30
[   81.560693][ T1169]  dump_stack_lvl+0x110/0x170
[   81.565353][ T1169]  ? show_regs_print_info+0x20/0x20
[   81.570541][ T1169]  ? load_image+0x3f0/0x3f0
[   81.575029][ T1169]  ? waiting_for_supplier_show+0xa0/0xa0
[   81.580646][ T1169]  print_address_description+0x7f/0x2c0
[   81.586262][ T1169]  ? roccat_disconnect+0x22d/0x240
[   81.591352][ T1169]  kasan_report+0x10f/0x150
[   81.595839][ T1169]  ? roccat_disconnect+0x22d/0x240
[   81.600933][ T1169]  __asan_report_load4_noabort+0x14/0x20
[   81.606548][ T1169]  roccat_disconnect+0x22d/0x240
[   81.611467][ T1169]  ? savu_probe+0x360/0x360
[   81.615953][ T1169]  savu_remove+0xec/0x170
[   81.620265][ T1169]  hid_device_remove+0xba/0x170
[   81.625096][ T1169]  ? hid_device_probe+0x390/0x390
[   81.630107][ T1169]  device_release_driver_internal+0x4e8/0x7c0
[   81.636155][ T1169]  device_release_driver+0x19/0x20
[   81.641249][ T1169]  bus_remove_device+0x2df/0x340
[   81.646167][ T1169]  device_del+0x62e/0xe20
[   81.650478][ T1169]  ? kill_device+0xd0/0xd0
[   81.654875][ T1169]  ? __kasan_check_write+0x14/0x20
[   81.659967][ T1169]  ? _raw_spin_lock_irq+0x95/0xf0
[   81.664972][ T1169]  ? _raw_spin_lock_irqsave+0x130/0x130
[   81.670501][ T1169]  hid_destroy_device+0x6a/0x110
[   81.675419][ T1169]  usbhid_disconnect+0x9f/0xc0
[   81.680164][ T1169]  usb_unbind_interface+0x212/0x8a0
[   81.685350][ T1169]  ? kernfs_remove_by_name_ns+0x120/0x160
[   81.691058][ T1169]  ? usb_driver_release_interface+0x1b0/0x1b0
[   81.697112][ T1169]  device_release_driver_internal+0x536/0x7c0
[   81.703164][ T1169]  device_release_driver+0x19/0x20
[   81.708259][ T1169]  bus_remove_device+0x2df/0x340
[   81.713181][ T1169]  device_del+0x62e/0xe20
[   81.717517][ T1169]  ? kill_device+0xd0/0xd0
[   81.721919][ T1169]  ? device_unregister+0x27/0x40
[   81.726842][ T1169]  usb_disable_device+0x3a8/0x750
[   81.731852][ T1169]  usb_disconnect+0x32d/0x870
[   81.736514][ T1169]  hub_event+0x19b0/0x43f0
[   81.740907][ T1169]  ? insert_work+0x232/0x310
[   81.745482][ T1169]  ? hub_post_resume+0x120/0x120
[   81.750399][ T1169]  ? __kasan_check_write+0x14/0x20
[   81.755493][ T1169]  ? _raw_spin_lock_irq+0x95/0xf0
[   81.760498][ T1169]  ? _raw_spin_lock_irqsave+0x130/0x130
[   81.766024][ T1169]  ? kernfs_notify+0x184/0x1c0
[   81.770769][ T1169]  process_one_work+0x6c8/0xbb0
[   81.775607][ T1169]  worker_thread+0xaa0/0x1250
[   81.780267][ T1169]  kthread+0x3f5/0x4f0
[   81.784317][ T1169]  ? worker_clr_flags+0x190/0x190
[   81.789322][ T1169]  ? kthread_blkcg+0xd0/0xd0
[   81.793891][ T1169]  ret_from_fork+0x1f/0x30
[   81.798290][ T1169]  </TASK>
[   81.801291][ T1169] 
[   81.803594][ T1169] Allocated by task 1172:
[   81.807895][ T1169]  __kasan_kmalloc+0xd4/0x100
[   81.812552][ T1169]  kmem_cache_alloc_trace+0x119/0x270
[   81.817908][ T1169]  roccat_connect+0x5c/0x4b0
[   81.822478][ T1169]  savu_probe+0x1ba/0x360
[   81.826788][ T1169]  hid_device_probe+0x28d/0x390
[   81.831616][ T1169]  really_probe+0x27d/0x970
[   81.836103][ T1169]  __driver_probe_device+0x193/0x270
[   81.841365][ T1169]  driver_probe_device+0x54/0x3e0
[   81.846367][ T1169]  __device_attach_driver+0x2a6/0x460
[   81.851717][ T1169]  bus_for_each_drv+0x184/0x210
[   81.856544][ T1169]  __device_attach+0x2b0/0x420
[   81.861291][ T1169]  device_initial_probe+0x1a/0x20
[   81.866293][ T1169]  bus_probe_device+0xc0/0x1e0
[   81.871038][ T1169]  device_add+0xaef/0xe90
[   81.875349][ T1169]  hid_add_device+0x349/0x4b0
[   81.880005][ T1169]  usbhid_probe+0xb93/0xf30
[   81.884487][ T1169]  usb_probe_interface+0x60f/0xb20
[   81.889582][ T1169]  really_probe+0x27d/0x970
[   81.894064][ T1169]  __driver_probe_device+0x193/0x270
[   81.899330][ T1169]  driver_probe_device+0x54/0x3e0
[   81.904333][ T1169]  __device_attach_driver+0x2a6/0x460
[   81.909688][ T1169]  bus_for_each_drv+0x184/0x210
[   81.914516][ T1169]  __device_attach+0x2b0/0x420
[   81.919257][ T1169]  device_initial_probe+0x1a/0x20
[   81.924256][ T1169]  bus_probe_device+0xc0/0x1e0
