last executing test programs:

6.061951423s ago: executing program 3 (id=630):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$inet6(0xa, 0x200000000003, 0x87)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x28, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x8}}}}}}, 0x0)

5.859518919s ago: executing program 3 (id=633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)

5.714135371s ago: executing program 3 (id=635):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

5.645928136s ago: executing program 3 (id=637):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

4.782553996s ago: executing program 3 (id=644):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x1f, {0x1f, 0x0, "570b0259339f9fa5039bd5717a7255671720c7dbc69ff474d24af8c23d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.902454256s ago: executing program 0 (id=652):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

3.85608623s ago: executing program 0 (id=653):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x10, 0x19, {0x19, 0xf, "b1020a00aebd07a3e219d0000000000000007ef6000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

2.73427335s ago: executing program 3 (id=658):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026f0002010000000904000001020d0000052406000105240001000d240f0100000000000000000006241a0000000724140100000008241c0800e8d9000424020f090581030002ff00000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x80, 0xfffe}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

2.193315804s ago: executing program 1 (id=663):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

1.947898353s ago: executing program 1 (id=674):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3})
chdir(&(0x7f0000000000)='./file0\x00')
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1.877594889s ago: executing program 0 (id=666):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$eJzs3E1rY9UfB/CTPs7Tf/5FXLibC4PQwiQ0fRh0V3UGH7BD8WHhStMkDZlJckuTprUrFy7Fhe9EFFy59DW4cO1OXCjuhJHccypTH0Bp2tjp5wO333tPTn73nEtpOfeGBODSWsh++akUboarIYTpEMKNEIr9UtoKGzGeCyHcCiFMPbGVUvvvDXMhhGshhJuj4rFmKb302Z3h7fUf3/j562/nZ65//tV3k5s1MGnPhxC6u3H/oBszb8V8mNprw3aR3bVhyvhC91E6zmMeNLeLCge14361IldbsX++u98f5U6nVh9lq71TtO/24gn7w9ZxneIND2t7xXGjuV1ku58X2TqK4zo8in/bjvqDWKeR6n1YlA+DwXHG9uZhM85n91GR9d4gtce6eaN5OMphynS6UM87jWIc26e50v9tb7Z7+4fZsLnXb+e9bL1SfaFSvVuu7uWN5qC5Vq51G3fXssVWZ9StPGjWuhutPG91mpV63l3KFlv1erlazRbvNbfbtV5WrVZWK8vl9aW0dyd79cG7WaeRLY7y5XZvf9Du9LOdfC+L71jKViqrLy5lt6vZ25tb2dZb9+9vbr3z/r33Hry0+forqdOfhpUtriyvrJSry+WV6tLFnf/of/2/mv/HadBjnD+cSmnSAwC4eKz/gUm46Ov/YP0/Ftb/l3b+j5PTXUAuN+t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL6/vZL14rdhbi8fXU/r/U9Ew6LoUQpkIIj//CdJg7UXM61Zn9m/6zfxjDN6VQVBidYz5t10IIG2n79f9nfRUAAADg6fXlR7c+jav1+GNh0gPiPMWbNlM3PhhTvVIIYXbhhzFUCelmU3j29KOKRr/fM+FwTNWKG1hXxlQs3nKbGVe1f2T6RFx5Ikoxpo57zp3ruAAAgLN0ciVwvqsQAAAAztMnkx4Ak1E8aU2fxU+P+eZjpAeCV08cAQAAABdQadIDAAAAAM5csf73/X8AAADwdIvf/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAbO3eTkzoUBQD4tND3eD9GYpy7FWewDJfg0KFhKywBt+AGWAPOXIIBQ3tRMRhM+hfJ9yXt5TbN4ZTQwTm3KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG16KhbTh/urUd046009zVwNAAAAcMiqWEzLD+Nq/i8dP0uHLtI8i4g8Ig7V7oP4tRdzkOIUX5xffMrhMaKMsP2O32n7GxHXaXs5b/tXAAAAgNO1nM0nVbVe7cZ9J0SXqqZN/v+moXhZRBTj54ai5dvd5bdO3RzvD23/38O4q59WqWxg1X5kZqdsuQ2binbcIN3ub8Pow5BVQ95dOgAAQFf2K4EOqxAAAAA6dtt3AvQji91S5m4tuHzy/n1B8M/eDAAAAPiBsr4TAAAAAFpX1v/e/wcAAACnrXr/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1aFYvpcjaf1I2z3tTTzNUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLI/7ygMw2AQBjeJ8uqELuD739Is2K1bNzMg+Pi3EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlcfx8jzj1ZjJNnqdSd49rySfTo1vp8avc+OfZKy7fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwsz8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vnFTcQDAv2efr7SACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/+Hzq3UpWwdMhSJiQFkn528HpU4WtW+Np+P9Py+thy/73OiKF8/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo7L67H+flZmESZ/Wxm/eurpf9ram+dH379nLZyrjXZtJPhlfTnd5Sd4kAAABwcORNfR8xiGJntQyyhar+L5pzypr/++cncVPPT9f9Td/U/mX77de7L+8NtDAZp7zouY3x6Pi/U+k/xmnOtRf+84x+deerZy959Q3JPth6abeo7mfv2xs33htU4aE2sgUAHsaxpq+D5u+hsh92mRgAB0Y/Kbzv1PV/vtBtTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtGGzFs03ci4jl/n5cunXv6nrVT+1f37693LTT165tp9csL1FExLmN8eh4WxN5Aly6fOXTtfF4dLH94LWI6G70OvhohnMiusxQ8KhBVv+sz/ZVRyOi+5y7Dzr+xQQAwFOnqFtZ198pdlbLY73FiL9/uL/+fyOJI63/p/q0/r/78emb6Vhp/T9sbYbzb2Xzwhcrly5feWvjwtr50fnRZ2+fGL4zPHnm1KkzK9WzkhVPTAAAAHg0g7ql9X+2GLE7tf5/JIljxvr/y++GX6dj5er/B9pf9Os6EwAAgIPtxaN//tF7wPHeYBBfrW1uXhxOtnv7JybbDlL93w7VLa3/88WuswIAAADasLvVu2/9/2wSx4zr/8/9+MrP6TXziDhcr/8fW/98fLa96XTkr5nOauPfiR/7VAEAAJhrh+uWrv8X1fv/2d4rD1lEvPn6JK4/BnCm+j9//5uf0rHS9/9PtjfFuZQtTe5H1S9F9Je6zggAAICn2TN1K4v934ud1U9+OfLhwPv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG37JwAA//9VakSc")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010180)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x100001)

1.61159726s ago: executing program 2 (id=669):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

1.60839006s ago: executing program 1 (id=670):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4)
bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

1.523543707s ago: executing program 2 (id=671):
socket$unix(0x1, 0x1, 0x0)
io_uring_setup(0x57e6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x235})
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80803, 0x2)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000000c0)=0x54)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth1_to_batadv\x00', &(0x7f0000000740)=@ethtool_dump={0x3e, 0x1, 0x7, 0x5e, "14d40fce27a99fb838eb4cd3cf6cab4ca9a9a0c2e13541fe25a442a5ffa8a24a25b1279fb5ad569725b1a4226f2666161a5dfc531c19163ca5b74ebb20e0301f9555b779df8e32a61e25c318a7f56a3f623792911973b412efdefefc1215"}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@loopback}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0xfe}]}}}}})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/148, 0xffffff96)

1.523087007s ago: executing program 4 (id=672):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)

1.462555672s ago: executing program 4 (id=673):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000002480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1.388586948s ago: executing program 2 (id=675):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0xfd3649826d894863, 0x0, 0x0, {{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x2b}, 0x0, @in=@empty}]}]}, 0xfc}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a000000000000000000000040f6b0f8eca0faed", 0x78, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002b)

1.331618313s ago: executing program 4 (id=676):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g")
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='mm_page_free_batched\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28811, r1, 0x0)

1.330649493s ago: executing program 0 (id=677):
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x3000012, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRESDEC, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="52539d8ae62178692ac25684c179a9c7fc31ce2a9140f36c154ffd10f127fcb3bfcef3b6c751cd37a5dc8165e007c778c2b5f184b55d199898ffe509761df8e1cbcef1599604f84c6588af81481f9630e162194de60de66e1f8da1f0f8b94d0bdf1d2f3452232f9928b7a2e094736ba6d597d2d1f176eb2324d16846f452dd97d63274c5376461d5f6bdfc7bbe660c998b11da776915124ceb488c2d1ba6d6effee89ae2c0f993384fc101ec18e746fa757d4ed3914d4848af5e2e6be71c7a774a2157e8b690ad0409252fd777dccdca16f402822572b275a12340970a22ae49862ee9066cd7567449875ecfbf", @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES64=0x0], 0x9, 0x2b4, &(0x7f00000001c0)="$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")
setrlimit(0x1, &(0x7f0000000100))
open(&(0x7f00000000c0)='./bus\x00', 0xdc942, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0xffffff2e, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.297335466s ago: executing program 1 (id=678):
mknod(0x0, 0x8001420, 0x0)
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

1.223558891s ago: executing program 4 (id=679):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)

1.222280771s ago: executing program 2 (id=680):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000003c0)={0x60003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe74d]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.161279286s ago: executing program 4 (id=681):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xb8, 0x43, 0xa0, 0x0, 0x98, 0x250, 0x178, 0x178, 0x250, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT0={0x48}}, {{@ip={@multicast1, @multicast1, 0x0, 0x0, 'geneve1\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)

1.11573024s ago: executing program 2 (id=682):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0xfb36b7c5efaff487, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

1.089034062s ago: executing program 4 (id=683):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

248.033579ms ago: executing program 0 (id=684):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000820000001800000000000000000000000000000095000000000000008a138db907014317bdc86399003ef279bcf4438908fb119c3434377c5416c3cb37b84568575efdf19a281703ec0ebd66879d0d95516f52a13ea385c52fad4aff77dd304e6a8961cc72e8fb09"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x3f)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

230.405241ms ago: executing program 1 (id=685):
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/251, 0xfb}], 0x3}}], 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)
close(r0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6)

129.192099ms ago: executing program 1 (id=686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

28.900947ms ago: executing program 0 (id=687):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

0s ago: executing program 2 (id=688):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ppoll(&(0x7f0000000d40)=[{r0}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

