last executing test programs:

1m5.231096596s ago: executing program 0 (id=34):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m5.133484078s ago: executing program 0 (id=39):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc)

1m5.107932498s ago: executing program 0 (id=41):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m4.899984242s ago: executing program 0 (id=59):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/0/smp_affinity\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
readlink(&(0x7f0000000880)='./proc_mnt\x00', &(0x7f0000000e00), 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/file0\x00', 0x101400, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x49041, 0x1dc)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)

1m3.039749528s ago: executing program 3 (id=84):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00', 0x2000000}, 0x20)

1m3.016377968s ago: executing program 3 (id=85):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x4, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000180), 0x0}, 0x20)

1m3.016228358s ago: executing program 3 (id=86):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000005700)=@base={0xa, 0x2, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)

1m3.016066208s ago: executing program 3 (id=87):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/0/smp_affinity\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
readlink(&(0x7f0000000880)='./proc_mnt\x00', &(0x7f0000000e00), 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/file0\x00', 0x101400, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$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")
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

1m2.486552838s ago: executing program 0 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000eb40000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x50000, 0x0, {[0x9eab, 0x6, 0x1000000000008, 0x2, 0x8000000000000000, 0x8, 0x200, 0x4]}})
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0xffff, 0x1})
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000fc00000008003b00001c0000000000029078ac1e0001e0000001167c9078ac141430"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xdd, 0xb0, 0xe5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xfe, 0x1, {0xa, 0x25, 0x25, 0xffff8001, 0x7f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0xc9, 0x3, {0xa, 0x25, 0x25, 0xb, 0x68, 0xb}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00')
mount$cgroup(0x0, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'veth0_vlan\x00'}}]})

1m2.39070073s ago: executing program 0 (id=92):
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m2.37661834s ago: executing program 32 (id=92):
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m0.770338291s ago: executing program 3 (id=114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1m0.720383722s ago: executing program 3 (id=115):
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xa00000, &(0x7f0000000100), 0x1, 0x517, &(0x7f0000000600)="$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")
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 h'], 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x80, 0x90, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x76, 0x9, 0x9, {0xa, 0x25, 0x25, 0x6, 0x81, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x6, 0x7, {0xa, 0x25, 0x25, 0x8, 0x0, 0x1}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x78, &(0x7f0000000340)=ANY=[@ANYBLOB="050f78000203100b70100a6f78a7e92f37a2c00000d8b53709ba503ff29fa960dd9177686804f676fdb693fc053baddbbba1cae924b7e75dfdadffff407a1418a4c6144d71e2adf8b45ed36a8ebf77b140b70d3bd40eddf3c9e597d4532945bcdf65978e431b36d2c1ff95181705530073"], 0x1, [{0x0, 0x0}]})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100401, 0x0, 0xfc, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00004bd000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="c4612059123ef043839b21a94c30ac66b8cf000f00d8c421be5c152b5709bcf242a7660f59aa0000000067f0420fab5700660f105a0966b8ac000f00d03e0f013dfe1f0000", 0x45}], 0x1, 0x1, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0xa9}], 0x1)
lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ftruncate(r0, 0xb53)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10)
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000100))
openat$cgroup_type(r3, &(0x7f0000000000), 0x2, 0x0)
fallocate(r3, 0x0, 0xa20, 0x8000c65)

1m0.693487792s ago: executing program 33 (id=115):
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xa00000, &(0x7f0000000100), 0x1, 0x517, &(0x7f0000000600)="$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")
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 h'], 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x80, 0x90, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x76, 0x9, 0x9, {0xa, 0x25, 0x25, 0x6, 0x81, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x6, 0x7, {0xa, 0x25, 0x25, 0x8, 0x0, 0x1}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x78, &(0x7f0000000340)=ANY=[@ANYBLOB="050f78000203100b70100a6f78a7e92f37a2c00000d8b53709ba503ff29fa960dd9177686804f676fdb693fc053baddbbba1cae924b7e75dfdadffff407a1418a4c6144d71e2adf8b45ed36a8ebf77b140b70d3bd40eddf3c9e597d4532945bcdf65978e431b36d2c1ff95181705530073"], 0x1, [{0x0, 0x0}]})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100401, 0x0, 0xfc, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00004bd000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="c4612059123ef043839b21a94c30ac66b8cf000f00d8c421be5c152b5709bcf242a7660f59aa0000000067f0420fab5700660f105a0966b8ac000f00d03e0f013dfe1f0000", 0x45}], 0x1, 0x1, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0xa9}], 0x1)
lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ftruncate(r0, 0xb53)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10)
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000100))
openat$cgroup_type(r3, &(0x7f0000000000), 0x2, 0x0)
fallocate(r3, 0x0, 0xa20, 0x8000c65)

51.047873286s ago: executing program 2 (id=653):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0, 0x40000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d986dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

51.009283897s ago: executing program 2 (id=655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d986dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

51.009178427s ago: executing program 2 (id=656):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x6}]}, {0x0, [0x0, 0x5f, 0x5d, 0x30, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000fffffffffffffffffffffffd5f5f"], 0x48)

51.008788417s ago: executing program 2 (id=657):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000240)={0x6767e611, 0x30, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @broadcast}, 0x10) (async)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x2, 0xe, 0xe4, 0x9, 0x8, 0x2, 0xa, 0x6, 0xf5, 0x16, 0x8, 0xd7, 0x7, 0x1, 0x3, 0x4}}) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x0)
setresuid(0x0, r6, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20030, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async)
umount2(&(0x7f0000000180)='./config/file0\x00', 0x7)

49.950774077s ago: executing program 2 (id=670):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x6}]}, {0x0, [0x0, 0x5f, 0x5d, 0x5f, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000fffffffffffffffffffffffd5f5f"], 0x48)

49.092890554s ago: executing program 2 (id=685):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x23, 0x0, 0x18, 0x18, 0xb, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x2}]}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xc752b58676a86813]}}, &(0x7f0000002600)=""/4096, 0x3b, 0x1000, 0x1}, 0x28)

49.072578204s ago: executing program 34 (id=685):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x23, 0x0, 0x18, 0x18, 0xb, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x2}]}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xc752b58676a86813]}}, &(0x7f0000002600)=""/4096, 0x3b, 0x1000, 0x1}, 0x28)

40.602575156s ago: executing program 4 (id=896):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010002, &(0x7f0000000140)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}, {@noblock_validity}, {@errors_remount}, {@bh}]}, 0x1, 0x558, &(0x7f0000001000)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10)

40.35793031s ago: executing program 4 (id=907):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)

40.069329676s ago: executing program 4 (id=916):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x1ff)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r3, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000440), 0x1000a)
sendfile(r3, r4, &(0x7f0000000080)=0x2e, 0xffff)

38.741292181s ago: executing program 4 (id=935):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x100c0d2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2e4, &(0x7f0000000480)="$eJzs3b1rJGUcB/DfbGZ3x7PYFFYiOKCF1XG51iZB7kBM5ZHitNDg3YFkg3CBiC+4XiV2Npb+BYLgH2JjZynYCnaeeDDyzM7si5lbd4WNePf5FMkvzzzfmd+8JJkmT9594fTkThn3Hnz6cxRFFr39YcTDLHajF63PY8n+VwEA/J89rKr4rZrq2PzTlyuyxRb7AgC25x9+/zfy+uPtNOP7y+sNANiOW7ffeuPg8PDGm2VZxM3TL86PsohIn6fbD+7F+zGOu3EtRvEoon5R6Ef9tpDKm1VVTfIy2Y2XTyfnRyl5+s4Pzf4Pfo2o83sxit16aPa2UedfP4y9cmohP0l9XGmOv5/y12MUz83Ci/kb1zvycTSIV15a6P9qjOLH9+KDGMeduol5/rO9snyt+vr3T95O7aV8Njk/Gtbz5qqd9uCTS75HAAAAAAAAAAAAAAAAAAAAAAA8ea42a+cMo16/Jw016+/sPEpf9KNs7S6vzzPNZ+2O5usDRa+qqkkV37Tr61wry7JqJs7zeTyfNwsLAgAAAAAAAAAAAAAAAAAAwFPu7KOPT47H47v3l4viwshaRbsaQB4Rf9yK2DA+K/YXRl6M1ZOHzTGPx+NeUy7PyRdHYqedk0WsbCOdxL9qfvPimQs9N8W333Wm0hmd5XFyPP6z2vzG9buPNSuuNFdo9X4+7E9ndc5pn66T46z7Gg6jHSnSjYu/37jBY47ej1RkMXu0Bo/rMFvrLNpi0LlptPGtHDxbF5MVcyJb9X3x6i/TthfOYmnOoL6qnfF+UyzE02Mcsx0Waz3PUUzjF39WZFbrAAAAAAAAAAAAAAAAAACArZr/9W/Hxgcro71quLW2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSzf///zpFvhxeIzWI+2f/1bkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9PgrAAD//1JdTb0=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
ftruncate(r0, 0x82)

38.342591449s ago: executing program 4 (id=943):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000000000e0a7375a18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000aa0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020642500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000acea40fe8500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

38.049169245s ago: executing program 4 (id=956):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
epoll_create1(0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x22080)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0xf, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x47, 0x6, 0xfd}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

38.049063374s ago: executing program 35 (id=956):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
epoll_create1(0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x22080)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0xf, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x47, 0x6, 0xfd}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

4.014932824s ago: executing program 1 (id=2219):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800", @ANYRES32], 0x48)

4.012777404s ago: executing program 1 (id=2221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.979045304s ago: executing program 1 (id=2222):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r6, r6, 0x0, 0x1000000201005)

3.082865891s ago: executing program 1 (id=2251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
kcmp(r0, r0, 0x0, r1, r1)
prlimit64(r0, 0x2, &(0x7f0000000000)={0x3, 0xfffffffffffff801}, &(0x7f0000000040))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)={0x40000, 0x76, 0x8}, 0x18)
mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffff7)
write$selinux_load(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
utimes(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x375, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x1)

2.231634238s ago: executing program 1 (id=2316):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040))

1.718057238s ago: executing program 1 (id=2339):
syz_open_dev$loop(0x0, 0xfffffbff7ffffffb, 0x1222e2)
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440014007f0000010000000000000000000000000000123432000000020000007f00000100"/164], 0xfc}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r2, 0x0, 0x0)
accept(r0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0}}, 0x844)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)

1.269208266s ago: executing program 5 (id=2399):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x5f1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2c, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x7b, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x61, 0x1, 0xd}}}}}]}}]}}, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0)

551.33894ms ago: executing program 5 (id=2454):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
unshare(0x62040200)

520.43719ms ago: executing program 8 (id=2459):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000))

520.06787ms ago: executing program 8 (id=2460):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0)

473.110321ms ago: executing program 8 (id=2462):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x52c, &(0x7f0000000b80)="$eJzs3d9rY1kdAPDvvW1m25nuNqsi44K7i7sys+gk7dbVKrK7gujTgrq+j7VNS2nalCZdp2XQDv4BgogK/gG+CD74KMj8CSIM6LuoKKIz6pvOleTeatMmTZ3+yJh+PnCac3LuPd9zLs1N7r2HewO4tF6OiLcjYiwiXouI6eL9tEixl6f2co8e3l1spySy7N2/JJEU7+231S6PR8S1YrWJiPjKFyO+nhyN29zZXVuo12tbRbnaWt+sNnd2b62uL6zUVmobc3OzP4uIN+ZnssKpxlmOiDc//4fvf+fHX3jzFx//xm9v/+nmN9vd+uwH835HxOKpAvSRt13qbIt97W20dR7BhqQ9ntLYsHsBAMBJtH/jvy8iPtL5/T8dY51fcwAAAMAoyd6ain8mERkAAAAwstKImIokrRRzAaYiTSuVfA7vB+JqWm80Wx9bbmxvLLXrIspRSpdX67WZYq5wOUrJ8upztdlijm1ertdeP1Sei4jnI+J705OdcmWxUV8a9skPAAAAuCSuvdR9/P/36bSTBwAAAEZMuW8BAAAAGBUO+QEAAGD0Of4HAACAkfald95pp2z/Od5L7+1srzXeu7VUa65V1rcXK4uNrc3Kyj+KxdcHtVdvNDY/ERvbd6qtWrNVbe7s3l5vbG+0bq92PQIbAAAAuEDPv3T/N0lE7H1mspOiuA8gQJffD7sDwFkaG3YHgKEZH3YHgKEpDVzCHgJGXTKg/ujknfxcYfzyfPoDAACcvRsfOnr9/0pRN/jcAPD/zFwfALh8uq/uTQ6tH8DFK3XNADzRbMD89MD18+oRcNGey1+e6Vff9+YdJ7j+n59jyLIn6hgAAHBmpjopSSvFMcBUpGmlEvFsPM7KUUqWV+u1maLu19OlZ9rl2c6aycA5wwAAAAAAAAAAAAAAAAAAAAAAAABALsuSyAAAAICRFpH+MenczT/ixvSrU91nBw499etH7/7gzkKrtTUbcSX563QUDwNs/bB4//XMIwEAAABguCbbf/Lj9OJ1dthdAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDUPHp4d3E/XWTcP38uIsq94o/HROd1IkoRcfVvSYwfWC+JiLEziL93LyKu94qfxOMsy8pFL3rFnzzn+OXOpukdP42Ia2cQHy6z++39z9u9Pn9pvNx57f35Gy/SafXf/6X/2f+N9dn/PHuo3M8LD35a7Rv/XsQL4733P/vxkzx+V4h24ZVBg8sbiK99dXe3Z/2BJnvFPxir2lrfrDZ3dm+tri+s1FZqG3Nzs5+c/9T8G/Mz1eXVeq342zPMdz/888fHjf9qn/jl7vEf2f6vDhp/Rxb/enDn4fvzQqlX/Juv9P7+vd4nflp89320yLfrb+zn9/L8QS/+5FcvHjf+pT7jnxgw/psnGn98+rUvf/t3PWuObA0A4CI0d3bXFur12tYxmYkTLPM/ZSJO285bZ9qfpyETg5eZeEq6eh6Z7Fv5/+Pp2jnl6kcy2WlWH48z6MaVI5/TsXjSBpOIvXZbJ/yHBAAARsx/f/QfdwUJAAAAAAAAAAAAAAAAAAAAOE9PeFuyiYg48cKHY+4NZ6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMf6dwAAAP//UW/PrQ==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/pm_trace', 0x70800, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
write(r3, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0)
poll(&(0x7f0000000040)=[{r4, 0x4004}, {r4, 0x2}], 0x2, 0x1)

399.128583ms ago: executing program 5 (id=2465):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)="000010", 0x3)

395.941603ms ago: executing program 7 (id=2466):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
read(r0, 0x0, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x4, "11ff0420"}}, 0xa)
write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x2, "11ff"}}, 0x8)

355.578284ms ago: executing program 5 (id=2467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

355.304924ms ago: executing program 5 (id=2469):
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x4c}}, 0x0)
r0 = socket$inet6(0xa, 0xa, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x2, 0xb, 0x0, 0x100}, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5001}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20})
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0xa})
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0)
write(r4, &(0x7f0000000300)='0x01\x00', 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})

317.725774ms ago: executing program 7 (id=2470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="0900e8e320d6", {0xe, 0x5}}}}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800)

317.360634ms ago: executing program 5 (id=2472):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write(r0, &(0x7f0000001f00)="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", 0x1a4)

317.308804ms ago: executing program 7 (id=2473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fb0d3b250a0000000c00038008000100"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004004)

246.263766ms ago: executing program 7 (id=2475):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)

246.154866ms ago: executing program 6 (id=2476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0xe182bd95e1c68e65, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

