last executing test programs:

3.374111508s ago: executing program 4 (id=6453):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="88b5fa1171e8e1fdc35cd703405c7e97a7b45c1ebacb4b7eb171907bbd86d8eb12de8027", 0x24, 0x40000, 0x0, 0x0)
sendto(r0, &(0x7f0000000600)="1db4d479c5faee911d50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdff59fbb22bae1b2443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b22905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e294", 0x6f, 0x4c080, 0x0, 0x0)

3.373520697s ago: executing program 4 (id=6454):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000300)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

3.348157198s ago: executing program 4 (id=6455):
r0 = io_uring_setup(0xfc6, &(0x7f0000000180))
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[], 0xa)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x5, 0x8}, 0x2)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tgkill(0x0, 0x0, 0x21)
wait4(0x0, 0x0, 0x40000000, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)

3.320408949s ago: executing program 3 (id=6456):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)

3.312171649s ago: executing program 3 (id=6458):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
read$char_usb(r1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.916064855s ago: executing program 0 (id=6468):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x10}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x4004084, 0x0, 0x0)

2.915917855s ago: executing program 0 (id=6469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)

2.914072115s ago: executing program 0 (id=6470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0)

2.905209295s ago: executing program 0 (id=6471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x2)

2.890872475s ago: executing program 0 (id=6472):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004)

2.788204817s ago: executing program 0 (id=6473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0xc0)

2.788083917s ago: executing program 32 (id=6473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0xc0)

1.429534567s ago: executing program 4 (id=6481):
unshare(0x2c020400)
r0 = socket$packet(0x11, 0x3, 0x300)
recvfrom$packet(r0, 0x0, 0x0, 0x2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x20000000)

1.318703169s ago: executing program 3 (id=6482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x48805}, 0x4000000)

1.188167721s ago: executing program 3 (id=6483):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x10008d2, &(0x7f0000000600)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c696f636861727365743d63703835322c756e695f786c6174653d312c636f6465706167653d3935302c696f636861727365743d63703934392c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d6d697865642c00b67f259feb7c96a9a253accde765d0c3f3780a29bc134b"], 0x1, 0x360, &(0x7f0000000200)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)

1.187754761s ago: executing program 3 (id=6484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0x100, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x7, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0x85, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x4, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x5, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0xffffffff, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x1, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xdc, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)

1.181066521s ago: executing program 2 (id=6485):
socket$inet6(0xa, 0x80002, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x434100, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x3, &(0x7f0000000240)=[{0xff, 0x7, 0x3, 0xe}, {0x3, 0x81, 0xad, 0x1}, {0x0, 0x9, 0xe, 0x7}]})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000380), 0x12)

1.173910252s ago: executing program 5 (id=6486):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @flat=@binder={0x73622a85, 0xa, 0xffffffffffffffff}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0})

1.129408592s ago: executing program 2 (id=6487):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

1.128076242s ago: executing program 1 (id=6488):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x568, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
fallocate(r0, 0x10, 0x1002, 0x5)

1.114301473s ago: executing program 5 (id=6489):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$eJzs3EtvG1UUAOA7TpPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKKhJ48R9fJ80PjPX12fusUaRzkzkADy15tPff03CxXAmhDATQjifhHw/KbbcSgwvhBAuhRBK/9iSYvzvgbkQwtkQwsVR8pgzKd768srw8vIvb/323Q+nT5376tsfp1c1MG0vhhC6m3F/pxtj1orxTjFeG7bz2L0+LGJ8o3u3OM5i3Gmu5xl2auN5tTxea8X52eZ2fxQ3OrX6KLbaG/n4Zi+esD9sjfPkH7hT28qPG831PLb7WR5be3Fdu3vxb9tefxDzNIp8H+fpw2AwjnG8uduM9WzezWO9NyjGY96s0dwdxWERi9OFetZp5OtYP8o3/Wh7u93b3k2Hza1+O+uly5XqS5XqjXJ1K2s0B83r5Vq3ceN6utDqjKaVB81ad6WVZa1Os1LPuovpQqteL1er6cLN5nq71kur1cq1ytXy8mKxdyV9/fb7aaeRLoziq+3e9ly70083sq00fmIxXapce3kxvVxN311dS9feuXVrde29D29+cPuV1TdfKybdt6x0Yenq0lK5erW8VF18cI1zx13/6AQHrH9wlPo/KxZ9iPqTQ10NcEguMIBDu6//D/p/4OFdPOC8x73/D5Ps/0ctlf7/wf1v6ej9/5H634fs/ydW/wTufzxq9cOR6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5aP81+/Ua+Mx+PzxXjF4qh54rjJIRQCiH8+R9mwty+nDNFntn/mT/7rzV8n4Q8w+gcp4vtbAhhpdj+ePa4vwUAAAB4cn3zyaUvYrceX+anvSBOUrxpUzr/0YTyJSGE2fmfJ5StNHp5fkLJ8uv7VNidULb8BtYzE0oWb7mdmlS2A5kZh08v3BvMC0piKJ3ocgAAgBMxsy+cbBcCAADASfp82gtgOpIwfpQ5fhac/+f9vUebZ/a9BwAAADyGkmkvAAAAADh2ef/v9/8AAADgyRZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnbvJWRqI4wD8b/uWDz8iMe69ijs4hkdw6VI4gJfgCHgFL8AZcOcRDDW0E5IqJMZObSTPk3TKtOQ3M9DNTJMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMX2rD5svn95+HppzbobJMxoAAADgllN92LQfVl39ebr+Ml16nepFRJQR8fvMfRlVzHqZVcqpb36/aepf+vA1ok24tDFPx7OIeJeO6tXYvwIAAAA8ruNuv+5m612xmrpD/Evdok354n2mvCIi6tX3TGnlpXiTKax9vp/iY6a0dgFrkSmsW3J7un1vlquRvqp3SiNZbNs/sa2V47QLAABMqT8TuDMLAQAA4AF8mLoDTKO4Ftf3jPPulF4ILns1AAAA4D9UTN0BAAAAYHTt/H/4/n9NM/b+fz/s/wcAAAB/rdv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDGd6sPmuNuv793f/mHOuRkm34gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Mn+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xtFFQcA/Ls7O0tBibWaHqoGEw96kXZBkKMeNI0H/wSTpmyxuogCByGNphc9mZ5J1OjRGBNNvfE/cKYJF7xx6KEmnjXzqww/lA2pM0v7+SRv3nd2J+993+yG8O2bFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKttvx4vdMk6yw3QRV6/d3Flbzvqt+/rM9Y1bc1nL4s6jJvr6rb1PfrK9VD85Nls7+bL5ZAAAADgYkqq+j4jb6eZi1nen8/o/ra7Jav4fjhZxVc/fX/dv7axNlW/NVfX/77/deX53oulinmzQldXRcOHBVHr/0xIn3jOPvKKX3/n8Zy9J/oF031t/bjvN72fnmxs33unn4aEmsgUAHsfxqi+D6v9DWT9oMzEADoxerfCu6v9kut2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqwvR5PVXEnIuZ6d+PM1s7a8sP66xu35qp2+tq1jfqY2RBpRKysjoZpg2uZdJeuXP14aTQaXmw+OBYR7c1eBh+McU3Ef19Tfj2jvVX8e9CZjDRaDbrl5zMp+exlUH339n7klv5BAgBgH0qORlmPp2VdfzvdXMxe68xE/P3jvfX/q7U4xqz/73x4+mZ9xnr9P2hqmRPv2+8izn86f+nK1ddXzy+dG54bfvLGicGbg5NnTp06M5/dq4X5legOF9pOFAAAgCdYv2z1+r878+D+/5FaHGPW/599P/iiPlei/n+ou5t+bWcCAABwEPV3o2df/uvPTv2tqaLr9Pvx+dLlyxcHxXH3/ERxbDzlx3CobPX6P5lpOysAAACgCdvrnXv2/8/W4hhz///pn174pT5mEhGHIy5ExPD48oXR2eaWM9Ga+EXlfKJ+2ysFAACgLYfLVuz/9/L9/zR//r+7+8hDNyJee6WIq791NU79n7z71c/1uerP/59sbokTqTtb3I+8n43ozbadEQAAAPvZVNmyYv+PdHPxo1+PvN/3/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4JAAD//880Myg=")
syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x20d, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000005b00)={0x0, 0x6, 0x0, 0x1000})

1.108876062s ago: executing program 2 (id=6490):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842", 0xac}], 0x1}}], 0x1, 0xc0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000740))

1.070464873s ago: executing program 2 (id=6491):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88e, &(0x7f0000000200)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nolazytime}, {@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x1b}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x3, 0x450, &(0x7f0000000740)="$eJzs3MtvG8UfAPDv2knf/SW/qjyaFggURMQjadJSeuDCS+IAEhIcyjEkaRXqNqgJEq0iCAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAuLYiD0dq7ie3YaRzsutSfj7TtzO5EM1/vznpmJ5sA+tZo+k8SsS8ifo2IoWq2vsBo9b+bq8szf64uzyRRLr/xR1Ipd2N1eSYvmv/c3jwzEFH4JInDTepdvHT53HSpNHcxy08snX93YvHS5afnz0+fnTs7d2Hq1KkTxyefPTn1TEfiTOO6MfLBwpFDr7x19bWZ01ff/vHrJI+/IY4OGd3s4GPlcoer6639NelkoIcNoS3FajeNwUr/H4pirJ+8oXj54542Duiqcrlcvrf14ZUycBdLotctAHoj/6JP57/5tvmAoaPDj567/nx1ApTGfTPbqkcGopCVGWyY33bSaEScXvnri3SL7jyHAACo8206/nmq2fivELXPhf6XraEMR8T/I+JARJyMiIMRcU9Epex9EXF/m/U3LpJsHP8Urm0rsC1Kx3/PZWtb9eO/fPQXw8Ust78S/2ByZr40dyz7TMZicGean9ykju9e+uWzVsdqx3/pltafjwWzdlwb2Lme2xURs9NL0/827tz1jyJGBprFn6ytBCQRcSgiRrZZx/wTXx1pdezW8TdX+Ug6sM5U/jLi8er5X4mG+HPJ5uuTE7uiNHdsIr8qNvrp5yuvt6p/u/F3Snr+9zS9/tfiH05q12sX26/jym+ftpzTtHv9R3b970jerNv3/vTS0sXJiB3Jq9VG1+6faig3tV4+jX/saPP+fyDWP4nDEZFexA9ExIMR8VDW9ocj4pGIOLpJ/D+88Og7dTvG9rURf3el8c+2df7XEzuicU/zRPHc99/UVTocbcSfnv8TldRYtmcr97+ttGt7VzMAAAD89xQiYl8khfG1dKEwPl79Hf6DsadQWlhcevLMwnsXZqvvCAzHYCF/0jVU8zx0MpvW5/mphvzx7Lnx58Xdlfz4zEJpttfBQ5/b26L/p34v9rp1QNd5Xwv6l/4P/Uv/h/6l/0P/atL/d2/c9XfDK4PA3aDZ9/+HPWgHcPs19H/LftBHzP+hf+n/0L/0f+hLi7vj1i/JS0hsSEThjmhG9xP5Xx+5U9pzmxJbun282NWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAf8EwAA///XK+zt")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000})

1.070009743s ago: executing program 2 (id=6492):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r4, 0x5608, 0x3)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x400001}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0xc}], 0x6, 0x40000020, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)

868.461277ms ago: executing program 1 (id=6493):
unshare(0x2c020400)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)

744.066908ms ago: executing program 1 (id=6494):
listen(0xffffffffffffffff, 0xfffffffc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000001ac0)=0x200040, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x40010}, 0x0)
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000380), 0x1, 0x155b, &(0x7f0000003100)="$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")

743.828438ms ago: executing program 5 (id=6495):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000019080)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noblock_validity}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes n\x00\x00e\x00'], 0xd)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x109000, 0x0)

639.01522ms ago: executing program 2 (id=6496):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

636.658689ms ago: executing program 5 (id=6497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r2, 0x0, 0x20040814)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0)

625.16397ms ago: executing program 5 (id=6498):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0xd82756b30e350375}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)

552.119721ms ago: executing program 5 (id=6499):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x4008af24, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r4, 0xc6c3, 0x0)

549.039321ms ago: executing program 4 (id=6500):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14)

539.417251ms ago: executing program 4 (id=6501):
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x201, 0x2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r0, 0xffffd000)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
io_setup(0x5, &(0x7f0000002800)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000004e80)=[&(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x702a, r1, &(0x7f0000002840)="f9fd5a18", 0x4, 0x1, 0x0, 0x2}])
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)

480.552732ms ago: executing program 1 (id=6502):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x8, 0x8, 0x1807}, 0x50)

408.057723ms ago: executing program 1 (id=6503):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020)

59.523409ms ago: executing program 1 (id=6504):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000580))
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000600)={0x0, 0x2, "43cb93", 0x7})

0s ago: executing program 3 (id=6505):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffc, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x24dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$packet(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