3] attempt to access beyond end of device
[   43.716039][  T423] loop3: rw=2051, want=61440, limit=40427
[   43.718942][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.730417][  T514] usb 3-1: USB disconnect, device number 4
[   43.737959][  T423] attempt to access beyond end of device
[   43.737959][  T423] loop3: rw=2051, want=53248, limit=40427
[   43.754555][  T423] F2FS-fs (loop3): Issue discard(7168, 7168, 512) failed, ret: -5
[   43.754583][  T423] F2FS-fs (loop3): Issue discard(6446, 6446, 210) failed, ret: -5
[   43.792249][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.809019][  T313] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   43.809094][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.823642][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.842267][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.850882][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.857730][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.866611][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.875768][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.882661][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.909049][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.927114][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.938833][ T1053] device veth1_vlan entered promiscuous mode
[   43.948955][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.959670][    T8] device bridge_slave_1 left promiscuous mode
[   43.966732][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.975976][    T8] device bridge_slave_0 left promiscuous mode
[   43.983915][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.001132][    T8] device veth1_macvtap left promiscuous mode
[   44.011930][    T8] device veth0_vlan left promiscuous mode
[   44.138764][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.167008][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.186473][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.203245][ T1033] device veth0_vlan entered promiscuous mode
[   44.209266][  T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.217523][ T1033] device veth1_macvtap entered promiscuous mode
[   44.220128][  T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.235651][  T313] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   44.244566][  T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.253145][  T313] usb 5-1: config 0 descriptor??
[   44.259680][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.268072][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.276072][   T30] audit: type=1400 audit(1723856018.048:276): avc:  denied  { mount } for  pid=1065 comm="syz.1.278" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   44.298284][  T377] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   44.305760][   T30] audit: type=1400 audit(1723856018.048:277): avc:  denied  { read } for  pid=1065 comm="syz.1.278" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.327779][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.352762][ T1071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'.
[   44.372919][ T1071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'.
[   44.393447][ T1079] loop1: detected capacity change from 0 to 1024
[   44.413318][ T1082] Bluetooth: hci0: sending frame failed (-49)
[   44.429298][ T1079] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   44.450138][ T1079] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noquota,barrier=0x0000000000000000,jqfmt=vfsv1,block_validity,mblk_io_submit,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback.
[   44.538252][  T377] usb 4-1: Using ep0 maxpacket: 16
[   44.564479][ T1099] syz.2.291[1099] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.564526][ T1099] syz.2.291[1099] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.659961][  T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.685265][  T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.729173][  T313] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0
[   44.738686][  T313] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0
[   44.750976][  T313] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[   44.808488][  T377] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   44.818383][  T377] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[   44.826709][  T377] usb 4-1: Product: syz
[   44.831041][  T377] usb 4-1: Manufacturer: syz
[   44.851780][  T377] usb 4-1: config 0 descriptor??
[   44.966235][ T1124] loop2: detected capacity change from 0 to 512
[   44.973515][    T8] device bridge_slave_1 left promiscuous mode
[   44.979578][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.987049][    T8] device bridge_slave_0 left promiscuous mode
[   44.993135][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.001138][    T8] device veth1_macvtap left promiscuous mode
[   45.007005][    T8] device veth0_vlan left promiscuous mode
[   45.028854][ T1124] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.302: corrupted inode contents
[   45.040740][ T1124] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #3: comm syz.2.302: mark_inode_dirty error
[   45.052668][ T1124] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.302: corrupted inode contents
[   45.064402][ T1124] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.302: mark_inode_dirty error
[   45.076686][ T1124] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.302: corrupted inode contents
[   45.088683][ T1124] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #16: comm syz.2.302: mark_inode_dirty error
[   45.099987][ T1124] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.302: corrupted inode contents
[   45.111903][ T1124] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.302: mark_inode_dirty error
[   45.123183][ T1124] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.302: corrupted inode contents
[   45.135009][ T1124] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   45.143711][ T1124] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #16: comm syz.2.302: corrupted inode contents
[   45.155514][ T1124] EXT4-fs error (device loop2): ext4_truncate:4292: inode #16: comm syz.2.302: mark_inode_dirty error
[   45.155701][  T665] usb 5-1: USB disconnect, device number 9
[   45.172734][ T1124] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   45.182245][ T1124] EXT4-fs (loop2): 1 truncate cleaned up
[   45.187714][ T1124] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   45.198641][ T1124] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff)
[   45.334635][ T1116] loop1: detected capacity change from 0 to 131072
[   45.341903][  T377] kovaplus 0003:1E7D:2D50.001E: item fetching failed at offset 5/7
[   45.350036][  T377] kovaplus 0003:1E7D:2D50.001E: parse failed
[   45.355906][  T377] kovaplus: probe of 0003:1E7D:2D50.001E failed with error -22
[   45.401172][ T1116] F2FS-fs (loop1): invalid crc value
[   45.409701][ T1116] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   45.451555][ T1116] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[   45.451656][ T1139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[   45.488907][ T1139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'.
[   45.505522][ T1116] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)"
[   45.545465][  T313] usb 4-1: USB disconnect, device number 8
[   45.728167][ T1150] loop4: detected capacity change from 0 to 2048
[   45.771764][ T1150] EXT4-fs (loop4): Ignoring removed orlov option
[   45.801631][ T1150] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none.
[   45.815825][ T1150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   45.831422][ T1150] EXT4-fs (loop4): Remounting filesystem read-only
[   45.929191][ T1165] loop2: detected capacity change from 0 to 40427
[   45.998499][ T1165] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   46.006187][ T1165] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   46.016379][ T1165] F2FS-fs (loop2): Found nat_bits in checkpoint
[   46.038247][  T313] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   46.038459][ T1165] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   46.052613][ T1165] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   46.090119][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.090143][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.097523][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.104948][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.112497][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.119889][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.127216][  T941] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   46.158511][  T665] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   46.308829][  T313] usb 2-1: Using ep0 maxpacket: 8
[   46.438379][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.449190][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.458763][  T313] usb 2-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00
[   46.467622][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.468372][  T377] Bluetooth: hci0: command 0x1003 tx timeout
[   46.476048][  T313] usb 2-1: config 0 descriptor??
[   46.482011][ T1085] Bluetooth: hci0: sending frame failed (-49)
[   46.539107][  T313] usbhid 2-1:0.0: can't add hid device: -22
[   46.545039][  T313] usbhid: probe of 2-1:0.0 failed with error -22
[   46.568300][  T665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.579181][  T665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.588765][  T665] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[   46.597586][  T665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.606294][  T665] usb 5-1: config 0 descriptor??
[   46.648298][  T514] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   46.748500][  T313] usb 2-1: USB disconnect, device number 10
[   46.908232][  T514] usb 3-1: Using ep0 maxpacket: 16
[   47.028423][  T514] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   47.036324][  T514] usb 3-1: config 0 has no interface number 0
[   47.042197][  T514] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   47.051647][  T514] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   47.099491][  T665] wacom 0003:056A:00D0.001F: unknown main item tag 0x0
[   47.106397][  T665] wacom 0003:056A:00D0.001F: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[   47.116241][  T665] wacom 0003:056A:00D0.001F: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0
[   47.127634][  T665] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.001F/input/input12
[   47.198280][  T377] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   47.198303][  T514] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   47.215464][  T514] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   47.224601][  T514] usb 3-1: Product: syz
[   47.228610][  T514] usb 3-1: SerialNumber: syz
[   47.233509][  T514] usb 3-1: config 0 descriptor??
[   47.302600][  T665] usb 5-1: USB disconnect, device number 10
[   47.399595][   T30] kauditd_printk_skb: 24 callbacks suppressed
[   47.399609][   T30] audit: type=1400 audit(1723856021.178:300): avc:  denied  { write } for  pid=1197 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   47.400358][ T1198] netlink: 277 bytes leftover after parsing attributes in process `syz.1.327'.
[   47.405613][   T30] audit: type=1400 audit(1723856021.178:301): avc:  denied  { write } for  pid=1197 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.454197][   T30] audit: type=1400 audit(1723856021.178:302): avc:  denied  { nlmsg_write } for  pid=1197 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.539016][  T514] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[   47.546954][  T514] usb 3-1: USB disconnect, device number 5
[   47.598326][  T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.609046][  T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.618596][  T377] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   47.627413][  T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.635838][  T377] usb 4-1: config 0 descriptor??
[   47.688310][  T313] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   47.841332][   T30] audit: type=1400 audit(1723856021.618:303): avc:  denied  { bind } for  pid=1200 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   47.862740][   T30] audit: type=1400 audit(1723856021.618:304): avc:  denied  { bind } for  pid=1202 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.882121][   T30] audit: type=1400 audit(1723856021.618:305): avc:  denied  { name_bind } for  pid=1202 comm="syz.4.329" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   47.902802][   T30] audit: type=1400 audit(1723856021.618:306): avc:  denied  { node_bind } for  pid=1202 comm="syz.4.329" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   48.022939][ T1207] loop2: detected capacity change from 0 to 128
[   48.048277][  T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   48.058412][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.061256][   T30] audit: type=1400 audit(1723856021.838:307): avc:  denied  { mount } for  pid=1206 comm="syz.2.331" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   48.072211][  T313] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 6.00
[   48.099494][   T30] audit: type=1400 audit(1723856021.868:308): avc:  denied  { mounton } for  pid=1206 comm="syz.2.331" path="/47/file0/bus" dev="loop2" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   48.099661][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.130776][  T313] usb 2-1: config 0 descriptor??
[   48.168375][ T1207] loop_set_status: loop2 () has still dirty pages (nrpages=1)
[   48.179869][   T30] audit: type=1400 audit(1723856021.958:309): avc:  denied  { unmount } for  pid=941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   48.368288][  T377] usb 4-1: string descriptor 0 read error: -22
[   48.408370][  T313] usb 2-1: string descriptor 0 read error: -71
[   48.421634][  T313] usb 2-1: USB disconnect, device number 11
[   48.558340][  T292] Bluetooth: hci0: command 0x1001 tx timeout
[   48.564312][ T1085] Bluetooth: hci0: sending frame failed (-49)
[   48.579625][  T377] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0020/input/input15
[   48.597279][ T1215] loop2: detected capacity change from 0 to 131072
[   48.604655][  T377] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0020/input/input16
[   48.616966][  T377] uclogic 0003:256C:006D.0020: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[   48.689824][ T1215] F2FS-fs (loop2): invalid crc value
[   48.705586][ T1215] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   48.726484][ T1215] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[   48.784168][  T313] usb 4-1: USB disconnect, device number 9
[   48.843487][ T1222] loop4: detected capacity change from 0 to 256
[   49.351442][ T1265] tipc: Started in network mode
[   49.356195][ T1265] tipc: Node identity ac1414aa, cluster identity 4711
[   49.362829][ T1265] tipc: New replicast peer: 100.1.1.1
[   49.368071][ T1265] tipc: Enabled bearer <udp:s>, priority 10
[   49.521288][ T1288] loop4: detected capacity change from 0 to 512
[   49.555234][ T1288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.570516][ T1288] EXT4-fs (loop4): 1 truncate cleaned up
[   49.576044][ T1288] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[   49.636453][ T1304] tipc: Cannot configure node identity twice
[   49.746746][ T1301] loop2: detected capacity change from 0 to 40427
[   49.815355][ T1301] F2FS-fs (loop2): invalid crc value
[   49.845188][ T1324] loop3: detected capacity change from 0 to 1024
[   49.852810][ T1301] F2FS-fs (loop2): Found nat_bits in checkpoint
[   49.860174][ T1328] tipc: Started in network mode
[   49.864924][ T1328] tipc: Node identity 1, cluster identity 4711
[   49.871800][ T1324] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   49.884208][ T1328] tipc: Node number set to 1
[   49.914593][ T1324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002]