245.963066ms ago: executing program 8 (id=2477):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9)
syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

189.241616ms ago: executing program 6 (id=2478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

189.083756ms ago: executing program 6 (id=2479):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)

189.008336ms ago: executing program 8 (id=2480):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)

175.645127ms ago: executing program 6 (id=2481):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt(r4, 0x1, 0x3, 0x0, &(0x7f0000000640))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0}, &(0x7f00000000c0)=0x14)
getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x4, 0x7, 0x9, 0x3, 0x36, @mcast1, @empty, 0x7800, 0x700, 0x9, 0x80000000}})

129.025658ms ago: executing program 8 (id=2482):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
pread64(r1, &(0x7f00000024c0)=""/205, 0xcd, 0x9)

37.33667ms ago: executing program 6 (id=2483):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

37.178819ms ago: executing program 7 (id=2484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

14.64005ms ago: executing program 6 (id=2485):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write(0xffffffffffffffff, &(0x7f0000000280)='8', 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

0s ago: executing program 7 (id=2486):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x6, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)

kernel console output (not intermixed with test programs):

r=3
[   23.538480][  T416] usb 1-1: Product: syz
[   23.542772][  T416] usb 1-1: Manufacturer: syz
[   23.547397][  T416] usb 1-1: SerialNumber: syz
[   23.554813][  T416] usb 1-1: config 0 descriptor??
[   23.570907][  T432] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   23.578054][  T432] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   23.800981][  T416] dm9601: probe of 1-1:0.0 failed with error -71
[   23.808703][  T416] usb 1-1: USB disconnect, device number 2
[   23.821563][  T514] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   23.833247][  T454] udc-core: couldn't find an available UDC or it's busy
[   23.833475][  T514] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   23.850235][  T514] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[   23.854852][   T24] kauditd_printk_skb: 62 callbacks suppressed
[   23.854862][   T24] audit: type=1400 audit(1785923346.940:134): avc:  denied  { read write } for  pid=516 comm="syz.4.88" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   23.878171][  T514] incfs: ino conflict with backing FS 1
[   23.896983][  T454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   23.904828][   T24] audit: type=1400 audit(1785923346.990:135): avc:  denied  { open } for  pid=516 comm="syz.4.88" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   23.912529][  T304] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   23.943576][  T304] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   23.951696][  T304] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   23.959185][  T304] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   23.967081][  T304] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   23.975328][  T304] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[   24.084075][  T522] EXT4-fs (loop2): Unrecognized mount option "obj_type=/dev/loop" or missing value
[   24.230856][   T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   24.316321][   T24] audit: type=1400 audit(1785923347.400:136): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   24.342273][  T281] exFAT-fs (loop0): abnormal access to deleted dentry
[   24.342705][   T24] audit: type=1400 audit(1785923347.420:137): avc:  denied  { remove_name } for  pid=281 comm="syz-executor" name=".incomplete" dev="loop0" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   24.373326][   T24] audit: type=1400 audit(1785923347.420:138): avc:  denied  { rmdir } for  pid=281 comm="syz-executor" name=".incomplete" dev="loop0" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   24.477711][  T528] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.484968][  T528] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.492413][  T528] device bridge_slave_0 entered promiscuous mode
[   24.499265][  T528] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.506388][  T528] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.513860][  T528] device bridge_slave_1 entered promiscuous mode
[   24.545682][   T24] audit: type=1400 audit(1785923347.630:139): avc:  denied  { create } for  pid=528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.550399][  T528] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.566310][   T24] audit: type=1400 audit(1785923347.630:140): avc:  denied  { write } for  pid=528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.573149][  T528] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.573216][  T528] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.593656][   T24] audit: type=1400 audit(1785923347.630:141): avc:  denied  { read } for  pid=528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.600640][  T528] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.615404][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.640935][   T15] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   24.643826][  T304] input: HID 054c:0df2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0001/input/input5
[   24.653088][   T15] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   24.665615][  T304] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0001/input/input6
[   24.679168][   T24] audit: type=1400 audit(1785923347.760:142): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   24.688983][  T304] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0001/input/input7
[   24.721791][  T304] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000
[   24.737955][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.750171][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.796436][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.818099][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.825204][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.840142][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.852636][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.859686][  T314] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.870931][   T15] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   24.881432][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.889670][   T15] usb 4-1: Product: syz
[   24.894321][   T15] usb 4-1: Manufacturer: syz
[   24.915455][  T304] usb 2-1: USB disconnect, device number 2
[   24.933710][   T15] usb 4-1: SerialNumber: syz
[   24.939196][   T15] usb 4-1: config 0 descriptor??
[   24.960986][  T514] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   24.969000][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.974484][  T514] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   24.992528][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.000576][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.030651][  T528] device veth0_vlan entered promiscuous mode
[   25.040187][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.050275][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.058910][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.059946][  T559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   25.067331][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.091553][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.096471][   T24] audit: type=1400 audit(1785923348.180:143): avc:  denied  { mounton } for  pid=556 comm="syz.2.101" path="/18/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   25.099109][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.135228][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.143942][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.155362][  T528] device veth1_macvtap entered promiscuous mode
[   25.165132][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.173054][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.181639][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.190959][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.199188][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.252593][  T514] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   25.264156][  T514] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   25.271917][    T7] device bridge_slave_1 left promiscuous mode
[   25.278137][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.286542][    T7] device bridge_slave_0 left promiscuous mode
[   25.293237][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.301015][    T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   25.309678][    T7] device veth1_macvtap left promiscuous mode
[   25.315855][    T7] device veth0_vlan left promiscuous mode
[   25.520847][   T15] Error reading MAC address
[   25.524332][  T588] EXT4-fs (loop1): Test dummy encryption mode enabled
[   25.527081][   T15] usb 4-1: USB disconnect, device number 2
[   25.540991][  T305] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   25.542040][  T588] EXT4-fs (loop1): Ignoring removed orlov option
[   25.555903][  T588] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e80ec1a8, mo2=0003]
[   25.564154][  T588] System zones: 0-5
[   25.568528][  T588] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,init_itable=0x0000000000000009,norecovery,minixdf,nodioread_nolock,errors=remount-ro,orlov,usrquota,max_dir_size_kb=0x0000000000000004,
[   25.670875][    T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   25.840913][    T5] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   25.850068][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.858334][    T5] usb 5-1: Product: syz
[   25.862557][    T5] usb 5-1: Manufacturer: syz
[   25.867155][    T5] usb 5-1: SerialNumber: syz
[   25.880869][  T300] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   26.020884][  T305] usb 6-1: unable to get BOS descriptor or descriptor too short
[   26.035763][  T279] exFAT-fs (loop3): abnormal access to deleted dentry
[   26.061009][  T305] usb 6-1: not running at top speed; connect to a high speed hub
[   26.144054][  T305] usb 6-1: config 17 has an invalid interface number: 8 but max is 1
[   26.154994][  T305] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2
[   26.175015][  T305] usb 6-1: config 17 has no interface number 0
[   26.188652][  T305] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10
[   26.191740][  T594] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.207027][    T5] usb 5-1: 1:1 : unsupported format bits 0x2020000
[   26.213739][  T305] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64
[   26.214179][  T594] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.232273][  T594] device bridge_slave_0 entered promiscuous mode
[   26.239424][  T594] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.246511][  T594] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.246710][  T305] usb 6-1: config 17 interface 8 has no altsetting 0
[   26.253962][  T594] device bridge_slave_1 entered promiscuous mode
[   26.267304][    T5] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[   26.281818][    T5] usb 5-1: 2:1 : unsupported format bits 0x2020000
[   26.303182][    T5] usb 5-1: USB disconnect, device number 3
[   26.310876][  T300] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   26.323757][  T300] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   26.337182][  T300] usb 2-1: config 220 has no interface number 2
[   26.347352][  T300] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   26.360550][  T300] usb 2-1: config 220 interface 0 has no altsetting 0
[   26.367437][  T300] usb 2-1: config 220 interface 76 has no altsetting 0
[   26.374323][  T300] usb 2-1: config 220 interface 1 has no altsetting 0
[   26.400601][  T594] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.407711][  T594] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.415020][  T594] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.422061][  T594] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.440937][  T305] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[   26.450036][  T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.453146][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.464283][  T305] usb 6-1: Product: syz
[   26.469328][  T305] usb 6-1: Manufacturer: syz
[   26.474365][  T305] usb 6-1: SerialNumber: syz
[   26.482330][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.491622][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.502514][  T576] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   26.527618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.536784][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.543856][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.554219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.554659][  T541] udevd[541]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   26.562431][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.585024][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.592781][  T300] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   26.606592][  T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.614722][  T300] usb 2-1: Product: syz
[   26.629111][  T300] usb 2-1: Manufacturer: syz
[   26.635343][  T300] usb 2-1: SerialNumber: syz
[   26.650334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.659171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.672855][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.697589][  T594] device veth0_vlan entered promiscuous mode
[   26.704904][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.713238][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.728917][  T576] udc-core: couldn't find an available UDC or it's busy
[   26.742161][  T576] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   26.747142][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.772086][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   26.781055][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   26.789416][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   26.797946][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   26.806569][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   26.816073][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   26.825051][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   26.841694][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   26.858300][  T576] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   26.891366][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.901042][  T594] device veth1_macvtap entered promiscuous mode
[   26.925945][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.942492][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.953945][  T665] tun0: tun_chr_ioctl cmd 1074025675
[   26.959246][  T665] tun0: persist disabled
[   26.961737][  T305] usb 6-1: selecting invalid altsetting 0
[   26.973220][  T305] usb 6-1: USB disconnect, device number 2
[   27.021079][  T300] usb 2-1: selecting invalid altsetting 0
[   27.030487][  T300] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[   27.044505][  T300] uvcvideo: No valid video chain found.
[   27.121819][  T300] usb 2-1: USB disconnect, device number 3
[   27.192393][    T7] device bridge_slave_1 left promiscuous mode
[   27.198579][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.213110][    T7] device bridge_slave_0 left promiscuous mode
[   27.219495][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.237204][    T7] device veth1_macvtap left promiscuous mode
[   27.253074][    T7] device veth0_vlan left promiscuous mode
[   27.342528][  T720] -1O2~�: renamed from syzkaller0
[   28.093376][  T896] device syzkaller0 entered promiscuous mode
[   28.870679][   T24] kauditd_printk_skb: 22 callbacks suppressed
[   28.870689][   T24] audit: type=1400 audit(1785923351.950:166): avc:  denied  { mounton } for  pid=1035 comm="syz.1.329" path="/55/file0" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   28.987725][ T1046] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   29.005621][ T1046] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   29.029335][ T1046] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   29.054043][ T1046] EXT4-fs (loop6): 1 truncate cleaned up
[   29.059709][ T1046] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,