30] audit: type=1326 audit(1751086389.175:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17017 comm="syz.0.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb45953a929 code=0x7ffc0000
[ 1348.258193][   T30] audit: type=1326 audit(1751086389.175:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17017 comm="syz.0.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45953a929 code=0x7ffc0000
[ 1351.209477][T17065] overlayfs: missing 'lowerdir'
[ 1352.149433][T17075] serio: Serial port ptm0
[ 1354.559746][ T3018] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1356.066519][ T3018] usb 3-1: Using ep0 maxpacket: 32
[ 1356.106011][T17131] serio: Serial port ptm0
[ 1356.228978][ T3018] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1356.236760][ T3018] usb 3-1: too many configurations: 60, using maximum allowed: 8
[ 1357.498970][ T3018] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1357.508758][ T3018] usb 3-1: can't read configurations, error -71
[ 1358.231738][T17161] syz.0.4876[17161] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1358.232054][T17161] syz.0.4876[17161] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1358.659163][T17163] syz.1.4877[17163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1358.670634][T17163] syz.1.4877[17163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1359.443744][T17174] 9pnet: Insufficient options for proto=fd
[ 1359.470213][T17179] serio: Serial port ptm0
[ 1361.002683][T17214] 9pnet: Insufficient options for proto=fd
[ 1361.098380][T17217] 9pnet: Insufficient options for proto=fd
[ 1361.320838][T17223] syz.3.4894[17223] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1361.321061][T17223] syz.3.4894[17223] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1363.523676][T17253] overlayfs: failed to resolve './file1': -2
[ 1363.734154][T17255] serio: Serial port ptm0
[ 1364.569532][T17266] serio: Serial port ptm1
[ 1365.588915][  T424] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1367.338965][  T424] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.428229][  T424] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1367.775024][  T424] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1367.791327][  T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.772274][  T424] usb 5-1: config 0 descriptor??
[ 1369.139626][  T424] usb 5-1: can't set config #0, error -71
[ 1369.153659][  T424] usb 5-1: USB disconnect, device number 77
[ 1370.292000][T17346] overlayfs: failed to resolve './file0': -2
[ 1371.216003][T17358] syz.4.4931[17358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1371.216334][T17358] syz.4.4931[17358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1372.330259][T17369] overlayfs: missing 'lowerdir'
[ 1373.643557][T17396] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1374.044576][T17402] overlayfs: missing 'lowerdir'
[ 1375.703162][  T486] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1375.722454][T17422] 9pnet: Insufficient options for proto=fd
[ 1376.171798][  T486] usb 3-1: Using ep0 maxpacket: 32
[ 1377.451246][T17448] serio: Serial port ptm0
[ 1377.479331][  T486] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1377.497265][  T486] usb 3-1: too many configurations: 60, using maximum allowed: 8
[ 1377.619055][  T486] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1377.635829][  T486] usb 3-1: can't read configurations, error -61
[ 1377.668930][    T6] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1377.961852][T17463] 9pnet: Insufficient options for proto=fd
[ 1378.038952][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1378.050798][    T6] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1378.062113][    T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1378.071696][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.083845][    T6] usb 2-1: config 0 descriptor??
[ 1379.144299][T17483] UDC core: couldn't find an available UDC or it's busy: -16
[ 1379.155937][T17483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1381.302210][T17507] syz.2.4972[17507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1381.302388][T17507] syz.2.4972[17507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1382.212841][  T506] usb 2-1: USB disconnect, device number 57
[ 1383.774950][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1383.774964][   T30] audit: type=1400 audit(1751086424.875:2818): avc:  denied  { read write } for  pid=17538 comm="syz.2.4985" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1383.806334][   T30] audit: type=1400 audit(1751086424.875:2819): avc:  denied  { open } for  pid=17538 comm="syz.2.4985" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1384.035368][T17557] syz.0.4987[17557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1384.035667][T17557] syz.0.4987[17557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1385.462398][T17573] serio: Serial port ptm0
[ 1389.841545][T17623] overlayfs: failed to resolve './file0': -2
[ 1392.191366][T17650] 9pnet: Insufficient options for proto=fd
[ 1392.657074][T17673] syz.4.5022[17673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1392.657386][T17673] syz.4.5022[17673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1394.064950][T17688] syz.3.5024[17688] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1394.076433][T17688] syz.3.5024[17688] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1394.348930][    T6] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1395.179392][    T6] usb 5-1: Using ep0 maxpacket: 32
[ 1396.257058][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1396.272733][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1396.305862][    T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1396.375217][T17712] overlayfs: missing 'workdir'
[ 1396.581913][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.619167][    T6] usb 5-1: config 0 descriptor??
[ 1396.658974][    T6] usb 5-1: can't set config #0, error -71
[ 1396.687881][    T6] usb 5-1: USB disconnect, device number 78
[ 1398.398061][T17742] syz.1.5040[17742] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1398.398380][T17742] syz.1.5040[17742] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1400.151670][T17773] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1400.731154][T17783] 9pnet: Insufficient options for proto=fd
[ 1401.225328][T17791] 9pnet: Insufficient options for proto=fd
[ 1401.289217][T17792] syz.4.5050[17792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1401.289576][T17792] syz.4.5050[17792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1402.252882][T17803] serio: Serial port ptm0
[ 1404.128394][T17823] 9pnet: Insufficient options for proto=fd
[ 1407.390627][T17876] serio: Serial port ptm0
[ 1407.471840][T17880] 9pnet: Insufficient options for proto=fd
[ 1408.995248][T17915] overlayfs: failed to resolve './file0': -2
[ 1409.471103][T17927] 9pnet: Insufficient options for proto=fd
[ 1409.578897][  T506] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1410.079064][  T506] usb 2-1: Using ep0 maxpacket: 32
[ 1410.199278][  T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1410.256226][  T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1410.278928][  T506] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1410.288010][  T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.299132][  T506] usb 2-1: config 0 descriptor??
[ 1410.339345][  T506] hub 2-1:0.0: USB hub found
[ 1410.578942][  T506] hub 2-1:0.0: 1 port detected
[ 1411.179046][  T506] hub 2-1:0.0: hub_hub_status failed (err = -71)
[ 1411.192177][  T506] hub 2-1:0.0: config failed, can't get hub status (err -71)
[ 1411.658905][  T506] usbhid 2-1:0.0: can't add hid device: -71
[ 1411.664871][  T506] usbhid: probe of 2-1:0.0 failed with error -71
[ 1411.739351][T17958] syz.3.5097[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1411.739423][T17958] syz.3.5097[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1411.770610][  T506] usb 2-1: USB disconnect, device number 58
[ 1411.931164][T17966] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1412.027900][T17968] syz.4.5098[17968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1412.028192][T17968] syz.4.5098[17968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1412.231365][T17971] 9pnet: Insufficient options for proto=fd
[ 1412.627081][   T30] audit: type=1326 audit(1751086453.685:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1412.794212][   T30] audit: type=1326 audit(1751086453.685:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1412.829382][   T30] audit: type=1326 audit(1751086453.685:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd649360290 code=0x7ffc0000
[ 1412.927403][   T30] audit: type=1326 audit(1751086453.685:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1412.994648][   T30] audit: type=1326 audit(1751086453.685:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1413.064207][   T30] audit: type=1326 audit(1751086453.715:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1413.114264][   T30] audit: type=1326 audit(1751086453.715:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1413.174578][   T30] audit: type=1326 audit(1751086453.715:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1413.235854][   T30] audit: type=1326 audit(1751086453.715:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1413.305342][   T30] audit: type=1326 audit(1751086453.715:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd649361929 code=0x7ffc0000
[ 1414.651368][T18006] fuse: Unknown parameter 'grou00000000000000000000'
[ 1414.739833][T18013] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1415.761092][T18041] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1415.961812][T18055] 9pnet: Insufficient options for proto=fd
[ 1417.465339][T18075] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1417.491034][T18079] 9pnet: Insufficient options for proto=fd
[ 1418.394002][T18097] serio: Serial port ptm0
[ 1418.748877][ T1325] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1419.168943][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1419.182857][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1419.233898][T18118] 9pnet: Insufficient options for proto=fd
[ 1419.245946][ T1325] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1419.280199][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.318143][ T1325] usb 4-1: config 0 descriptor??
[ 1419.402378][ T1325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1421.435101][T18141] overlayfs: failed to resolve './file1': -2
[ 1421.486412][T18145] 9pnet: Insufficient options for proto=fd
[ 1421.515763][ T1325] usb 4-1: USB disconnect, device number 74
[ 1421.694026][T18158] 9pnet: Insufficient options for proto=fd
[ 1421.786281][T18160] syz.3.5161[18160] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1421.786553][T18160] syz.3.5161[18160] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1425.488858][  T662] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1425.838925][  T662] usb 4-1: Using ep0 maxpacket: 32
[ 1425.958955][  T662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1425.989668][  T662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1426.017799][  T662] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1426.043262][  T662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.070766][  T662] usb 4-1: config 0 descriptor??
[ 1426.119403][  T662] hub 4-1:0.0: USB hub found
[ 1426.398911][  T662] hub 4-1:0.0: 1 port detected
[ 1426.703304][  T662] hub 4-1:0.0: hub_hub_status failed (err = -71)
[ 1426.709893][  T662] hub 4-1:0.0: config failed, can't get hub status (err -71)
[ 1426.818905][  T662] usbhid 4-1:0.0: can't add hid device: -71
[ 1426.824971][  T662] usbhid: probe of 4-1:0.0 failed with error -71
[ 1427.523668][T18276] syz.2.5194[18276] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1427.524864][T18276] syz.2.5194[18276] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1427.898345][T18272] 9pnet: Insufficient options for proto=fd
[ 1428.109290][  T662] usb 4-1: USB disconnect, device number 75
[ 1428.377558][T18291] overlayfs: failed to resolve './file1': -2
[ 1429.246482][T18309] serio: Serial port ptm0
[ 1429.877990][T18318] 9pnet: Insufficient options for proto=fd
[ 1431.183943][ T7152] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1431.343970][T18338] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1432.384995][ T7152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1432.405477][ T7152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1432.444479][T18361] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1432.502761][ T7152] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1432.540983][ T7152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1432.614477][ T7152] usb 5-1: config 0 descriptor??
[ 1432.659319][ T7152] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1432.997475][T18367] 9pnet: Insufficient options for proto=fd
[ 1433.577136][T18382] UDC core: couldn't find an available UDC or it's busy: -16
[ 1433.586725][T18382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1433.676714][T18387] loop0: detected capacity change from 0 to 256
[ 1433.729913][T18387] loop0: detected capacity change from 0 to 512
[ 1433.739078][T18387] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value
[ 1434.405128][T18401] 9pnet: Insufficient options for proto=fd
[ 1434.615010][   T60] usb 5-1: USB disconnect, device number 79
[ 1434.783147][T18410] overlayfs: failed to resolve './file0': -2
[ 1435.509815][T18435] 9pnet: Insufficient options for proto=fd
[ 1435.836372][T18446] syz.4.5252[18446] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1435.836446][T18446] syz.4.5252[18446] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1439.721241][T18511] syz.1.5269[18511] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1439.733101][T18511] syz.1.5269[18511] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1440.132690][  T662] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1440.275751][T18520] loop0: detected capacity change from 0 to 128
[ 1440.496891][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1440.496916][   T30] audit: type=1400 audit(1751086481.595:2838): avc:  denied  { mount } for  pid=18519 comm="syz.0.5273" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 1440.669218][T18527] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1441.582746][  T662] usb 4-1: Using ep0 maxpacket: 32
[ 1441.590689][   T30] audit: type=1400 audit(1751086482.685:2839): avc:  denied  { unmount } for  pid=11026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 1442.459255][T18545] overlayfs: failed to resolve './file0': -2
[ 1442.758940][  T662] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1442.766883][  T662] usb 4-1: too many configurations: 60, using maximum allowed: 8
[ 1442.878874][  T662] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1442.888573][  T662] usb 4-1: can't read configurations, error -71
[ 1443.009103][T18559] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1443.413742][T18570] serio: Serial port ptm0
[ 1444.877887][T18589] overlayfs: failed to resolve './file0': -2
[ 1445.190746][   T30] audit: type=1326 audit(1751086486.295:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1445.608887][   T30] audit: type=1326 audit(1751086486.325:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.033763][   T30] audit: type=1326 audit(1751086486.325:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.077758][   T30] audit: type=1326 audit(1751086486.325:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.118876][   T30] audit: type=1326 audit(1751086486.325:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e369c7290 code=0x7ffc0000
[ 1446.198946][   T30] audit: type=1326 audit(1751086486.325:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.222729][   T30] audit: type=1326 audit(1751086486.325:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.279705][   T30] audit: type=1326 audit(1751086486.325:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.304580][   T30] audit: type=1326 audit(1751086486.325:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.329358][   T30] audit: type=1326 audit(1751086486.325:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.353161][   T30] audit: type=1326 audit(1751086486.325:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4e369c8929 code=0x7ffc0000