[   49.915617][ T1301] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[   49.924375][ T1324] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[   49.935676][ T1324] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,init_itable=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   49.952057][ T1301] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   49.990423][  T941] attempt to access beyond end of device
[   49.990423][  T941] loop2: rw=524288, want=45072, limit=40427
[   49.993860][ T1324] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (62631!=20869)
[   50.010241][  T941] attempt to access beyond end of device
[   50.010241][  T941] loop2: rw=0, want=45072, limit=40427
[   50.043500][    T8] attempt to access beyond end of device
[   50.043500][    T8] loop2: rw=2049, want=45112, limit=40427
[   50.054850][ T1343] loop3: detected capacity change from 0 to 256
[   50.078636][ T1347] loop4: detected capacity change from 0 to 512
[   50.160070][ T1347] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #3: comm syz.4.387: corrupted inode contents
[   50.171879][ T1347] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #3: comm syz.4.387: mark_inode_dirty error
[   50.183427][ T1347] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #3: comm syz.4.387: corrupted inode contents
[   50.195462][ T1347] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.387: mark_inode_dirty error
[   50.210414][ T1347] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.387: corrupted inode contents
[   50.228677][ T1347] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #16: comm syz.4.387: mark_inode_dirty error
[   50.248434][ T1347] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.387: corrupted inode contents
[   50.267602][ T1347] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.387: mark_inode_dirty error
[   50.271390][ T1356] loop3: detected capacity change from 0 to 512
[   50.285356][ T1347] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.387: corrupted inode contents
[   50.297166][ T1347] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   50.306258][ T1347] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.387: corrupted inode contents
[   50.319471][ T1347] EXT4-fs error (device loop4): ext4_truncate:4292: inode #16: comm syz.4.387: mark_inode_dirty error
[   50.321110][ T1356] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.390: casefold flag without casefold feature
[   50.330801][ T1347] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   50.342853][ T1356] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.390: missing EA_INODE flag
[   50.352251][ T1347] EXT4-fs (loop4): 1 truncate cleaned up
[   50.363031][ T1356] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.390: error while reading EA inode 12 err=-117
[   50.368328][ T1347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   50.380494][ T1356] EXT4-fs (loop3): 1 orphan inode deleted
[   50.391220][ T1347] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff)
[   50.396313][ T1356] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   50.429755][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.437117][ T1354] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.450868][ T1354] device bridge_slave_0 entered promiscuous mode
[   50.457776][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.460977][ T1347] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 3: comm syz.4.387: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=3988, size=4084 fake=0
[   50.470958][ T1354] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.483571][  T459] tipc: Node number set to 2886997162
[   50.496332][ T1354] device bridge_slave_1 entered promiscuous mode
[   50.506693][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.523229][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.538619][  T625] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[   50.551012][  T625] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop4 ino=15
[   50.558723][ T1356] loop_set_status: loop3 () has still dirty pages (nrpages=1)
[   50.560265][  T625] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[   50.582437][  T625] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop4 ino=15
[   50.592547][  T625] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[   50.606799][  T625] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop4 ino=15
[   50.616517][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.632294][  T625] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 19
[   50.638394][  T459] Bluetooth: hci0: command 0x1009 tx timeout
[   50.645047][  T625] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -74)
[   50.665262][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.680879][  T625] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum
[   50.694044][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.709907][  T625] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum
[   50.722257][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.737729][  T625] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum
[   50.750781][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.766297][  T625] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum
[   50.778569][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.793992][  T625] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum
[   50.806900][  T625] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   50.875807][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.882694][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.889802][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.896549][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.914057][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.921419][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.934625][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.949515][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.962387][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.969268][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.976427][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.985341][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.992218][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.009221][  T359] device bridge_slave_1 left promiscuous mode
[   51.015159][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.022621][  T359] device bridge_slave_0 left promiscuous mode
[   51.028705][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.036399][  T359] device veth1_macvtap left promiscuous mode
[   51.042538][  T359] device veth0_vlan left promiscuous mode
[   51.088254][  T313] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   51.209598][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.217422][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.235203][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.243523][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.266026][ T1373] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.272908][ T1373] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.280254][ T1373] device bridge_slave_0 entered promiscuous mode
[   51.286745][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.294619][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.303014][ T1373] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.309906][ T1373] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.316965][ T1373] device bridge_slave_1 entered promiscuous mode
[   51.325953][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.333233][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.341248][ T1354] device veth0_vlan entered promiscuous mode
[   51.370463][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.378706][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.399154][ T1354] device veth1_macvtap entered promiscuous mode
[   51.415923][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.423399][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.432221][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.442411][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.450408][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.461406][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.469410][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.479264][  T313] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[   51.488237][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.496869][  T313] usb 2-1: config 0 descriptor??
[   51.519913][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.528547][ T1378] loop2: detected capacity change from 0 to 128
[   51.529975][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.543435][  T311] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.550308][  T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.559403][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.566834][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.574904][  T311] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.581758][  T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.600280][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.609195][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.624331][ T1373] device veth0_vlan entered promiscuous mode
[   51.631211][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.639523][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.647239][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.657521][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.670396][ T1373] device veth1_macvtap entered promiscuous mode
[   51.679230][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.688935][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.703766][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.764414][ T1390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'.
[   51.773589][ T1390] sch_tbf: burst 511 is lower than device erspan0 mtu (1464) !
[   51.907683][ T1395] loop4: detected capacity change from 0 to 40427
[   51.968948][  T313] apple 0003:05AC:029C.0021: unknown main item tag 0x0
[   51.975687][  T313] apple 0003:05AC:029C.0021: ignoring exceeding usage max
[   51.983247][  T313] apple 0003:05AC:029C.0021: usage index exceeded
[   51.989597][  T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   51.997016][  T313] apple 0003:05AC:029C.0021: item 0 0 2 0 parsing failed
[   52.004076][  T313] apple 0003:05AC:029C.0021: parse failed
[   52.005444][ T1395] F2FS-fs (loop4): Found nat_bits in checkpoint
[   52.009780][  T313] apple: probe of 0003:05AC:029C.0021 failed with error -22
[   52.015798][  T459] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   52.044575][ T1395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   52.177988][  T297] usb 2-1: USB disconnect, device number 12
[   52.288283][  T459] usb 4-1: Using ep0 maxpacket: 8
[   52.348344][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.359135][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.368632][  T311] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   52.377429][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.385798][  T311] usb 3-1: config 0 descriptor??
[   52.408364][  T377] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   52.418318][  T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.429358][  T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.438981][  T459] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   52.451621][  T459] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00
[   52.460478][  T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.469597][  T459] usb 4-1: config 0 descriptor??
[   52.687465][   T30] kauditd_printk_skb: 133 callbacks suppressed
[   52.687481][   T30] audit: type=1400 audit(1723856026.458:440): avc:  denied  { create } for  pid=1403 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   52.688463][ T1404] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   52.731053][   T30] audit: type=1400 audit(1723856026.508:441): avc:  denied  { bind } for  pid=1403 comm="syz.1.405" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   52.750933][   T30] audit: type=1400 audit(1723856026.508:442): avc:  denied  { node_bind } for  pid=1403 comm="syz.1.405" saddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   52.772460][   T30] audit: type=1400 audit(1723856026.558:443): avc:  denied  { ioctl } for  pid=1403 comm="syz.1.405" path="socket:[20896]" dev="sockfs" ino=20896 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   52.818435][  T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.829462][  T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.839537][  T377] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   52.848509][  T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.857111][  T377] usb 5-1: config 0 descriptor??
[   52.872081][  T321] tipc: Left network mode
[   52.872855][  T311] samsung 0003:0419:0600.0022: unknown main item tag 0x0
[   52.886278][  T311] samsung 0003:0419:0600.0022: unknown main item tag 0x0
[   52.893199][  T311] samsung 0003:0419:0600.0022: unknown main item tag 0x0
[   52.900332][  T311] samsung 0003:0419:0600.0022: unknown main item tag 0x0
[   52.907202][  T311] samsung 0003:0419:0600.0022: unknown main item tag 0x0
[   52.914800][  T311] samsung 0003:0419:0600.0022: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0
[   52.959247][  T459] ntrig 0003:1B96:0010.0023: item fetching failed at offset 5/7
[   52.966855][  T459] ntrig 0003:1B96:0010.0023: parse failed
[   52.972802][  T459] ntrig: probe of 0003:1B96:0010.0023 failed with error -22
[   53.076053][  T311] usb 3-1: USB disconnect, device number 6
[   53.166944][  T459] usb 4-1: USB disconnect, device number 10
[   53.358998][  T321] device bridge_slave_1 left promiscuous mode
[   53.365008][  T321] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.372457][  T321] device bridge_slave_0 left promiscuous mode
[   53.378489][  T321] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.386093][  T321] device veth1_macvtap left promiscuous mode
[   53.391963][  T321] device veth0_vlan left promiscuous mode
[   53.605092][ T1414] loop2: detected capacity change from 0 to 2048
[   53.628409][  T377] usb 5-1: string descriptor 0 read error: -71
[   53.648437][  T377] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71
[   53.657029][  T377] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71
[   53.664971][  T377] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71
[   53.672907][  T377] uclogic 0003:256C:006D.0024: failed probing parameters: -71
[   53.680395][  T377] uclogic: probe of 0003:256C:006D.0024 failed with error -71
[   53.688027][   T30] audit: type=1326 audit(1723856027.458:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb901849e79 code=0x7ffc0000
[   53.711734][  T377] usb 5-1: USB disconnect, device number 11
[   53.745244][ T1414] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.755280][   T30] audit: type=1326 audit(1723856027.468:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb901849e79 code=0x7ffc0000
[   53.783616][ T1424] loop3: detected capacity change from 0 to 256
[   53.793548][   T30] audit: type=1326 audit(1723856027.468:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb901849e79 code=0x7ffc0000
[   53.817531][   T30] audit: type=1326 audit(1723856027.468:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb901849e79 code=0x7ffc0000
[   53.818629][ T1414] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   53.841543][   T30] audit: type=1326 audit(1723856027.468:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb901849e79 code=0x7ffc0000
[   53.858457][ T1414] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[   53.878446][  T292] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   53.897992][ T1414] EXT4-fs (loop2): This should not happen!! Data will be lost
[   53.897992][ T1414] 
[   53.907826][ T1414] EXT4-fs (loop2): Total free blocks count 0
[   53.913932][ T1414] EXT4-fs (loop2): Free/Dirty block details
[   53.919851][ T1414] EXT4-fs (loop2): free_blocks=2415919104
[   53.922521][   T30] audit: type=1326 audit(1723856027.468:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1416 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb901849e79 code=0x7ffc0000
[   53.925451][ T1414] EXT4-fs (loop2): dirty_blocks=16
[   53.953836][ T1414] EXT4-fs (loop2): Block reservation details
[   53.959834][ T1414] EXT4-fs (loop2): i_reserved_data_blocks=1