[   29.102002][ T1055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   29.125505][   T24] audit: type=1400 audit(1785923352.210:167): avc:  denied  { create } for  pid=1054 comm="syz.2.336" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   29.180754][   T24] audit: type=1400 audit(1785923352.210:168): avc:  denied  { read } for  pid=1054 comm="syz.2.336" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   29.209078][   T24] audit: type=1400 audit(1785923352.250:169): avc:  denied  { unlink } for  pid=282 comm="syz-executor" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   29.315677][  T404] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   29.401145][   T24] audit: type=1400 audit(1785923352.400:170): avc:  denied  { accept } for  pid=1045 comm="syz.6.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   29.525328][ T1080] erofs: (device loop1): mounted with root inode @ nid 36.
[   29.549734][   T24] audit: type=1400 audit(1785923352.630:171): avc:  denied  { map } for  pid=1077 comm="syz.1.347" path="/61/file2/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   29.571253][ T1080] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 89
[   29.581948][ T1080] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89
[   29.591500][ T1080] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[   29.602928][ T1093] EXT4-fs (loop2): Unrecognized mount option "obj_type=/dev/loop" or missing value
[   29.612824][ T1080] attempt to access beyond end of device
[   29.612824][ T1080] loop1: rw=524288, want=34359738368, limit=16
[   29.620836][  T404] usb 6-1: Using ep0 maxpacket: 16
[   29.624845][ T1080] attempt to access beyond end of device
[   29.624845][ T1080] loop1: rw=524288, want=136, limit=16
[   29.632555][ T1099] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   29.640642][ T1080] attempt to access beyond end of device
[   29.640642][ T1080] loop1: rw=524288, want=88, limit=16
[   29.649386][ T1099] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   29.660087][ T1080] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   29.676167][ T1080] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   29.740976][  T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.752493][  T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.801918][  T404] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   29.815025][  T404] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   29.824342][  T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.832984][  T404] usb 6-1: config 0 descriptor??
[   29.880278][ T1111] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   30.047005][ T1134] EXT4-fs warning (device loop1): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   30.058890][ T1134] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it
[   30.069166][ T1134] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.370: Corrupt directory, running e2fsck is recommended
[   30.082456][ T1134] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   30.094920][ T1142] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   30.112634][ T1134] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.370: corrupted in-inode xattr
[   30.131073][ T1134] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.370: couldn't read orphan inode 15 (err -117)
[   30.141964][ T1142] EXT4-fs (loop6): 1 truncate cleaned up
[   30.149143][ T1134] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.sb=0x0000000000000001,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv1,grpid,,,errors=continue
[   30.154405][ T1142] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,
[   30.229414][ T1134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   30.245428][   T24] audit: type=1400 audit(1785923353.300:172): avc:  denied  { write } for  pid=1130 comm="syz.1.370" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   30.254187][ T1134] EXT4-fs warning (device loop1): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   30.281257][ T1134] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it
[   30.295531][ T1134] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.370: Corrupt directory, running e2fsck is recommended
[   30.312582][   T24] audit: type=1400 audit(1785923353.400:173): avc:  denied  { append } for  pid=1130 comm="syz.1.370" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   30.346242][ T1134] EXT4-fs warning (device loop1): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   30.358349][ T1134] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it
[   30.369826][  T404] usbhid 6-1:0.0: can't add hid device: -71
[   30.377038][  T404] usbhid: probe of 6-1:0.0 failed with error -71
[   30.409552][  T404] usb 6-1: USB disconnect, device number 3
[   30.417690][ T1134] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.370: Corrupt directory, running e2fsck is recommended
[   30.532393][ T1164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   30.578695][ T1177] FAULT_INJECTION: forcing a failure.
[   30.578695][ T1177] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   30.591853][ T1177] CPU: 1 PID: 1177 Comm: syz.4.387 Not tainted syzkaller #0
[   30.599215][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   30.609273][ T1177] Call Trace:
[   30.612569][ T1177]  __dump_stack+0x21/0x24
[   30.616899][ T1177]  dump_stack_lvl+0x1a7/0x208
[   30.621572][ T1177]  ? show_regs_print_info+0x18/0x18
[   30.626752][ T1177]  ? vfs_write+0xae4/0xd70
[   30.631154][ T1177]  dump_stack+0x15/0x1c
[   30.635292][ T1177]  should_fail+0x3ab/0x500
[   30.639710][ T1177]  should_fail_usercopy+0x1a/0x20
[   30.644738][ T1177]  _copy_from_user+0x20/0xd0
[   30.649306][ T1177]  __se_sys_bpf+0x1bb/0x740
[   30.653820][ T1177]  ? __x64_sys_bpf+0x90/0x90
[   30.658399][ T1177]  ? debug_smp_processor_id+0x17/0x20
[   30.663768][ T1177]  __x64_sys_bpf+0x7b/0x90
[   30.668182][ T1177]  do_syscall_64+0x31/0x40
[   30.672573][ T1177]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   30.678456][ T1177] RIP: 0033:0x7f5898269019
[   30.683025][ T1177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   30.702703][ T1177] RSP: 002b:00007f5896cc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   30.711120][ T1177] RAX: ffffffffffffffda RBX: 00007f58984f0fa0 RCX: 00007f5898269019
[   30.719095][ T1177] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[   30.727045][ T1177] RBP: 00007f5896cc2090 R08: 0000000000000000 R09: 0000000000000000
[   30.735002][ T1177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   30.743346][ T1177] R13: 00007f58984f1038 R14: 00007f58984f0fa0 R15: 00007ffc457f6e38
[   31.226527][ T1220] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   31.258397][ T1220] EXT4-fs (loop1): 1 truncate cleaned up
[   31.264221][ T1220] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,
[   31.316192][ T1230] fuse: Unknown parameter 'group_i00000000000000000000'
[   31.641024][   T54] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   31.644555][ T1256] fuse: Unknown parameter 'grou00000000000000000000'
[   31.711278][ T1268] fuse: Unknown parameter 'group_i00000000000000000000'
[   31.925849][ T1312] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   32.013660][ T1316] EXT4-fs (loop4): Test dummy encryption mode enabled
[   32.020568][ T1316] EXT4-fs (loop4): Ignoring removed orlov option
[   32.028118][ T1316] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e80ec1a8, mo2=0003]
[   32.045409][ T1312] overlayfs: failed to resolve './bus': -2
[   32.051429][   T54] usb 3-1: unable to get BOS descriptor or descriptor too short
[   32.061041][ T1316] System zones: 0-5
[   32.065599][ T1316] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,init_itable=0x0000000000000009,norecovery,minixdf,nodioread_nolock,errors=remount-ro,orlov,usrquota,max_dir_size_kb=0x0000000000000004,
[   32.091080][   T54] usb 3-1: not running at top speed; connect to a high speed hub
[   32.190977][   T54] usb 3-1: config 17 has an invalid interface number: 8 but max is 1
[   32.199085][   T54] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2
[   32.219236][ T1348] fuse: Unknown parameter 'group_id00000000000000000000'
[   32.227449][   T54] usb 3-1: config 17 has no interface number 0
[   32.234034][   T54] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10
[   32.250226][   T54] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64
[   32.262943][   T54] usb 3-1: config 17 interface 8 has no altsetting 0
[   32.317361][ T1352] EXT4-fs (loop1): Test dummy encryption mode enabled
[   32.326189][ T1352] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   32.340643][ T1352] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[   32.362934][ T1352] System zones: 0-5
[   32.370847][  T566] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   32.374810][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000004,
[   32.393104][ T1368] device ip6erspan0 entered promiscuous mode
[   32.440939][   T54] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[   32.452389][   T24] audit: type=1400 audit(1785923355.530:174): avc:  denied  { watch } for  pid=1367 comm="syz.6.477" path="/63/file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   32.463743][ T1376] capability: warning: `syz.6.477' uses deprecated v2 capabilities in a way that may be insecure
[   32.481081][   T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.498619][   T54] usb 3-1: Product: syz
[   32.510860][   T24] audit: type=1400 audit(1785923355.540:175): avc:  denied  { setattr } for  pid=1367 comm="syz.6.477" name="/" dev="incremental-fs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.533735][   T54] usb 3-1: Manufacturer: syz
[   32.538498][   T54] usb 3-1: SerialNumber: syz
[   32.561156][ T1241] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   32.770883][  T566] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[   32.786304][ T1241] udc-core: couldn't find an available UDC or it's busy
[   32.787896][  T566] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   32.822571][ T1241] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   32.823766][  T566] usb 5-1: config 220 has no interface number 2
[   32.841930][ T1416] EXT4-fs (loop1): Test dummy encryption mode enabled
[   32.848774][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   32.848884][  T566] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   32.856269][ T1416] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   32.869163][  T566] usb 5-1: config 220 interface 0 has no altsetting 0
[   32.885348][  T566] usb 5-1: config 220 interface 76 has no altsetting 0
[   32.892292][  T566] usb 5-1: config 220 interface 1 has no altsetting 0
[   32.910472][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   32.922301][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   32.935232][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   32.942748][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   32.954179][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   32.963265][ T1429] 9pnet: p9_errstr2errno: server reported unknown error �p������n$�[
[   32.963265][ T1429] Q&|x���
[   32.963821][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   32.982697][ T1416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[   32.984604][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   32.994145][ T1416] System zones: 
[   33.001681][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   33.002703][ T1416] 0-5
[   33.016306][ T1416] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000004,
[   33.067354][ T1429] process 'syz.5.502' launched '' with NULL argv: empty string added
[   33.069003][ T1423] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   33.096819][  T566] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   33.101254][   T54] usb 3-1: selecting invalid altsetting 0
[   33.129323][   T54] usb 3-1: USB disconnect, device number 2
[   33.135668][  T566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.152399][  T566] usb 5-1: Product: syz
[   33.179222][  T566] usb 5-1: Manufacturer: syz
[   33.189163][  T566] usb 5-1: SerialNumber: syz
[   33.228564][ T1455] fuse: Bad value for 'user_id'
[   33.246304][ T1450]  loop5: p1 p2 p3
[   33.251848][ T1450] loop5: p1 start 16384 is beyond EOD, truncated
[   33.258655][ T1450] loop5: p2 size 150994944 extends beyond EOD, truncated
[   33.285713][ T1450] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   33.453487][ T1485] EXT4-fs warning (device loop5): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   33.466523][ T1485] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it
[   33.476818][ T1485] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.530: Corrupt directory, running e2fsck is recommended
[   33.489951][ T1485] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[   33.498234][ T1485] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.530: corrupted in-inode xattr
[   33.510714][ T1485] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.530: couldn't read orphan inode 15 (err -117)
[   33.522898][ T1485] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.sb=0x0000000000000001,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv1,grpid,,,errors=continue
[   33.544456][ T1489] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   33.559387][ T1489] overlayfs: failed to resolve './bus': -2
[   33.574273][ T1485] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   33.591864][  T566] usb 5-1: selecting invalid altsetting 0
[   33.601275][ T1485] EXT4-fs warning (device loop5): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   33.607747][  T566] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[   33.617059][ T1485] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it
[   33.629593][ T1485] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.530: Corrupt directory, running e2fsck is recommended
[   33.640232][  T566] uvcvideo: No valid video chain found.
[   33.723650][  T566] usb 5-1: USB disconnect, device number 4
[   33.911281][ T1519] EXT4-fs (loop1): Test dummy encryption mode enabled
[   33.923417][ T1519] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   33.936109][ T1519] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[   33.944929][ T1519] System zones: 0-5
[   33.949502][ T1519] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000004,
[   33.980507][ T1517] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   34.018719][ T1517] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   34.040390][ T1517] F2FS-fs (loop6): Found nat_bits in checkpoint
[   34.086877][ T1517] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   34.094528][ T1517] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   34.117758][ T1558] FAULT_INJECTION: forcing a failure.
[   34.117758][ T1558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   34.132079][   T24] kauditd_printk_skb: 8 callbacks suppressed
[   34.132089][   T24] audit: type=1400 audit(1785923357.220:184): avc:  denied  { read } for  pid=1556 comm="syz.5.558" dev="nsfs" ino=4026532688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   34.138461][ T1558] CPU: 1 PID: 1558 Comm: syz.2.557 Not tainted syzkaller #0
[   34.165604][   T24] audit: type=1400 audit(1785923357.240:185): avc:  denied  { open } for  pid=1556 comm="syz.5.558" path="net:[4026532688]" dev="nsfs" ino=4026532688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   34.166343][ T1558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   34.166347][ T1558] Call Trace:
[   34.166364][ T1558]  __dump_stack+0x21/0x24
[   34.166381][ T1558]  dump_stack_lvl+0x1a7/0x208
[   34.211699][ T1558]  ? show_regs_print_info+0x18/0x18
[   34.216875][ T1558]  ? vfs_write+0xae4/0xd70
[   34.221266][ T1558]  dump_stack+0x15/0x1c
[   34.225403][ T1558]  should_fail+0x3ab/0x500
[   34.229803][ T1558]  should_fail_usercopy+0x1a/0x20
[   34.234814][ T1558]  _copy_from_user+0x20/0xd0
[   34.239388][ T1558]  __se_sys_bpf+0x1bb/0x740
[   34.243870][ T1558]  ? __x64_sys_bpf+0x90/0x90
[   34.248473][ T1558]  ? debug_smp_processor_id+0x17/0x20
[   34.253821][ T1558]  __x64_sys_bpf+0x7b/0x90
[   34.258209][ T1558]  do_syscall_64+0x31/0x40
[   34.262606][ T1558]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   34.268491][ T1558] RIP: 0033:0x7f2a3aa91019
[   34.272890][ T1558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.292559][ T1558] RSP: 002b:00007f2a394ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   34.300975][ T1558] RAX: ffffffffffffffda RBX: 00007f2a3ad18fa0 RCX: 00007f2a3aa91019
[   34.309042][ T1558] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[   34.316997][ T1558] RBP: 00007f2a394ea090 R08: 0000000000000000 R09: 0000000000000000
[   34.324963][ T1558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.332920][ T1558] R13: 00007f2a3ad19038 R14: 00007f2a3ad18fa0 R15: 00007ffe0ceb53a8
[   34.377547][   T24] audit: type=1400 audit(1785923357.450:186): avc:  denied  { read append open } for  pid=1516 comm="syz.6.543" path="/90/file0/memory.stat" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.422534][ T1516] attempt to access beyond end of device