[ 1446.584294][T18618] loop0: detected capacity change from 0 to 40427
[ 1446.631259][T18624] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1446.741626][T18618] F2FS-fs (loop0): Invalid SB checksum offset: 0
[ 1446.758179][T18618] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1446.777960][T18618] F2FS-fs (loop0): invalid crc value
[ 1446.787409][T18618] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1446.816136][T18618] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[ 1446.823280][T18618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1448.181531][T18642] serio: Serial port ptm0
[ 1448.600647][T11026] attempt to access beyond end of device
[ 1448.600647][T11026] loop0: rw=2049, want=45104, limit=40427
[ 1451.195888][T18680] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1453.313493][T18725] overlayfs: failed to resolve './file0': -2
[ 1454.366782][  T424] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1454.748887][  T424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1454.759076][  T424] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1454.768044][  T424] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1454.777133][  T424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1454.786537][  T424] usb 2-1: config 0 descriptor??
[ 1454.842388][T18754] loop0: detected capacity change from 0 to 256
[ 1454.908289][ T1325] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1456.074922][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1456.085225][ T1325] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1456.094236][ T1325] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1456.103463][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.115184][ T1325] usb 4-1: config 0 descriptor??
[ 1456.124762][T18765] UDC core: couldn't find an available UDC or it's busy: -16
[ 1456.193558][T18765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1456.782388][T18775] overlayfs: failed to resolve './file0': -2
[ 1457.230287][T18780] UDC core: couldn't find an available UDC or it's busy: -16
[ 1457.237736][T18780] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1457.814476][   T60] usb 2-1: USB disconnect, device number 59
[ 1457.917517][T18794] loop0: detected capacity change from 0 to 256
[ 1458.640036][T18794] loop0: detected capacity change from 0 to 512
[ 1458.670656][T18794] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value
[ 1459.069922][  T424] usb 4-1: USB disconnect, device number 78
[ 1460.602245][T18830] overlayfs: failed to resolve './file0': -2
[ 1460.781348][T18837] serio: Serial port ptm0
[ 1461.064975][T18847] syz.4.5371[18847] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1461.066825][T18847] syz.4.5371[18847] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1462.472648][T18852] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1462.688027][T18859] serio: Serial port ptm0
[ 1464.322400][T18894] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1465.613912][T18917] serio: Serial port ptm0
[ 1465.737470][T18927] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1466.556742][T18934] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1466.609895][T18936] 9pnet: Insufficient options for proto=fd
[ 1468.834442][T18977] serio: Serial port ptm0
[ 1470.519345][T18993] loop0: detected capacity change from 0 to 128
[ 1472.119571][T19001] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1472.731708][T19005] 9pnet: Insufficient options for proto=fd
[ 1472.746661][T19005] 9pnet: Insufficient options for proto=fd
[ 1474.375416][T19028] loop1: detected capacity change from 0 to 512
[ 1474.383625][T19027] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1474.451038][T19028] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #12: comm syz.1.5418: corrupted in-inode xattr
[ 1474.479004][T19028] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.5418: couldn't read orphan inode 12 (err -117)
[ 1474.510116][T19028] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1475.428311][T19049] fuse: Bad value for 'fd'
[ 1476.371598][T19059] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1477.850670][T19080] overlayfs: missing 'lowerdir'
[ 1483.197157][T19140] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1483.398932][T19145] serio: Serial port ptm0
[ 1484.622031][T19163] fuse: Bad value for 'fd'
[ 1485.109311][T19168] loop1: detected capacity change from 0 to 128
[ 1487.856610][T19208] overlayfs: missing 'lowerdir'
[ 1488.252362][T19207] loop0: detected capacity change from 0 to 40427
[ 1488.279531][T19207] F2FS-fs (loop0): Invalid SB checksum offset: 0
[ 1488.330501][T19207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1488.342347][T19207] F2FS-fs (loop0): invalid crc value
[ 1488.348961][T19207] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1488.692067][T19207] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[ 1488.699827][T19207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1493.694321][T19283] loop1: detected capacity change from 0 to 40427
[ 1493.895692][T19283] F2FS-fs (loop1): Invalid SB checksum offset: 0
[ 1493.902440][T19283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1493.922492][T19283] F2FS-fs (loop1): invalid crc value
[ 1494.659756][T19283] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1494.675498][T19310] fuse: Bad value for 'fd'
[ 1494.757614][T19283] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[ 1494.772586][T19283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1495.224512][T19317] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1495.358686][T19318] overlayfs: failed to resolve './file0': -2
[ 1495.637365][T19329] overlayfs: missing 'lowerdir'
[ 1496.485290][T19360] loop1: detected capacity change from 0 to 256
[ 1496.787646][T19360] loop1: detected capacity change from 0 to 512
[ 1496.819240][T19360] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value
[ 1496.879796][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1496.879810][   T30] audit: type=1400 audit(1751086537.985:2857): avc:  denied  { name_bind } for  pid=19374 comm="syz.1.5521" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1498.386662][T19404] loop1: detected capacity change from 0 to 256
[ 1498.533266][T19404] loop1: detected capacity change from 0 to 512
[ 1498.557894][T19404] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value
[ 1498.664076][T19412] fuse: Invalid rootmode
[ 1498.860088][T19421] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1499.163502][T19429] loop1: detected capacity change from 0 to 1024
[ 1499.383590][T19429] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1499.393483][T19429] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[ 1499.410013][T19429] EXT4-fs error (device loop1): ext4_get_journal_inode:5151: inode #5: comm syz.1.5534: unexpected bad inode w/o EXT4_IGET_BAD
[ 1499.424198][T19429] EXT4-fs (loop1): no journal found
[ 1499.429495][T19429] EXT4-fs (loop1): can't get journal size
[ 1499.457911][T19429] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[ 1500.123929][ T1325] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1500.648861][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1500.659814][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1500.669802][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1500.682884][ T1325] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1500.692227][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.706620][ T1325] usb 5-1: config 0 descriptor??
[ 1501.773036][T19470] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1501.915348][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.039768][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.097824][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.105782][T19436] UDC core: couldn't find an available UDC or it's busy: -16
[ 1502.113317][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.120969][T19436] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1502.128547][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.137862][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.160004][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.167436][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.186713][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.195524][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.214131][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.288877][ T1325] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1502.353017][ T1325] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving
[ 1502.445312][ T1325] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1502.461220][ T1325] usb 5-1: USB disconnect, device number 80
[ 1502.504470][T19485] fido_id[19485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1502.787028][T19502] overlayfs: failed to resolve './file0': -2
[ 1503.451800][T19515] syz.0.5562[19515] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1503.451874][T19515] syz.0.5562[19515] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1503.522471][T19517] loop0: detected capacity change from 0 to 512
[ 1504.252418][T19517] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #12: comm syz.0.5562: corrupted in-inode xattr
[ 1504.264700][T19517] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.5562: couldn't read orphan inode 12 (err -117)
[ 1504.278164][T19517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1504.295176][T19532] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1506.339101][T19577] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1506.390061][T19576] syz.1.5580[19576] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1506.390134][T19576] syz.1.5580[19576] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1506.457921][T19581] loop1: detected capacity change from 0 to 512
[ 1506.515583][T19581] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #12: comm syz.1.5580: corrupted in-inode xattr
[ 1506.527780][T19581] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.5580: couldn't read orphan inode 12 (err -117)
[ 1506.539930][T19581] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1509.380177][   T30] audit: type=1400 audit(1751086550.485:2858): avc:  denied  { create } for  pid=19644 comm="syz.1.5599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1515.834171][T19723] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1516.134684][T19725] overlayfs: failed to resolve './file0': -2
[ 1518.194133][T19769] 9pnet: Insufficient options for proto=fd
[ 1520.086436][T19793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1520.095469][T19793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1521.561765][T19801] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1521.634885][T19812] loop1: detected capacity change from 0 to 128
[ 1523.839506][T19833] syz.2.5652[19833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1523.839590][T19833] syz.2.5652[19833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1525.680283][T19878] overlayfs: missing 'lowerdir'
[ 1526.068807][  T518] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1526.128853][  T303] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1527.037781][T19898] loop0: detected capacity change from 0 to 1024
[ 1527.850729][  T303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.894879][  T303] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1527.905037][  T303] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1527.934309][T19907] loop0: detected capacity change from 0 to 512
[ 1527.944556][  T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.969566][T19907] =======================================================
[ 1527.969566][T19907] WARNING: The mand mount option has been deprecated and
[ 1527.969566][T19907]          and is ignored by this kernel. Remove the mand
[ 1527.969566][T19907]          option from the mount to silence this warning.
[ 1527.969566][T19907] =======================================================
[ 1528.004951][T19907] EXT4-fs (loop0): Ignoring removed nobh option
[ 1528.008393][  T303] usb 3-1: config 0 descriptor??
[ 1528.106200][  T518] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1528.116885][  T518] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1528.125901][  T518] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1528.132753][T19907] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1528.134995][  T518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1528.523036][  T518] usb 2-1: config 0 descriptor??
[ 1528.549341][  T518] usb 2-1: can't set config #0, error -71
[ 1528.557666][  T518] usb 2-1: USB disconnect, device number 60
[ 1529.485268][T19927] loop1: detected capacity change from 0 to 1024
[ 1529.591846][T19927] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1529.601668][T19927] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[ 1529.616669][T19927] EXT4-fs error (device loop1): ext4_get_journal_inode:5151: inode #5: comm syz.1.5676: unexpected bad inode w/o EXT4_IGET_BAD
[ 1529.631625][T19927] EXT4-fs (loop1): no journal found
[ 1529.636863][T19927] EXT4-fs (loop1): can't get journal size
[ 1529.784373][T19927] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[ 1530.347001][  T303] usb 3-1: USB disconnect, device number 78
[ 1530.536191][T19947] fuse: Unknown parameter 'use00000000000000000000'
[ 1532.284700][  T303] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1532.426675][T19979] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1532.473311][   T60] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1532.778797][   T60] usb 5-1: Using ep0 maxpacket: 32
[ 1532.808911][  T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1532.846144][  T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1532.958871][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1533.001824][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1533.014333][  T303] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1533.240531][   T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1533.252854][  T303] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1533.515563][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.569712][  T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.592968][   T60] usb 5-1: config 0 descriptor??
[ 1533.628070][  T303] usb 4-1: config 0 descriptor??
[ 1533.670158][   T60] hub 5-1:0.0: USB hub found
[ 1533.697970][T19999] overlayfs: failed to resolve './file0': -2
[ 1533.908899][   T60] hub 5-1:0.0: 1 port detected
[ 1534.128840][   T60] hub 5-1:0.0: hub_hub_status failed (err = -71)
[ 1534.136168][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.146566][   T60] hub 5-1:0.0: config failed, can't get hub status (err -71)
[ 1534.156214][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.170898][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.180958][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.188410][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.196343][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.204045][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.227175][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.328559][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.336513][T19973] UDC core: couldn't find an available UDC or it's busy: -16
[ 1534.344522][   T60] usbhid 5-1:0.0: can't add hid device: -71
[ 1534.350534][   T60] usbhid: probe of 5-1:0.0 failed with error -71
[ 1534.362606][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.646454][T19973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1534.733947][T20018] 9pnet: Insufficient options for proto=fd
[ 1534.746629][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.754275][  T303] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1534.763475][  T303] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[ 1534.772862][   T60] usb 5-1: USB disconnect, device number 81
[ 1534.783528][  T303] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1534.797769][  T303] usb 4-1: USB disconnect, device number 79
[ 1534.834239][T20025] fido_id[20025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1534.877061][   T30] audit: type=1326 audit(1751086575.975:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1534.918010][   T30] audit: type=1326 audit(1751086576.015:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1534.943049][   T30] audit: type=1326 audit(1751086576.015:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1534.967271][   T30] audit: type=1326 audit(1751086576.015:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1535.103626][   T30] audit: type=1326 audit(1751086576.015:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1535.138825][   T30] audit: type=1326 audit(1751086576.015:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e77fee290 code=0x7ffc0000