[   53.966291][  T423] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   53.974168][  T423] FAT-fs (loop3): Filesystem has been set read-only
[   53.980872][  T423] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   54.032657][  T359] tipc: Disabling bearer <udp:s>
[   54.037589][  T359] tipc: Left network mode
[   54.044289][ T1426] loop2: detected capacity change from 0 to 2048
[   54.090080][ T1426] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   54.111050][ T1426] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   54.125842][ T1426] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[   54.138973][ T1426] EXT4-fs (loop2): This should not happen!! Data will be lost
[   54.138973][ T1426] 
[   54.148554][  T292] usb 2-1: Using ep0 maxpacket: 16
[   54.150247][ T1426] EXT4-fs (loop2): Total free blocks count 0
[   54.159315][ T1426] EXT4-fs (loop2): Free/Dirty block details
[   54.165016][ T1426] EXT4-fs (loop2): free_blocks=2415919104
[   54.170786][ T1426] EXT4-fs (loop2): dirty_blocks=16
[   54.175778][ T1426] EXT4-fs (loop2): Block reservation details
[   54.181873][ T1426] EXT4-fs (loop2): i_reserved_data_blocks=1
[   54.202539][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.209407][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.216490][ T1430] device bridge_slave_0 entered promiscuous mode
[   54.223633][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.231357][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.238796][ T1430] device bridge_slave_1 entered promiscuous mode
[   54.239660][ T1435] loop2: detected capacity change from 0 to 512
[   54.268713][  T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.280093][  T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.285983][ T1435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   54.290046][  T292] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   54.301163][ T1435] EXT4-fs (loop2): 1 truncate cleaned up
[   54.313838][ T1435] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,stripe=0x0000000000000200,,errors=continue. Quota mode: none.
[   54.325024][  T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.370591][  T292] usb 2-1: config 0 descriptor??
[   54.410666][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.418354][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.438587][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.446780][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.455033][  T514] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.461899][  T514] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.469140][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.477528][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.486122][  T514] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.492975][  T514] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.503780][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.528514][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.536326][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.551976][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.562486][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.575553][ T1430] device veth0_vlan entered promiscuous mode
[   54.583015][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.590953][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.614304][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.628656][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.642347][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.685227][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.705245][ T1430] device veth1_macvtap entered promiscuous mode
[   54.718894][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.727749][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.747167][ T1443] loop4: detected capacity change from 0 to 40427
[   54.747629][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.762159][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.769088][ T1443] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   54.777780][ T1443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   54.787649][ T1443] F2FS-fs (loop4): invalid crc value
[   54.793851][  T359] device bridge_slave_1 left promiscuous mode
[   54.794649][ T1443] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   54.800021][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.817672][  T359] device bridge_slave_0 left promiscuous mode
[   54.823758][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.826063][ T1443] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   54.837459][ T1443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   54.844953][  T359] device veth0_vlan left promiscuous mode
[   54.851117][  T292] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0
[   54.857947][  T292] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0
[   54.864549][ T1443] attempt to access beyond end of device
[   54.864549][ T1443] loop4: rw=2049, want=45104, limit=40427
[   54.865022][  T292] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0
[   54.881610][ T1443] attempt to access beyond end of device
[   54.881610][ T1443] loop4: rw=0, want=45104, limit=40427
[   54.882828][  T292] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0
[   54.900434][  T292] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0
[   54.908676][  T292] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[   54.925753][ T1373] attempt to access beyond end of device
[   54.925753][ T1373] loop4: rw=2049, want=40968, limit=40427
[   55.026164][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.048116][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.055914][ T1444] device bridge_slave_0 entered promiscuous mode
[   55.068695][  T292] cp2112 0003:10C4:EA90.0025: Part Number: 0xE5 Device Version: 0x26
[   55.100354][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.107465][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.119680][ T1444] device bridge_slave_1 entered promiscuous mode
[   55.120035][ T1460] loop4: detected capacity change from 0 to 2048
[   55.154332][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.161212][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.169002][ T1447] device bridge_slave_0 entered promiscuous mode
[   55.178974][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.185814][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.193133][ T1447] device bridge_slave_1 entered promiscuous mode
[   55.222362][ T1460] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   55.278565][  T292] cp2112 0003:10C4:EA90.0025: error requesting SMBus config
[   55.301371][  T292] cp2112: probe of 0003:10C4:EA90.0025 failed with error -5
[   55.307382][ T1460] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem
[   55.327321][ T1460] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #18: comm syz.4.426: mark_inode_dirty error
[   55.340880][ T1460] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.426: Invalid block bitmap block 17364733872858783693 in block_group 0
[   55.358458][ T1460] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem
[   55.367848][ T1460] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #18: comm syz.4.426: mark_inode_dirty error
[   55.382525][ T1460] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem
[   55.392002][ T1460] EXT4-fs error (device loop4): ext4_alloc_file_blocks:4509: inode #18: comm syz.4.426: mark_inode_dirty error
[   55.414587][ T1373] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[   55.429330][ T1373] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[   55.498502][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.505844][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.514569][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.522798][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.530833][  T311] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.530897][  T377] usb 2-1: USB disconnect, device number 13
[   55.537667][  T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.550656][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.558831][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.566707][  T311] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.573489][  T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.580834][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.598258][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.606133][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.614324][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.622278][  T514] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   55.630320][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.660595][ T1444] device veth0_vlan entered promiscuous mode
[   55.670032][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.678080][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.686261][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.694069][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.701867][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.709487][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.729617][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.737330][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.744688][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.753091][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.762161][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.769014][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.776157][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.784188][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.792101][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.798935][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.812961][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.820378][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.828119][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.847323][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.855277][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.865500][ T1444] device veth1_macvtap entered promiscuous mode
[   55.874453][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.885748][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   55.893800][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.908370][  T514] usb 4-1: Using ep0 maxpacket: 16
[   55.914580][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.922612][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.935717][ T1447] device veth0_vlan entered promiscuous mode
[   55.944092][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.952766][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.960589][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.967778][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.000619][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.016448][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.023518][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.030808][ T1471] device bridge_slave_0 entered promiscuous mode
[   56.037573][ T1471] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.044576][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.051571][  T514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.052090][ T1471] device bridge_slave_1 entered promiscuous mode
[   56.062454][  T514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.078676][ T1447] device veth1_macvtap entered promiscuous mode
[   56.080366][ T1479] loop1: detected capacity change from 0 to 512
[   56.098355][ T1479] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   56.108064][  T514] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   56.111580][ T1479] EXT4-fs (loop1): 1 truncate cleaned up
[   56.116954][  T514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.130903][ T1479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   56.142844][  T514] usb 4-1: config 0 descriptor??
[   56.161694][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.169815][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.177934][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.186676][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.187420][  T291] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 33554432 (level 0)
[   56.246078][  T359] device bridge_slave_1 left promiscuous mode
[   56.252379][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.261300][  T359] device bridge_slave_0 left promiscuous mode
[   56.267268][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.275363][  T359] device bridge_slave_1 left promiscuous mode
[   56.281335][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.288628][  T313] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   56.296134][  T359] device bridge_slave_0 left promiscuous mode
[   56.302256][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.311025][  T359] device veth1_macvtap left promiscuous mode
[   56.316852][  T359] device veth0_vlan left promiscuous mode
[   56.322625][  T359] device veth1_macvtap left promiscuous mode
[   56.328536][  T359] device veth0_vlan left promiscuous mode
[   56.345184][ T1486] loop2: detected capacity change from 0 to 256
[   56.524937][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.537388][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.560879][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.569273][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.577556][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.584438][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.592676][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.601193][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.609870][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.616727][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.623977][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.632181][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.640184][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.648032][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.664006][ T1471] device veth0_vlan entered promiscuous mode
[   56.675368][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.683247][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.689145][  T514] cp2112 0003:10C4:EA90.0026: unbalanced delimiter at end of report description
[   56.692261][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.699216][  T313] usb 1-1: config 0 has no interfaces?
[   56.706403][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.718670][  T514] cp2112 0003:10C4:EA90.0026: parse failed
[   56.719378][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.724744][  T313] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[   56.743319][  T514] cp2112: probe of 0003:10C4:EA90.0026 failed with error -22
[   56.745804][ T1471] device veth1_macvtap entered promiscuous mode
[   56.755275][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.767293][  T313] usb 1-1: config 0 descriptor??
[   56.773304][  T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.793717][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.800620][ T1492] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.807706][ T1492] device bridge_slave_0 entered promiscuous mode
[   56.815121][ T1492] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.824079][ T1492] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.831309][ T1492] device bridge_slave_1 entered promiscuous mode
[   56.855661][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.863764][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.878724][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.886790][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.948067][  T514] usb 4-1: USB disconnect, device number 11
[   56.968652][ T1501] loop4: detected capacity change from 0 to 512
[   56.984547][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.993960][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.002620][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.009486][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.016828][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.026817][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.035174][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.042054][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.047433][  T665] usb 1-1: USB disconnect, device number 8