[   34.422534][ T1516] loop6: rw=2049, want=77872, limit=40427
[   34.424154][   T24] audit: type=1400 audit(1785923357.510:187): avc:  denied  { map } for  pid=1516 comm="syz.6.543" path="/90/file0/memory.stat" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.458115][ T1517] attempt to access beyond end of device
[   34.458115][ T1517] loop6: rw=2049, want=78496, limit=40427
[   34.478439][   T24] audit: type=1400 audit(1785923357.510:188): avc:  denied  { write } for  pid=1516 comm="syz.6.543" path="/90/file0/memory.stat" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.479040][ T1574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'.
[   34.539873][ T1516] attempt to access beyond end of device
[   34.539873][ T1516] loop6: rw=524288, want=78080, limit=40427
[   34.551898][ T1516] attempt to access beyond end of device
[   34.551898][ T1516] loop6: rw=0, want=77960, limit=40427
[   34.563237][ T1516] attempt to access beyond end of device
[   34.563237][ T1516] loop6: rw=0, want=77960, limit=40427
[   34.577869][ T1516] attempt to access beyond end of device
[   34.577869][ T1516] loop6: rw=0, want=77960, limit=40427
[   34.588978][ T1516] attempt to access beyond end of device
[   34.588978][ T1516] loop6: rw=0, want=77960, limit=40427
[   34.602258][   T24] audit: type=1400 audit(1785923357.690:189): avc:  denied  { ioctl } for  pid=1516 comm="syz.6.543" path="/90/file0/file1" dev="loop6" ino=11 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.641322][   T24] audit: type=1400 audit(1785923357.710:190): avc:  denied  { accept } for  pid=1573 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   34.685825][  T306] handle_bad_sector: 5 callbacks suppressed
[   34.685836][  T306] attempt to access beyond end of device
[   34.685836][  T306] loop6: rw=1, want=77840, limit=40427
[   34.939445][   T24] audit: type=1400 audit(1785923358.020:191): avc:  denied  { remount } for  pid=1629 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   35.180897][  T300] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   35.222842][ T1688] EXT4-fs (loop6): Test dummy encryption mode enabled
[   35.230341][ T1688] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[   35.263698][ T1688] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[   35.282831][ T1688] System zones: 0-5
[   35.300521][ T1716] FAULT_INJECTION: forcing a failure.
[   35.300521][ T1716] name failslab, interval 1, probability 0, space 0, times 1
[   35.313933][ T1688] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000004,
[   35.314214][ T1716] CPU: 0 PID: 1716 Comm: syz.2.633 Not tainted syzkaller #0
[   35.343593][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.353631][ T1716] Call Trace:
[   35.356921][ T1716]  __dump_stack+0x21/0x24
[   35.361232][ T1716]  dump_stack_lvl+0x1a7/0x208
[   35.365888][ T1716]  ? show_regs_print_info+0x18/0x18
[   35.371147][ T1716]  ? kstrtouint_from_user+0x1c4/0x220
[   35.376501][ T1716]  dump_stack+0x15/0x1c
[   35.380632][ T1716]  should_fail+0x3ab/0x500
[   35.385031][ T1716]  ? bpf_prog_test_run_xdp+0x243/0x520
[   35.390471][ T1716]  __should_failslab+0xa4/0xe0
[   35.395211][ T1716]  should_failslab+0x9/0x20
[   35.399687][ T1716]  kmem_cache_alloc_trace+0x3a/0x2e0
[   35.404949][ T1716]  bpf_prog_test_run_xdp+0x243/0x520
[   35.410209][ T1716]  ? preempt_count_add+0x90/0x1b0
[   35.415209][ T1716]  ? bpf_ctx_finish+0x200/0x200
[   35.420033][ T1716]  ? __fget_files+0x2e1/0x340
[   35.424685][ T1716]  ? fput_many+0x15a/0x1a0
[   35.429075][ T1716]  ? bpf_ctx_finish+0x200/0x200
[   35.433901][ T1716]  bpf_prog_test_run+0x34a/0x3c0
[   35.438830][ T1716]  __se_sys_bpf+0x501/0x740
[   35.443309][ T1716]  ? __x64_sys_bpf+0x90/0x90
[   35.447878][ T1716]  ? debug_smp_processor_id+0x17/0x20
[   35.453249][ T1716]  __x64_sys_bpf+0x7b/0x90
[   35.457643][ T1716]  do_syscall_64+0x31/0x40
[   35.462037][ T1716]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   35.467910][ T1716] RIP: 0033:0x7f2a3aa91019
[   35.472310][ T1716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.491903][ T1716] RSP: 002b:00007f2a394ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   35.500291][ T1716] RAX: ffffffffffffffda RBX: 00007f2a3ad18fa0 RCX: 00007f2a3aa91019
[   35.508237][ T1716] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[   35.516181][ T1716] RBP: 00007f2a394ea090 R08: 0000000000000000 R09: 0000000000000000
[   35.524126][ T1716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.532082][ T1716] R13: 00007f2a3ad19038 R14: 00007f2a3ad18fa0 R15: 00007ffe0ceb53a8
[   35.580958][  T300] usb 5-1: Using ep0 maxpacket: 16
[   35.619349][   T24] audit: type=1400 audit(1785923358.700:192): avc:  denied  { audit_read } for  pid=1731 comm="syz.6.641" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   35.700886][  T300] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[   35.709069][  T300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   35.739662][  T300] usb 5-1: config 0 has no interface number 0
[   35.773651][ T1748] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   35.910987][  T300] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   35.927454][  T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.937548][  T300] usb 5-1: Product: syz
[   35.942830][  T300] usb 5-1: Manufacturer: syz
[   35.947479][  T300] usb 5-1: SerialNumber: syz
[   35.952891][  T300] usb 5-1: config 0 descriptor??
[   35.990098][ T1732] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[   35.999585][ T1732] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   36.007861][ T1732] F2FS-fs (loop6): Unrecognized mount option "fAult_injection=00000000000000041160" or missing value
[   36.030716][ T1766] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[   36.036962][ T1784] FAULT_INJECTION: forcing a failure.
[   36.036962][ T1784] name failslab, interval 1, probability 0, space 0, times 0
[   36.052086][ T1766] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   36.052104][ T1784] CPU: 0 PID: 1784 Comm: syz.1.665 Not tainted syzkaller #0
[   36.061208][ T1766] F2FS-fs (loop2): invalid crc value
[   36.067498][ T1784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.067502][ T1784] Call Trace:
[   36.067520][ T1784]  __dump_stack+0x21/0x24
[   36.067535][ T1784]  dump_stack_lvl+0x1a7/0x208
[   36.073477][ T1766] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   36.082833][ T1784]  ? show_regs_print_info+0x18/0x18
[   36.082842][ T1784]  ? __kasan_slab_alloc+0x69/0xe0
[   36.082858][ T1784]  ? __get_vm_area_node+0x113/0x450
[   36.101184][ T1766] F2FS-fs (loop2): Start checkpoint disabled!
[   36.106245][ T1784]  dump_stack+0x15/0x1c
[   36.113363][ T1766] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   36.116416][ T1784]  should_fail+0x3ab/0x500
[   36.121621][ T1766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   36.127622][ T1784]  ? alloc_vmap_area+0x175/0x19d0
[   36.127631][ T1784]  __should_failslab+0xa4/0xe0
[   36.127646][ T1784]  should_failslab+0x9/0x20
[   36.164796][ T1784]  kmem_cache_alloc+0x3d/0x2d0
[   36.169532][ T1784]  alloc_vmap_area+0x175/0x19d0
[   36.174354][ T1784]  ? vm_map_ram+0x9d0/0x9d0
[   36.178828][ T1784]  ? __get_vm_area_node+0x113/0x450
[   36.184013][ T1784]  __get_vm_area_node+0x147/0x450
[   36.189019][ T1784]  __vmalloc_node_range+0xe7/0x7a0
[   36.194114][ T1784]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   36.199631][ T1784]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   36.205153][ T1784]  __vmalloc+0x79/0x90
[   36.209209][ T1784]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   36.214727][ T1784]  bpf_prog_alloc_no_stats+0x3a/0x240
[   36.220070][ T1784]  bpf_prog_alloc+0x21/0x1f0
[   36.224631][ T1784]  bpf_prog_load+0x7ca/0x14e0
[   36.229275][ T1784]  ? map_freeze+0x330/0x330
[   36.233746][ T1784]  ? vfs_write+0xae4/0xd70
[   36.238135][ T1784]  ? selinux_bpf+0xc7/0xf0
[   36.242524][ T1784]  ? security_bpf+0x82/0xa0
[   36.246999][ T1784]  __se_sys_bpf+0x49a/0x740
[   36.251589][ T1784]  ? __x64_sys_bpf+0x90/0x90
[   36.256163][ T1784]  ? debug_smp_processor_id+0x17/0x20
[   36.261515][ T1784]  __x64_sys_bpf+0x7b/0x90
[   36.265911][ T1784]  do_syscall_64+0x31/0x40
[   36.270315][ T1784]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   36.276192][ T1784] RIP: 0033:0x7f30dcb73019
[   36.280579][ T1784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.300177][ T1784] RSP: 002b:00007f30db5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   36.308594][ T1784] RAX: ffffffffffffffda RBX: 00007f30dcdfafa0 RCX: 00007f30dcb73019
[   36.316545][ T1784] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[   36.324491][ T1784] RBP: 00007f30db5cc090 R08: 0000000000000000 R09: 0000000000000000
[   36.332433][ T1784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.340387][ T1784] R13: 00007f30dcdfb038 R14: 00007f30dcdfafa0 R15: 00007fff5cef2558
[   36.349015][ T1784] syz.1.665: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0
[   36.362869][  T300] uvcvideo: Found UVC 0.00 device syz (046d:08d3)
[   36.363824][ T1784] CPU: 1 PID: 1784 Comm: syz.1.665 Not tainted syzkaller #0
[   36.376554][ T1784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.386582][ T1784] Call Trace:
[   36.389847][ T1784]  __dump_stack+0x21/0x24
[   36.394148][ T1784]  dump_stack_lvl+0x1a7/0x208
[   36.398800][ T1784]  ? show_regs_print_info+0x18/0x18
[   36.403988][ T1784]  ? pr_cont_kernfs_name+0xe3/0xf0
[   36.409072][ T1784]  dump_stack+0x15/0x1c
[   36.413233][ T1784]  warn_alloc+0x1dc/0x200
[   36.417554][ T1784]  ? __kasan_slab_free+0x11/0x20
[   36.422486][ T1784]  ? slab_free_freelist_hook+0xc5/0x190
[   36.428019][ T1784]  ? zone_watermark_ok_safe+0x290/0x290
[   36.433558][ T1784]  ? kfree+0xc0/0x270
[   36.437514][ T1784]  ? __get_vm_area_node+0x15c/0x450
[   36.442687][ T1784]  __vmalloc_node_range+0x272/0x7a0
[   36.447856][ T1784]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   36.453505][ T1784]  __vmalloc+0x79/0x90
[   36.457563][ T1784]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   36.463092][ T1784]  bpf_prog_alloc_no_stats+0x3a/0x240
[   36.468446][ T1784]  bpf_prog_alloc+0x21/0x1f0
[   36.473017][ T1784]  bpf_prog_load+0x7ca/0x14e0
[   36.477690][ T1784]  ? map_freeze+0x330/0x330
[   36.482171][ T1784]  ? vfs_write+0xae4/0xd70
[   36.486581][ T1784]  ? selinux_bpf+0xc7/0xf0
[   36.490976][ T1784]  ? security_bpf+0x82/0xa0
[   36.495480][ T1784]  __se_sys_bpf+0x49a/0x740
[   36.499963][ T1784]  ? __x64_sys_bpf+0x90/0x90
[   36.504534][ T1784]  ? debug_smp_processor_id+0x17/0x20
[   36.509903][ T1784]  __x64_sys_bpf+0x7b/0x90
[   36.514309][ T1784]  do_syscall_64+0x31/0x40
[   36.518704][ T1784]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   36.524568][ T1784] RIP: 0033:0x7f30dcb73019
[   36.528960][ T1784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.548539][ T1784] RSP: 002b:00007f30db5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   36.556931][ T1784] RAX: ffffffffffffffda RBX: 00007f30dcdfafa0 RCX: 00007f30dcb73019
[   36.564889][ T1784] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[   36.572843][ T1784] RBP: 00007f30db5cc090 R08: 0000000000000000 R09: 0000000000000000
[   36.580801][ T1784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.588761][ T1784] R13: 00007f30dcdfb038 R14: 00007f30dcdfafa0 R15: 00007fff5cef2558
[   36.598143][ T1784] Mem-Info:
[   36.598346][   T24] audit: type=1400 audit(1785923359.680:193): avc:  denied  { create } for  pid=1621 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.601412][ T1784] active_anon:250 inactive_anon:17924 isolated_anon:0
[   36.601412][ T1784]  active_file:4964 inactive_file:13759 isolated_file:0
[   36.601412][ T1784]  unevictable:0 dirty:391 writeback:0
[   36.601412][ T1784]  slab_reclaimable:7866 slab_unreclaimable:76099
[   36.601412][ T1784]  mapped:29736 shmem:10346 pagetables:740 bounce:0
[   36.601412][ T1784]  free:1552491 free_pcp:977 free_cma:0
[   36.657564][ T1784] Node 0 active_anon:1000kB inactive_anon:72296kB active_file:19856kB inactive_file:55036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118944kB dirty:1564kB writeback:0kB shmem:41384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4608kB all_unreclaimable? no
[   36.687050][ T1784] DMA32 free:2985148kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986548kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:1400kB local_pcp:52kB free_cma:0kB
[   36.722245][ T1784] lowmem_reserve[]: 0 3941 3941
[   36.727197][ T1784] Normal free:3216880kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:800kB inactive_anon:78696kB active_file:20156kB inactive_file:54836kB unevictable:0kB writepending:1564kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3108kB bounce:0kB free_pcp:2628kB local_pcp:1152kB free_cma:0kB
[   36.732579][ T1766] Need at least one configuration in g1.
[   36.780916][ T1766] udc dummy_udc.0: failed to start g1: -22
[   36.790990][ T1784] lowmem_reserve[]: 0 0 0
[   36.803989][ T1784] DMA32: 5*4kB (UM) 3*8kB (M) 5*16kB (M) 6*32kB (UM) 8*64kB (UM) 5*128kB (UM) 7*256kB (UM) 6*512kB (M) 5*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2985148kB
[   36.826071][ T1784] Normal: 579*4kB (UME) 477*8kB (UME) 487*16kB (UME) 232*32kB (UME) 97*64kB (UM) 35*128kB (UME) 0*256kB 1*512kB (U) 3*1024kB (UME) 1*2048kB (U) 779*4096kB (UM) = 3228452kB
[   36.831293][  T282] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0
[   36.843423][ T1784] 24229 total pagecache pages
[   36.855916][ T1784] 19 pages in swap cache
[   36.863170][  T282] CPU: 1 PID: 282 Comm: syz-executor Not tainted syzkaller #0
[   36.869989][ T1784] Swap cache stats: add 52, delete 33, find 23/26
[   36.870720][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.883889][ T1784] Free swap  = 124472kB
[   36.887146][  T282] Call Trace:
[   36.891759][ T1784] Total swap = 124996kB
[   36.894577][  T282]  __dump_stack+0x21/0x24
[   36.898695][ T1784] 2097051 pages RAM
[   36.903000][  T282]  dump_stack_lvl+0x1a7/0x208
[   36.903010][  T282]  ? f2fs_get_next_page_offset+0x760/0x760
[   36.903018][  T282]  ? show_regs_print_info+0x18/0x18
[   36.903027][  T282]  dump_stack+0x15/0x1c
[   36.903034][  T282]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   36.903043][  T282]  f2fs_map_blocks+0xa2b/0x34e0
[   36.903055][  T282]  ? f2fs_do_map_lock+0x2e0/0x2e0
[   36.903064][  T282]  ? page_cache_sync_ra+0x250/0x2a0
[   36.903071][  T282]  ? f2fs_readdir+0x43e/0x970
[   36.903080][  T282]  ? xa_load+0x47d/0x490
[   36.903094][  T282]  f2fs_mpage_readpages+0xc02/0x1e20
[   36.911804][ T1784] 0 pages HighMem/MovableOnly
[   36.917428][  T282]  ? has_enough_free_blks+0x2d0/0x2d0
[   36.917445][  T282]  ? __mod_memcg_state+0xc0/0x210
[   36.922912][ T1784] 341386 pages reserved
[   36.926792][  T282]  ? xas_nomem+0x6b/0x1d0
[   36.934191][ T1784] 0 pages cma reserved
[   36.937007][  T282]  f2fs_readahead+0xfc/0x240
[   36.993829][  T282]  ? f2fs_set_data_page_dirty+0x6e0/0x6e0
[   36.999528][  T282]  read_pages+0x17b/0xb50
[   37.003842][  T282]  ? workingset_activation+0x250/0x250
[   37.009289][  T282]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   37.014815][  T282]  ? page_cache_ra_unbounded+0x790/0x790
[   37.020422][  T282]  ? lru_cache_add+0x15f/0x380
[   37.025161][  T282]  page_cache_ra_unbounded+0x638/0x790
[   37.030592][  T282]  ? avc_has_perm+0x168/0x3d0
[   37.035243][  T282]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[   37.041812][  T282]  ? do_wp_page+0x9d8/0xd00
[   37.046292][  T282]  ondemand_readahead+0x780/0xbc0
[   37.051290][  T282]  page_cache_sync_ra+0x250/0x2a0
[   37.056288][  T282]  f2fs_readdir+0x43e/0x970
[   37.060760][  T282]  ? f2fs_fill_dentries+0xc90/0xc90
[   37.065936][  T282]  ? __kasan_check_write+0x14/0x20
[   37.071020][  T282]  iterate_dir+0x25c/0x560
[   37.075544][  T282]  ? f2fs_fill_dentries+0xc90/0xc90
[   37.080719][  T282]  __se_sys_getdents64+0xf2/0x250
[   37.085738][  T282]  ? __x64_sys_getdents64+0x90/0x90
[   37.090912][  T282]  ? filldir+0x660/0x660
[   37.095139][  T282]  ? debug_smp_processor_id+0x17/0x20
[   37.100486][  T282]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   37.106533][  T282]  __x64_sys_getdents64+0x7b/0x90
[   37.111534][  T282]  do_syscall_64+0x31/0x40
[   37.115926][  T282]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   37.121797][  T282] RIP: 0033:0x7f2a3aab99b3
[   37.126186][  T282] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   37.145764][  T282] RSP: 002b:00007ffe0ceb34f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   37.154244][  T282] RAX: ffffffffffffffda RBX: 000055556c03f910 RCX: 00007f2a3aab99b3