[ 1535.174713][   T30] audit: type=1326 audit(1751086576.015:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1535.340061][   T30] audit: type=1326 audit(1751086576.015:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1535.419322][   T30] audit: type=1326 audit(1751086576.015:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1535.442803][   T30] audit: type=1326 audit(1751086576.015:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz.4.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e77fef929 code=0x7ffc0000
[ 1535.856749][T20045] syz.2.5710[20045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1535.856820][T20045] syz.2.5710[20045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1536.519342][T20059] 9pnet: Insufficient options for proto=fd
[ 1537.362915][T20064] overlayfs: missing 'workdir'
[ 1539.249377][T20094] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1539.783184][T20093] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1539.813549][T20101] 9pnet: Insufficient options for proto=fd
[ 1540.308697][T20112] overlayfs: failed to resolve './file0': -2
[ 1541.130468][T20114] syz.0.5730[20114] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1541.130541][T20114] syz.0.5730[20114] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1541.197610][T20116] loop0: detected capacity change from 0 to 512
[ 1541.389308][T20116] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #12: comm syz.0.5730: corrupted in-inode xattr
[ 1541.401797][T20116] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.5730: couldn't read orphan inode 12 (err -117)
[ 1541.413926][T20116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1543.741560][    T6] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1544.359784][T20143] 9pnet: Insufficient options for proto=fd
[ 1544.515941][T20145] 9pnet: Insufficient options for proto=fd
[ 1545.517167][T20175] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1545.549311][T20179] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1546.714339][T20199] 9pnet: Insufficient options for proto=fd
[ 1546.818831][  T486] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1546.882106][T20204] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1547.198838][  T486] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1547.218790][  T486] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1547.227778][  T486] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1547.237075][  T486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.246048][  T486] usb 5-1: config 0 descriptor??
[ 1547.328863][  T351] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1547.588802][  T351] usb 2-1: Using ep0 maxpacket: 32
[ 1547.739161][  T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1547.753360][  T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1547.767895][  T351] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1547.777316][  T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.789164][  T351] usb 2-1: config 0 descriptor??
[ 1547.829641][  T351] hub 2-1:0.0: USB hub found
[ 1548.218330][T20229] loop0: detected capacity change from 0 to 1024
[ 1548.232629][  T351] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1548.243024][T20230] UDC core: couldn't find an available UDC or it's busy: -16
[ 1548.251247][T20230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1548.262672][T20229] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1548.272502][T20229] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[ 1548.290434][T20229] EXT4-fs error (device loop0): ext4_get_journal_inode:5151: inode #5: comm syz.0.5764: unexpected bad inode w/o EXT4_IGET_BAD
[ 1548.304715][T20229] EXT4-fs (loop0): no journal found
[ 1548.309986][T20229] EXT4-fs (loop0): can't get journal size
[ 1548.322471][T20229] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[ 1548.549057][  T351] usbhid 2-1:0.0: can't add hid device: -71
[ 1548.555545][  T351] usbhid: probe of 2-1:0.0 failed with error -71
[ 1548.701890][  T351] usb 2-1: USB disconnect, device number 61
[ 1549.056601][T20235] 9pnet: Insufficient options for proto=fd
[ 1549.600478][  T351] usb 5-1: USB disconnect, device number 82
[ 1551.203486][T20279] 9pnet: Insufficient options for proto=fd
[ 1551.497165][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1551.497179][   T30] audit: type=1400 audit(1751086592.595:2892): avc:  denied  { read write } for  pid=20292 comm="syz.4.5785" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1551.501945][T20293] input: syz1 as /devices/virtual/input/input4
[ 1551.512671][   T30] audit: type=1400 audit(1751086592.595:2893): avc:  denied  { open } for  pid=20292 comm="syz.4.5785" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1551.590686][   T30] audit: type=1400 audit(1751086592.595:2894): avc:  denied  { ioctl } for  pid=20292 comm="syz.4.5785" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1551.627984][   T30] audit: type=1400 audit(1751086592.725:2895): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=2015 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1551.675009][   T30] audit: type=1400 audit(1751086592.725:2896): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2015 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1551.709881][   T30] audit: type=1400 audit(1751086592.725:2897): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2015 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1553.188073][T20317] 9pnet: Insufficient options for proto=fd
[ 1553.423545][T20335] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1553.588783][  T486] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1553.665978][T20338] overlayfs: failed to resolve './file1': -2
[ 1553.912582][T20342] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1554.028784][  T486] usb 4-1: Using ep0 maxpacket: 32
[ 1554.158854][  T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1554.169879][  T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1554.179734][  T486] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1554.188939][  T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1554.640395][  T486] usb 4-1: config 0 descriptor??
[ 1554.643361][T20356] fuse: Unknown parameter '0x0000000000000004'
[ 1554.655647][T20358] 9pnet: Insufficient options for proto=fd
[ 1554.679355][  T486] hub 4-1:0.0: USB hub found
[ 1554.998830][  T486] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1555.108816][  T486] usbhid 4-1:0.0: can't add hid device: -71
[ 1555.114820][  T486] usbhid: probe of 4-1:0.0 failed with error -71
[ 1555.159449][  T486] usb 4-1: USB disconnect, device number 80
[ 1555.816498][T20394] syz.3.5812[20394] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1555.816588][T20394] syz.3.5812[20394] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1555.923613][T20399] overlayfs: failed to resolve './file1': -2
[ 1556.019967][T20400] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1556.134496][T20407] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1556.631735][T20418] loop1: detected capacity change from 0 to 128
[ 1557.428658][T20436] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1557.556669][T20432] loop0: detected capacity change from 0 to 40427
[ 1557.605968][T20432] F2FS-fs (loop0): Invalid SB checksum offset: 0
[ 1557.620603][T20432] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1557.640792][T20432] F2FS-fs (loop0): invalid crc value
[ 1557.647611][T20432] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1557.672219][T20451] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1557.682589][T20432] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[ 1557.690989][T20432] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1557.698580][T20454] loop1: detected capacity change from 0 to 1024
[ 1558.668844][T11026] attempt to access beyond end of device
[ 1558.668844][T11026] loop0: rw=2049, want=45104, limit=40427
[ 1558.787480][T20462] loop1: detected capacity change from 0 to 512
[ 1558.959078][T20462] EXT4-fs (loop1): Ignoring removed nobh option
[ 1559.046753][T20462] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1559.361793][T20479] syz.2.5838[20479] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1559.362094][T20479] syz.2.5838[20479] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1560.008268][T20489] overlayfs: failed to resolve './file0': -2
[ 1560.124889][T20491] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1560.428975][  T518] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1560.870013][T20504] loop1: detected capacity change from 0 to 16
[ 1560.938153][T20504] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1564.531590][  T518] usb 5-1: unable to read config index 0 descriptor/all
[ 1564.566647][  T518] usb 5-1: can't read configurations, error -71
[ 1566.325864][T20534] 9pnet: Insufficient options for proto=fd
[ 1566.528259][T20547] syz.3.5857[20547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1566.528581][T20547] syz.3.5857[20547] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1567.389391][T20558] syz.0.5858[20558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1567.447207][T20558] syz.0.5858[20558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1567.761958][T20563] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1567.951752][  T518] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 1568.358826][  T518] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.378880][  T518] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1569.214047][  T518] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1569.225356][  T518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1569.487090][T20583] input: syz1 as /devices/virtual/input/input5
[ 1569.575491][T20585] overlayfs: failed to resolve './file0': -2
[ 1570.359345][  T518] usb 5-1: config 0 descriptor??
[ 1570.599089][T20596] fuse: Unknown parameter '0x0000000000000004'
[ 1570.698801][  T518] usb 5-1: USB disconnect, device number 84
[ 1571.849719][T20620] loop0: detected capacity change from 0 to 40427
[ 1571.894799][T20628] 9pnet: Insufficient options for proto=fd
[ 1571.909199][T20620] F2FS-fs (loop0): Invalid SB checksum offset: 0
[ 1571.960328][T20620] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1572.004501][T20620] F2FS-fs (loop0): invalid crc value
[ 1572.014404][T20620] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1572.058079][T20635] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1572.114132][T20620] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[ 1572.204384][T20620] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1572.777547][T20643] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1572.879857][T11026] attempt to access beyond end of device
[ 1572.879857][T11026] loop0: rw=2049, want=45104, limit=40427
[ 1572.990100][T20634] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1572.998525][T20634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1573.006670][T20634] device bridge_slave_0 entered promiscuous mode
[ 1573.063385][T20634] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1573.078783][T20634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1573.096735][T20634] device bridge_slave_1 entered promiscuous mode
[ 1573.656528][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1573.665511][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1574.363305][   T30] audit: type=1400 audit(1751086615.465:2898): avc:  denied  { associate } for  pid=20655 comm="syz.0.5887" name="cgroup.controllers" dev="tmpfs" ino=3388 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[ 1575.158806][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1575.165898][T20672] loop0: detected capacity change from 0 to 128
[ 1575.168207][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1575.200040][T18518] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1575.207091][T18518] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1575.299703][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1575.308100][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1575.316326][T18518] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1575.323363][T18518] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1575.330786][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1575.338840][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1575.346899][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1575.381207][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1575.391057][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1575.605491][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1575.655917][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1575.671040][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1575.678609][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1575.696606][T20634] device veth0_vlan entered promiscuous mode
[ 1575.709762][T20634] device veth1_macvtap entered promiscuous mode
[ 1575.736099][   T30] audit: type=1400 audit(1751086616.835:2899): avc:  denied  { mounton } for  pid=20634 comm="syz-executor" path="/root/syzkaller.tmc0YV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1575.737089][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1576.237370][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1576.245858][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1576.253635][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1576.262185][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1576.272711][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1577.002888][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1577.025739][T20694] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1577.141902][  T979] device bridge_slave_1 left promiscuous mode
[ 1577.168231][  T979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1577.258891][  T979] device bridge_slave_0 left promiscuous mode
[ 1577.265056][  T979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1577.285133][  T979] device veth1_macvtap left promiscuous mode
[ 1577.576076][  T979] device veth0_vlan left promiscuous mode
[ 1578.716038][T20722] 9pnet: Insufficient options for proto=fd
[ 1578.740420][T20726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20726 comm=syz.2.5906
[ 1580.477970][T20745] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1580.787849][T20755] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1581.123943][T20767] loop0: detected capacity change from 0 to 1024
[ 1581.249236][ T3129] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1581.256891][ T8538] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1581.420706][T20771] loop0: detected capacity change from 0 to 512
[ 1581.511925][T20771] EXT4-fs (loop0): Ignoring removed nobh option
[ 1581.556377][T20771] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1581.658778][ T8538] usb 3-1: Using ep0 maxpacket: 32
[ 1581.664142][ T3129] usb 4-1: Using ep0 maxpacket: 32
[ 1581.788872][ T8538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1581.799900][ T3129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1581.810875][ T3129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1581.821358][ T8538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1581.831195][ T3129] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1581.831333][ T8538] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1581.849833][ T3129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.858218][ T8538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.866551][ T3129] usb 4-1: config 0 descriptor??
[ 1581.874664][ T8538] usb 3-1: config 0 descriptor??
[ 1581.909172][ T3129] hub 4-1:0.0: USB hub found
[ 1581.919386][ T8538] hub 3-1:0.0: USB hub found
[ 1582.168798][ T3129] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1582.178914][ T8538] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1582.268797][ T3129] usbhid 4-1:0.0: can't add hid device: -71
[ 1582.274723][ T3129] usbhid: probe of 4-1:0.0 failed with error -71
[ 1582.281335][ T8538] usbhid 3-1:0.0: can't add hid device: -71
[ 1582.287279][ T8538] usbhid: probe of 3-1:0.0 failed with error -71
