last executing test programs:

52.960596073s ago: executing program 32 (id=147):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

49.979309162s ago: executing program 0 (id=229):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000001740)=""/44, 0x2c}], 0x1}}], 0x2, 0x22003, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

49.815146135s ago: executing program 0 (id=235):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
umount2(&(0x7f0000000000)='./file0\x00', 0x3)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

49.706613817s ago: executing program 0 (id=238):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8)
futimesat(r2, 0x0, 0x0)

49.649943638s ago: executing program 0 (id=242):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1222068, &(0x7f0000000bc0)=ANY=[], 0x1, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000)

49.501497051s ago: executing program 0 (id=247):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))

49.327706484s ago: executing program 0 (id=250):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)

49.327581504s ago: executing program 33 (id=250):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)

15.535364657s ago: executing program 6 (id=994):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/177)

15.522246807s ago: executing program 6 (id=995):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18)
pipe(&(0x7f0000000040))

15.507235407s ago: executing program 6 (id=996):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0)
preadv(r2, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4112, 0x1010}], 0x1, 0xf5, 0x0)

15.38737092s ago: executing program 6 (id=997):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080), 0x100000, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

15.084640825s ago: executing program 6 (id=998):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18)
epoll_create1(0x0)

14.455144568s ago: executing program 6 (id=1001):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x4a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x42f9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc045, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x501f, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x40000003, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0xe58b, 0xf, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c)

14.426549478s ago: executing program 34 (id=1001):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x4a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x42f9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc045, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x501f, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x40000003, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0xe58b, 0xf, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c)

10.525108024s ago: executing program 3 (id=1131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)

10.506043305s ago: executing program 3 (id=1132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20)

10.505658925s ago: executing program 3 (id=1133):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.472770005s ago: executing program 3 (id=1134):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

10.23041862s ago: executing program 3 (id=1136):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

9.888271967s ago: executing program 3 (id=1137):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000001"], 0x3c}, 0x1, 0x11}, 0x0)

9.848546398s ago: executing program 35 (id=1137):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000001"], 0x3c}, 0x1, 0x11}, 0x0)

6.548098052s ago: executing program 5 (id=1227):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0xfffc, 0xc0000000, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}}}, 0x108)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000000140)=0x28)

6.495178103s ago: executing program 5 (id=1228):
unshare(0x62000000)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f77657865632c666c7573682c0080516c70efb8393d556bfa005c046dfa9dad67949ee8d75f5dd45d3c4aeb0378db53541562f99c8ea156ade8fb70cf60ab625a95dede96f279f99361a1b969a7cc504bce0c58051d4ae536c289718466872b19abab0eae17a8d85b57567f2757655a5adba35eb3d8a05fb05539c64a7a2b89f108c554d52a9e869fdbfe722358223f69f0b29f68a5868c126004c28806a2b2e11e8443a202dad1d6592c4a0c55e70e28523a21bdc15b5f9e0db61b436f85fac96cf428bb2c67e927db1849e393893994c1805ff979bf32fde070b97432b8377e0c93f93eac1ab6578b08e86dbc40d6c16df7410311d0eb3f3c8aee84c44c2b47777d64fa5a90fdbabfdd8acf451ff913b732a3690e08b3d1d628c32de708bf04e7e51388c364483c38179c302ddf8a81bb316c29b64b80bcc39eb59f2ff3a147bef4500f0a25899b4d7a525adbb5c25124198ddfeabc5458be5933b0bd1932e653a002693faca127929cab00983c4555dc3bfbf48e18d50b183445197f90f4c16f78eaafa0a1a35cab02e51133a441f3aacd7992b76980e43fa256372167fc834d56ef09397a0ba44d0138c9638dc12a99e8b3b6e2a9"], 0x1, 0x11a3, &(0x7f0000001280)="$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")
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x100, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x48)

6.428595704s ago: executing program 5 (id=1229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x29)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
stat(0x0, 0x0)

6.409445485s ago: executing program 5 (id=1230):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x80cc88, &(0x7f0000000ec0)={[{@fmask={'fmask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)

6.323234877s ago: executing program 5 (id=1231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0xa0b, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100))

6.285839067s ago: executing program 5 (id=1232):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.257236818s ago: executing program 36 (id=1232):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.715061988s ago: executing program 9 (id=1233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