[   37.162192][  T282] RDX: 0000000000008000 RSI: 000055556c03f940 RDI: 0000000000000005
[   37.170143][  T282] RBP: 000055556c03f940 R08: 00007f2a3ace5e20 R09: 0000000000000001
[   37.178091][  T282] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556c03f914
[   37.186045][  T282] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe0ceb57a0
[   37.194579][  T282] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0
[   37.206814][  T282] CPU: 0 PID: 282 Comm: syz-executor Not tainted syzkaller #0
[   37.214285][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.224333][  T282] Call Trace:
[   37.227619][  T282]  __dump_stack+0x21/0x24
[   37.231936][  T282]  dump_stack_lvl+0x1a7/0x208
[   37.236606][  T282]  ? f2fs_get_next_page_offset+0x760/0x760
[   37.242395][  T282]  ? show_regs_print_info+0x18/0x18
[   37.247576][  T282]  ? mark_page_accessed+0x334/0x6c0
[   37.252772][  T282]  dump_stack+0x15/0x1c
[   37.256917][  T282]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   37.262284][  T282]  f2fs_get_read_data_page+0x417/0x7a0
[   37.267779][  T282]  ? f2fs_get_block+0x140/0x140
[   37.272712][  T282]  ? __kasan_check_read+0x11/0x20
[   37.277723][  T282]  f2fs_find_data_page+0x18f/0x3f0
[   37.282817][  T282]  f2fs_readdir+0x457/0x970
[   37.287321][  T282]  ? f2fs_fill_dentries+0xc90/0xc90
[   37.292501][  T282]  ? __kasan_check_write+0x14/0x20
[   37.297585][  T282]  iterate_dir+0x25c/0x560
[   37.301980][  T282]  ? f2fs_fill_dentries+0xc90/0xc90
[   37.307255][  T282]  __se_sys_getdents64+0xf2/0x250
[   37.312256][  T282]  ? __x64_sys_getdents64+0x90/0x90
[   37.317430][  T282]  ? filldir+0x660/0x660
[   37.321652][  T282]  ? debug_smp_processor_id+0x17/0x20
[   37.327026][  T282]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   37.333071][  T282]  __x64_sys_getdents64+0x7b/0x90
[   37.338078][  T282]  do_syscall_64+0x31/0x40
[   37.342473][  T282]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   37.348343][  T282] RIP: 0033:0x7f2a3aab99b3
[   37.352735][  T282] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   37.372319][  T282] RSP: 002b:00007ffe0ceb34f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   37.380710][  T282] RAX: ffffffffffffffda RBX: 000055556c03f910 RCX: 00007f2a3aab99b3
[   37.388660][  T282] RDX: 0000000000008000 RSI: 000055556c03f940 RDI: 0000000000000005
[   37.396610][  T282] RBP: 000055556c03f940 R08: 00007f2a3ace5e20 R09: 0000000000000001
[   37.404557][  T282] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556c03f914
[   37.412509][  T282] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe0ceb57a0
[   37.426500][  T306] attempt to access beyond end of device
[   37.426500][  T306] loop2: rw=2049, want=45104, limit=40427
[   37.450903][ T1801] erofs: (device loop5): mounted with root inode @ nid 36.
[   37.472545][ T1801] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=46
[   37.491046][ T1801] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=overlay ino=3
[   37.500127][ T1801] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=overlay ino=3
[   37.624399][ T1821] FAULT_INJECTION: forcing a failure.
[   37.624399][ T1821] name failslab, interval 1, probability 0, space 0, times 0
[   37.680882][ T1821] CPU: 0 PID: 1821 Comm: syz.1.681 Not tainted syzkaller #0
[   37.688188][ T1821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.698237][ T1821] Call Trace:
[   37.701535][ T1821]  __dump_stack+0x21/0x24
[   37.705869][ T1821]  dump_stack_lvl+0x1a7/0x208
[   37.710546][ T1821]  ? show_regs_print_info+0x18/0x18
[   37.715743][ T1821]  dump_stack+0x15/0x1c
[   37.719895][ T1821]  should_fail+0x3ab/0x500
[   37.724309][ T1821]  ? btf_new_fd+0x1a7/0xa00
[   37.728814][ T1821]  __should_failslab+0xa4/0xe0
[   37.733584][ T1821]  should_failslab+0x9/0x20
[   37.738091][ T1821]  kmem_cache_alloc_trace+0x3a/0x2e0
[   37.743373][ T1821]  ? btf_new_fd+0x113/0xa00
[   37.747874][ T1821]  btf_new_fd+0x1a7/0xa00
[   37.752201][ T1821]  bpf_btf_load+0x5e/0x70
[   37.756525][ T1821]  __se_sys_bpf+0x4ea/0x740
[   37.761024][ T1821]  ? __x64_sys_bpf+0x90/0x90
[   37.765704][ T1821]  ? debug_smp_processor_id+0x17/0x20
[   37.771075][ T1821]  __x64_sys_bpf+0x7b/0x90
[   37.775488][ T1821]  do_syscall_64+0x31/0x40
[   37.779901][ T1821]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   37.785791][ T1821] RIP: 0033:0x7f30dcb73019
[   37.790303][ T1821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.809905][ T1821] RSP: 002b:00007f30db5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   37.818321][ T1821] RAX: ffffffffffffffda RBX: 00007f30dcdfafa0 RCX: 00007f30dcb73019
[   37.826291][ T1821] RDX: 0000000000000028 RSI: 0000200000000ec0 RDI: 0000000000000012
[   37.834259][ T1821] RBP: 00007f30db5cc090 R08: 0000000000000000 R09: 0000000000000000
[   37.842231][ T1821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.850198][ T1821] R13: 00007f30dcdfb038 R14: 00007f30dcdfafa0 R15: 00007fff5cef2558
[   37.982780][ T1823] EXT4-fs (loop6): Test dummy encryption mode enabled
[   37.989617][ T1823] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[   38.021129][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.050824][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.058255][ T1834] device bridge_slave_0 entered promiscuous mode
[   38.112260][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.120832][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.151329][ T1834] device bridge_slave_1 entered promiscuous mode
[   38.158016][ T1823] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal
[   38.275761][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.282841][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.290103][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.297176][ T1834] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.382175][ T1851] EXT4-fs (loop5): Test dummy encryption mode enabled
[   38.389009][ T1851] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   38.412057][  T306] device bridge_slave_1 left promiscuous mode
[   38.418225][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.446390][  T306] device bridge_slave_0 left promiscuous mode
[   38.466972][ T1851] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[   38.471279][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.489053][ T1851] System zones: 0-5
[   38.500601][  T306] device veth1_macvtap left promiscuous mode
[   38.500681][ T1851] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000004,
[   38.524914][  T306] device veth0_vlan left promiscuous mode
[   38.582328][ T1839] F2FS-fs (loop1): Test dummy encryption mode enabled
[   38.599634][ T1839] F2FS-fs (loop1): invalid crc value
[   38.661353][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[   38.690890][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[   38.706811][ T1839] F2FS-fs (loop1): Found nat_bits in checkpoint
[   38.720924][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1).
[   38.746437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.753835][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1).
[   38.771360][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.781312][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.791318][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   38.800414][ T1839] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   38.820852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   38.834619][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[   38.837842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.870873][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1).
[   38.887381][ T1839] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   38.893845][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.894975][  T300] uvcvideo: No valid video chain found.
[   38.901780][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.928282][ T1889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=1889 comm=syz.6.706
[   38.936814][  T300] usb 5-1: USB disconnect, device number 5
[   38.944339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   38.958990][ T1891] FAULT_INJECTION: forcing a failure.
[   38.958990][ T1891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   38.963691][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.981086][ T1891] CPU: 0 PID: 1891 Comm: syz.4.708 Not tainted syzkaller #0
[   38.981495][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.988362][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   38.988366][ T1891] Call Trace:
[   38.988385][ T1891]  __dump_stack+0x21/0x24
[   38.988399][ T1891]  dump_stack_lvl+0x1a7/0x208
[   38.995419][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.005422][ T1891]  ? thaw_kernel_threads+0x220/0x220
[   39.005432][ T1891]  ? show_regs_print_info+0x18/0x18
[   39.005441][ T1891]  dump_stack+0x15/0x1c
[   39.005448][ T1891]  should_fail+0x3ab/0x500
[   39.005461][ T1891]  should_fail_usercopy+0x1a/0x20
[   39.048909][ T1891]  _copy_from_user+0x20/0xd0
[   39.053530][ T1891]  bpf_prog_test_run_skb+0x206/0x1160
[   39.058882][ T1891]  ? __kasan_check_write+0x14/0x20
[   39.063967][ T1891]  ? fput_many+0x15a/0x1a0
[   39.068360][ T1891]  ? __bpf_prog_test_run_raw_tp+0x240/0x240
[   39.074231][ T1891]  bpf_prog_test_run+0x34a/0x3c0
[   39.079140][ T1891]  __se_sys_bpf+0x501/0x740
[   39.083616][ T1891]  ? __x64_sys_bpf+0x90/0x90
[   39.088182][ T1891]  ? debug_smp_processor_id+0x17/0x20
[   39.093528][ T1891]  __x64_sys_bpf+0x7b/0x90
[   39.097919][ T1891]  do_syscall_64+0x31/0x40
[   39.102309][ T1891]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   39.108174][ T1891] RIP: 0033:0x7f5898269019
[   39.112565][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.132146][ T1891] RSP: 002b:00007f5896cc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   39.140534][ T1891] RAX: ffffffffffffffda RBX: 00007f58984f0fa0 RCX: 00007f5898269019
[   39.148486][ T1891] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[   39.156441][ T1891] RBP: 00007f5896cc2090 R08: 0000000000000000 R09: 0000000000000000
[   39.164476][ T1891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.172425][ T1891] R13: 00007f58984f1038 R14: 00007f58984f0fa0 R15: 00007ffc457f6e38
[   39.181919][   T24] kauditd_printk_skb: 17 callbacks suppressed
[   39.181931][   T24] audit: type=1400 audit(1785923362.270:211): avc:  denied  { ioctl } for  pid=1888 comm="syz.6.706" path="socket:[21756]" dev="sockfs" ino=21756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.213530][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.221913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.229953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.239253][   T24] audit: type=1400 audit(1785923362.270:212): avc:  denied  { write } for  pid=1888 comm="syz.6.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.259107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.308712][ T1834] device veth0_vlan entered promiscuous mode
[   39.323217][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   39.333842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.342940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   39.351683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.359666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.367286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.385726][ T1834] device veth1_macvtap entered promiscuous mode
[   39.405393][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   39.419804][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.421997][   T24] audit: type=1400 audit(1785923362.500:213): avc:  denied  { create } for  pid=1903 comm="syz.6.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.441101][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.493996][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.510737][   T24] audit: type=1400 audit(1785923362.540:214): avc:  denied  { mmap_zero } for  pid=1903 comm="syz.6.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   39.521139][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.559274][   T24] audit: type=1400 audit(1785923362.540:215): avc:  denied  { mount } for  pid=1903 comm="syz.6.715" name="/" dev="ramfs" ino=21826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   39.583661][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.591952][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.633686][ T1905] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   40.237250][   T24] audit: type=1400 audit(1785923363.320:216): avc:  denied  { create } for  pid=1997 comm="syz.7.754" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[   40.280878][   T24] audit: type=1400 audit(1785923363.360:217): avc:  denied  { mount } for  pid=1997 comm="syz.7.754" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   40.304023][   T24] audit: type=1400 audit(1785923363.360:218): avc:  denied  { unmount } for  pid=1834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   40.325181][   T24] audit: type=1400 audit(1785923363.370:219): avc:  denied  { unmount } for  pid=1834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   40.407253][ T1988] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[   40.418685][ T1988] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.445538][   T24] audit: type=1400 audit(1785923363.530:220): avc:  denied  { mount } for  pid=2010 comm="syz.5.758" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   40.539327][ T2016] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   40.552917][ T1988] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz.4.751: Directory hole found for htree leaf block 0
[   40.585407][ T1988] EXT4-fs (loop4): re-mounted. Opts: (null)
[   40.593235][ T2016] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   40.641704][ T2025] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.648969][ T2025] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.894304][ T2030] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 64
[   41.053624][ T2063] FAT-fs (loop6): bogus number of FAT sectors
[   41.068120][ T2063] FAT-fs (loop6): Can't find a valid FAT filesystem
[   41.424519][ T2077] netlink: 176 bytes leftover after parsing attributes in process `syz.6.781'.
[   41.771468][  T305] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   42.023342][ T2108] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue
[   42.033399][ T2108] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   42.050833][  T305] usb 2-1: Using ep0 maxpacket: 32
[   42.170924][  T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.181236][  T305] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   42.250937][   T54] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   42.316585][ T2121] netlink: 'syz.7.804': attribute type 298 has an invalid length.
[   42.350937][  T305] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[   42.406250][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.414656][  T305] usb 2-1: Product: syz
[   42.418815][  T305] usb 2-1: Manufacturer: syz
[   42.423552][  T305] usb 2-1: SerialNumber: syz
[   42.640913][   T54] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   42.655166][   T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.677602][   T54] usb 5-1: config 0 descriptor??
[   42.900958][  T305] usb 2-1: MIDIStreaming interface descriptor not found
[   42.918443][  T305] usb 2-1: USB disconnect, device number 4
[   42.996784][ T2177] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[   43.014812][ T2177] EXT4-fs (loop6): Ignoring removed orlov option
[   43.042745][ T2189] netlink: 'syz.5.836': attribute type 1 has an invalid length.
[   43.055712][ T2177] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,init_itable,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[   43.490839][  T305] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   43.540709][ T2237] netlink: 67 bytes leftover after parsing attributes in process `syz.1.850'.
[   43.741253][  T305] usb 7-1: Using ep0 maxpacket: 16
[   43.860926][  T305] usb 7-1: config 1 has an invalid interface association descriptor of length 5, skipping
[   43.872012][  T305] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.882469][  T305] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[   43.893853][  T305] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[   43.905216][  T305] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   44.070967][  T305] usb 7-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[   44.094039][  T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.108909][  T305] usb 7-1: Product: syz
[   44.114760][  T305] usb 7-1: Manufacturer: syz
[   44.119624][  T305] usb 7-1: SerialNumber: syz
[   44.140977][ T2218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   44.216918][ T2268] EXT4-fs (loop7): Ignoring removed bh option