[   57.057660][ T1501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   57.067856][ T1492] device veth0_vlan entered promiscuous mode
[   57.074846][ T1501] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[   57.086680][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.095933][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.103853][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.111287][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.118725][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.126486][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.150651][ T1492] device veth1_macvtap entered promiscuous mode
[   57.157613][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.173863][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.184935][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.352319][ T1524] device syzkaller0 entered promiscuous mode
[   57.412654][ T1526] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22
[   57.422090][ T1526] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22
[   57.442718][ T1528] loop4: detected capacity change from 0 to 1024
[   57.513849][ T1528] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[   57.531178][ T1528] EXT4-fs (loop4): invalid journal inode
[   57.536844][ T1528] EXT4-fs (loop4): can't get journal size
[   57.543387][ T1528] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback.
[   57.624460][ T1538] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   57.633406][ T1538] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   57.643007][  T359] device bridge_slave_1 left promiscuous mode
[   57.650886][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.662348][  T359] device bridge_slave_0 left promiscuous mode
[   57.679669][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.687580][  T359] device bridge_slave_1 left promiscuous mode
[   57.693640][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.702575][  T359] device bridge_slave_0 left promiscuous mode
[   57.710950][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.715048][ T1555] loop2: detected capacity change from 0 to 256
[   57.724992][  T359] device veth1_macvtap left promiscuous mode
[   57.731183][  T359] device veth0_vlan left promiscuous mode
[   57.736861][  T359] device veth1_macvtap left promiscuous mode
[   57.742822][  T359] device veth0_vlan left promiscuous mode
[   57.748882][ T1555] exfat: Unknown parameter '��������00000000000000000000'
[   57.854971][   T30] kauditd_printk_skb: 39 callbacks suppressed
[   57.854988][   T30] audit: type=1326 audit(1723856031.628:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   57.898763][   T30] audit: type=1326 audit(1723856031.628:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   57.923401][   T30] audit: type=1326 audit(1723856031.638:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   57.946751][   T30] audit: type=1326 audit(1723856031.638:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   57.970059][   T30] audit: type=1326 audit(1723856031.638:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   57.993582][   T30] audit: type=1326 audit(1723856031.638:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   57.998712][   T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   58.016696][   T30] audit: type=1326 audit(1723856031.638:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   58.047100][   T30] audit: type=1326 audit(1723856031.638:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d47de79 code=0x7ffc0000
[   58.051828][ T1550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.461'.
[   58.237646][ T1589] loop3: detected capacity change from 0 to 128
[   58.288302][  T665] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   58.296540][ T1589] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,grpjquota=,,errors=continue. Quota mode: none.
[   58.309720][ T1589] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   58.345835][   T30] audit: type=1400 audit(1723856032.118:497): avc:  denied  { map } for  pid=1588 comm="syz.3.476" path="/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/net_prio.prioidx" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   58.458304][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.469182][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.478994][   T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   58.487959][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.496000][  T514] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   58.507363][   T26] usb 5-1: config 0 descriptor??
[   58.658292][  T665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.669022][  T665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.678564][  T665] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.691185][  T665] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[   58.700008][  T665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.708696][  T665] usb 3-1: config 0 descriptor??
[   58.808269][   T20] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   58.868298][  T514] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   58.878979][  T514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.889625][  T514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.899253][  T514] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   58.912009][  T514] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[   58.920821][  T514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.929578][  T514] usb 1-1: config 0 descriptor??
[   58.989045][   T26] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0
[   58.995921][   T26] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0
[   59.002710][   T26] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0
[   59.009480][   T26] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0
[   59.016763][   T26] lg-g15 0003:046D:C222.0027: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[   59.048297][   T20] usb 4-1: Using ep0 maxpacket: 8
[   59.168270][   T20] usb 4-1: New USB device found, idVendor=09d8, idProduct=0320, bcdDevice=8c.41
[   59.177267][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.186222][   T20] usb 4-1: config 0 descriptor??
[   59.199490][  T665] acrux 0003:1A34:0802.0028: item fetching failed at offset 3/5
[   59.208951][  T665] acrux 0003:1A34:0802.0028: parse failed
[   59.214514][  T665] acrux: probe of 0003:1A34:0802.0028 failed with error -22
[   59.216796][  T292] usb 5-1: USB disconnect, device number 12
[   59.399087][  T514] thrustmaster 0003:044F:B653.0029: unbalanced delimiter at end of report description
[   59.408738][  T459] usb 3-1: USB disconnect, device number 7
[   59.409327][  T514] thrustmaster 0003:044F:B653.0029: parse failed
[   59.421148][  T514] thrustmaster: probe of 0003:044F:B653.0029 failed with error -22
[   59.509349][  T514] usb 4-1: USB disconnect, device number 12
[   59.604965][  T292] usb 1-1: USB disconnect, device number 9
[   59.787075][ T1608] loop4: detected capacity change from 0 to 512
[   59.869698][ T1608] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback.
[   59.881963][ T1608] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff)
[   59.928126][   T30] audit: type=1400 audit(1723856033.698:498): avc:  denied  { mount } for  pid=1612 comm="syz.2.484" name="/" dev="ramfs" ino=23030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   59.955399][ T1616] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   60.024676][ T1621] loop3: detected capacity change from 0 to 2048
[   60.099219][ T1621] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.488: casefold flag without casefold feature
[   60.111726][ T1621] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   60.122289][ T1621] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   60.129973][ T1621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.308475][   T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   60.334027][ T1629] loop0: detected capacity change from 0 to 40427
[   60.419035][ T1629] F2FS-fs (loop0): invalid crc value
[   60.442570][ T1629] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.477438][ T1629] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[   60.484246][ T1629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   60.515131][ T1629] attempt to access beyond end of device
[   60.515131][ T1629] loop0: rw=2049, want=45104, limit=40427
[   60.558212][   T26] usb 5-1: Using ep0 maxpacket: 8
[   60.590509][ T1661] loop3: detected capacity change from 0 to 512
[   60.613954][ T1663] loop1: detected capacity change from 0 to 512
[   60.654078][ T1663] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.503: iget: bad extended attribute block 128
[   60.668928][ T1663] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.503: couldn't read orphan inode 16 (err -117)
[   60.681430][ T1661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.692493][   T26] usb 5-1: config 0 has no interfaces?
[   60.697790][   T26] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   60.698361][ T1661] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff)
[   60.706905][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.717411][ T1663] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.735519][   T26] usb 5-1: config 0 descriptor??
[   60.743413][ T1663] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff)
[   60.765730][ T1663] EXT4-fs error (device loop1): ext4_lookup:1855: inode #16: comm syz.1.503: iget: bad extended attribute block 128
[   60.824402][ T1678] loop3: detected capacity change from 0 to 2048
[   60.849834][ T1678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   60.918882][ T1683] process 'syz.0.508' launched './file0' with NULL argv: empty string added
[   60.976371][ T1676] loop1: detected capacity change from 0 to 40427
[   60.995724][ T1623] UDC core: couldn't find an available UDC or it's busy: -16
[   61.000158][ T1676] F2FS-fs (loop1): invalid crc value
[   61.003030][ T1623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   61.009596][ T1676] F2FS-fs (loop1): Found nat_bits in checkpoint
[   61.022710][  T514] usb 5-1: USB disconnect, device number 13
[   61.043147][ T1676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   61.066104][ T1492] attempt to access beyond end of device
[   61.066104][ T1492] loop1: rw=2049, want=45104, limit=40427
[   61.185810][ T1697] loop1: detected capacity change from 0 to 256
[   61.349191][ T1702] device pim6reg1 entered promiscuous mode
[   61.540710][ T1710] loop1: detected capacity change from 0 to 128
[   61.695755][ T1724] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   61.704060][ T1724] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   61.713860][ T1724] kvm: MWAIT instruction emulated as NOP!
[   61.756380][ T1732] device bridge_slave_0 left promiscuous mode
[   61.763138][ T1732] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.770923][ T1732] device bridge_slave_1 left promiscuous mode
[   61.776965][ T1732] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.016562][ T1742] loop4: detected capacity change from 0 to 40427
[   62.064837][ T1742] F2FS-fs (loop4): invalid crc value
[   62.075755][ T1742] F2FS-fs (loop4): Found nat_bits in checkpoint
[   62.108229][  T377] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   62.115732][ T1742] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   62.141698][ T1747] attempt to access beyond end of device
[   62.141698][ T1747] loop4: rw=2049, want=45120, limit=40427
[   62.159501][ T1471] attempt to access beyond end of device
[   62.159501][ T1471] loop4: rw=524288, want=45072, limit=40427
[   62.172699][ T1471] attempt to access beyond end of device
[   62.172699][ T1471] loop4: rw=0, want=45072, limit=40427
[   62.193377][  T514] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   62.371622][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.378618][ T1756] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.385787][ T1756] device bridge_slave_0 entered promiscuous mode
[   62.392884][ T1756] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.399961][ T1756] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.407206][ T1756] device bridge_slave_1 entered promiscuous mode
[   62.446496][ T1756] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.453357][ T1756] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.460452][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.467225][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.489554][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.497048][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.504278][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.518442][  T377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.528871][  T377] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   62.530095][ T1756] device veth0_vlan entered promiscuous mode
[   62.546339][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.554345][  T459] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   62.558314][  T514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.562139][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.572628][  T514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.580845][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.589653][  T514] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   62.596982][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.605484][  T514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.613290][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.628447][  T377] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   62.631564][  T514] usb 2-1: config 0 descriptor??
[   62.637295][  T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   62.650121][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.656945][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.664095][  T377] usb 1-1: SerialNumber: syz
[   62.668733][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.677439][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.684304][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.691499][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.699561][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.713410][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.721389][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.730436][ T1756] device veth1_macvtap entered promiscuous mode
[   62.743382][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.750966][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.759280][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.767335][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.775426][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.918845][  T377] usb 1-1: 0:2 : does not exist
[   62.999099][  T638] device veth1_macvtap left promiscuous mode
[   63.004938][  T638] device veth0_vlan left promiscuous mode
[   63.018327][  T459] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[   63.026475][  T459] usb 4-1: config 0 has no interface number 0
[   63.032444][  T459] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.043256][  T459] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.098268][  T297] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   63.119178][  T514] hid-led 0003:1D34:000A.002A: unknown main item tag 0x0
[   63.140029][  T459] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[   63.149070][  T459] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   63.156866][  T459] usb 4-1: Manufacturer: syz
[   63.161948][  T459] usb 4-1: config 0 descriptor??
[   63.338268][  T514] hid-led: probe of 0003:1D34:000A.002A failed with error -71
[   63.348027][  T514] usb 2-1: USB disconnect, device number 14
[   63.355065][  T377] usb 1-1: USB disconnect, device number 10
[   63.498284][  T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.508445][  T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   63.588475][  T297] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   63.597356][  T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   63.605179][  T297] usb 5-1: SerialNumber: syz