5.678251379s ago: executing program 9 (id=1243):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e04, @loopback}, 0x10)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

5.61526407s ago: executing program 9 (id=1244):
syz_mount_image$fuse(0x0, 0x0, 0xa0, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[], 0x24, 0x2)

5.61490333s ago: executing program 9 (id=1245):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

5.372927425s ago: executing program 9 (id=1247):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200)
rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./bus\x00')

5.173900649s ago: executing program 9 (id=1248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.173707069s ago: executing program 37 (id=1248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.1232062s ago: executing program 7 (id=1253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1)

4.879108475s ago: executing program 7 (id=1258):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

3.615436449s ago: executing program 1 (id=1284):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x16)
truncate(&(0x7f0000000080)='./file1\x00', 0xc1a)

3.564534021s ago: executing program 2 (id=1285):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="47880010dfffffffffff05"], 0x1c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)

3.474879332s ago: executing program 2 (id=1287):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002000"], 0x138)

3.461174402s ago: executing program 7 (id=1258):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

2.732655067s ago: executing program 1 (id=1288):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000200))

2.664344668s ago: executing program 2 (id=1289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f801800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)

2.605017289s ago: executing program 2 (id=1290):
r0 = socket(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4a23, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3c1d, 0x4)
sendfile(r0, r1, 0x0, 0xb)

2.536409781s ago: executing program 2 (id=1291):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0)

2.01863441s ago: executing program 8 (id=1298):
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
setresuid(r0, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000300)=0xffffffff, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x2, @rand_addr=0x64010102}, 0x10)

1.961660472s ago: executing program 8 (id=1299):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22082, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffc}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.889425533s ago: executing program 4 (id=1301):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
setitimer(0x0, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0xea60}}, &(0x7f0000000180))
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000080e0bffff00000000000109022400010000300c09040006010300020409210000000122080009058103000200fe09f671a106f9fc73e32e5a659148b47df13da1858a35582d1b25a4f2bf24652b329993ec08"], 0x0)

1.828597814s ago: executing program 7 (id=1258):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

1.743414206s ago: executing program 8 (id=1302):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0))

1.729501776s ago: executing program 8 (id=1303):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x14000d21)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000000)=""/39, 0x27)

1.710480037s ago: executing program 8 (id=1304):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r1, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1)

1.680356297s ago: executing program 8 (id=1305):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a02710000000b3"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

1.199942937s ago: executing program 7 (id=1258):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

760.588985ms ago: executing program 2 (id=1306):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

629.493798ms ago: executing program 1 (id=1307):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f00000001c0), 0x4)

566.814919ms ago: executing program 4 (id=1308):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

512.05632ms ago: executing program 4 (id=1309):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

509.49896ms ago: executing program 1 (id=1310):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x2, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8)
r0 = gettid()
tkill(r0, 0x11)
rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))

492.63931ms ago: executing program 1 (id=1311):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000400)='./file3\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

488.19632ms ago: executing program 4 (id=1312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

473.661631ms ago: executing program 1 (id=1313):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)

407.924052ms ago: executing program 4 (id=1314):
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @adiantum, 0x0, '\x00', @c})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

395.843922ms ago: executing program 4 (id=1315):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "4663b08d"}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f0000000340), 0xc)

0s ago: executing program 7 (id=1258):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

kernel console output (not intermixed with test programs):