[   44.236598][ T2271] Illegal XDP return value 4294967282, expect packet loss!
[   44.244042][ T2268] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,grpquota,,errors=continue
[   44.254435][ T2268] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.290938][   T24] kauditd_printk_skb: 23 callbacks suppressed
[   44.290949][   T24] audit: type=1400 audit(1785923375.356:244): avc:  denied  { lock } for  pid=2267 comm="syz.7.864" path="/32/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.364660][   T24] audit: type=1400 audit(1785923375.446:245): avc:  denied  { write } for  pid=2283 comm="syz.7.868" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.407630][   T24] audit: type=1400 audit(1785923375.446:246): avc:  denied  { open } for  pid=2283 comm="syz.7.868" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.431294][   T24] audit: type=1400 audit(1785923375.446:247): avc:  denied  { ioctl } for  pid=2283 comm="syz.7.868" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.469345][   T24] audit: type=1400 audit(1785923375.546:248): avc:  denied  { write } for  pid=2287 comm="syz.1.871" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   44.550968][  T305] usb 7-1: MIDIStreaming interface descriptor not found
[   44.572636][  T305] usb 7-1: USB disconnect, device number 2
[   44.764098][ T2292] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   44.788100][   T24] audit: type=1400 audit(1785923375.866:249): avc:  denied  { rename } for  pid=2291 comm="syz.1.874" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.812034][  T535] udevd[535]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.982609][   T15] usb 5-1: USB disconnect, device number 6
[   45.049722][   T24] audit: type=1400 audit(1785923384.121:250): avc:  denied  { name_bind } for  pid=2307 comm="syz.4.879" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   45.072105][ T2308] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
[   45.119361][   T24] audit: type=1400 audit(1785923384.121:251): avc:  denied  { node_bind } for  pid=2307 comm="syz.4.879" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   45.245573][ T2314] EXT4-fs (loop1): Test dummy encryption mode enabled
[   45.317655][ T2314] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.882: inode has both inline data and extents flags
[   45.331117][ T2314] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.882: couldn't read orphan inode 15 (err -117)
[   45.343493][ T2314] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[   45.414959][ T2324] erofs: (device loop7): mounted with root inode @ nid 36.
[   46.277543][   T24] audit: type=1400 audit(1785923385.351:252): avc:  denied  { associate } for  pid=2352 comm="syz.6.898" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   46.331903][ T2350] EXT4-fs (loop4): Ignoring removed bh option
[   46.352528][ T2350] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,usrquota,noinit_itable,noblock_validity,errors=remount-ro,bh,
[   46.366676][ T2350] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.452073][ T2354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   46.630161][ T2383] device-mapper: ioctl: name not supplied when creating device
[   46.656168][   T24] audit: type=1400 audit(1785923385.641:253): avc:  denied  { getopt } for  pid=2379 comm="syz.6.908" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.452195][ T2401] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   47.470922][ T2401] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.489627][ T2431] binder: 2430:2431 unknown command 0
[   47.515529][ T2431] binder: 2430:2431 ioctl c0306201 200000000480 returned -22
[   47.733645][ T2442] EXT4-fs (loop6): re-mounted. Opts: 
[   47.791203][ T2446] exfat: Unknown parameter '�&��E�Ư�����~���B���
[   47.791203][ T2446] l�N���һ�>Lf�k��L)>�J���Z#�����B��|�n�YLj��f�t�3w4F?�T"W�����#��dT'
[   48.381354][    C0] blk_update_request: I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.392458][ T2459] FAT-fs (loop4): FAT read failed (blocknr 1)
[   48.415965][    C0] blk_update_request: I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.427078][  T283] FAT-fs (loop4): Directory bread(block 3) failed
[   48.434211][    C0] blk_update_request: I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.445489][  T283] FAT-fs (loop4): Directory bread(block 4) failed
[   48.449360][ T2472] EXT4-fs (loop6): Ignoring removed orlov option
[   48.452134][    C0] blk_update_request: I/O error, dev loop4, sector 20 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.458957][ T2472] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[   48.470485][  T283] FAT-fs (loop4): Directory bread(block 5) failed
[   48.484499][    C0] blk_update_request: I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.485239][ T2472] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,init_itable,user_xattr,nomblk_io_submit,,errors=continue
[   48.496190][  T283] FAT-fs (loop4): Directory bread(block 6) failed
[   48.511624][ T2472] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.525484][    C0] blk_update_request: I/O error, dev loop4, sector 28 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.545156][  T283] FAT-fs (loop4): Directory bread(block 7) failed
[   48.554376][    C0] blk_update_request: I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.565561][  T283] FAT-fs (loop4): Directory bread(block 8) failed
[   48.576249][    C0] blk_update_request: I/O error, dev loop4, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.587438][  T283] FAT-fs (loop4): Directory bread(block 9) failed
[   48.594052][    C0] blk_update_request: I/O error, dev loop4, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.606160][  T283] FAT-fs (loop4): Directory bread(block 10) failed
[   48.607155][ T2482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'.
[   48.612905][    C0] blk_update_request: I/O error, dev loop4, sector 44 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.633172][  T283] FAT-fs (loop4): Directory bread(block 11) failed
[   48.651192][  T283] FAT-fs (loop4): unable to read boot sector to mark fs as dirty
[   48.763176][ T2500] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.955: corrupted in-inode xattr
[   48.784112][ T2500] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.955: couldn't read orphan inode 15 (err -117)
[   48.826943][ T2500] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   48.998489][ T2505] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.005872][ T2505] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.016261][ T2505] device bridge_slave_0 entered promiscuous mode
[   49.031161][ T2505] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.038493][ T2505] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.049480][ T2505] device bridge_slave_1 entered promiscuous mode
[   49.109296][ T2520] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   49.138156][ T2530] input: syz0 as /devices/virtual/input/input8
[   49.139110][ T2520] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.166632][ T2520] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:404: inode #2: comm syz.6.962: No space for directory leaf checksum. Please run e2fsck -D.
[   49.182051][ T2520] EXT4-fs error (device loop6): __ext4_find_entry:1668: inode #2: comm syz.6.962: checksumming directory block 0
[   49.200587][ T2505] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.207691][ T2505] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.214973][ T2505] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.222054][ T2505] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.243276][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.251285][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.259482][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.291704][ T2505] device veth0_vlan entered promiscuous mode
[   49.304525][ T2505] device veth1_macvtap entered promiscuous mode
[   49.338566][   T24] kauditd_printk_skb: 16 callbacks suppressed
[   49.338580][   T24] audit: type=1400 audit(1785923388.401:270): avc:  denied  { mounton } for  pid=2505 comm="syz-executor" path="/root/syzkaller.ProqTR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   49.397601][ T2549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.970'.
[   49.645492][ T2552] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[   49.655366][  T615] device bridge_slave_1 left promiscuous mode
[   49.661616][  T615] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.675152][ T2552] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.689950][  T615] device bridge_slave_0 left promiscuous mode
[   49.801543][  T615] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.802468][ T2567] netlink: 64 bytes leftover after parsing attributes in process `syz.7.972'.
[   49.827300][  T615] device veth1_macvtap left promiscuous mode
[   49.833643][  T615] device veth0_vlan left promiscuous mode
[   50.459451][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.489140][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.501721][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.529904][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.553100][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.580307][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.593759][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.620581][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.632574][   T24] audit: type=1400 audit(1785923389.711:271): avc:  denied  { create } for  pid=2585 comm="syz.8.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   50.646045][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.658888][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.699488][   T24] audit: type=1400 audit(1785923389.711:272): avc:  denied  { setopt } for  pid=2585 comm="syz.8.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   50.720911][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.749830][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.756910][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.783075][ T2594] erofs: (device loop1): erofs_init_devices: extra devices don't match (ondisk 128, given 0)
[   50.785946][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.821143][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.021077][   T24] audit: type=1400 audit(1785923390.011:273): avc:  denied  { getopt } for  pid=2602 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.589429][   T24] audit: type=1400 audit(1785923390.311:274): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   51.900485][   T24] audit: type=1400 audit(1785923390.931:275): avc:  denied  { setopt } for  pid=2615 comm="syz.7.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.080499][ T2631] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[   52.413346][   T24] audit: type=1404 audit(1785923391.491:276): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   52.488185][   T24] audit: type=1400 audit(1785923391.531:277): avc:  denied  { connect } for  pid=2637 comm="syz.8.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   52.626814][   T24] audit: type=1400 audit(1785923391.651:278): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.720847][   T24] audit: type=1400 audit(1785923391.661:279): avc:  denied  { map_create } for  pid=2639 comm="syz.6.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   54.345999][   T24] kauditd_printk_skb: 174 callbacks suppressed
[   54.346010][   T24] audit: type=1400 audit(1785923393.421:454): avc:  denied  { sys_module } for  pid=2781 comm="syz.7.1071" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[   54.396643][   T24] audit: type=1400 audit(1785923393.451:455): avc:  denied  { module_request } for  pid=2781 comm="syz.7.1071" kmod="tty-ldisc-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[   54.440924][   T24] audit: type=1400 audit(1785923393.451:456): avc:  denied  { write } for  pid=2781 comm="syz.7.1071" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0
[   54.499428][   T24] audit: type=1400 audit(1785923393.461:457): avc:  denied  { read write } for  pid=1834 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   54.557349][   T24] audit: type=1400 audit(1785923393.461:458): avc:  denied  { create } for  pid=2780 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[   54.604941][   T24] audit: type=1400 audit(1785923393.461:459): avc:  denied  { prog_load } for  pid=2785 comm="syz.7.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   54.627470][   T24] audit: type=1400 audit(1785923393.471:460): avc:  denied  { map_create } for  pid=2785 comm="syz.7.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   54.680454][   T24] audit: type=1400 audit(1785923393.491:461): avc:  denied  { map_create } for  pid=2785 comm="syz.7.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   54.720867][   T24] audit: type=1400 audit(1785923393.491:462): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   54.760210][   T24] audit: type=1400 audit(1785923393.491:463): avc:  denied  { prog_load } for  pid=2785 comm="syz.7.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.239569][ T3195] syz.7.1262 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   59.353626][   T24] kauditd_printk_skb: 572 callbacks suppressed
[   59.353637][   T24] audit: type=1400 audit(1785923398.431:1036): avc:  denied  { read write } for  pid=1834 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   59.399253][   T24] audit: type=1400 audit(1785923398.441:1037): avc:  denied  { read write } for  pid=3203 comm="syz.7.1266" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   59.597273][   T24] audit: type=1400 audit(1785923398.671:1038): avc:  denied  { map_create } for  pid=3207 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.653666][   T24] audit: type=1400 audit(1785923398.731:1039): avc:  denied  { map_create } for  pid=3207 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.686072][   T24] audit: type=1400 audit(1785923398.731:1040): avc:  denied  { prog_load } for  pid=3207 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.723556][   T24] audit: type=1400 audit(1785923398.731:1041): avc:  denied  { prog_load } for  pid=3207 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.789432][   T24] audit: type=1400 audit(1785923398.861:1042): avc:  denied  { read write } for  pid=2505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   59.833958][   T24] audit: type=1400 audit(1785923398.871:1043): avc:  denied  { map_create } for  pid=3211 comm="syz.8.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.881181][   T24] audit: type=1400 audit(1785923398.871:1044): avc:  denied  { map_create } for  pid=3211 comm="syz.8.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   59.917335][   T24] audit: type=1400 audit(1785923398.871:1045): avc:  denied  { prog_load } for  pid=3211 comm="syz.8.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.651630][ T3319] overlayfs: unrecognized mount option "addr=127.0.0.1" or missing value
[   61.314511][ T3352] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1333'.
[   61.736874][ T3380] device bridge_slave_1 left promiscuous mode
[   61.743623][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.781075][ T3380] device bridge_slave_0 left promiscuous mode
[   61.787316][ T3380] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.004585][ T3387] device pim6reg1 entered promiscuous mode
[   62.396763][ T3426] caif0: tun_chr_ioctl cmd 2147767506
[   62.793009][ T3515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3515 comm=syz.1.1408
[   63.275944][ T3629] device syzkaller0 entered promiscuous mode
[   63.513862][ T3649] device syzkaller0 entered promiscuous mode
[   64.364462][   T24] kauditd_printk_skb: 675 callbacks suppressed
[   64.364474][   T24] audit: type=1400 audit(1785923403.441:1721): avc:  denied  { mounton } for  pid=3810 comm="syz.1.1550" path="/332/file0" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   64.440403][   T24] audit: type=1400 audit(1785923403.471:1722): avc:  denied  { read write } for  pid=2505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   64.508409][   T24] audit: type=1400 audit(1785923403.481:1723): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   64.544107][   T24] audit: type=1400 audit(1785923403.481:1724): avc:  denied  { mounton } for  pid=3814 comm="syz.8.1552" path="/161/sys" dev="tmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   64.588934][ T3845] binfmt_misc: register: failed to install interpreter file ./file0