[   63.611922][  T459] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.002B/input/input17
[   63.624334][   T30] kauditd_printk_skb: 33 callbacks suppressed
[   63.624347][   T30] audit: type=1400 audit(1723856037.398:532): avc:  denied  { read } for  pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=645 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.625261][  T459] sony 0003:054C:03D5.002B: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18
[   63.630658][   T30] audit: type=1400 audit(1723856037.398:533): avc:  denied  { open } for  pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=645 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.688516][   T30] audit: type=1400 audit(1723856037.468:534): avc:  denied  { ioctl } for  pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=645 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.816903][  T459] usb 4-1: USB disconnect, device number 13
[   63.879470][ T1771] loop0: detected capacity change from 0 to 512
[   63.919342][ T1771] EXT4-fs (loop0): Unrecognized mount option "fsname=/dev/ptmx" or missing value
[   63.932584][  T297] usb 5-1: 0:2 : does not exist
[   63.937291][  T297] usb 5-1: unit 5: unexpected type 0x0a
[   63.939241][ T1773] loop1: detected capacity change from 0 to 256
[   63.952241][  T297] usb 5-1: USB disconnect, device number 14
[   63.978817][ T1773] exfat: Unknown parameter '��������00000000000000000000'
[   64.337190][ T1785] syz.3.546[1785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.337261][ T1785] syz.3.546[1785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.375736][   T30] audit: type=1400 audit(1723856038.148:535): avc:  denied  { write } for  pid=1790 comm="syz.1.548" name="fd" dev="proc" ino=24556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   64.442522][   T30] audit: type=1400 audit(1723856038.148:536): avc:  denied  { add_name } for  pid=1790 comm="syz.1.548" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   64.467666][   T30] audit: type=1400 audit(1723856038.148:537): avc:  denied  { create } for  pid=1790 comm="syz.1.548" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[   64.488503][   T30] audit: type=1400 audit(1723856038.148:538): avc:  denied  { associate } for  pid=1790 comm="syz.1.548" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   64.606372][ T1812] syz.4.558[1812] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.606447][ T1812] syz.4.558[1812] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.730632][ T1814] device bridge_slave_0 left promiscuous mode
[   64.750260][ T1814] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.758258][  T313] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   64.758303][ T1814] device bridge_slave_1 left promiscuous mode
[   64.773129][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.802119][   T30] audit: type=1400 audit(1723856038.578:539): avc:  denied  { setopt } for  pid=1819 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   64.826743][   T30] audit: type=1400 audit(1723856038.608:540): avc:  denied  { bind } for  pid=1819 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.877885][ T1824] loop3: detected capacity change from 0 to 512
[   64.884686][   T30] audit: type=1400 audit(1723856038.648:541): avc:  denied  { create } for  pid=1823 comm="syz.3.563" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   64.908572][ T1824] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   64.917881][ T1824] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   65.012771][ T1824] loop3: detected capacity change from 0 to 4096
[   65.118237][  T297] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   65.118272][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.136351][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.150912][  T313] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   65.159797][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.170323][  T313] usb 2-1: config 0 descriptor??
[   65.186710][ T1833] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   65.194538][ T1833] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   65.388277][  T297] usb 1-1: Using ep0 maxpacket: 16
[   65.538351][  T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.549128][  T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.648923][  T313] isku 0003:1E7D:319C.002C: unknown main item tag 0x0
[   65.655582][  T313] isku 0003:1E7D:319C.002C: unbalanced collection at end of report description
[   65.664490][  T313] isku 0003:1E7D:319C.002C: parse failed
[   65.669986][  T313] isku: probe of 0003:1E7D:319C.002C failed with error -22
[   65.678620][  T297] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   65.687650][  T297] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[   65.695745][  T297] usb 1-1: Product: syz
[   65.699782][  T297] usb 1-1: Manufacturer: syz
[   65.704615][  T297] usb 1-1: config 0 descriptor??
[   65.856464][  T313] usb 2-1: USB disconnect, device number 15
[   65.920129][ T1854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.575'.
[   66.168902][  T297] kovaplus 0003:1E7D:2D50.002D: item fetching failed at offset 5/7
[   66.176720][  T297] kovaplus 0003:1E7D:2D50.002D: parse failed
[   66.182477][  T297] kovaplus: probe of 0003:1E7D:2D50.002D failed with error -22
[   66.372969][  T313] usb 1-1: USB disconnect, device number 11
[   66.607515][ T1881] loop4: detected capacity change from 0 to 256
[   66.719658][ T1883] loop4: detected capacity change from 0 to 2048
[   66.799629][ T1883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   66.822503][ T1883] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #12: comm syz.4.588: corrupted inode contents
[   66.834365][ T1883] EXT4-fs error (device loop4): ext4_setent:3666: inode #12: comm syz.4.588: mark_inode_dirty error
[   66.849357][ T1756] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /26/file0: bad entry in directory: inode out of bounds - offset=92, inode=32784, rec_len=16, size=2048 fake=0
[   66.869967][ T1756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 7: padding at end of block bitmap is not set
[   66.884400][ T1756] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem
[   66.897077][ T1756] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #12: comm syz-executor: corrupted inode contents
[   66.909311][ T1756] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #12: comm syz-executor: mark_inode_dirty error
[   67.158235][  T292] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   67.372276][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.379301][ T1896] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.386416][ T1896] device bridge_slave_0 entered promiscuous mode
[   67.393910][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.400924][  T292] usb 1-1: Using ep0 maxpacket: 8
[   67.400964][ T1896] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.412940][ T1896] device bridge_slave_1 entered promiscuous mode
[   67.424124][ T1904] raw_sendmsg: syz.1.595 forgot to set AF_INET. Fix it!
[   67.452542][ T1906] loop1: detected capacity change from 0 to 1024
[   67.476135][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.482999][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.490117][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.496864][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.509765][ T1906] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   67.519138][ T1906] EXT4-fs (loop1): Ignoring removed nobh option
[   67.523720][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.526925][ T1906] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nouid32,jqfmt=vfsold,nolazytime,data=ordered,init_itable=0x0000000000000005,abort,bsdgroups,nobh,,errors=continue. Quota mode: writeback.
[   67.538282][  T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.564772][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.572263][  T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.572369][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.589081][  T292] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[   67.597933][  T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.616573][  T292] usb 1-1: config 0 descriptor??
[   67.622655][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.630679][  T459] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.637515][  T459] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.645529][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.653699][  T459] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.660577][  T459] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.668969][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.676833][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.691867][ T1896] device veth0_vlan entered promiscuous mode
[   67.698942][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.707251][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.715454][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.722948][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.744316][ T1896] device veth1_macvtap entered promiscuous mode
[   67.757192][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.773510][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.782387][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.825660][ T1920] device pim6reg1 entered promiscuous mode
[   68.109050][  T292] saitek 0003:06A3:0CCD.002E: unknown main item tag 0x0
[   68.115839][  T292] saitek 0003:06A3:0CCD.002E: unknown main item tag 0x0
[   68.122674][  T292] saitek 0003:06A3:0CCD.002E: item fetching failed at offset 2/11
[   68.130457][  T292] saitek 0003:06A3:0CCD.002E: parse failed
[   68.136092][  T292] saitek: probe of 0003:06A3:0CCD.002E failed with error -22
[   68.178794][    T8] device bridge_slave_1 left promiscuous mode
[   68.184716][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.192187][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.199811][    T8] device veth1_macvtap left promiscuous mode
[   68.205608][    T8] device veth0_vlan left promiscuous mode
[   68.218239][  T313] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   68.228253][  T459] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   68.323744][  T292] usb 1-1: USB disconnect, device number 12
[   68.469323][  T313] usb 2-1: Using ep0 maxpacket: 16
[   68.588334][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.588345][  T459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.588370][  T459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.599357][  T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   68.609806][  T459] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[   68.619545][  T313] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   68.631983][  T459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.640989][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.660564][  T459] usb 5-1: config 0 descriptor??
[   68.670277][  T313] usb 2-1: config 0 descriptor??
[   68.840208][   T30] kauditd_printk_skb: 34 callbacks suppressed
[   68.840221][   T30] audit: type=1400 audit(1723856042.618:576): avc:  denied  { bind } for  pid=1934 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.907686][ T1941] loop3: detected capacity change from 0 to 256
[   68.995995][ T1937] loop0: detected capacity change from 0 to 40427
[   69.009190][ T1946] loop3: detected capacity change from 0 to 256
[   69.059580][ T1937] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   69.067299][ T1937] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   69.075419][   T30] audit: type=1400 audit(1723856042.838:577): avc:  denied  { mounton } for  pid=1945 comm="syz.3.612" path="/47/file1/file0" dev="loop3" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   69.079635][ T1937] F2FS-fs (loop0): invalid crc value
[   69.104756][ T1937] F2FS-fs (loop0): Found nat_bits in checkpoint
[   69.105209][ T1430] FAT-fs (loop3): error, invalid access to FAT (entry 0x000004ff)
[   69.123440][ T1430] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[   69.137680][ T1937] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   69.146620][  T313] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002F/input/input18
[   69.150379][ T1937] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   69.223457][  T313] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   69.265766][ T1937] attempt to access beyond end of device
[   69.265766][ T1937] loop0: rw=2049, want=80000, limit=40427
[   69.284358][ T1937] attempt to access beyond end of device
[   69.284358][ T1937] loop0: rw=2049, want=81920, limit=40427
[   69.304609][ T1937] attempt to access beyond end of device
[   69.304609][ T1937] loop0: rw=2049, want=61760, limit=40427
[   69.322732][ T1937] attempt to access beyond end of device
[   69.322732][ T1937] loop0: rw=2049, want=64488, limit=40427
[   69.339398][ T1937] attempt to access beyond end of device
[   69.339398][ T1937] loop0: rw=2049, want=66584, limit=40427
[   69.355355][ T1953] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.362560][ T1953] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.370005][ T1953] device bridge_slave_0 entered promiscuous mode
[   69.384868][ T1937] attempt to access beyond end of device
[   69.384868][ T1937] loop0: rw=2049, want=70384, limit=40427
[   69.398284][ T1953] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.405137][ T1953] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.428892][ T1953] device bridge_slave_1 entered promiscuous mode
[   69.445389][  T459] usb 5-1: USB disconnect, device number 15
[   69.450309][ T1937] attempt to access beyond end of device
[   69.450309][ T1937] loop0: rw=2049, want=77824, limit=40427
[   69.471414][ T1937] attempt to access beyond end of device
[   69.471414][ T1937] loop0: rw=2049, want=84792, limit=40427
[   69.491218][ T1937] attempt to access beyond end of device
[   69.491218][ T1937] loop0: rw=2049, want=87728, limit=40427
[   69.527815][ T1444] attempt to access beyond end of device
[   69.527815][ T1444] loop0: rw=2049, want=40968, limit=40427
[   69.546605][ T1953] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.553486][ T1953] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.560605][ T1953] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.567344][ T1953] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.597285][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.605459][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.613020][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.636069][ T1953] device veth0_vlan entered promiscuous mode
[   69.642066][  T514] usb 2-1: USB disconnect, device number 16
[   69.647889][ T1953] device veth1_macvtap entered promiscuous mode
[   69.658477][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.666724][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.677485][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.686034][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.694003][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.704996][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.713703][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.720576][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.728040][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.736209][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.743095][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.751694][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.760182][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.780310][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.788856][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.818775][  T638] device bridge_slave_1 left promiscuous mode
[   69.825004][  T638] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.833276][  T638] device bridge_slave_0 left promiscuous mode
[   69.839402][  T638] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.847304][  T638] device veth1_macvtap left promiscuous mode
[   69.853450][  T638] device veth0_vlan left promiscuous mode
[   69.957850][   T30] audit: type=1400 audit(1723856043.728:578): avc:  denied  { call } for  pid=1966 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   69.981286][ T1963] loop3: detected capacity change from 0 to 40427