[ 1582.319115][ T3129] usb 4-1: USB disconnect, device number 81
[ 1582.325386][ T8538] usb 3-1: USB disconnect, device number 80
[ 1582.625896][T20798] serio: Serial port ptm0
[ 1582.750477][T20802] loop1: detected capacity change from 0 to 16
[ 1583.056312][T20802] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1584.655614][T20833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1584.662708][T20833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1584.670285][T20833] device bridge_slave_0 entered promiscuous mode
[ 1584.677297][T20833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1584.684430][T20833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1584.692095][T20833] device bridge_slave_1 entered promiscuous mode
[ 1584.755342][T20833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1584.762390][T20833] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1584.769669][T20833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1584.776681][T20833] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1584.794585][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1584.861067][T20848] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1584.909302][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1584.917051][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1584.993131][ T8538] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1585.011451][T20833] device veth0_vlan entered promiscuous mode
[ 1585.024081][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1585.032437][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1585.040523][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1585.047887][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1585.055500][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1585.063675][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1585.071841][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.078871][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1585.086266][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1585.094563][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1585.101610][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1585.109036][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1585.116995][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1585.127519][T20833] device veth1_macvtap entered promiscuous mode
[ 1585.136841][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1585.146989][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1585.238796][ T8538] usb 5-1: Using ep0 maxpacket: 32
[ 1585.358849][ T8538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1585.369820][ T8538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1585.379622][ T8538] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1585.388684][ T8538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.397621][ T8538] usb 5-1: config 0 descriptor??
[ 1585.439599][ T8538] hub 5-1:0.0: USB hub found
[ 1585.459652][T20855] 9pnet: Could not find request transport: fd0x0000000000000005
[ 1585.477888][T20857] serio: Serial port ptm0
[ 1585.868795][ T8538] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1585.899608][  T979] device bridge_slave_1 left promiscuous mode
[ 1585.905766][  T979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1585.913300][  T979] device bridge_slave_0 left promiscuous mode
[ 1585.919477][  T979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1585.927174][  T979] device veth1_macvtap left promiscuous mode
[ 1585.933274][  T979] device veth0_vlan left promiscuous mode
[ 1585.968821][ T8538] usbhid 5-1:0.0: can't add hid device: -71
[ 1585.974835][ T8538] usbhid: probe of 5-1:0.0 failed with error -71
[ 1586.009114][ T8538] usb 5-1: USB disconnect, device number 85
[ 1586.835660][T20880] 9p: Unknown uid 18446744073709551615
[ 1587.340234][T20898] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1589.677761][T20945] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1590.080034][T20958] input: syz1 as /devices/virtual/input/input6
[ 1590.815401][T20961] overlayfs: missing 'lowerdir'
[ 1591.300122][ T7152] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1591.444993][T20991] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1591.691779][T20993] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1591.722264][ T7152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.732428][ T7152] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1591.770760][ T7152] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1591.779930][ T7152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.791851][ T7152] usb 5-1: config 0 descriptor??
[ 1592.637048][T21016] overlayfs: missing 'lowerdir'
[ 1594.622338][ T7152] usb 5-1: USB disconnect, device number 86
[ 1597.407672][T21085] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1598.934895][T21108] loop0: detected capacity change from 0 to 128
[ 1599.965729][T21117] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1600.471098][T21127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1600.498790][T21127] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1600.506344][T21127] device bridge_slave_0 entered promiscuous mode
[ 1600.515842][T21127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1600.523908][T21127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1600.531723][T21144] loop0: detected capacity change from 0 to 1024
[ 1600.539194][T21127] device bridge_slave_1 entered promiscuous mode
[ 1600.617209][T21146] syz.2.6027[21146] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1600.617281][T21146] syz.2.6027[21146] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1601.087448][T21151] loop0: detected capacity change from 0 to 512
[ 1601.127173][T21127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1601.134244][T21127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1601.141564][T21127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1601.148582][T21127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1602.013084][T21151] EXT4-fs (loop0): Ignoring removed nobh option
[ 1602.094043][T21151] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1602.142875][  T979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1602.150830][  T979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1602.212008][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1602.222568][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1602.278785][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1602.321302][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1602.329932][  T979] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1602.336968][  T979] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1602.489270][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1602.500780][T21176] loop0: detected capacity change from 0 to 1024
[ 1602.619745][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1602.628020][  T979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1602.635083][  T979] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1602.688275][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1602.696730][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1602.705538][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1602.715225][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1602.737236][T21127] device veth0_vlan entered promiscuous mode
[ 1602.747502][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1602.776670][T21183] loop0: detected capacity change from 0 to 512
[ 1602.783111][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1602.819052][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1602.836506][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1602.863194][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1602.871788][T21183] EXT4-fs (loop0): Ignoring removed nobh option
[ 1602.897121][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1602.950205][T21127] device veth1_macvtap entered promiscuous mode
[ 1602.957263][T21183] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1604.040978][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1604.050529][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1604.060001][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1604.067680][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1604.076287][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1604.085063][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1604.093505][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1604.517118][T21209] loop0: detected capacity change from 0 to 1024
[ 1605.321005][T21223] loop0: detected capacity change from 0 to 512
[ 1605.409707][T21228] loop1: detected capacity change from 0 to 16
[ 1605.509520][T21228] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1605.530594][T21223] EXT4-fs (loop0): Ignoring removed nobh option
[ 1605.671057][T15620] device bridge_slave_1 left promiscuous mode
[ 1606.978197][T15620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1606.994781][T15620] device bridge_slave_0 left promiscuous mode
[ 1607.001027][T15620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1607.008492][T21223] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1607.389620][T15620] device veth1_macvtap left promiscuous mode
[ 1607.401684][T15620] device veth0_vlan left promiscuous mode
[ 1607.631047][T21255] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1607.968776][T20597] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1608.522011][T21268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.529361][T21268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1608.536751][T21268] device bridge_slave_0 entered promiscuous mode
[ 1608.543918][T21268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1608.551045][T21268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1608.558371][T21268] device bridge_slave_1 entered promiscuous mode
[ 1608.599402][T21268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1608.606440][T21268] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1608.613707][T21268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.620742][T21268] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1608.628033][T20597] usb 2-1: Using ep0 maxpacket: 32
[ 1608.641404][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1608.649288][T18518] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1608.656608][T18518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1608.667505][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1608.675791][T18518] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.682855][T18518] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1608.691779][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1608.700322][T18518] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1608.707368][T18518] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1608.781848][T20597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1608.793966][T20597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1608.804247][T20597] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1608.813526][T20597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1608.823563][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1608.831613][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1608.842200][T20597] usb 2-1: config 0 descriptor??
[ 1608.890701][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1608.899830][T20597] hub 2-1:0.0: USB hub found
[ 1608.904848][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1608.915916][T21268] device veth0_vlan entered promiscuous mode
[ 1608.922717][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1608.930823][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1608.950678][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1608.960041][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1609.185499][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1609.194183][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1609.206924][T21268] device veth1_macvtap entered promiscuous mode
[ 1609.222252][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1609.232797][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1609.242023][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1609.264099][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1609.277020][T18518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1609.368805][T20597] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1609.468923][T20597] usbhid 2-1:0.0: can't add hid device: -71
[ 1609.474874][T20597] usbhid: probe of 2-1:0.0 failed with error -71
[ 1609.509255][T20597] usb 2-1: USB disconnect, device number 62
[ 1610.121502][T15620] device bridge_slave_1 left promiscuous mode
[ 1610.140638][T15620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1610.163308][T15620] device bridge_slave_0 left promiscuous mode
[ 1610.176057][T15620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1610.184570][T15620] device veth1_macvtap left promiscuous mode
[ 1610.190764][T15620] device veth0_vlan left promiscuous mode
[ 1611.909644][T21326] loop1: detected capacity change from 0 to 1024
[ 1612.279495][T21330] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1612.403065][T21332] loop1: detected capacity change from 0 to 512
[ 1612.542757][T20597] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1612.585399][T21332] EXT4-fs (loop1): Ignoring removed nobh option
[ 1612.814063][T21332] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1612.868476][T21343] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1612.920787][T20597] usb 5-1: Using ep0 maxpacket: 32
[ 1613.839042][T20597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1614.075069][T21357] loop1: detected capacity change from 0 to 512
[ 1614.116087][T20597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1614.371593][T20597] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1614.404748][T21357] EXT4-fs (loop1): Ignoring removed nobh option
[ 1614.455207][T21357] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6088: invalid indirect mapped block 256 (level 2)
[ 1614.477181][T21357] EXT4-fs (loop1): 2 truncates cleaned up
[ 1614.490222][T21357] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[ 1614.541612][   T30] audit: type=1400 audit(1751086655.645:2900): avc:  denied  { read write } for  pid=21356 comm="syz.1.6088" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1614.610550][   T30] audit: type=1400 audit(1751086655.665:2901): avc:  denied  { open } for  pid=21356 comm="syz.1.6088" path="/8/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1614.619295][T20597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1614.642818][T20597] usb 5-1: config 0 descriptor??
[ 1614.689457][T20597] hub 5-1:0.0: USB hub found
[ 1615.769794][T21369] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1616.588860][T20597] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1616.938861][T20597] usbhid 5-1:0.0: can't add hid device: -71
[ 1616.945900][T20597] usbhid: probe of 5-1:0.0 failed with error -71
[ 1616.990032][T20597] usb 5-1: USB disconnect, device number 87
[ 1616.996318][T21392] loop0: detected capacity change from 0 to 1024
[ 1617.266635][T21394] loop0: detected capacity change from 0 to 512
[ 1617.419371][T21394] EXT4-fs (loop0): Ignoring removed nobh option
[ 1617.535548][T21394] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1617.751164][T21406] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1618.130138][T21413] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1619.040780][T21423] loop1: detected capacity change from 0 to 1024
[ 1619.174384][T21428] loop0: detected capacity change from 0 to 512
[ 1619.365448][T21428] EXT4-fs (loop0): Ignoring removed nobh option
[ 1619.423916][T21428] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6110: invalid indirect mapped block 256 (level 2)
[ 1619.438461][T21428] EXT4-fs (loop0): 2 truncates cleaned up
[ 1619.445623][T21428] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[ 1619.518628][T21434] loop1: detected capacity change from 0 to 512
[ 1619.675580][T21434] EXT4-fs (loop1): Ignoring removed nobh option
[ 1619.703307][T21434] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000002,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[ 1619.780036][T21431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1619.787134][T21431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1619.794859][T21431] device bridge_slave_0 entered promiscuous mode