[   64.607543][   T24] audit: type=1400 audit(1785923403.481:1725): avc:  denied  { read write } for  pid=3816 comm="syz.1.1553" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   64.648155][   T24] audit: type=1400 audit(1785923403.491:1726): avc:  denied  { read write } for  pid=3816 comm="syz.1.1553" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   64.685543][   T24] audit: type=1400 audit(1785923403.491:1727): avc:  denied  { read write } for  pid=2505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   64.724981][   T24] audit: type=1400 audit(1785923403.501:1728): avc:  denied  { read write } for  pid=3762 comm="syz.7.1526" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   64.775903][   T24] audit: type=1400 audit(1785923403.501:1729): avc:  denied  { read } for  pid=3818 comm="syz.8.1554" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[   64.841177][ T3889] audit: audit_backlog=65 > audit_backlog_limit=64
[   65.147568][ T3943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3943 comm=syz.8.1615
[   65.739188][ T3955] SELinux: security_context_str_to_sid(5���]�S9q#���) failed for (dev pstore, type pstore) errno=-22
[   66.007769][ T3994] FAULT_INJECTION: forcing a failure.
[   66.007769][ T3994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.021498][ T3994] CPU: 0 PID: 3994 Comm: syz.8.1636 Not tainted syzkaller #0
[   66.028966][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.039039][ T3994] Call Trace:
[   66.042349][ T3994]  __dump_stack+0x21/0x24
[   66.046686][ T3994]  dump_stack_lvl+0x1a7/0x208
[   66.051373][ T3994]  ? show_regs_print_info+0x18/0x18
[   66.056579][ T3994]  ? vfs_write+0xae4/0xd70
[   66.061007][ T3994]  dump_stack+0x15/0x1c
[   66.065168][ T3994]  should_fail+0x3ab/0x500
[   66.069594][ T3994]  should_fail_usercopy+0x1a/0x20
[   66.074635][ T3994]  _copy_from_user+0x20/0xd0
[   66.079231][ T3994]  __se_sys_bpf+0x1bb/0x740
[   66.083740][ T3994]  ? __x64_sys_bpf+0x90/0x90
[   66.088342][ T3994]  ? debug_smp_processor_id+0x17/0x20
[   66.093720][ T3994]  __x64_sys_bpf+0x7b/0x90
[   66.098144][ T3994]  do_syscall_64+0x31/0x40
[   66.102566][ T3994]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.108490][ T3994] RIP: 0033:0x7f23ba3f7019
[   66.112905][ T3994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.132546][ T3994] RSP: 002b:00007f23b8e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.140970][ T3994] RAX: ffffffffffffffda RBX: 00007f23ba67efa0 RCX: 00007f23ba3f7019
[   66.149377][ T3994] RDX: 000000000000000c RSI: 00002000000000c0 RDI: 000000000000000a
[   66.157371][ T3994] RBP: 00007f23b8e50090 R08: 0000000000000000 R09: 0000000000000000
[   66.165349][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.173335][ T3994] R13: 00007f23ba67f038 R14: 00007f23ba67efa0 R15: 00007ffe087ad268
[   66.688295][ T4030] FAULT_INJECTION: forcing a failure.
[   66.688295][ T4030] name failslab, interval 1, probability 0, space 0, times 0
[   66.701166][ T4030] CPU: 0 PID: 4030 Comm: syz.1.1653 Not tainted syzkaller #0
[   66.708540][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.718591][ T4030] Call Trace:
[   66.721874][ T4030]  __dump_stack+0x21/0x24
[   66.726187][ T4030]  dump_stack_lvl+0x1a7/0x208
[   66.730842][ T4030]  ? thaw_kernel_threads+0x220/0x220
[   66.736109][ T4030]  ? show_regs_print_info+0x18/0x18
[   66.741284][ T4030]  ? skb_put+0x10a/0x1f0
[   66.745500][ T4030]  dump_stack+0x15/0x1c
[   66.749630][ T4030]  should_fail+0x3ab/0x500
[   66.754036][ T4030]  ? sidtab_sid2str_get+0x137/0x2c0
[   66.759231][ T4030]  __should_failslab+0xa4/0xe0
[   66.764068][ T4030]  should_failslab+0x9/0x20
[   66.768564][ T4030]  __kmalloc_track_caller+0x5f/0x310
[   66.773835][ T4030]  ? sidtab_sid2str_put+0x2d4/0x690
[   66.779020][ T4030]  kmemdup+0x26/0x60
[   66.782895][ T4030]  sidtab_sid2str_get+0x137/0x2c0
[   66.787901][ T4030]  security_sid_to_context_core+0x2ac/0x480
[   66.793773][ T4030]  security_sid_to_context+0x33/0x40
[   66.799037][ T4030]  avc_audit_post_callback+0x1db/0x830
[   66.804510][ T4030]  ? avc_audit_pre_callback+0x290/0x290
[   66.810088][ T4030]  ? audit_log_start+0x840/0x840
[   66.815112][ T4030]  ? audit_log_untrustedstring+0xe6/0x100
[   66.820821][ T4030]  ? avc_audit_pre_callback+0x290/0x290
[   66.826380][ T4030]  common_lsm_audit+0x14a4/0x1850
[   66.831400][ T4030]  ? avc_audit_pre_callback+0x290/0x290
[   66.836922][ T4030]  ? ipv6_skb_to_auditdata+0xcd0/0xcd0
[   66.842367][ T4030]  ? kasan_set_track+0x5b/0x70
[   66.847111][ T4030]  ? ____kasan_slab_free+0x125/0x160
[   66.852378][ T4030]  ? __kasan_slab_free+0x11/0x20
[   66.857377][ T4030]  ? slab_free_freelist_hook+0xc5/0x190
[   66.862901][ T4030]  ? kmem_cache_free+0x100/0x2d0
[   66.867812][ T4030]  ? putname+0xfe/0x150
[   66.871971][ T4030]  ? do_sys_openat2+0x68e/0x750
[   66.876794][ T4030]  ? __x64_sys_openat+0x136/0x160
[   66.881797][ T4030]  ? do_syscall_64+0x31/0x40
[   66.886368][ T4030]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.892416][ T4030]  slow_avc_audit+0x1c4/0x240
[   66.897071][ T4030]  ? avc_get_hash_stats+0x180/0x180
[   66.902247][ T4030]  selinux_capable+0x244/0x3b0
[   66.907075][ T4030]  ? selinux_capset+0xf0/0xf0
[   66.911727][ T4030]  ? rw_verify_area+0x1c0/0x360
[   66.916563][ T4030]  ? vfs_write+0xae4/0xd70
[   66.920974][ T4030]  security_capable+0x77/0xb0
[   66.925627][ T4030]  capable+0x6d/0xe0
[   66.929497][ T4030]  bpf_btf_load+0x38/0x70
[   66.933800][ T4030]  __se_sys_bpf+0x4ea/0x740
[   66.938277][ T4030]  ? __x64_sys_bpf+0x90/0x90
[   66.942847][ T4030]  ? debug_smp_processor_id+0x17/0x20
[   66.948200][ T4030]  __x64_sys_bpf+0x7b/0x90
[   66.952612][ T4030]  do_syscall_64+0x31/0x40
[   66.957004][ T4030]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.962876][ T4030] RIP: 0033:0x7f30dcb73019
[   66.967361][ T4030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.986945][ T4030] RSP: 002b:00007f30db5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.995337][ T4030] RAX: ffffffffffffffda RBX: 00007f30dcdfafa0 RCX: 00007f30dcb73019
[   67.003286][ T4030] RDX: 0000000000000028 RSI: 0000200000000ec0 RDI: 0000000000000012
[   67.011331][ T4030] RBP: 00007f30db5cc090 R08: 0000000000000000 R09: 0000000000000000
[   67.019279][ T4030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.027226][ T4030] R13: 00007f30dcdfb038 R14: 00007f30dcdfafa0 R15: 00007fff5cef2558
[   67.493602][ T4076] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1674'.
[   68.322076][ T4119] device syzkaller0 entered promiscuous mode
[   68.954889][ T4203] netlink: 'syz.1.1732': attribute type 12 has an invalid length.
[   69.338812][ T4210] FAULT_INJECTION: forcing a failure.
[   69.338812][ T4210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.352586][ T4210] CPU: 1 PID: 4210 Comm: syz.8.1735 Not tainted syzkaller #0
[   69.359961][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   69.370159][ T4210] Call Trace:
[   69.373460][ T4210]  __dump_stack+0x21/0x24
[   69.377795][ T4210]  dump_stack_lvl+0x1a7/0x208
[   69.382478][ T4210]  ? show_regs_print_info+0x18/0x18
[   69.387675][ T4210]  ? vfs_write+0xae4/0xd70
[   69.392100][ T4210]  dump_stack+0x15/0x1c
[   69.396247][ T4210]  should_fail+0x3ab/0x500
[   69.400710][ T4210]  should_fail_usercopy+0x1a/0x20
[   69.405754][ T4210]  _copy_from_user+0x20/0xd0
[   69.410329][ T4210]  __se_sys_bpf+0x1bb/0x740
[   69.414810][ T4210]  ? __x64_sys_bpf+0x90/0x90
[   69.419386][ T4210]  ? debug_smp_processor_id+0x17/0x20
[   69.424781][ T4210]  __x64_sys_bpf+0x7b/0x90
[   69.429184][ T4210]  do_syscall_64+0x31/0x40
[   69.433587][ T4210]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   69.439545][ T4210] RIP: 0033:0x7f23ba3f7019
[   69.443941][ T4210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.463526][ T4210] RSP: 002b:00007f23b8e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   69.471917][ T4210] RAX: ffffffffffffffda RBX: 00007f23ba67efa0 RCX: 00007f23ba3f7019
[   69.480132][ T4210] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[   69.488088][ T4210] RBP: 00007f23b8e50090 R08: 0000000000000000 R09: 0000000000000000
[   69.496039][ T4210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.503988][ T4210] R13: 00007f23ba67f038 R14: 00007f23ba67efa0 R15: 00007ffe087ad268
[   69.513033][   T24] kauditd_printk_skb: 468 callbacks suppressed
[   69.513042][   T24] audit: type=1400 audit(69.548:2196): avc:  denied  { prog_load } for  pid=4215 comm="syz.6.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   69.540882][   T24] audit: type=1400 audit(69.548:2197): avc:  denied  { mounton } for  pid=4211 comm="syz.5.1736" path="/367" dev="tmpfs" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   69.567382][   T24] audit: type=1326 audit(69.568:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.5.1736" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32c7d8b019 code=0x0
[   69.596960][   T24] audit: type=1400 audit(69.578:2199): avc:  denied  { read write } for  pid=2505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   69.625577][ T4229] FAULT_INJECTION: forcing a failure.
[   69.625577][ T4229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.626553][   T24] audit: type=1400 audit(69.578:2200): avc:  denied  { prog_load } for  pid=4215 comm="syz.6.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   69.644101][ T4229] CPU: 1 PID: 4229 Comm: syz.6.1743 Not tainted syzkaller #0
[   69.658531][   T24] audit: type=1400 audit(69.578:2201): avc:  denied  { create } for  pid=4215 comm="syz.6.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   69.664315][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   69.664324][ T4229] Call Trace:
[   69.664342][ T4229]  __dump_stack+0x21/0x24
[   69.664350][ T4229]  dump_stack_lvl+0x1a7/0x208
[   69.664366][ T4229]  ? show_regs_print_info+0x18/0x18
[   69.683705][   T24] audit: type=1400 audit(69.598:2202): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   69.693473][ T4229]  ? vfs_write+0xae4/0xd70
[   69.693484][ T4229]  dump_stack+0x15/0x1c
[   69.693493][ T4229]  should_fail+0x3ab/0x500
[   69.693508][ T4229]  should_fail_usercopy+0x1a/0x20
[   69.697069][   T24] audit: type=1400 audit(69.608:2203): avc:  denied  { prog_load } for  pid=4219 comm="syz.8.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   69.701090][ T4229]  _copy_from_user+0x20/0xd0
[   69.701099][ T4229]  __se_sys_bpf+0x1bb/0x740
[   69.701108][ T4229]  ? __x64_sys_bpf+0x90/0x90
[   69.701121][ T4229]  ? debug_smp_processor_id+0x17/0x20
[   69.701136][ T4229]  __x64_sys_bpf+0x7b/0x90
[   69.706158][   T24] audit: type=1400 audit(69.608:2204): avc:  denied  { mounton } for  pid=4219 comm="syz.8.1739" path="/196/tracing" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   69.711057][ T4229]  do_syscall_64+0x31/0x40
[   69.711066][ T4229]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   69.711074][ T4229] RIP: 0033:0x7fa6dd8ae019
[   69.711083][ T4229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.711089][ T4229] RSP: 002b:00007fa6dc307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   69.711109][ T4229] RAX: ffffffffffffffda RBX: 00007fa6ddb35fa0 RCX: 00007fa6dd8ae019
[   69.711114][ T4229] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[   69.711120][ T4229] RBP: 00007fa6dc307090 R08: 0000000000000000 R09: 0000000000000000
[   69.711126][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.711131][ T4229] R13: 00007fa6ddb36038 R14: 00007fa6ddb35fa0 R15: 00007fff8b442db8
[   69.811470][ T4243] device syzkaller0 entered promiscuous mode
[   69.817203][   T24] audit: type=1400 audit(69.608:2205): avc:  denied  { prog_load } for  pid=4219 comm="syz.8.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   70.102280][ T4247] device syzkaller0 entered promiscuous mode
[   70.341235][ T4265] FAULT_INJECTION: forcing a failure.
[   70.341235][ T4265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.354478][ T4265] CPU: 1 PID: 4265 Comm: syz.7.1756 Not tainted syzkaller #0
[   70.361850][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.371906][ T4265] Call Trace:
[   70.375203][ T4265]  __dump_stack+0x21/0x24
[   70.379540][ T4265]  dump_stack_lvl+0x1a7/0x208
[   70.384224][ T4265]  ? thaw_kernel_threads+0x220/0x220
[   70.389512][ T4265]  ? vsnprintf+0x189d/0x1990
[   70.394114][ T4265]  ? show_regs_print_info+0x18/0x18
[   70.399324][ T4265]  dump_stack+0x15/0x1c
[   70.403674][ T4265]  should_fail+0x3ab/0x500
[   70.408115][ T4265]  should_fail_usercopy+0x1a/0x20
[   70.413419][ T4265]  _copy_to_user+0x20/0x90
[   70.417819][ T4265]  simple_read_from_buffer+0xe9/0x160
[   70.423174][ T4265]  proc_fail_nth_read+0x1a6/0x220
[   70.428287][ T4265]  ? proc_fault_inject_write+0x310/0x310
[   70.433910][ T4265]  ? rw_verify_area+0x1c0/0x360
[   70.438743][ T4265]  ? proc_fault_inject_write+0x310/0x310
[   70.444366][ T4265]  vfs_read+0x209/0xa50
[   70.448506][ T4265]  ? kernel_read+0x70/0x70
[   70.452904][ T4265]  ? __kasan_check_write+0x14/0x20
[   70.458018][ T4265]  ? mutex_lock+0x92/0xf0
[   70.462370][ T4265]  ? mutex_trylock+0xb0/0xb0
[   70.466959][ T4265]  ? __fget_files+0x2e1/0x340
[   70.471751][ T4265]  ? __fdget_pos+0x2d2/0x380
[   70.476347][ T4265]  ? ksys_read+0x70/0x260
[   70.480688][ T4265]  ksys_read+0x14a/0x260
[   70.484941][ T4265]  ? vfs_write+0xd70/0xd70
[   70.489360][ T4265]  ? debug_smp_processor_id+0x17/0x20
[   70.494729][ T4265]  __x64_sys_read+0x7b/0x90
[   70.499225][ T4265]  do_syscall_64+0x31/0x40
[   70.503645][ T4265]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   70.509542][ T4265] RIP: 0033:0x7f3b89d1284e
[   70.513958][ T4265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   70.533557][ T4265] RSP: 002b:00007f3b887aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   70.541957][ T4265] RAX: ffffffffffffffda RBX: 00007f3b887ab6c0 RCX: 00007f3b89d1284e
[   70.549941][ T4265] RDX: 000000000000000f RSI: 00007f3b887ab0a0 RDI: 0000000000000003
[   70.557911][ T4265] RBP: 00007f3b887ab090 R08: 0000000000000000 R09: 0000000000000000
[   70.565961][ T4265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.573939][ T4265] R13: 00007f3b89fda038 R14: 00007f3b89fd9fa0 R15: 00007ffef5020148
[   70.736538][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1776'.
[   71.415848][ T4370] sch_tbf: burst 0 is lower than device lo mtu (143) !
[   71.622223][ T4435] ip_tables: iptables: counters copy to user failed while replacing table
[   71.671459][ T4445] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1834'.
[   72.311490][ T4483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.318736][ T4483] IPv6: NLM_F_CREATE should be set when creating new route
[   72.325973][ T4483] IPv6: NLM_F_CREATE should be set when creating new route
[   73.625128][ T4601] FAULT_INJECTION: forcing a failure.
[   73.625128][ T4601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.645868][ T4601] CPU: 0 PID: 4601 Comm: syz.1.1902 Not tainted syzkaller #0
[   73.653344][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   73.663658][ T4601] Call Trace:
[   73.667026][ T4601]  __dump_stack+0x21/0x24
[   73.671334][ T4601]  dump_stack_lvl+0x1a7/0x208
[   73.675990][ T4601]  ? show_regs_print_info+0x18/0x18
[   73.681166][ T4601]  dump_stack+0x15/0x1c
[   73.685296][ T4601]  should_fail+0x3ab/0x500
[   73.689686][ T4601]  should_fail_usercopy+0x1a/0x20
[   73.694721][ T4601]  _copy_from_user+0x20/0xd0
[   73.699307][ T4601]  __se_sys_memfd_create+0x12b/0x3a0
[   73.704573][ T4601]  __x64_sys_memfd_create+0x5b/0x70
[   73.709752][ T4601]  do_syscall_64+0x31/0x40
[   73.714146][ T4601]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   73.720018][ T4601] RIP: 0033:0x7f30dcb73019
[   73.724415][ T4601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.744094][ T4601] RSP: 002b:00007f30db5cbe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   73.752491][ T4601] RAX: ffffffffffffffda RBX: 00000000000004ec RCX: 00007f30dcb73019
[   73.760438][ T4601] RDX: 00007f30db5cbee0 RSI: 0000000000000000 RDI: 00007f30dcc0a1ec
[   73.768407][ T4601] RBP: 0000200000000ac0 R08: 00000000ffffffff R09: 0000000000000000
[   73.776377][ T4601] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000500
[   73.784419][ T4601] R13: 00007f30db5cbee0 R14: 00007f30db5cbea0 R15: 0000200000000080
[   74.489369][ T4681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4681 comm=syz.8.1938
[   74.552747][   T24] kauditd_printk_skb: 714 callbacks suppressed
[   74.552759][   T24] audit: type=1400 audit(74.578:2920): avc:  denied  { read write } for  pid=2505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   74.625050][   T24] audit: type=1400 audit(74.588:2921): avc:  denied  { prog_load } for  pid=4685 comm="syz.5.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   74.660871][   T24] audit: type=1400 audit(74.588:2922): avc:  denied  { execmem } for  pid=4685 comm="syz.5.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   74.695513][   T24] audit: type=1400 audit(74.618:2923): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   74.759534][   T24] audit: type=1400 audit(74.618:2924): avc:  denied  { mount } for  pid=4685 comm="syz.5.1941" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0