[   69.995576][ T1969] device pim6reg1 entered promiscuous mode
[   70.042239][ T1963] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   70.049718][ T1963] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   70.077410][ T1972] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   70.085821][ T1972] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   70.099722][ T1963] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   70.164215][   T30] audit: type=1326 audit(1723856043.938:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec9ce6e79 code=0x7ffc0000
[   70.197684][   T30] audit: type=1326 audit(1723856043.958:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec9ce6e79 code=0x7ffc0000
[   70.221066][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.221392][   T30] audit: type=1326 audit(1723856043.998:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fcec9ce6e79 code=0x7ffc0000
[   70.227985][ T1973] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.260284][ T1963] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   70.267337][ T1963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   70.268561][   T30] audit: type=1326 audit(1723856043.998:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec9ce6e79 code=0x7ffc0000
[   70.298341][   T30] audit: type=1326 audit(1723856043.998:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec9ce6e79 code=0x7ffc0000
[   70.325276][ T1973] device bridge_slave_0 entered promiscuous mode
[   70.350225][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.357083][ T1973] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.374586][ T1973] device bridge_slave_1 entered promiscuous mode
[   70.447989][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.454891][ T1973] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.461976][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.468746][ T1973] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.507564][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.515311][  T514] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.524800][  T514] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.549051][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.557111][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.564079][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.571427][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.579844][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.586680][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.606548][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.616525][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.629102][ T1973] device veth0_vlan entered promiscuous mode
[   70.643692][ T2005] loop1: detected capacity change from 0 to 512
[   70.651173][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.658957][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.666307][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.673793][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.682136][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.690475][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'.
[   70.703427][ T1973] device veth1_macvtap entered promiscuous mode
[   70.717237][  T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.739607][ T2005] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.632: casefold flag without casefold feature
[   70.752649][ T2005] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.632: missing EA_INODE flag
[   70.765368][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.765733][ T2005] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.632: error while reading EA inode 12 err=-117
[   70.785831][ T2005] EXT4-fs (loop1): 1 orphan inode deleted
[   70.792104][ T2005] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   70.918218][ T2024] loop2: detected capacity change from 0 to 256
[   70.947044][ T2024] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xab111d54, utbl_chksum : 0xe619d30d)
[   70.965321][   T30] audit: type=1400 audit(1723856044.738:584): avc:  denied  { map } for  pid=2023 comm="syz.2.639" path="/1/file2/file1" dev="loop2" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.993117][   T30] audit: type=1400 audit(1723856044.738:585): avc:  denied  { execute } for  pid=2023 comm="syz.2.639" path="/1/file2/file1" dev="loop2" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   71.008232][   T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   71.169381][  T638] device bridge_slave_1 left promiscuous mode
[   71.175471][  T638] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.183340][  T638] device bridge_slave_0 left promiscuous mode
[   71.189715][  T638] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.197765][  T638] device veth1_macvtap left promiscuous mode
[   71.204036][  T638] device veth0_vlan left promiscuous mode
[   71.408610][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.419515][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.429211][   T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[   71.438387][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.446876][ T2039] fuse: Unknown parameter 'fd0xffffffffffffffff'
[   71.458134][   T26] usb 5-1: config 0 descriptor??
[   71.939170][   T26] appleir 0003:05AC:8240.0031: unknown main item tag 0x0
[   71.950415][   T26] appleir 0003:05AC:8240.0031: item fetching failed at offset 3/5
[   71.966906][   T26] appleir 0003:05AC:8240.0031: parse failed
[   71.968218][  T459] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   71.983618][   T26] appleir: probe of 0003:05AC:8240.0031 failed with error -22
[   72.152804][  T665] usb 5-1: USB disconnect, device number 16
[   72.278229][  T297] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   72.329152][ T2049] loop0: detected capacity change from 0 to 40427
[   72.341563][ T2051] incfs: mount failed -22
[   72.348487][  T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.351913][ T2049] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   72.372149][  T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.373111][ T2049] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   72.383618][  T459] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[   72.397091][ T2049] F2FS-fs (loop0): invalid crc value
[   72.399188][  T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.405249][ T2049] F2FS-fs (loop0): Found nat_bits in checkpoint
[   72.415601][  T459] usb 4-1: config 0 descriptor??
[   72.435680][ T2049] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   72.442651][ T2049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   72.648315][  T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.659453][  T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.669570][  T297] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   72.682634][  T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.690491][  T384] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   72.691874][ T2066] loop4: detected capacity change from 0 to 512
[   72.700806][  T297] usb 2-1: config 0 descriptor??
[   72.801006][ T2066] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.654: corrupted inode contents
[   72.812848][ T2066] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #16: comm syz.4.654: mark_inode_dirty error
[   72.824090][ T2066] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.654: corrupted inode contents
[   72.835961][ T2066] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.654: mark_inode_dirty error
[   72.847119][ T2066] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.654: corrupted inode contents
[   72.858905][ T2066] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   72.867477][ T2066] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #16: comm syz.4.654: corrupted inode contents
[   72.879668][ T2066] EXT4-fs error (device loop4): ext4_truncate:4292: inode #16: comm syz.4.654: mark_inode_dirty error
[   72.888738][  T665] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   72.890859][ T2066] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   72.907083][ T2066] EXT4-fs (loop4): 1 truncate cleaned up
[   72.912645][ T2066] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.923785][ T2066] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff)
[   72.926794][  T459] hid-rmi 0003:06CB:81A7.0032: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0
[   72.944494][  T384] usb 3-1: Using ep0 maxpacket: 8
[   72.965865][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   72.981735][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   72.997146][ T1896] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[   73.009486][ T1896] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop4 ino=15
[   73.018373][ T1896] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[   73.030646][ T1896] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop4 ino=15
[   73.039390][ T1896] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[   73.051242][ T1896] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop4 ino=15
[   73.060537][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.076024][ T1896] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 19
[   73.088268][  T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.088641][ T1896] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -74)
[   73.099021][  T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.108372][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.117606][  T384] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   73.141815][ T1896] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum
[   73.141836][  T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.165879][  T384] usb 3-1: config 0 descriptor??
[   73.170778][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.186319][ T1896] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum
[   73.199986][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.200932][   T26] usb 4-1: USB disconnect, device number 14
[   73.216902][ T1896] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum
[   73.234024][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.249584][ T1896] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum
[   73.261919][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.268416][  T665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.277780][ T1896] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum
[   73.288106][  T665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.301400][ T1896] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   73.310476][  T665] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[   73.325786][ T1896] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum
[   73.334398][  T665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.355017][  T665] usb 1-1: config 0 descriptor??
[   73.512393][ T2072] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.519378][ T2072] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.526488][ T2072] device bridge_slave_0 entered promiscuous mode
[   73.533288][ T2072] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.540221][ T2072] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.547365][ T2072] device bridge_slave_1 entered promiscuous mode
[   73.585816][ T2072] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.592666][ T2072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.599786][ T2072] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.606542][ T2072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.626862][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.634326][  T459] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.641552][  T459] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.653785][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.661851][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.668717][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.677197][  T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.686088][  T384] hid-picolcd 0003:04D8:F002.0034: unknown main item tag 0x0
[   73.693482][  T459] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.700340][  T459] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.707499][  T384] hid-picolcd 0003:04D8:F002.0034: item fetching failed at offset 5/7
[   73.715639][  T384] hid-picolcd 0003:04D8:F002.0034: device report parse failed
[   73.723203][  T384] hid-picolcd: probe of 0003:04D8:F002.0034 failed with error -22
[   73.738254][  T297] usb 2-1: string descriptor 0 read error: -71
[   73.751358][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.759006][  T297] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71
[   73.767501][  T297] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71
[   73.776212][  T297] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71
[   73.778618][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.784157][  T297] uclogic 0003:256C:006D.0033: failed probing parameters: -71
[   73.799003][  T297] uclogic: probe of 0003:256C:006D.0033 failed with error -71
[   73.807681][  T297] usb 2-1: USB disconnect, device number 17
[   73.822243][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.835719][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.844293][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.851854][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.862268][ T2072] device veth0_vlan entered promiscuous mode
[   73.872317][  T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.881312][ T2072] device veth1_macvtap entered promiscuous mode
[   73.894100][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.905610][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.915133][  T359] device bridge_slave_1 left promiscuous mode
[   73.921581][  T384] usb 3-1: USB disconnect, device number 8
[   73.922604][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.936003][  T359] device bridge_slave_0 left promiscuous mode
[   73.942032][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.949954][  T359] device veth1_macvtap left promiscuous mode
[   73.955756][  T359] device veth0_vlan left promiscuous mode
[   74.028245][  T665] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   74.061797][  T297] usb 1-1: USB disconnect, device number 13
[   74.225135][ T2086] loop4: detected capacity change from 0 to 40427
[   74.293902][ T2086] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   74.300100][ T2086] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   74.313669][ T2086] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   74.334297][ T2086] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   74.341357][ T2086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   74.362534][ T2086] handle_bad_sector: 58194 callbacks suppressed
[   74.362548][ T2086] attempt to access beyond end of device
[   74.362548][ T2086] loop4: rw=10241, want=53256, limit=40427
[   74.371162][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   74.371175][   T30] audit: type=1400 audit(1723856048.148:588): avc:  denied  { write } for  pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.380046][ T2086] attempt to access beyond end of device
[   74.380046][ T2086] loop4: rw=2049, want=53264, limit=40427
[   74.385918][   T30] audit: type=1400 audit(1723856048.148:589): avc:  denied  { remove_name } for  pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.413933][ T2086] attempt to access beyond end of device
[   74.413933][ T2086] loop4: rw=2049, want=53328, limit=40427
[   74.418331][  T665] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   74.455003][   T30] audit: type=1400 audit(1723856048.148:590): avc:  denied  { rename } for  pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.484150][   T30] audit: type=1400 audit(1723856048.148:591): avc:  denied  { add_name } for  pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.489619][ T2072] attempt to access beyond end of device
[   74.489619][ T2072] loop4: rw=2049, want=45104, limit=40427
[   74.506653][   T30] audit: type=1400 audit(1723856048.148:592): avc:  denied  { unlink } for  pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.540685][   T30] audit: type=1400 audit(1723856048.148:593): avc:  denied  { create } for  pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.541589][ T2100] loop1: detected capacity change from 0 to 128