[   81.929000][ T1169]  device_add+0xaef/0xe90
[   81.933310][ T1169]  usb_set_configuration+0x1a01/0x1f70
[   81.938748][ T1169]  usb_generic_driver_probe+0x91/0x150
[   81.944184][ T1169]  usb_probe_device+0x143/0x250
[   81.949014][ T1169]  really_probe+0x27d/0x970
[   81.953495][ T1169]  __driver_probe_device+0x193/0x270
[   81.958759][ T1169]  driver_probe_device+0x54/0x3e0
[   81.963763][ T1169]  __device_attach_driver+0x2a6/0x460
[   81.969112][ T1169]  bus_for_each_drv+0x184/0x210
[   81.973937][ T1169]  __device_attach+0x2b0/0x420
[   81.978679][ T1169]  device_initial_probe+0x1a/0x20
[   81.983683][ T1169]  bus_probe_device+0xc0/0x1e0
[   81.988422][ T1169]  device_add+0xaef/0xe90
[   81.992732][ T1169]  usb_new_device+0xa1f/0x1720
[   81.997474][ T1169]  hub_event+0x291b/0x43f0
[   82.001866][ T1169]  process_one_work+0x6c8/0xbb0
[   82.006698][ T1169]  worker_thread+0xaa0/0x1250
[   82.011354][ T1169]  kthread+0x3f5/0x4f0
[   82.015404][ T1169]  ret_from_fork+0x1f/0x30
[   82.019802][ T1169] 
[   82.022111][ T1169] Freed by task 2284:
[   82.026077][ T1169]  kasan_set_track+0x4a/0x70
[   82.030661][ T1169]  kasan_set_free_info+0x23/0x40
[   82.035592][ T1169]  ____kasan_slab_free+0x125/0x160
[   82.040692][ T1169]  __kasan_slab_free+0x11/0x20
[   82.045439][ T1169]  slab_free_freelist_hook+0xc2/0x190
[   82.050796][ T1169]  kfree+0xc4/0x270
[   82.054586][ T1169]  roccat_free_device+0x27b/0x280
[   82.059593][ T1169]  roccat_release+0x2ae/0x370
[   82.064251][ T1169]  __fput+0x22b/0x900
[   82.068218][ T1169]  ____fput+0x15/0x20
[   82.072182][ T1169]  task_work_run+0x127/0x190
[   82.076755][ T1169]  exit_to_user_mode_loop+0xd0/0xe0
[   82.081935][ T1169]  exit_to_user_mode_prepare+0x87/0xd0
[   82.087375][ T1169]  syscall_exit_to_user_mode+0x1a/0x30
[   82.092818][ T1169]  do_syscall_64+0x58/0xa0
[   82.097212][ T1169]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.103086][ T1169] 
[   82.105390][ T1169] Last potentially related work creation:
[   82.111080][ T1169]  kasan_save_stack+0x3a/0x60
[   82.115740][ T1169]  __kasan_record_aux_stack+0xd2/0x100
[   82.121178][ T1169]  kasan_record_aux_stack_noalloc+0xb/0x10
[   82.126963][ T1169]  call_rcu+0x10b/0xf60
[   82.131101][ T1169]  addrconf_permanent_addr+0x302/0x940
[   82.136539][ T1169]  addrconf_notify+0x752/0xe00
[   82.141282][ T1169]  raw_notifier_call_chain+0x90/0x100
[   82.146636][ T1169]  __dev_notify_flags+0x2f4/0x5b0
[   82.151645][ T1169]  dev_change_flags+0xe3/0x1a0
[   82.156394][ T1169]  do_setlink+0xc95/0x2970
[   82.160791][ T1169]  rtnl_newlink+0x1598/0x1900
[   82.165445][ T1169]  rtnetlink_rcv_msg+0x9fd/0xcb0
[   82.170362][ T1169]  netlink_rcv_skb+0x1e9/0x430
[   82.175115][ T1169]  rtnetlink_rcv+0x1c/0x20
[   82.179510][ T1169]  netlink_unicast+0x86c/0xa30
[   82.184259][ T1169]  netlink_sendmsg+0x879/0xb80
[   82.189008][ T1169]  __sys_sendto+0x46d/0x620
[   82.193492][ T1169]  __x64_sys_sendto+0xe5/0x100
[   82.198237][ T1169]  x64_sys_call+0x178/0x9a0
[   82.202726][ T1169]  do_syscall_64+0x4c/0xa0
[   82.207123][ T1169]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.212999][ T1169] 
[   82.215304][ T1169] The buggy address belongs to the object at ffff888125fecc00
[   82.215304][ T1169]  which belongs to the cache kmalloc-512 of size 512
[   82.229340][ T1169] The buggy address is located 8 bytes inside of
[   82.229340][ T1169]  512-byte region [ffff888125fecc00, ffff888125fece00)
[   82.242421][ T1169] The buggy address belongs to the page:
[   82.248047][ T1169] page:ffffea000497fb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125fec
[   82.258270][ T1169] head:ffffea000497fb00 order:2 compound_mapcount:0 compound_pincount:0
[   82.266579][ T1169] flags: 0x4000000000010200(slab|head|zone=1)
[   82.272643][ T1169] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00
[   82.281209][ T1169] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   82.289765][ T1169] page dumped because: kasan: bad access detected
[   82.296152][ T1169] page_owner tracks the page as allocated