[   74.815961][   T24] audit: type=1400 audit(74.628:2925): avc:  denied  { create } for  pid=4690 comm="syz.6.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[   74.870930][   T24] audit: type=1400 audit(74.658:2926): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   74.938150][   T24] audit: type=1400 audit(74.658:2927): avc:  denied  { read write } for  pid=4687 comm="syz.8.1940" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   75.000480][   T24] audit: type=1400 audit(74.698:2928): avc:  denied  { map_create } for  pid=4695 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   75.050471][   T24] audit: type=1400 audit(74.698:2929): avc:  denied  { prog_load } for  pid=4695 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   75.800609][ T4804] device syzkaller0 entered promiscuous mode
[   78.666336][ T5027] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   79.078647][ T5069] netlink: 'syz.7.2112': attribute type 4 has an invalid length.
[   79.153158][ T5070] netlink: 'syz.7.2112': attribute type 4 has an invalid length.
[   79.579802][   T24] kauditd_printk_skb: 442 callbacks suppressed
[   79.579812][   T24] audit: type=1400 audit(79.608:3372): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   79.687358][   T24] audit: type=1400 audit(79.618:3373): avc:  denied  { execmem } for  pid=5077 comm="syz.7.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   79.740866][   T24] audit: type=1400 audit(79.618:3374): avc:  denied  { execmem } for  pid=5079 comm="syz.1.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   79.778635][   T24] audit: type=1400 audit(79.648:3375): avc:  denied  { read write } for  pid=2505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   79.840056][   T24] audit: type=1400 audit(79.658:3376): avc:  denied  { read } for  pid=5079 comm="syz.1.2119" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0
[   79.900871][   T24] audit: type=1400 audit(79.658:3377): avc:  denied  { create } for  pid=5079 comm="syz.1.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[   79.950924][   T24] audit: type=1400 audit(79.658:3378): avc:  denied  { read } for  pid=5077 comm="syz.7.2118" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0
[   79.999190][ T5101] IPv6: syztnl1: Disabled Multicast RS
[   80.023254][   T24] audit: type=1400 audit(79.708:3379): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   80.086287][   T24] audit: type=1400 audit(79.708:3380): avc:  denied  { create } for  pid=5083 comm="syz.8.2116" dev="anon_inodefs" ino=30777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0
[   80.135621][   T24] audit: type=1400 audit(79.708:3381): avc:  denied  { read } for  pid=5083 comm="syz.8.2116" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[   82.000706][ T5240] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2187'.
[   82.063540][ T5240] device gretap0 entered promiscuous mode
[   83.230924][ T5345] netlink: 'syz.8.2235': attribute type 4 has an invalid length.
[   83.238676][ T5345] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2235'.
[   83.770158][ T5391] FAULT_INJECTION: forcing a failure.
[   83.770158][ T5391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.784228][ T5391] CPU: 1 PID: 5391 Comm: syz.8.2255 Not tainted syzkaller #0
[   83.791640][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   83.801696][ T5391] Call Trace:
[   83.804995][ T5391]  __dump_stack+0x21/0x24
[   83.809332][ T5391]  dump_stack_lvl+0x1a7/0x208
[   83.814012][ T5391]  ? show_regs_print_info+0x18/0x18
[   83.819212][ T5391]  ? vfs_write+0xae4/0xd70
[   83.823719][ T5391]  dump_stack+0x15/0x1c
[   83.827872][ T5391]  should_fail+0x3ab/0x500
[   83.832283][ T5391]  should_fail_usercopy+0x1a/0x20
[   83.837307][ T5391]  _copy_from_user+0x20/0xd0
[   83.841926][ T5391]  __se_sys_bpf+0x1bb/0x740
[   83.846435][ T5391]  ? __x64_sys_bpf+0x90/0x90
[   83.851016][ T5391]  ? debug_smp_processor_id+0x17/0x20
[   83.856374][ T5391]  __x64_sys_bpf+0x7b/0x90
[   83.860773][ T5391]  do_syscall_64+0x31/0x40
[   83.865169][ T5391]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   83.871037][ T5391] RIP: 0033:0x7f23ba3f7019
[   83.875457][ T5391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.895053][ T5391] RSP: 002b:00007f23b8e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   83.903547][ T5391] RAX: ffffffffffffffda RBX: 00007f23ba67efa0 RCX: 00007f23ba3f7019
[   83.911503][ T5391] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a
[   83.919628][ T5391] RBP: 00007f23b8e50090 R08: 0000000000000000 R09: 0000000000000000
[   83.927580][ T5391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.935618][ T5391] R13: 00007f23ba67f038 R14: 00007f23ba67efa0 R15: 00007ffe087ad268
[   84.136369][ T5459] device bridge_slave_0 left promiscuous mode
[   84.143295][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.163968][ T5459] device bridge_slave_1 left promiscuous mode
[   84.170258][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.688865][   T24] kauditd_printk_skb: 482 callbacks suppressed
[   84.688876][   T24] audit: type=1400 audit(84.718:3864): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   84.718643][   T24] audit: type=1400 audit(84.728:3865): avc:  denied  { map_create } for  pid=5519 comm="syz.6.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   84.737345][   T24] audit: type=1400 audit(84.728:3866): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   84.761006][   T24] audit: type=1400 audit(84.738:3867): avc:  denied  { create } for  pid=5521 comm="syz.6.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[   84.782144][   T24] audit: type=1400 audit(84.738:3868): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   84.816134][   T24] audit: type=1400 audit(84.748:3869): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   84.839835][   T24] audit: type=1400 audit(84.758:3870): avc:  denied  { mounton } for  pid=5525 comm="syz.6.2320" path="/395/config" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   84.861895][   T24] audit: type=1400 audit(84.758:3871): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   84.885308][   T24] audit: type=1400 audit(84.768:3872): avc:  denied  { read write } for  pid=5527 comm="syz.6.2321" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[   84.907986][   T24] audit: type=1400 audit(84.768:3873): avc:  denied  { read write } for  pid=594 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   85.678118][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2418'.
[   86.145570][ T5790] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2449'.
[   86.161244][ T5788] device syzkaller0 entered promiscuous mode
[   86.853888][ T5872] ==================================================================
[   86.862015][ T5872] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160
[   86.870169][ T5872] Read of size 8 at addr ffff8881156a26d8 by task syz.7.2486/5872
[   86.877962][ T5872] 
[   86.880302][ T5872] CPU: 1 PID: 5872 Comm: syz.7.2486 Not tainted syzkaller #0
[   86.887873][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.897929][ T5872] Call Trace:
[   86.901233][ T5872]  __dump_stack+0x21/0x24
[   86.905573][ T5872]  dump_stack_lvl+0x1a7/0x208
[   86.910270][ T5872]  ? show_regs_print_info+0x18/0x18
[   86.915485][ T5872]  ? thaw_kernel_threads+0x220/0x220
[   86.920784][ T5872]  print_address_description+0x7f/0x2c0
[   86.926340][ T5872]  ? tc_setup_flow_action+0x88e/0x3160
[   86.931806][ T5872]  kasan_report+0x100/0x140
[   86.936317][ T5872]  ? flow_action_cookie_create+0x28/0x90
[   86.941959][ T5872]  ? tc_setup_flow_action+0x88e/0x3160
[   86.947428][ T5872]  __asan_report_load8_noabort+0x14/0x20
[   86.953084][ T5872]  tc_setup_flow_action+0x88e/0x3160
[   86.958402][ T5872]  mall_replace_hw_filter+0x2db/0x8c0
[   86.963787][ T5872]  ? mall_set_parms+0x450/0x450
[   86.968652][ T5872]  ? tcf_exts_destroy+0xb0/0xb0
[   86.973605][ T5872]  ? pcpu_alloc+0xf8d/0x16c0
[   86.978211][ T5872]  ? mall_set_parms+0x1a0/0x450
[   86.983077][ T5872]  mall_change+0x546/0x770
[   86.987504][ T5872]  ? __kasan_check_write+0x14/0x20
[   86.992634][ T5872]  ? mall_get+0xa0/0xa0
[   86.996803][ T5872]  ? tcf_chain_tp_insert_unique+0x946/0xa70
[   87.002711][ T5872]  tc_new_tfilter+0x1487/0x1ab0
[   87.007576][ T5872]  ? mall_get+0xa0/0xa0
[   87.011752][ T5872]  ? tcf_gate_entry_destructor+0x20/0x20
[   87.017391][ T5872]  ? 0xffffffffa0034000
[   87.021558][ T5872]  ? security_capable+0x87/0xb0
[   87.026428][ T5872]  ? ns_capable+0x8c/0xf0
[   87.030771][ T5872]  ? netlink_net_capable+0x125/0x160
[   87.036066][ T5872]  ? tcf_gate_entry_destructor+0x20/0x20
[   87.041707][ T5872]  rtnetlink_rcv_msg+0x811/0xca0
[   87.046663][ T5872]  ? unwind_get_return_address+0x4d/0x90
[   87.052307][ T5872]  ? rtnetlink_bind+0x80/0x80
[   87.056999][ T5872]  ? stack_trace_save+0xa6/0xf0
[   87.061859][ T5872]  ? stack_trace_snprint+0xe0/0xe0
[   87.066984][ T5872]  ? avc_has_perm+0x168/0x3d0
[   87.071670][ T5872]  ? memcpy+0x56/0x70
[   87.075673][ T5872]  ? avc_has_perm+0x27f/0x3d0
[   87.080370][ T5872]  ? __kasan_slab_alloc+0xc9/0xe0
[   87.085410][ T5872]  ? avc_has_perm_noaudit+0x260/0x260
[   87.090789][ T5872]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   87.097042][ T5872]  ? selinux_nlmsg_lookup+0x398/0x430
[   87.102425][ T5872]  netlink_rcv_skb+0x1e9/0x430
[   87.107204][ T5872]  ? rtnetlink_bind+0x80/0x80
[   87.111895][ T5872]  ? netlink_ack+0xb30/0xb30
[   87.116496][ T5872]  ? __netlink_lookup+0x387/0x3b0
[   87.121539][ T5872]  rtnetlink_rcv+0x1c/0x20
[   87.125978][ T5872]  netlink_unicast+0x86c/0xa30
[   87.130760][ T5872]  netlink_sendmsg+0x949/0xb70
[   87.135534][ T5872]  ? netlink_getsockopt+0x530/0x530
[   87.140832][ T5872]  ? security_socket_sendmsg+0x82/0xa0
[   87.146303][ T5872]  ? netlink_getsockopt+0x530/0x530
[   87.151519][ T5872]  ____sys_sendmsg+0x5be/0x8f0
[   87.156296][ T5872]  ? __sys_sendmsg_sock+0x40/0x40
[   87.161416][ T5872]  ? import_iovec+0x7c/0xb0
[   87.165901][ T5872]  ___sys_sendmsg+0x236/0x2e0
[   87.170560][ T5872]  ? __sys_sendmsg+0x280/0x280
[   87.175312][ T5872]  ? alloc_file+0x82/0x580
[   87.179727][ T5872]  ? __fdget+0x1a1/0x230
[   87.183952][ T5872]  __x64_sys_sendmsg+0x201/0x2d0
[   87.188895][ T5872]  ? __kasan_check_write+0x14/0x20
[   87.193988][ T5872]  ? ___sys_sendmsg+0x2e0/0x2e0
[   87.198819][ T5872]  ? __kasan_check_read+0x11/0x20
[   87.204017][ T5872]  ? exit_to_user_mode_prepare+0x9a/0xa0
[   87.209729][ T5872]  do_syscall_64+0x31/0x40
[   87.214122][ T5872]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   87.219994][ T5872] RIP: 0033:0x7f3b89d52019
[   87.224390][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.244065][ T5872] RSP: 002b:00007f3b887ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   87.252457][ T5872] RAX: ffffffffffffffda RBX: 00007f3b89fd9fa0 RCX: 00007f3b89d52019
[   87.260409][ T5872] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004
[   87.268396][ T5872] RBP: 00007f3b89de900c R08: 0000000000000000 R09: 0000000000000000
[   87.276349][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.284302][ T5872] R13: 00007f3b89fda038 R14: 00007f3b89fd9fa0 R15: 00007ffef5020148
[   87.292254][ T5872] 
[   87.294562][ T5872] Allocated by task 5872:
[   87.298875][ T5872]  __kasan_kmalloc+0xd4/0x100
[   87.303538][ T5872]  __kmalloc+0x19f/0x330
[   87.307755][ T5872]  tcf_idr_create+0x5f/0x790
[   87.312319][ T5872]  tcf_idr_create_from_flags+0x61/0x70
[   87.317753][ T5872]  tcf_gact_init+0x2e6/0x560
[   87.322318][ T5872]  tcf_action_init_1+0x443/0x6d0
[   87.327251][ T5872]  tcf_action_init+0x227/0x780
[   87.332110][ T5872]  tcf_exts_validate+0x23c/0x540
[   87.337042][ T5872]  mall_set_parms+0x4a/0x450
[   87.341606][ T5872]  mall_change+0x47a/0x770
[   87.345997][ T5872]  tc_new_tfilter+0x1487/0x1ab0
[   87.350824][ T5872]  rtnetlink_rcv_msg+0x811/0xca0
[   87.355747][ T5872]  netlink_rcv_skb+0x1e9/0x430
[   87.360491][ T5872]  rtnetlink_rcv+0x1c/0x20
[   87.364887][ T5872]  netlink_unicast+0x86c/0xa30
[   87.369628][ T5872]  netlink_sendmsg+0x949/0xb70
[   87.374368][ T5872]  ____sys_sendmsg+0x5be/0x8f0
[   87.379109][ T5872]  ___sys_sendmsg+0x236/0x2e0
[   87.383760][ T5872]  __x64_sys_sendmsg+0x201/0x2d0
[   87.388953][ T5872]  do_syscall_64+0x31/0x40
[   87.393379][ T5872]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   87.399248][ T5872] 
[   87.401565][ T5872] Last potentially related work creation:
[   87.407262][ T5872]  kasan_save_stack+0x3a/0x60
[   87.411917][ T5872]  __kasan_record_aux_stack+0xd2/0x100
[   87.417350][ T5872]  kasan_record_aux_stack_noalloc+0xb/0x10
[   87.423134][ T5872]  call_rcu+0x11a/0x1090
[   87.427351][ T5872]  free_fib_info+0x57/0x90
[   87.431742][ T5872]  fib_create_info+0x12ad/0x1ed0
[   87.436657][ T5872]  fib_table_insert+0xc2/0x1d50
[   87.441484][ T5872]  fib_add_ifaddr+0x360/0xf90
[   87.446143][ T5872]  fib_netdev_event+0x22e/0x5b0
[   87.450983][ T5872]  raw_notifier_call_chain+0x90/0x100
[   87.456345][ T5872]  __dev_notify_flags+0x2f4/0x5b0
[   87.461352][ T5872]  dev_change_flags+0xe3/0x1a0
[   87.466094][ T5872]  do_setlink+0xb19/0x29a0
[   87.470487][ T5872]  rtnl_newlink+0x13e6/0x1830
[   87.475137][ T5872]  rtnetlink_rcv_msg+0x9e9/0xca0
[   87.480057][ T5872]  netlink_rcv_skb+0x1e9/0x430
[   87.484794][ T5872]  rtnetlink_rcv+0x1c/0x20
[   87.489184][ T5872]  netlink_unicast+0x86c/0xa30
[   87.493921][ T5872]  netlink_sendmsg+0x949/0xb70
[   87.498658][ T5872]  __sys_sendto+0x467/0x620
[   87.503130][ T5872]  __x64_sys_sendto+0xe5/0x100
[   87.507870][ T5872]  do_syscall_64+0x31/0x40
[   87.512262][ T5872]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   87.518128][ T5872] 
[   87.520437][ T5872] The buggy address belongs to the object at ffff8881156a2600
[   87.520437][ T5872]  which belongs to the cache kmalloc-256 of size 256
[   87.534463][ T5872] The buggy address is located 216 bytes inside of
[   87.534463][ T5872]  256-byte region [ffff8881156a2600, ffff8881156a2700)
[   87.547714][ T5872] The buggy address belongs to the page:
[   87.553354][ T5872] page:ffffea000455a880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1156a2
[   87.563571][ T5872] head:ffffea000455a880 order:1 compound_mapcount:0
[   87.570142][ T5872] flags: 0x4000000000010200(slab|head)
[   87.575598][ T5872] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200
[   87.584165][ T5872] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   87.592719][ T5872] page dumped because: kasan: bad access detected
[   87.599115][ T5872] page_owner tracks the page as allocated
[   87.604814][ T5872] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, ts 3655835756, free_ts 0
[   87.622064][ T5872]  prep_new_page+0x176/0x190
[   87.626633][ T5872]  get_page_from_freelist+0x225f/0x23f0
[   87.632156][ T5872]  __alloc_pages_nodemask+0x29a/0x640
[   87.637504][ T5872]  new_slab+0x84/0x3f0
[   87.641551][ T5872]  ___slab_alloc+0x2f8/0x4c0
[   87.646116][ T5872]  __slab_alloc+0x63/0xa0
[   87.650422][ T5872]  kmem_cache_alloc_trace+0x1a8/0x2e0
[   87.655788][ T5872]  inode_doinit_use_xattr+0x5d/0x400
[   87.661053][ T5872]  inode_doinit_with_dentry+0x93a/0xd70
[   87.666836][ T5872]  selinux_d_instantiate+0x27/0x40
[   87.671950][ T5872]  security_d_instantiate+0x9e/0xf0
[   87.677143][ T5872]  d_splice_alias+0x6d/0x390
[   87.681709][ T5872]  kernfs_iop_lookup+0x2c5/0x310
[   87.686620][ T5872]  __lookup_slow+0x2b8/0x410
[   87.691191][ T5872]  lookup_slow+0x57/0x70
[   87.695409][ T5872]  walk_component+0x326/0x460
[   87.700056][ T5872] page_owner free stack trace missing
[   87.705484][ T5872] 
[   87.707784][ T5872] Memory state around the buggy address:
[   87.713390][ T5872]  ffff8881156a2580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   87.721427][ T5872]  ffff8881156a2600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   87.729467][ T5872] >ffff8881156a2680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[   87.737502][ T5872]                                                     ^
[   87.744410][ T5872]  ffff8881156a2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   87.752462][ T5872]  ffff8881156a2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   87.760505][ T5872] ==================================================================
[   87.768542][ T5872] Disabling lock debugging due to kernel taint
Jan  1 00:01:27 syzkaller kern.alert kernel: [   87.599115][ T5872] page_owner tracks the page as allocated
Jan  1 00:01:27 syzkaller kern.alert kernel: [   87.604814][ T5872] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, ts 3655835756, free_ts 0
Jan  1 00:01:27 syzkaller kern.alert kernel: [   87.700056][ T5872] page_owner free stack trace missing