[   74.638366][  T665] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.647229][  T665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.692838][  T665] usb 4-1: Product: syz
[   74.699212][ T2100] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   74.712629][   T30] audit: type=1400 audit(1723856048.488:594): avc:  denied  { relabelfrom } for  pid=2104 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   74.732763][  T665] usb 4-1: Manufacturer: syz
[   74.735567][ T2102] loop0: detected capacity change from 0 to 40427
[   74.737171][  T665] usb 4-1: SerialNumber: syz
[   74.748444][ T2100] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   74.758229][   T30] audit: type=1400 audit(1723856048.518:595): avc:  denied  { relabelto } for  pid=2104 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   74.806702][ T2100] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   74.817386][ T2100] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes)
[   74.829058][ T2100] overlayfs: upper fs does not support tmpfile.
[   74.835254][ T2100] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes)
[   74.860826][   T30] audit: type=1400 audit(1723856048.638:596): avc:  denied  { setopt } for  pid=2110 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   74.882646][   T30] audit: type=1400 audit(1723856048.638:597): avc:  denied  { connect } for  pid=2110 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   74.908289][ T2102] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   74.914449][ T2102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   74.926846][ T2102] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   74.992719][ T2102] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   75.000233][ T2102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   75.056504][ T2102] attempt to access beyond end of device
[   75.056504][ T2102] loop0: rw=10241, want=53256, limit=40427
[   75.082442][ T2102] attempt to access beyond end of device
[   75.082442][ T2102] loop0: rw=2049, want=53264, limit=40427
[   75.099235][ T2102] attempt to access beyond end of device
[   75.099235][ T2102] loop0: rw=2049, want=53328, limit=40427
[   75.135615][ T1444] attempt to access beyond end of device
[   75.135615][ T1444] loop0: rw=2049, want=45104, limit=40427
[   75.187620][ T2129] loop4: detected capacity change from 0 to 8192
[   75.197012][ T2132] loop1: detected capacity change from 0 to 16
[   75.263131][ T2134] loop0: detected capacity change from 0 to 256
[   75.284583][ T2132] erofs: (device loop1): mounted with root inode @ nid 36.
[   75.308860][ T2134] FAT-fs (loop0): Unrecognized mount option "���������18446744073709551615��������������18446744073709551615RS���!xi*�V��y���1�*�@�lO��'������Q�7�܁e��xµ�]����	v�����Y��Le���H�0�bM��n�����M�/4R#/�(����sk�՗���v�#$�hF�Rݗ�2t�7da����{�f���wiL�H�-����" or missing value
[   75.512569][ T2145] loop2: detected capacity change from 0 to 40427
[   75.658223][  T313] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   75.898232][  T313] usb 5-1: Using ep0 maxpacket: 32
[   75.928263][  T665] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[   75.934526][  T665] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   75.955945][  T665] cdc_ncm 4-1:1.0: setting rx_max = 2048
[   76.218306][  T665] cdc_ncm 4-1:1.0: setting tx_max = 184
[   76.225247][  T313] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   76.235521][  T665] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42
[   76.247064][ T2145] F2FS-fs (loop2): invalid crc value
[   76.252814][  T313] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   76.264961][  T313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   76.278280][  T665] usb 4-1: USB disconnect, device number 15
[   76.291959][ T2145] F2FS-fs (loop2): Found nat_bits in checkpoint
[   76.316911][  T665] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM
[   76.328984][  T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   76.339159][  T313] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   76.361184][  T313] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   76.382598][ T2145] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[   76.394840][  T313] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   76.398279][ T2145] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   76.405407][  T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.435607][  T313] usb 5-1: config 0 descriptor??
[   76.443091][  T514] ==================================================================
[   76.450973][  T514] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0
[   76.458001][  T514] Read of size 8 at addr ffff888122ec8c60 by task kworker/1:5/514
[   76.465642][  T514] 
[   76.465780][ T1973] attempt to access beyond end of device
[   76.465780][ T1973] loop2: rw=524288, want=45072, limit=40427
[   76.467805][  T514] CPU: 1 PID: 514 Comm: kworker/1:5 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0
[   76.467824][  T514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   76.467835][  T514] Workqueue:  0x0 (wg-crypt-wg0)
[   76.467866][  T514] Call Trace:
[   76.479390][ T1973] attempt to access beyond end of device
[   76.479390][ T1973] loop2: rw=0, want=45072, limit=40427
[   76.488809][  T514]  <TASK>
[   76.488825][  T514]  dump_stack_lvl+0x151/0x1c0
[   76.488847][  T514]  ? io_uring_drop_tctx_refs+0x190/0x190
[   76.488864][  T514]  ? panic+0x760/0x760
[   76.488876][  T514]  ? __schedule+0xcd4/0x1590
[   76.488892][  T514]  print_address_description+0x87/0x3b0
[   76.488908][  T514]  kasan_report+0x179/0x1c0
[   76.488922][  T514]  ? _raw_spin_lock_irqsave+0x210/0x210
[   76.553818][  T514]  ? worker_thread+0xaaa/0x12a0
[   76.558502][  T514]  ? worker_thread+0xaaa/0x12a0
[   76.563187][  T514]  __asan_report_load8_noabort+0x14/0x20
[   76.568663][  T514]  worker_thread+0xaaa/0x12a0
[   76.573168][  T514]  ? _raw_spin_lock+0x1b0/0x1b0
[   76.577870][  T514]  kthread+0x421/0x510
[   76.581762][  T514]  ? worker_clr_flags+0x180/0x180
[   76.586625][  T514]  ? kthread_blkcg+0xd0/0xd0
[   76.591048][  T514]  ret_from_fork+0x1f/0x30
[   76.595304][  T514]  </TASK>
[   76.598167][  T514] 
[   76.600338][  T514] Allocated by task 665:
[   76.604424][  T514]  ____kasan_kmalloc+0xdb/0x110
[   76.609187][  T514]  __kasan_kmalloc+0x9/0x10
[   76.613525][  T514]  __kmalloc+0x13a/0x270
[   76.617605][  T514]  kvmalloc_node+0x1f0/0x4d0
[   76.622151][  T514]  alloc_netdev_mqs+0x8c/0xc90
[   76.626740][  T514]  alloc_etherdev_mqs+0x33/0x40
[   76.631422][  T514]  usbnet_probe+0x1ff/0x2830
[   76.635848][  T514]  usb_probe_interface+0x5b6/0xa90
[   76.640795][  T514]  really_probe+0x28d/0x970
[   76.645135][  T514]  __driver_probe_device+0x1a0/0x310
[   76.650255][  T514]  driver_probe_device+0x54/0x3d0
[   76.655135][  T514]  __device_attach_driver+0x2c5/0x470
[   76.660322][  T514]  bus_for_each_drv+0x183/0x200
[   76.665010][  T514]  __device_attach+0x312/0x510
[   76.669610][  T514]  device_initial_probe+0x1a/0x20
[   76.674471][  T514]  bus_probe_device+0xbe/0x1e0
[   76.679074][  T514]  device_add+0xb60/0xf10
[   76.683244][  T514]  usb_set_configuration+0x190f/0x1e80
[   76.688539][  T514]  usb_generic_driver_probe+0x8b/0x150
[   76.693829][  T514]  usb_probe_device+0x144/0x260
[   76.698510][  T514]  really_probe+0x28d/0x970
[   76.702850][  T514]  __driver_probe_device+0x1a0/0x310
[   76.707970][  T514]  driver_probe_device+0x54/0x3d0
[   76.712831][  T514]  __device_attach_driver+0x2c5/0x470
[   76.718056][  T514]  bus_for_each_drv+0x183/0x200
[   76.722725][  T514]  __device_attach+0x312/0x510
[   76.727324][  T514]  device_initial_probe+0x1a/0x20
[   76.732190][  T514]  bus_probe_device+0xbe/0x1e0
[   76.736786][  T514]  device_add+0xb60/0xf10
[   76.740954][  T514]  usb_new_device+0x1038/0x1c00
[   76.745639][  T514]  hub_event+0x2def/0x4770
[   76.749892][  T514]  process_one_work+0x6bb/0xc10
[   76.754577][  T514]  worker_thread+0xad5/0x12a0
[   76.759090][  T514]  kthread+0x421/0x510
[   76.762998][  T514]  ret_from_fork+0x1f/0x30
[   76.767250][  T514] 
[   76.769422][  T514] Freed by task 665:
[   76.773154][  T514]  kasan_set_track+0x4b/0x70
[   76.777578][  T514]  kasan_set_free_info+0x23/0x40
[   76.782361][  T514]  ____kasan_slab_free+0x126/0x160
[   76.787309][  T514]  __kasan_slab_free+0x11/0x20
[   76.791897][  T514]  slab_free_freelist_hook+0xbd/0x190
[   76.797105][  T514]  kfree+0xc8/0x220
[   76.800750][  T514]  kvfree+0x35/0x40
[   76.804396][  T514]  netdev_freemem+0x3f/0x60
[   76.808736][  T514]  netdev_release+0x7f/0xb0
[   76.813076][  T514]  device_release+0x95/0x1c0
[   76.817505][  T514]  kobject_put+0x178/0x260
[   76.821756][  T514]  put_device+0x1f/0x30
[   76.825745][  T514]  free_netdev+0x34f/0x440
[   76.830001][  T514]  usbnet_disconnect+0x245/0x390
[   76.834774][  T514]  usb_unbind_interface+0x1fa/0x8c0
[   76.839807][  T514]  device_release_driver_internal+0x50b/0x7d0
[   76.845707][  T514]  device_release_driver+0x19/0x20
[   76.850658][  T514]  bus_remove_device+0x2f8/0x360
[   76.855429][  T514]  device_del+0x663/0xe90
[   76.859597][  T514]  usb_disable_device+0x380/0x720
[   76.864457][  T514]  usb_disconnect+0x32a/0x890
[   76.868969][  T514]  hub_event+0x1d42/0x4770
[   76.873222][  T514]  process_one_work+0x6bb/0xc10
[   76.877908][  T514]  worker_thread+0xe02/0x12a0
[   76.882596][  T514]  kthread+0x421/0x510
[   76.886501][  T514]  ret_from_fork+0x1f/0x30
[   76.890753][  T514] 
[   76.892924][  T514] Last potentially related work creation:
[   76.898481][  T514]  kasan_save_stack+0x3b/0x60
[   76.902991][  T514]  __kasan_record_aux_stack+0xd3/0xf0
[   76.908199][  T514]  kasan_record_aux_stack_noalloc+0xb/0x10
[   76.913840][  T514]  insert_work+0x56/0x320
[   76.918006][  T514]  __queue_work+0x92a/0xcd0
[   76.922346][  T514]  queue_work_on+0x105/0x170
[   76.926772][  T514]  usbnet_link_change+0xeb/0x100
[   76.931546][  T514]  usbnet_probe+0x1dd3/0x2830
[   76.936059][  T514]  usb_probe_interface+0x5b6/0xa90
[   76.941095][  T514]  really_probe+0x28d/0x970
[   76.945432][  T514]  __driver_probe_device+0x1a0/0x310
[   76.950553][  T514]  driver_probe_device+0x54/0x3d0
[   76.955413][  T514]  __device_attach_driver+0x2c5/0x470
[   76.960626][  T514]  bus_for_each_drv+0x183/0x200
[   76.965307][  T514]  __device_attach+0x312/0x510
[   76.969908][  T514]  device_initial_probe+0x1a/0x20
[   76.974767][  T514]  bus_probe_device+0xbe/0x1e0
[   76.979369][  T514]  device_add+0xb60/0xf10
[   76.983534][  T514]  usb_set_configuration+0x190f/0x1e80
[   76.988829][  T514]  usb_generic_driver_probe+0x8b/0x150
[   76.994126][  T514]  usb_probe_device+0x144/0x260
[   76.998811][  T514]  really_probe+0x28d/0x970
[   77.003152][  T514]  __driver_probe_device+0x1a0/0x310
[   77.008270][  T514]  driver_probe_device+0x54/0x3d0
[   77.013130][  T514]  __device_attach_driver+0x2c5/0x470
[   77.018338][  T514]  bus_for_each_drv+0x183/0x200
[   77.023028][  T514]  __device_attach+0x312/0x510
[   77.027626][  T514]  device_initial_probe+0x1a/0x20
[   77.032583][  T514]  bus_probe_device+0xbe/0x1e0
[   77.037172][  T514]  device_add+0xb60/0xf10
[   77.041337][  T514]  usb_new_device+0x1038/0x1c00
[   77.046024][  T514]  hub_event+0x2def/0x4770
[   77.050277][  T514]  process_one_work+0x6bb/0xc10
[   77.054975][  T514]  worker_thread+0xad5/0x12a0
[   77.059475][  T514]  kthread+0x421/0x510
[   77.063381][  T514]  ret_from_fork+0x1f/0x30
[   77.067634][  T514] 
[   77.069805][  T514] The buggy address belongs to the object at ffff888122ec8000
[   77.069805][  T514]  which belongs to the cache kmalloc-4k of size 4096
[   77.083691][  T514] The buggy address is located 3168 bytes inside of
[   77.083691][  T514]  4096-byte region [ffff888122ec8000, ffff888122ec9000)
[   77.096971][  T514] The buggy address belongs to the page:
[   77.102450][  T514] page:ffffea00048bb200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122ec8
[   77.112506][  T514] head:ffffea00048bb200 order:3 compound_mapcount:0 compound_pincount:0
[   77.120750][  T514] flags: 0x4000000000010200(slab|head|zone=1)
[   77.126658][  T514] raw: 4000000000010200 0000000000000000 0000000200000001 ffff888100043380
[   77.135079][  T514] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   77.143489][  T514] page dumped because: kasan: bad access detected
[   77.149919][  T514] page_owner tracks the page as allocated
[   77.155467][  T514] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, ts 20189185771, free_ts 0
[   77.173434][  T514]  post_alloc_hook+0x1a3/0x1b0
[   77.178036][  T514]  prep_new_page+0x1b/0x110
[   77.182374][  T514]  get_page_from_freelist+0x3550/0x35d0
[   77.187754][  T514]  __alloc_pages+0x27e/0x8f0
[   77.192180][  T514]  new_slab+0x9a/0x4e0
[   77.196086][  T514]  ___slab_alloc+0x39e/0x830
[   77.200511][  T514]  __slab_alloc+0x4a/0x90
[   77.204679][  T514]  kmem_cache_alloc_trace+0x142/0x210
[   77.209886][  T514]  kobject_uevent_env+0x269/0x700
[   77.214746][  T514]  kobject_uevent+0x1f/0x30
[   77.219084][  T514]  net_rx_queue_update_kobjects+0x213/0x490
[   77.224813][  T514]  netdev_register_kobject+0x231/0x320
[   77.230109][  T514]  register_netdevice+0xde9/0x1390
[   77.235055][  T514]  register_netdev+0x3c/0x50
[   77.239482][  T514]  sit_init_net+0x244/0x480
[   77.243826][  T514]  ops_init+0x1cf/0x4a0
[   77.247815][  T514] page_owner free stack trace missing
[   77.253021][  T514] 
[   77.255279][  T514] Memory state around the buggy address:
[   77.260752][  T514]  ffff888122ec8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.268645][  T514]  ffff888122ec8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.276632][  T514] >ffff888122ec8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.284527][  T514]                                                        ^
[   77.291560][  T514]  ffff888122ec8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.299462][  T514]  ffff888122ec8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.307352][  T514] ==================================================================
[   77.315252][  T514] Disabling lock debugging due to kernel taint
[   77.569053][  T313] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   77.587947][  T313] usb 5-1: USB disconnect, device number 17
[   77.596243][  T313] usblp0: removed
[   77.608251][  T514] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   77.888939][  T638] device bridge_slave_1 left promiscuous mode
[   77.894898][  T638] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.902603][  T638] device bridge_slave_0 left promiscuous mode
[   77.908698][  T638] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.916651][  T638] device veth1_macvtap left promiscuous mode
[   77.922780][  T638] device veth0_vlan left promiscuous mode
[   77.968291][  T514] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   77.988221][  T514] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00
[   77.997084][  T514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.016184][  T514] usb 2-1: config 0 descriptor??
[   78.058614][  T514] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   78.148231][  T313] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   78.260517][  T514] usb 2-1: USB disconnect, device number 18
[   78.388397][  T313] usb 5-1: Using ep0 maxpacket: 32
[   78.508249][  T313] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   78.516506][  T313] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   78.524996][  T313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   78.533909][  T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   78.543444][  T313] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   78.552950][  T313] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   78.566192][  T313] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   78.575162][  T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.586791][  T313] usb 5-1: config 0 descriptor??
[   78.778921][  T313] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   78.795974][  T313] usb 5-1: USB disconnect, device number 18
[   78.804013][  T313] usblp0: removed