[   82.301841][ T1169] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1086, ts 45258529493, free_ts 42810404290
[   82.322307][ T1169]  post_alloc_hook+0x192/0x1b0
[   82.327058][ T1169]  prep_new_page+0x1c/0x110
[   82.331544][ T1169]  get_page_from_freelist+0x2c3a/0x2cd0
[   82.337071][ T1169]  __alloc_pages+0x1a2/0x460
[   82.341642][ T1169]  new_slab+0xa0/0x4d0
[   82.345689][ T1169]  ___slab_alloc+0x3ac/0x840
[   82.350261][ T1169]  __slab_alloc+0x49/0x90
[   82.354570][ T1169]  __kmalloc+0x16a/0x2c0
[   82.358790][ T1169]  fib6_info_alloc+0x34/0xe0
[   82.363362][ T1169]  ip6_route_info_create+0x51b/0x14d0
[   82.368716][ T1169]  addrconf_f6i_alloc+0x19c/0x3f0
[   82.373719][ T1169]  ipv6_add_addr+0x442/0xd90
[   82.378291][ T1169]  inet6_addr_add+0x446/0x9d0
[   82.382948][ T1169]  inet6_rtm_newaddr+0x6e7/0x9c0
[   82.387866][ T1169]  rtnetlink_rcv_msg+0x9fd/0xcb0
[   82.392783][ T1169]  netlink_rcv_skb+0x1e9/0x430
[   82.397529][ T1169] page last free stack trace:
[   82.402178][ T1169]  __free_pages_ok+0xa13/0xae0
[   82.406923][ T1169]  free_compound_page+0x89/0xa0
[   82.411756][ T1169]  io_ring_exit_work+0xecb/0x15f0
[   82.416764][ T1169]  process_one_work+0x6c8/0xbb0
[   82.421597][ T1169]  worker_thread+0xaa0/0x1250
[   82.426255][ T1169]  kthread+0x3f5/0x4f0
[   82.430311][ T1169]  ret_from_fork+0x1f/0x30
[   82.434709][ T1169] 
[   82.437018][ T1169] Memory state around the buggy address:
[   82.442626][ T1169]  ffff888125fecb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   82.450666][ T1169]  ffff888125fecb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   82.458704][ T1169] >ffff888125fecc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.466738][ T1169]                       ^
[   82.471066][ T1169]  ffff888125fecc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.479108][ T1169]  ffff888125fecd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.487143][ T1169] ==================================================================
[   82.495181][ T1169] Disabling lock debugging due to kernel taint
[   82.518568][   T30] audit: type=1400 audit(1792714048.141:804): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   82.547554][   T30] audit: type=1400 audit(1792714048.171:805): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.570946][   T30] audit: type=1400 audit(1792714048.171:806): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.571759][  T959] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   82.592908][   T30] audit: type=1400 audit(1792714048.171:807): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.620366][   T30] audit: type=1400 audit(1792714048.171:808): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.640879][   T30] audit: type=1400 audit(1792714048.171:809): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.663807][   T30] audit: type=1400 audit(1792714048.171:810): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.960298][  T959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.971211][  T959] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   82.980267][  T959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.989039][  T959] usb 4-1: config 0 descriptor??
[   83.470942][  T959] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[   83.480542][  T959] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input7
[   83.562146][   T30] audit: type=1400 audit(1792714049.191:811): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=865 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   83.563287][  T959] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   83.584430][   T30] audit: type=1400 audit(1792714049.191:812): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=865 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   83.677871][ T2539] UDC core: couldn't find an available UDC or it's busy: -16
[   83.685318][ T2539] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   84.706848][ T2092] usb 4-1: USB disconnect, device number 12