[ 1619.802830][T21431] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1619.810492][T21431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.826637][T21431] device bridge_slave_1 entered promiscuous mode
[ 1619.840364][   T30] audit: type=1400 audit(1751086660.945:2902): avc:  denied  { getattr } for  pid=21440 comm="syz.4.6111" name="/" dev="9p" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1619.852396][T21443] 9pnet: p9_client_clunk (21443): Trying to clunk with invalid fid
[ 1619.870580][T21441] 9pnet: p9_client_clunk (21441): Trying to clunk with invalid fid
[ 1619.878567][T21441] CPU: 0 PID: 21441 Comm: syz.4.6111 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0
[ 1619.888552][T21441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1619.899665][T21441] Call Trace:
[ 1619.902938][T21441]  <TASK>
[ 1619.905859][T21441]  __dump_stack+0x21/0x30
[ 1619.910186][T21441]  dump_stack_lvl+0xee/0x150
[ 1619.914762][T21441]  ? show_regs_print_info+0x20/0x20
[ 1619.919950][T21441]  ? dump_stack+0x9/0x20
[ 1619.924175][T21441]  dump_stack+0x15/0x20
[ 1619.928307][T21441]  p9_client_clunk+0x2c8/0x390
[ 1619.933057][T21441]  v9fs_statfs+0x18f/0x340
[ 1619.937453][T21441]  ? selinux_sb_show_options+0x650/0x650
[ 1619.943068][T21441]  ? v9fs_drop_inode+0x140/0x140
[ 1619.947989][T21441]  vfs_statfs+0x13a/0x2d0
[ 1619.952296][T21441]  ovl_get_lowerstack+0x1fd/0x1bf0
[ 1619.957384][T21441]  ? ovl_get_upper+0x580/0x580
[ 1619.962124][T21441]  ? ovl_get_workdir+0x10b0/0x10b0
[ 1619.967215][T21441]  ? __kmalloc+0x13d/0x2c0
[ 1619.971612][T21441]  ? ovl_fill_super+0x1472/0x2a80
[ 1619.976620][T21441]  ovl_fill_super+0x1771/0x2a80
[ 1619.981452][T21441]  ? ovl_mount+0x40/0x40
[ 1619.985676][T21441]  ? register_shrinker_prepared+0xd7/0x100
[ 1619.991465][T21441]  ? sget+0x4a0/0x4c0
[ 1619.995427][T21441]  ? ovl_mount+0x40/0x40
[ 1619.999647][T21441]  mount_nodev+0x5c/0xf0
[ 1620.003875][T21441]  ovl_mount+0x2c/0x40
[ 1620.007934][T21441]  legacy_get_tree+0xed/0x190
[ 1620.012603][T21441]  ? virtio_fs_request_complete+0xce0/0xce0
[ 1620.018480][T21441]  vfs_get_tree+0x89/0x260
[ 1620.022878][T21441]  do_new_mount+0x25a/0xa20
[ 1620.027365][T21441]  path_mount+0x675/0x1020
[ 1620.031764][T21441]  ? user_path_at_empty+0x161/0x1c0
[ 1620.036945][T21441]  __se_sys_mount+0x318/0x380
[ 1620.041613][T21441]  ? __x64_sys_mount+0xd0/0xd0
[ 1620.046367][T21441]  ? __bpf_trace_sys_enter+0x62/0x70
[ 1620.051633][T21441]  __x64_sys_mount+0xbf/0xd0
[ 1620.056204][T21441]  x64_sys_call+0x6bf/0x9a0
[ 1620.060732][T21441]  do_syscall_64+0x4c/0xa0
[ 1620.065129][T21441]  ? clear_bhb_loop+0x50/0xa0
[ 1620.069784][T21441]  ? clear_bhb_loop+0x50/0xa0
[ 1620.074437][T21441]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1620.080320][T21441] RIP: 0033:0x7f76bea3d929
[ 1620.084716][T21441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1620.104303][T21441] RSP: 002b:00007f76bd0a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1620.112705][T21441] RAX: ffffffffffffffda RBX: 00007f76bec64fa0 RCX: 00007f76bea3d929
[ 1620.120656][T21441] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1620.128608][T21441] RBP: 00007f76beabfb39 R08: 0000200000000a00 R09: 0000000000000000
[ 1620.136558][T21441] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000
[ 1620.144506][T21441] R13: 0000000000000000 R14: 00007f76bec64fa0 R15: 00007ffd059bf188
[ 1620.152463][T21441]  </TASK>
[ 1620.156087][T21441] overlayfs: statfs failed on './file0'
[ 1620.157902][T21443] CPU: 0 PID: 21443 Comm: syz.2.6112 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0
[ 1620.171591][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1620.181631][T21443] Call Trace:
[ 1620.184889][T21443]  <TASK>
[ 1620.187804][T21443]  __dump_stack+0x21/0x30
[ 1620.192120][T21443]  dump_stack_lvl+0xee/0x150
[ 1620.196691][T21443]  ? show_regs_print_info+0x20/0x20
[ 1620.201865][T21443]  ? v9fs_fid_find+0x316/0x360
[ 1620.206613][T21443]  ? v9fs_fid_lookup_with_uid+0x4a8/0x800
[ 1620.212311][T21443]  dump_stack+0x15/0x20
[ 1620.216443][T21443]  p9_client_clunk+0x2c8/0x390
[ 1620.221186][T21443]  v9fs_statfs+0x18f/0x340
[ 1620.225580][T21443]  ? selinux_sb_show_options+0x650/0x650
[ 1620.231190][T21443]  ? v9fs_drop_inode+0x140/0x140
[ 1620.236105][T21443]  vfs_statfs+0x13a/0x2d0
[ 1620.240411][T21443]  ovl_get_lowerstack+0x1fd/0x1bf0
[ 1620.245505][T21443]  ? ovl_get_upper+0x580/0x580
[ 1620.250245][T21443]  ? ovl_get_workdir+0x10b0/0x10b0
[ 1620.255336][T21443]  ? __kmalloc+0x13d/0x2c0
[ 1620.259735][T21443]  ? ovl_fill_super+0x1472/0x2a80
[ 1620.264750][T21443]  ovl_fill_super+0x1771/0x2a80
[ 1620.269594][T21443]  ? ovl_mount+0x40/0x40
[ 1620.273823][T21443]  ? register_shrinker_prepared+0xd7/0x100
[ 1620.279612][T21443]  ? sget+0x4a0/0x4c0
[ 1620.283574][T21443]  ? ovl_mount+0x40/0x40
[ 1620.287792][T21443]  mount_nodev+0x5c/0xf0
[ 1620.292011][T21443]  ovl_mount+0x2c/0x40
[ 1620.296056][T21443]  legacy_get_tree+0xed/0x190
[ 1620.300710][T21443]  ? virtio_fs_request_complete+0xce0/0xce0
[ 1620.306581][T21443]  vfs_get_tree+0x89/0x260
[ 1620.310972][T21443]  do_new_mount+0x25a/0xa20
[ 1620.315455][T21443]  path_mount+0x675/0x1020
[ 1620.319846][T21443]  ? user_path_at_empty+0x161/0x1c0
[ 1620.325030][T21443]  __se_sys_mount+0x318/0x380
[ 1620.329708][T21443]  ? __x64_sys_mount+0xd0/0xd0
[ 1620.334467][T21443]  ? __bpf_trace_sys_enter+0x62/0x70
[ 1620.339732][T21443]  __x64_sys_mount+0xbf/0xd0
[ 1620.344305][T21443]  x64_sys_call+0x6bf/0x9a0
[ 1620.348789][T21443]  do_syscall_64+0x4c/0xa0
[ 1620.353186][T21443]  ? clear_bhb_loop+0x50/0xa0
[ 1620.357841][T21443]  ? clear_bhb_loop+0x50/0xa0
[ 1620.362501][T21443]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1620.368378][T21443] RIP: 0033:0x7fe81a9f8929
[ 1620.372772][T21443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1620.392354][T21443] RSP: 002b:00007fe819061038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1620.400746][T21443] RAX: ffffffffffffffda RBX: 00007fe81ac1ffa0 RCX: 00007fe81a9f8929
[ 1620.408695][T21443] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1620.416649][T21443] RBP: 00007fe81aa7ab39 R08: 0000200000000a00 R09: 0000000000000000
[ 1620.424598][T21443] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000
[ 1620.432545][T21443] R13: 0000000000000000 R14: 00007fe81ac1ffa0 R15: 00007fff92909728
[ 1620.440499][T21443]  </TASK>
[ 1620.445768][T21443] overlayfs: statfs failed on './file0'
[ 1620.620846][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1620.637106][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1620.684744][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1620.722146][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1620.737160][T15620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1620.744237][T15620] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1620.754077][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1620.763596][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1620.775824][T15620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1620.782889][T15620] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1620.793646][T21455] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1620.799437][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1620.849547][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1620.859005][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1620.869968][   T45] device bridge_slave_1 left promiscuous mode
[ 1620.876232][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1620.887063][   T45] device bridge_slave_0 left promiscuous mode
[ 1620.893231][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1620.901475][   T45] device veth1_macvtap left promiscuous mode
[ 1620.907477][   T45] device veth0_vlan left promiscuous mode
[ 1620.944071][T21465] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1621.002553][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1621.019212][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1621.027449][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1621.035137][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1621.047446][T21431] device veth0_vlan entered promiscuous mode
[ 1621.064802][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1621.073851][T21431] device veth1_macvtap entered promiscuous mode
[ 1621.082945][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1621.093540][T15620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1623.726199][   T30] audit: type=1400 audit(1751086664.405:2903): avc:  denied  { bind } for  pid=21492 comm="syz.4.6126" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1623.797459][   T30] audit: type=1400 audit(1751086664.405:2904): avc:  denied  { node_bind } for  pid=21492 comm="syz.4.6126" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1624.040474][   T30] audit: type=1400 audit(1751086664.485:2905): avc:  denied  { connect } for  pid=21492 comm="syz.4.6126" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1624.990028][T21520] serio: Serial port ptm0
[ 1625.000809][T21524] 9pnet: p9_client_clunk (21524): Trying to clunk with invalid fid
[ 1625.009149][T21524] CPU: 0 PID: 21524 Comm: syz.1.6134 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0
[ 1625.019132][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1625.029167][T21524] Call Trace:
[ 1625.032433][T21524]  <TASK>
[ 1625.035343][T21524]  __dump_stack+0x21/0x30
[ 1625.039655][T21524]  dump_stack_lvl+0xee/0x150
[ 1625.044222][T21524]  ? show_regs_print_info+0x20/0x20
[ 1625.049399][T21524]  ? v9fs_fid_find+0x316/0x360
[ 1625.054140][T21524]  ? v9fs_fid_lookup_with_uid+0x4a8/0x800
[ 1625.059843][T21524]  dump_stack+0x15/0x20
[ 1625.063992][T21524]  p9_client_clunk+0x2c8/0x390
[ 1625.068757][T21524]  v9fs_statfs+0x18f/0x340
[ 1625.073162][T21524]  ? selinux_sb_show_options+0x650/0x650
[ 1625.078808][T21524]  ? v9fs_drop_inode+0x140/0x140
[ 1625.084344][T21524]  vfs_statfs+0x13a/0x2d0
[ 1625.088827][T21524]  ovl_get_lowerstack+0x1fd/0x1bf0
[ 1625.093919][T21524]  ? ovl_get_upper+0x580/0x580
[ 1625.098668][T21524]  ? ovl_get_workdir+0x10b0/0x10b0
[ 1625.103759][T21524]  ? __kmalloc+0x13d/0x2c0
[ 1625.108155][T21524]  ? ovl_fill_super+0x1472/0x2a80
[ 1625.113160][T21524]  ovl_fill_super+0x1771/0x2a80
[ 1625.117992][T21524]  ? ovl_mount+0x40/0x40
[ 1625.122212][T21524]  ? register_shrinker_prepared+0xd7/0x100
[ 1625.127999][T21524]  ? sget+0x4a0/0x4c0
[ 1625.131960][T21524]  ? ovl_mount+0x40/0x40
[ 1625.136180][T21524]  mount_nodev+0x5c/0xf0
[ 1625.140400][T21524]  ovl_mount+0x2c/0x40
[ 1625.144445][T21524]  legacy_get_tree+0xed/0x190
[ 1625.149102][T21524]  ? virtio_fs_request_complete+0xce0/0xce0
[ 1625.154971][T21524]  vfs_get_tree+0x89/0x260
[ 1625.159364][T21524]  do_new_mount+0x25a/0xa20
[ 1625.163845][T21524]  path_mount+0x675/0x1020
[ 1625.168323][T21524]  ? user_path_at_empty+0x161/0x1c0
[ 1625.173499][T21524]  __se_sys_mount+0x318/0x380
[ 1625.178154][T21524]  ? __x64_sys_mount+0xd0/0xd0
[ 1625.182898][T21524]  ? __kasan_check_write+0x14/0x20
[ 1625.187995][T21524]  __x64_sys_mount+0xbf/0xd0
[ 1625.192589][T21524]  x64_sys_call+0x6bf/0x9a0
[ 1625.197078][T21524]  do_syscall_64+0x4c/0xa0
[ 1625.201479][T21524]  ? clear_bhb_loop+0x50/0xa0
[ 1625.206137][T21524]  ? clear_bhb_loop+0x50/0xa0
[ 1625.210800][T21524]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1625.216819][T21524] RIP: 0033:0x7f6fec8d4929
[ 1625.221235][T21524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1625.240834][T21524] RSP: 002b:00007f6feaf3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1625.249246][T21524] RAX: ffffffffffffffda RBX: 00007f6fecafbfa0 RCX: 00007f6fec8d4929
[ 1625.257209][T21524] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1625.265262][T21524] RBP: 00007f6fec956b39 R08: 0000200000000a00 R09: 0000000000000000
[ 1625.273220][T21524] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000
[ 1625.281173][T21524] R13: 0000000000000000 R14: 00007f6fecafbfa0 R15: 00007ffd58151e18
[ 1625.289131][T21524]  </TASK>
[ 1625.302241][T21524] overlayfs: statfs failed on './file0'
[ 1626.337262][T21553] netlink: 'syz.1.6143': attribute type 12 has an invalid length.
[ 1626.345253][   T30] audit: type=1400 audit(1751086667.435:2906): avc:  denied  { unmount } for  pid=21550 comm="syz.0.6142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1626.368829][T21553] netlink: 'syz.1.6143': attribute type 29 has an invalid length.
[ 1626.386864][T21553] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6143'.
[ 1626.396299][T21553] netlink: 'syz.1.6143': attribute type 1 has an invalid length.
[ 1626.406237][T21553] netlink: 'syz.1.6143': attribute type 2 has an invalid length.
[ 1626.418944][T21553] netlink: 39 bytes leftover after parsing attributes in process `syz.1.6143'.
[ 1626.595367][T21555] loop0: detected capacity change from 0 to 40427
[ 1626.712411][   T30] audit: type=1400 audit(1751086667.815:2907): avc:  denied  { getopt } for  pid=21562 comm="syz.4.6148" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1626.827443][T21555] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[ 1626.917908][T21555] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1627.037493][T21555] F2FS-fs (loop0): fault_type options not supported
[ 1627.053418][T21555] F2FS-fs (loop0): invalid crc value
[ 1627.083068][T21555] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1627.123546][T21561] loop1: detected capacity change from 0 to 40427
[ 1627.137170][T21555] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1627.144543][T21555] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1627.158050][T21555] F2FS-fs (loop0): Corrupted max_depth of 3: 50331649
[ 1627.167069][T21561] F2FS-fs (loop1): fault_injection options not supported
[ 1627.180285][T21561] F2FS-fs (loop1): fault_type options not supported
[ 1627.202276][T21561] F2FS-fs (loop1): invalid crc value
[ 1627.224556][T21561] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1627.276029][T21561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1627.299078][   T30] audit: type=1400 audit(1751086668.405:2908): avc:  denied  { write } for  pid=21560 comm="syz.1.6147" path="/25/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1627.333785][   T30] audit: type=1400 audit(1751086668.425:2909): avc:  denied  { remove_name } for  pid=21560 comm="syz.1.6147" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1627.356790][   T30] audit: type=1400 audit(1751086668.425:2910): avc:  denied  { rename } for  pid=21560 comm="syz.1.6147" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1627.380085][   T30] audit: type=1400 audit(1751086668.425:2911): avc:  denied  { create } for  pid=21560 comm="syz.1.6147" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 1627.461694][T21127] attempt to access beyond end of device
[ 1627.461694][T21127] loop1: rw=2049, want=45120, limit=40427
[ 1628.359165][   T30] audit: type=1400 audit(1751086668.995:2912): avc:  denied  { create } for  pid=21593 comm="syz.3.6158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1628.481355][   T30] audit: type=1400 audit(1751086669.515:2913): avc:  denied  { create } for  pid=21600 comm="syz.2.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1628.915279][T21623] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1628.923158][T21623] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1629.113238][   T30] audit: type=1400 audit(1751086670.215:2914): avc:  denied  { ioctl } for  pid=21627 comm="syz.3.6167" path="socket:[103186]" dev="sockfs" ino=103186 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1629.727350][T21639] loop0: detected capacity change from 0 to 1024
[ 1629.889876][T21639] EXT4-fs (loop0): Ignoring removed oldalloc option
[ 1629.896562][T21639] EXT4-fs (loop0): Ignoring removed orlov option
[ 1629.902991][T21639] EXT4-fs (loop0): Unrecognized mount option "dont_measure" or missing value
[ 1630.080237][T21643] serio: Serial port ptm0
[ 1630.325266][   T30] audit: type=1400 audit(1751086671.425:2915): avc:  denied  { bind } for  pid=21652 comm="syz.3.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1631.352675][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1631.352692][   T30] audit: type=1400 audit(1751086672.455:2923): avc:  denied  { connect } for  pid=21674 comm="syz.2.6183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1631.438937][   T30] audit: type=1400 audit(1751086672.485:2924): avc:  denied  { write } for  pid=21674 comm="syz.2.6183" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1631.495086][   T30] audit: type=1400 audit(1751086672.595:2925): avc:  denied  { sys_module } for  pid=21683 comm="syz.0.6187" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1631.538758][   T30] audit: type=1400 audit(1751086672.595:2926): avc:  denied  { read } for  pid=21683 comm="syz.0.6187" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1631.685063][T21690] loop0: detected capacity change from 0 to 256