0.40
[   47.493091][   T28] audit: type=1400 audit(1757112300.618:4588): avc:  denied  { watch watch_reads } for  pid=2097 comm="syz.1.507" path="/67/file2/file2" dev="loop1" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   47.521011][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.521036][   T24] usb 6-1: Product: syz
[   47.521047][   T24] usb 6-1: Manufacturer: syz
[   47.521059][   T24] usb 6-1: SerialNumber: syz
[   47.653532][   T19] usb 3-1: USB disconnect, device number 7
[   47.660190][   T19] usblp0: removed
[   47.689880][    T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   47.740955][   T24] usb 6-1: 0:2 : does not exist
[   47.747701][   T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   47.759510][   T24] usb 6-1: USB disconnect, device number 5
[   47.869866][  T335] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   47.870956][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.887543][    T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.897198][    T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   47.906279][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   47.914289][    T6] usb 4-1: SerialNumber: syz
[   47.970203][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   48.049846][  T335] usb 7-1: Using ep0 maxpacket: 16
[   48.056062][  T335] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.066171][  T335] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   48.076409][  T335] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   48.085475][  T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.093479][  T335] usb 7-1: Product: syz
[   48.097631][  T335] usb 7-1: Manufacturer: syz
[   48.102235][  T335] usb 7-1: SerialNumber: syz
[   48.171181][ T2113] loop2: detected capacity change from 0 to 1024
[   48.182899][ T2113] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.513: bg 0: block 10: padding at end of block bitmap is not set
[   48.197383][ T2113] Quota error (device loop2): write_blk: dquota write failed
[   48.204864][ T2113] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[   48.214122][ T2113] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   48.224241][ T2113] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.513: Failed to acquire dquot type 0
[   48.235677][ T2113] Quota error (device loop2): write_blk: dquota write failed
[   48.243196][ T2113] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[   48.252405][ T2113] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.513: Failed to acquire dquot type 0
[   48.263786][ T2113] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.513: Freeing blocks not in datazone - block = 0, count = 4096
[   48.277390][ T2113] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.513: Failed to acquire dquot type 0
[   48.288821][ T2113] EXT4-fs (loop2): 1 orphan inode deleted
[   48.294661][ T2113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   48.327542][  T287] EXT4-fs (loop2): unmounting filesystem.
[   48.371275][ T2126] loop5: detected capacity change from 0 to 128
[   48.474855][ T2142] loop1: detected capacity change from 0 to 1024
[   48.480617][ T2144] netlink: 'syz.5.528': attribute type 3 has an invalid length.
[   48.483713][ T2142] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.527: bg 0: block 10: padding at end of block bitmap is not set
[   48.492783][ T2144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.528'.
[   48.503967][ T2142] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.527: Failed to acquire dquot type 0
[   48.519172][  T335] usb 7-1: cannot find UAC_HEADER
[   48.525102][ T2142] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.527: Failed to acquire dquot type 0
[   48.538201][  T335] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[   48.539657][    T6] usb 4-1: 0:2 : does not exist
[   48.551763][ T2142] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.527: Freeing blocks not in datazone - block = 0, count = 4096
[   48.564910][  T335] usb 7-1: USB disconnect, device number 3
[   48.568764][ T2142] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.527: Failed to acquire dquot type 0
[   48.574653][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   48.584145][    T6] usb 4-1: USB disconnect, device number 5
[   48.604087][ T2142] EXT4-fs (loop1): 1 orphan inode deleted
[   48.619947][ T2142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   48.683440][  T284] EXT4-fs (loop1): unmounting filesystem.
[   48.687253][ T2153] input: syz1 as /devices/virtual/input/input7
[   48.809886][  T402] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   48.811145][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.000960][  T402] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   49.013946][  T402] usb 3-1: config 1 interface 0 has no altsetting 0
[   49.021250][  T402] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   49.029994][  T633] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   49.030383][  T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   49.045796][  T402] usb 3-1: SerialNumber: syz
[   49.175850][ T2169] loop6: detected capacity change from 0 to 40427
[   49.184147][ T2169] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   49.192004][ T2169] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   49.200998][ T2169] F2FS-fs (loop6): invalid crc value
[   49.207536][ T2169] F2FS-fs (loop6): Found nat_bits in checkpoint
[   49.221018][  T633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.232613][  T633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.240681][ T2169] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   49.242851][  T633] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   49.249441][ T2169] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   49.264621][  T633] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   49.279337][  T633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.288694][  T633] usb 6-1: config 0 descriptor??
[   49.321851][ T1630] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   49.331274][ T1630] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   49.616796][ T2182] loop3: detected capacity change from 0 to 1024
[   49.627287][ T2184] loop1: detected capacity change from 0 to 512
[   49.649188][ T2178] loop6: detected capacity change from 0 to 40427