[ 1631.761537][T21690] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[ 1631.792604][T21681] loop1: detected capacity change from 0 to 40427
[ 1631.899124][   T30] audit: type=1400 audit(1751086673.005:2927): avc:  denied  { create } for  pid=21693 comm="syz.4.6192" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1631.928184][T21681] F2FS-fs (loop1): fault_injection options not supported
[ 1631.945498][T21681] F2FS-fs (loop1): fault_type options not supported
[ 1631.965431][   T30] audit: type=1400 audit(1751086673.065:2928): avc:  denied  { bind } for  pid=21700 comm="syz.4.6195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1631.997400][T21681] F2FS-fs (loop1): invalid crc value
[ 1632.029100][   T30] audit: type=1400 audit(1751086673.065:2929): avc:  denied  { bind } for  pid=21689 comm="syz.0.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1632.050186][T21681] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1632.121280][   T30] audit: type=1400 audit(1751086673.065:2930): avc:  denied  { node_bind } for  pid=21689 comm="syz.0.6190" saddr=10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[ 1632.162959][   T30] audit: type=1400 audit(1751086673.095:2931): avc:  denied  { ioctl } for  pid=21703 comm="syz.4.6196" path="socket:[103761]" dev="sockfs" ino=103761 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1632.208863][T21681] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1632.250496][T21681] attempt to access beyond end of device
[ 1632.250496][T21681] loop1: rw=524288, want=45072, limit=40427
[ 1632.289773][T21681] attempt to access beyond end of device
[ 1632.289773][T21681] loop1: rw=0, want=45072, limit=40427
[ 1632.351688][T21127] attempt to access beyond end of device
[ 1632.351688][T21127] loop1: rw=2049, want=45112, limit=40427
[ 1632.915114][   T30] audit: type=1400 audit(1751086674.015:2932): avc:  denied  { setopt } for  pid=21728 comm="syz.0.6205" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1633.098160][T21723] loop1: detected capacity change from 0 to 40427
[ 1633.117994][T21723] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value
[ 1633.295848][T21744] loop1: detected capacity change from 0 to 256
[ 1633.319483][T21744] exfat: Unknown parameter 'keep_last_dots'
[ 1633.652803][T21758] loop1: detected capacity change from 0 to 128
[ 1633.700139][T21758] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1633.707014][T21758] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1633.728510][T21758] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none.
[ 1633.743699][T21758] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1633.775604][T21758] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1633.794535][T21758] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[ 1633.906049][T21771] loop0: detected capacity change from 0 to 256
[ 1633.922632][T21771] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2027d3fc, utbl_chksum : 0xe619d30d)
[ 1635.991690][T21841] loop0: detected capacity change from 0 to 512
[ 1636.770315][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1636.770350][   T30] audit: type=1400 audit(1751086677.875:2941): avc:  denied  { bind } for  pid=21868 comm="syz.0.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1636.842240][   T30] audit: type=1400 audit(1751086677.895:2942): avc:  denied  { listen } for  pid=21868 comm="syz.0.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1636.877373][   T30] audit: type=1400 audit(1751086677.905:2943): avc:  denied  { write } for  pid=21868 comm="syz.0.6261" path="socket:[103967]" dev="sockfs" ino=103967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1636.931046][   T30] audit: type=1400 audit(1751086677.905:2944): avc:  denied  { accept } for  pid=21868 comm="syz.0.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1636.933660][T21872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6262'.
[ 1637.065595][   T30] audit: type=1400 audit(1751086678.165:2945): avc:  denied  { read } for  pid=21868 comm="syz.0.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1637.211576][T21884] loop1: detected capacity change from 0 to 40427
[ 1637.290178][T21884] F2FS-fs (loop1): fault_injection options not supported
[ 1637.297287][T21884] F2FS-fs (loop1): fault_type options not supported
[ 1637.304894][T21884] F2FS-fs (loop1): invalid crc value
[ 1637.331541][T21884] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1637.361872][T21884] F2FS-fs (loop1): Start checkpoint disabled!
[ 1637.372584][T21884] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[ 1637.442179][   T30] audit: type=1400 audit(1751086678.545:2946): avc:  denied  { create } for  pid=21883 comm="syz.1.6265" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1637.506432][   T30] audit: type=1400 audit(1751086678.545:2947): avc:  denied  { read append open } for  pid=21883 comm="syz.1.6265" path="/42/file2/cpu.stat" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1637.537721][   T30] audit: type=1400 audit(1751086678.635:2948): avc:  denied  { map } for  pid=21883 comm="syz.1.6265" path="/42/file2/cpu.stat" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1637.566880][   T30] audit: type=1400 audit(1751086678.635:2949): avc:  denied  { write } for  pid=21883 comm="syz.1.6265" path="/42/file2/cpu.stat" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1637.589998][T21884] attempt to access beyond end of device
[ 1637.589998][T21884] loop1: rw=2049, want=81920, limit=40427
[ 1637.610114][T21884] attempt to access beyond end of device
[ 1637.610114][T21884] loop1: rw=2049, want=53248, limit=40427
[ 1637.646726][T21884] attempt to access beyond end of device
[ 1637.646726][T21884] loop1: rw=2049, want=69632, limit=40427
[ 1637.661594][T21884] attempt to access beyond end of device
[ 1637.661594][T21884] loop1: rw=2049, want=69640, limit=40427
[ 1637.672924][T21884] attempt to access beyond end of device
[ 1637.672924][T21884] loop1: rw=2049, want=69648, limit=40427
[ 1637.684278][T21884] attempt to access beyond end of device
[ 1637.684278][T21884] loop1: rw=2049, want=69656, limit=40427
[ 1637.695632][T21884] attempt to access beyond end of device
[ 1637.695632][T21884] loop1: rw=2049, want=69664, limit=40427
[ 1637.707229][T21884] attempt to access beyond end of device
[ 1637.707229][T21884] loop1: rw=2049, want=69672, limit=40427
[ 1637.718559][T21884] attempt to access beyond end of device
[ 1637.718559][T21884] loop1: rw=2049, want=69680, limit=40427
[ 1637.730286][T21884] attempt to access beyond end of device
[ 1637.730286][T21884] loop1: rw=2049, want=69688, limit=40427
[ 1638.020532][T21906] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6273'.
[ 1638.032220][   T30] audit: type=1400 audit(1751086679.125:2950): avc:  denied  { nlmsg_read } for  pid=21904 comm="syz.3.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1639.762200][T21932] binder: 21931:21932 ioctl c0306201 0 returned -14
[ 1639.874108][T21938] binder: 21931:21938 ioctl c0306201 0 returned -14
[ 1641.851835][T21971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=21971 comm=syz.2.6298
[ 1642.803905][T22004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=22004 comm=syz.0.6306
[ 1644.089640][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1644.089654][   T30] audit: type=1400 audit(1751086685.195:2956): avc:  denied  { setopt } for  pid=22039 comm="syz.4.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1644.149219][   T30] audit: type=1400 audit(1751086685.225:2957): avc:  denied  { ioctl } for  pid=22041 comm="syz.3.6323" path="socket:[104902]" dev="sockfs" ino=104902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1644.677175][T22067] loop1: detected capacity change from 0 to 256
[ 1644.710686][T22067] exfat: Unknown parameter 'keep_last_dots'
[ 1645.224449][T22081] loop1: detected capacity change from 0 to 256
[ 1646.101634][   T30] audit: type=1400 audit(1751086687.205:2958): avc:  denied  { create } for  pid=22092 comm="syz.4.6343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1646.130953][   T30] audit: type=1400 audit(1751086687.205:2959): avc:  denied  { setopt } for  pid=22092 comm="syz.4.6343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1646.152243][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6345'.
[ 1646.190802][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6347'.
[ 1646.299693][T22109] device bridge1 entered promiscuous mode
[ 1646.425737][T22112] capability: warning: `syz.3.6351' uses deprecated v2 capabilities in a way that may be insecure
[ 1646.451633][T22103] loop1: detected capacity change from 0 to 40427
[ 1646.499435][T22103] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1646.507180][T22103] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1646.529571][T22103] F2FS-fs (loop1): invalid crc value
[ 1646.559576][T22103] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1646.593642][T22103] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1646.605800][T22103] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1646.632787][   T30] audit: type=1400 audit(1751086687.735:2960): avc:  denied  { setattr } for  pid=22102 comm="syz.1.6348" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1646.878344][T22130] loop1: detected capacity change from 0 to 512
[ 1646.912158][T22130] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1646.934439][T22130] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1646.967558][T22130] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,stripe=0x00000000000093a4,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: writeback.
[ 1647.908343][T22135] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.6357: Directory hole found for htree leaf block 0
[ 1647.925825][T22135] EXT4-fs (loop1): Remounting filesystem read-only
[ 1647.947756][T22145] loop0: detected capacity change from 0 to 256
[ 1647.994322][T22145] FAT-fs (loop0): Directory bread(block 64) failed
[ 1648.003738][   T30] audit: type=1400 audit(1751086689.105:2961): avc:  denied  { mount } for  pid=22150 comm="syz.3.6365" name="/" dev="ramfs" ino=104367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1648.011824][T22145] FAT-fs (loop0): Directory bread(block 65) failed
[ 1648.037842][T22145] FAT-fs (loop0): Directory bread(block 66) failed
[ 1648.045376][T22145] FAT-fs (loop0): Directory bread(block 67) failed
[ 1648.052231][T22145] FAT-fs (loop0): Directory bread(block 68) failed
[ 1648.059208][T22145] FAT-fs (loop0): Directory bread(block 69) failed
[ 1648.071406][T22145] FAT-fs (loop0): Directory bread(block 70) failed
[ 1648.077948][T22145] FAT-fs (loop0): Directory bread(block 71) failed
[ 1648.084649][T22145] FAT-fs (loop0): Directory bread(block 72) failed
[ 1648.091388][T22145] FAT-fs (loop0): Directory bread(block 73) failed
[ 1648.146072][   T30] audit: type=1400 audit(1751086689.225:2962): avc:  denied  { block_suspend } for  pid=22156 comm="syz.4.6369" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1648.772255][T22176] binder: 22175:22176 ioctl c0306201 200000000080 returned -14
[ 1648.772723][   T30] audit: type=1400 audit(1751086689.875:2963): avc:  denied  { set_context_mgr } for  pid=22175 comm="syz.1.6366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1648.809609][T22176] binder: BINDER_SET_CONTEXT_MGR already set
[ 1648.816978][   T30] audit: type=1400 audit(1751086689.915:2964): avc:  denied  { write } for  pid=22175 comm="syz.1.6366" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1648.848978][T22176] binder: 22175:22176 ioctl 4018620d 200000000040 returned -16
[ 1648.909544][   T30] audit: type=1400 audit(1751086689.915:2965): avc:  denied  { map } for  pid=22175 comm="syz.1.6366" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1648.969435][T22197] usb usb1: check_ctrlrecip: process 22197 (syz.4.6383) requesting ep 01 but needs 81
[ 1648.981060][T22197] usb usb1: usbfs: process 22197 (syz.4.6383) did not claim interface 0 before use
[ 1649.090318][T22206] loop1: detected capacity change from 0 to 256
[ 1649.114816][T22206] FAT-fs (loop1): Directory bread(block 64) failed
[ 1649.126555][T22206] FAT-fs (loop1): Directory bread(block 65) failed
[ 1649.133212][T22206] FAT-fs (loop1): Directory bread(block 66) failed
[ 1649.139799][T22206] FAT-fs (loop1): Directory bread(block 67) failed
[ 1649.146487][T22206] FAT-fs (loop1): Directory bread(block 68) failed
[ 1649.153199][T22206] FAT-fs (loop1): Directory bread(block 69) failed
[ 1649.208243][T22206] FAT-fs (loop1): Directory bread(block 70) failed
[ 1649.214860][T22206] FAT-fs (loop1): Directory bread(block 71) failed
[ 1649.221668][T22206] FAT-fs (loop1): Directory bread(block 72) failed
[ 1649.228355][T22206] FAT-fs (loop1): Directory bread(block 73) failed
[ 1649.457652][   T30] audit: type=1400 audit(1751086690.555:2966): avc:  denied  { write } for  pid=22224 comm="syz.0.6394" path="socket:[105179]" dev="sockfs" ino=105179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1649.588821][ T3129] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1650.223101][ T3129] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1650.464995][ T3129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.474955][ T3129] usb 5-1: Product: syz
[ 1650.479288][ T3129] usb 5-1: Manufacturer: syz
[ 1650.483923][ T3129] usb 5-1: SerialNumber: syz
[ 1650.492106][ T3129] usb 5-1: config 0 descriptor??
[ 1650.791872][T22248] loop1: detected capacity change from 0 to 40427
[ 1650.846236][T22248] F2FS-fs (loop1): invalid crc value
[ 1650.893139][T22248] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1650.971033][T22248] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[ 1650.999172][T22248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1651.523751][T22290] loop1: detected capacity change from 0 to 256
[ 1651.599351][T22290] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1652.337190][    T6] usb 5-1: USB disconnect, device number 88
[ 1652.433238][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6428'.
[ 1653.698663][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6432'.
[ 1653.721269][T22327] loop1: detected capacity change from 0 to 256
[ 1653.746238][   T30] audit: type=1400 audit(1751086694.845:2967): avc:  denied  { ioctl } for  pid=22336 comm="syz.0.6438" path="socket:[105324]" dev="sockfs" ino=105324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1654.871435][   T30] audit: type=1400 audit(1751086695.975:2968): avc:  denied  { audit_write } for  pid=22343 comm="syz.0.6440" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1654.892967][   T30] audit: type=1107 audit(1751086695.975:2969): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[ 1655.461077][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6444'.
[ 1656.253582][T22375] loop1: detected capacity change from 0 to 512
[ 1656.303969][T22375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1656.320962][T22375] EXT4-fs (loop1): 1 truncate cleaned up
[ 1656.330839][T22375] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[ 1656.367661][T22375] EXT4-fs (loop1): shut down requested (1)
[ 1656.386770][   T30] audit: type=1400 audit(1751086697.485:2970): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1656.410591][   T30] audit: type=1400 audit(1751086697.485:2971): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1656.438940][   T30] audit: type=1400 audit(1751086697.485:2972): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1656.477166][T22395] tipc: Started in network mode
[ 1656.485028][T22395] tipc: Node identity ac1414aa, cluster identity 4711
[ 1656.492321][T22395] tipc: Enabled bearer <udp:s>, priority 10
[ 1656.511799][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6461'.
[ 1656.515406][   T30] audit: type=1400 audit(1751086697.485:2973): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1656.559687][T22398] bridge2: port 1(ip6gretap1) entered blocking state
[ 1656.566463][T22398] bridge2: port 1(ip6gretap1) entered disabled state
[ 1656.574223][T22398] device ip6gretap1 entered promiscuous mode
[ 1656.576164][   T30] audit: type=1400 audit(1751086697.485:2974): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1656.601154][   T30] audit: type=1400 audit(1751086697.485:2975): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1656.624170][   T30] audit: type=1400 audit(1751086697.485:2976): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1656.647097][  T424] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1656.668794][ T8538] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1656.893480][   T45] device ip6gretap1 left promiscuous mode
[ 1656.899412][   T45] bridge2: port 1(ip6gretap1) entered disabled state
[ 1656.942214][T22423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1656.949299][T22423] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1656.956756][T22423] device bridge_slave_0 entered promiscuous mode
[ 1656.965194][T22423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1656.972277][T22423] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1656.979785][T22423] device bridge_slave_1 entered promiscuous mode
[ 1657.018885][  T424] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1657.019414][T22423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1657.038722][T22423] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1657.038925][ T8538] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1657.045988][T22423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1657.055017][ T8538] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1657.061603][T22423] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1657.079446][ T8538] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1657.088426][ T8538] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1657.099564][ T8538] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1657.122057][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1657.129780][  T979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1657.137114][  T979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1657.148150][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1657.156309][  T979] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1657.163347][  T979] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1657.172589][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1657.181113][  T979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1657.188151][  T979] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1657.198818][  T424] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1657.207916][  T424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.216021][  T424] usb 5-1: Product: syz
[ 1657.220234][  T424] usb 5-1: Manufacturer: syz
[ 1657.224831][  T424] usb 5-1: SerialNumber: syz
[ 1657.225107][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1657.229527][ T8538] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1657.247571][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1657.250574][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1657.266513][ T8538] usb 4-1: Product: syz
[ 1657.270854][ T8538] usb 4-1: Manufacturer: syz
[ 1657.293292][T22423] device veth0_vlan entered promiscuous mode
[ 1657.301119][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1657.310038][ T8538] cdc_wdm 4-1:1.0: skipping garbage
[ 1657.315262][ T8538] cdc_wdm 4-1:1.0: skipping garbage
[ 1657.322215][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1657.332690][ T8538] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1657.335882][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1657.350343][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1657.358641][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1657.366261][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1657.381421][T22423] device veth1_macvtap entered promiscuous mode
[ 1657.400226][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1657.408519][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1657.416708][T22432] loop1: detected capacity change from 0 to 512
[ 1657.417046][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1657.433577][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1657.442027][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1657.453148][T22432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1657.462042][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1657.471505][  T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1657.487586][T22432] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1657.499523][  T424] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1657.500685][  T351] tipc: Node number set to 2886997162
[ 1657.526858][T22432] EXT4-fs (loop1): 1 truncate cleaned up
[ 1657.538830][T22432] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback.
[ 1657.570766][   T30] audit: type=1400 audit(1751086698.675:2977): avc:  denied  { read write } for  pid=22388 comm="syz.3.6458" name="lp0" dev="devtmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 1657.675184][   T45] device bridge_slave_1 left promiscuous mode
[ 1657.689032][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1657.704443][   T45] device bridge_slave_0 left promiscuous mode
[ 1657.706990][  T424] usb 5-1: USB disconnect, device number 89
[ 1657.723851][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1657.750697][   T45] device veth1_macvtap left promiscuous mode
[ 1657.770367][   T45] device veth0_vlan left promiscuous mode
[ 1657.782077][T22391] usblp0: removed
[ 1657.789090][ T7152] usb 4-1: USB disconnect, device number 82
[ 1658.603691][T22464] loop1: detected capacity change from 0 to 1024
[ 1658.679457][T22464] EXT4-fs (loop1): Ignoring removed oldalloc option
[ 1658.776239][T22464] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,oldalloc,nodelalloc,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue. Quota mode: writeback.
[ 1659.048891][T22485] loop1: detected capacity change from 0 to 256
[ 1659.081218][T22485] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119abd0)
[ 1659.108772][T22485] exFAT-fs (loop1): invalid boot region
[ 1659.114891][T22485] exFAT-fs (loop1): failed to recognize exfat type
[ 1659.737926][T22511] ==================================================================
[ 1659.746023][T22511] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240
[ 1659.754165][T22511] Read of size 8 at addr ffff8881285727c0 by task syz.3.6505/22511
[ 1659.762031][T22511] 
[ 1659.764332][T22511] CPU: 0 PID: 22511 Comm: syz.3.6505 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0
[ 1659.774277][T22511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1659.784307][T22511] Call Trace:
[ 1659.787586][T22511]  <TASK>
[ 1659.790514][T22511]  __dump_stack+0x21/0x30
[ 1659.794822][T22511]  dump_stack_lvl+0xee/0x150
[ 1659.799394][T22511]  ? show_regs_print_info+0x20/0x20
[ 1659.804596][T22511]  ? load_image+0x3a0/0x3a0
[ 1659.809083][T22511]  print_address_description+0x7f/0x2c0
[ 1659.814605][T22511]  ? tc_setup_flow_action+0x870/0x3240
[ 1659.820035][T22511]  kasan_report+0xf1/0x140
[ 1659.824424][T22511]  ? tc_setup_flow_action+0x870/0x3240
[ 1659.829856][T22511]  __asan_report_load8_noabort+0x14/0x20
[ 1659.835463][T22511]  tc_setup_flow_action+0x870/0x3240
[ 1659.840720][T22511]  mall_replace_hw_filter+0x293/0x820
[ 1659.846072][T22511]  ? mall_set_parms+0x520/0x520
[ 1659.850894][T22511]  ? __kasan_check_read+0x11/0x20
[ 1659.855892][T22511]  ? preempt_schedule_irq+0xbb/0x110
[ 1659.861151][T22511]  ? __cond_resched+0xb0/0xb0
[ 1659.865803][T22511]  ? irqentry_exit_cond_resched+0x29/0x30
[ 1659.871493][T22511]  ? irqentry_exit+0x37/0x40
[ 1659.876071][T22511]  ? mall_change+0x50b/0x740
[ 1659.880633][T22511]  mall_change+0x526/0x740
[ 1659.885020][T22511]  ? __kasan_check_write+0x14/0x20
[ 1659.890102][T22511]  ? mall_get+0xa0/0xa0
[ 1659.894226][T22511]  ? tcf_chain_tp_insert_unique+0xac1/0xc10
[ 1659.900093][T22511]  tc_new_tfilter+0x12a2/0x1870
[ 1659.904919][T22511]  ? tcf_gate_entry_destructor+0x20/0x20
[ 1659.910608][T22511]  ? security_capable+0x87/0xb0
[ 1659.915518][T22511]  ? ns_capable+0x8c/0xf0
[ 1659.919833][T22511]  ? netlink_net_capable+0x125/0x160
[ 1659.925094][T22511]  ? tcf_gate_entry_destructor+0x20/0x20
[ 1659.930697][T22511]  rtnetlink_rcv_msg+0x81b/0xb90
[ 1659.935607][T22511]  ? rtnetlink_bind+0x80/0x80
[ 1659.940254][T22511]  ? __schedule+0xb76/0x14c0
[ 1659.944817][T22511]  ? memcpy+0x56/0x70
[ 1659.948770][T22511]  ? avc_has_perm_noaudit+0x2f4/0x460
[ 1659.954113][T22511]  ? avc_denied+0x1b0/0x1b0
[ 1659.958585][T22511]  ? preempt_schedule_irq+0xbb/0x110
[ 1659.963841][T22511]  ? __cond_resched+0xb0/0xb0
[ 1659.968488][T22511]  ? avc_has_perm+0x158/0x240
[ 1659.973135][T22511]  ? irqentry_exit_cond_resched+0x29/0x30
[ 1659.978828][T22511]  ? avc_has_perm_noaudit+0x460/0x460
[ 1659.984174][T22511]  ? selinux_nlmsg_lookup+0x416/0x4c0
[ 1659.989518][T22511]  netlink_rcv_skb+0x1e0/0x430
[ 1659.994252][T22511]  ? rtnetlink_bind+0x80/0x80
[ 1659.998903][T22511]  ? netlink_ack+0xb60/0xb60
[ 1660.003467][T22511]  ? __netlink_lookup+0x387/0x3b0
[ 1660.008460][T22511]  rtnetlink_rcv+0x1c/0x20
[ 1660.012848][T22511]  netlink_unicast+0x87c/0xa40
[ 1660.017586][T22511]  netlink_sendmsg+0x86a/0xb70
[ 1660.022319][T22511]  ? netlink_getsockopt+0x530/0x530
[ 1660.027489][T22511]  ? security_socket_sendmsg+0x82/0xa0
[ 1660.032918][T22511]  ? netlink_getsockopt+0x530/0x530
[ 1660.038085][T22511]  ____sys_sendmsg+0x5a2/0x8c0
[ 1660.042819][T22511]  ? __sys_sendmsg_sock+0x40/0x40
[ 1660.047816][T22511]  ? import_iovec+0x7c/0xb0
[ 1660.052291][T22511]  ___sys_sendmsg+0x1f0/0x260
[ 1660.056942][T22511]  ? __sys_sendmsg+0x250/0x250
[ 1660.061682][T22511]  ? sock_show_fdinfo+0xa0/0xa0
[ 1660.066509][T22511]  ? __fdget+0x1a1/0x230
[ 1660.070724][T22511]  __x64_sys_sendmsg+0x1e2/0x2a0
[ 1660.075631][T22511]  ? ___sys_sendmsg+0x260/0x260
[ 1660.080454][T22511]  ? __kasan_check_write+0x14/0x20
[ 1660.085537][T22511]  ? switch_fpu_return+0x15d/0x2c0
[ 1660.090618][T22511]  x64_sys_call+0x4b/0x9a0
[ 1660.095009][T22511]  do_syscall_64+0x4c/0xa0
[ 1660.099396][T22511]  ? clear_bhb_loop+0x50/0xa0
[ 1660.104042][T22511]  ? clear_bhb_loop+0x50/0xa0
[ 1660.108687][T22511]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1660.114567][T22511] RIP: 0033:0x7f8d6e072929
[ 1660.118953][T22511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1660.138533][T22511] RSP: 002b:00007f8d6c6db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1660.146917][T22511] RAX: ffffffffffffffda RBX: 00007f8d6e299fa0 RCX: 00007f8d6e072929
[ 1660.154864][T22511] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[ 1660.162815][T22511] RBP: 00007f8d6e0f4b39 R08: 0000000000000000 R09: 0000000000000000
[ 1660.170765][T22511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1660.178719][T22511] R13: 0000000000000000 R14: 00007f8d6e299fa0 R15: 00007fffd949fbc8
[ 1660.186691][T22511]  </TASK>
[ 1660.189699][T22511] 
[ 1660.192010][T22511] Allocated by task 22511:
[ 1660.196404][T22511]  __kasan_kmalloc+0xda/0x110
[ 1660.201073][T22511]  __kmalloc+0x13d/0x2c0
[ 1660.205295][T22511]  tcf_idr_create+0x5f/0x790
[ 1660.209866][T22511]  tcf_idr_create_from_flags+0x61/0x70
[ 1660.215305][T22511]  tcf_gact_init+0x346/0x580
[ 1660.219872][T22511]  tcf_action_init_1+0x3f7/0x6a0
[ 1660.224786][T22511]  tcf_action_init+0x1e9/0x710
[ 1660.229530][T22511]  tcf_exts_validate+0x217/0x520
[ 1660.234443][T22511]  mall_set_parms+0x48/0x520
[ 1660.239007][T22511]  mall_change+0x45a/0x740
[ 1660.243401][T22511]  tc_new_tfilter+0x12a2/0x1870
[ 1660.248226][T22511]  rtnetlink_rcv_msg+0x81b/0xb90
[ 1660.253144][T22511]  netlink_rcv_skb+0x1e0/0x430
[ 1660.257906][T22511]  rtnetlink_rcv+0x1c/0x20
[ 1660.262315][T22511]  netlink_unicast+0x87c/0xa40
[ 1660.267058][T22511]  netlink_sendmsg+0x86a/0xb70
[ 1660.271804][T22511]  ____sys_sendmsg+0x5a2/0x8c0
[ 1660.276546][T22511]  ___sys_sendmsg+0x1f0/0x260
[ 1660.281203][T22511]  __x64_sys_sendmsg+0x1e2/0x2a0
[ 1660.286115][T22511]  x64_sys_call+0x4b/0x9a0
[ 1660.290511][T22511]  do_syscall_64+0x4c/0xa0
[ 1660.294905][T22511]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1660.300775][T22511] 
[ 1660.303076][T22511] Last potentially related work creation:
[ 1660.308760][T22511]  kasan_save_stack+0x3a/0x60
[ 1660.313415][T22511]  __kasan_record_aux_stack+0xd2/0x100
[ 1660.318849][T22511]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1660.324637][T22511]  call_rcu+0xf6/0xf60
[ 1660.328687][T22511]  neigh_parms_release+0x1e0/0x220
[ 1660.333778][T22511]  inetdev_event+0x81c/0x10a0
[ 1660.338431][T22511]  raw_notifier_call_chain+0x90/0x100
[ 1660.343778][T22511]  unregister_netdevice_many+0xfb8/0x1990
[ 1660.349471][T22511]  ip_tunnel_delete_nets+0x343/0x390
[ 1660.354733][T22511]  erspan_exit_batch_net+0x22/0x30
[ 1660.359821][T22511]  cleanup_net+0x602/0xad0
[ 1660.364217][T22511]  process_one_work+0x6be/0xba0
[ 1660.369046][T22511]  worker_thread+0xa59/0x1200
[ 1660.373700][T22511]  kthread+0x411/0x500
[ 1660.377747][T22511]  ret_from_fork+0x1f/0x30
[ 1660.382138][T22511] 
[ 1660.384437][T22511] Second to last potentially related work creation:
[ 1660.390990][T22511]  kasan_save_stack+0x3a/0x60
[ 1660.395644][T22511]  __kasan_record_aux_stack+0xd2/0x100
[ 1660.401077][T22511]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1660.406864][T22511]  call_rcu+0xf6/0xf60
[ 1660.410907][T22511]  neigh_parms_release+0x1e0/0x220
[ 1660.415996][T22511]  addrconf_ifdown+0x15e3/0x1880
[ 1660.420909][T22511]  addrconf_notify+0x3bd/0xde0
[ 1660.425655][T22511]  raw_notifier_call_chain+0x90/0x100
[ 1660.431002][T22511]  unregister_netdevice_many+0xfb8/0x1990
[ 1660.436695][T22511]  default_device_exit_batch+0x330/0x390
[ 1660.442304][T22511]  cleanup_net+0x602/0xad0
[ 1660.446695][T22511]  process_one_work+0x6be/0xba0
[ 1660.451522][T22511]  worker_thread+0xa59/0x1200
[ 1660.456179][T22511]  kthread+0x411/0x500
[ 1660.460223][T22511]  ret_from_fork+0x1f/0x30
[ 1660.464615][T22511] 
[ 1660.466917][T22511] The buggy address belongs to the object at ffff888128572700
[ 1660.466917][T22511]  which belongs to the cache kmalloc-192 of size 192
[ 1660.480945][T22511] The buggy address is located 0 bytes to the right of
[ 1660.480945][T22511]  192-byte region [ffff888128572700, ffff8881285727c0)
[ 1660.494541][T22511] The buggy address belongs to the page:
[ 1660.500153][T22511] page:ffffea0004a15c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128572
[ 1660.510363][T22511] flags: 0x4000000000000200(slab|zone=1)
[ 1660.515985][T22511] raw: 4000000000000200 ffffea00043d9580 0000000300000002 ffff888100042c00
[ 1660.524549][T22511] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 1660.533103][T22511] page dumped because: kasan: bad access detected
[ 1660.539487][T22511] page_owner tracks the page as allocated
[ 1660.545172][T22511] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 283, ts 22593525479, free_ts 0
[ 1660.560248][T22511]  post_alloc_hook+0x192/0x1b0
[ 1660.564993][T22511]  prep_new_page+0x1c/0x110
[ 1660.569473][T22511]  get_page_from_freelist+0x2cc5/0x2d50
[ 1660.574994][T22511]  __alloc_pages+0x18f/0x440
[ 1660.579564][T22511]  new_slab+0xa1/0x4d0
[ 1660.583617][T22511]  ___slab_alloc+0x381/0x810
[ 1660.588184][T22511]  __slab_alloc+0x49/0x90
[ 1660.592488][T22511]  __kmalloc_track_caller+0x169/0x2c0
[ 1660.597840][T22511]  kmemdup+0x26/0x60
[ 1660.601712][T22511]  neigh_parms_alloc+0x8d/0x4f0
[ 1660.606543][T22511]  inetdev_init+0x141/0x500
[ 1660.611023][T22511]  inetdev_event+0x1f8/0x10a0
[ 1660.615677][T22511]  raw_notifier_call_chain+0x90/0x100
[ 1660.621026][T22511]  call_netdevice_notifiers+0x111/0x190
[ 1660.626546][T22511]  register_netdevice+0x1039/0x13a0
[ 1660.631719][T22511]  veth_newlink+0x8ed/0xda0
[ 1660.636199][T22511] page_owner free stack trace missing
[ 1660.641538][T22511] 
[ 1660.643839][T22511] Memory state around the buggy address:
[ 1660.649443][T22511]  ffff888128572680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1660.657479][T22511]  ffff888128572700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1660.665512][T22511] >ffff888128572780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 1660.673544][T22511]                                            ^
[ 1660.679672][T22511]  ffff888128572800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1660.687737][T22511]  ffff888128572880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1660.695801][T22511] ==================================================================
[ 1660.703835][T22511] Disabling lock debugging due to kernel taint