[   49.656952][ T2182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.543: bg 0: block 10: padding at end of block bitmap is not set
[   49.682314][  T402] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   49.698584][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.701408][ T2184] EXT4-fs (loop1): orphan cleanup on readonly fs
[   49.709869][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.723528][ T2184] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[   49.723789][ T2182] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.543: Failed to acquire dquot type 0
[   49.743824][ T2184] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   49.759060][ T2178] F2FS-fs (loop6): invalid crc value
[   49.764787][ T2184] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.544: attempt to clear invalid blocks 2 len 1
[   49.790529][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.798568][ T2184] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.544: invalid indirect mapped block 1819239214 (level 0)
[   49.813022][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.821221][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.829432][ T2178] F2FS-fs (loop6): Found nat_bits in checkpoint
[   49.836217][ T2184] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.544: invalid indirect mapped block 1819239214 (level 1)
[   49.851008][ T2182] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.543: Failed to acquire dquot type 0
[   49.862415][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.879907][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.897914][ T2184] EXT4-fs (loop1): 1 truncate cleaned up
[   49.906028][ T2182] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.543: Freeing blocks not in datazone - block = 0, count = 4096
[   49.936150][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.939997][ T2184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   49.944040][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   49.960510][ T2182] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.543: Failed to acquire dquot type 0
[   49.993910][ T2182] EXT4-fs (loop3): 1 orphan inode deleted
[   49.999702][ T2182] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   50.010959][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   50.018417][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   50.029932][ T2178] F2FS-fs (loop6): Start checkpoint disabled!
[   50.056955][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   50.074980][ T2178] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   50.084002][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   50.103074][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   50.140325][  T633] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[   50.149893][  T284] EXT4-fs (loop1): unmounting filesystem.
[   50.188726][  T633] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[   50.224273][   T19] usb 3-1: USB disconnect, device number 8
[   50.234276][   T19] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   50.250039][  T633] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   50.271958][  T283] EXT4-fs (loop3): unmounting filesystem.
[   50.296540][ T2208] device bridge0 entered promiscuous mode
[   50.306158][ T2208] device macsec1 entered promiscuous mode
[   50.319490][ T2208] bridge0: port 3(macsec1) entered blocking state
[   50.323303][  T633] usb 6-1: USB disconnect, device number 6
[   50.336165][ T2208] bridge0: port 3(macsec1) entered disabled state
[   50.368377][ T2213] fido_id[2213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[   50.387422][ T2208] device bridge0 left promiscuous mode
[   50.437922][ T1548] kworker/u4:156: attempt to access beyond end of device
[   50.437922][ T1548] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   50.536091][ T2232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'.
[   50.554551][ T2232] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.572291][ T2232] device bridge_slave_1 left promiscuous mode
[   50.601324][ T2232] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.611507][ T2235] netlink: 'syz.5.553': attribute type 4 has an invalid length.
[   50.620253][ T2235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.553'.
[   50.673367][ T2243] loop6: detected capacity change from 0 to 512
[   50.689874][  T335] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   50.705123][ T2243] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   50.726088][ T2243] EXT4-fs (loop6): invalid journal inode
[   50.738457][ T2243] EXT4-fs (loop6): can't get journal size
[   50.755427][ T2243] EXT4-fs (loop6): 1 truncate cleaned up
[   50.782108][ T2243] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   50.869405][ T2265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'.
[   50.878462][  T335] usb 4-1: Using ep0 maxpacket: 16
[   50.890725][  T335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.893050][ T2247] loop2: detected capacity change from 0 to 40427
[   50.907574][  T335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   50.950726][  T335] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   50.962184][ T2247] F2FS-fs (loop2): Found nat_bits in checkpoint
[   50.979901][  T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.989979][  T335] usb 4-1: Product: syz
[   50.994156][  T335] usb 4-1: Manufacturer: syz
[   51.008908][  T335] usb 4-1: SerialNumber: syz
[   51.012385][ T2247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   51.049607][  T999] EXT4-fs (loop6): unmounting filesystem.
[   51.055978][   T28] kauditd_printk_skb: 87 callbacks suppressed
[   51.055992][   T28] audit: type=1400 audit(1757112304.188:4654): avc:  denied  { read } for  pid=2246 comm="syz.2.555" path="/84/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   51.061225][ T2280] loop5: detected capacity change from 0 to 2048
[   51.091690][  T287] syz-executor: attempt to access beyond end of device
[   51.091690][  T287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   51.108431][   T28] audit: type=1400 audit(1757112304.238:4655): avc:  denied  { create } for  pid=2281 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   51.129541][   T28] audit: type=1400 audit(1757112304.238:4656): avc:  denied  { module_request } for  pid=2281 comm="syz.6.564" kmod="net-pf-41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   51.156396][ T2280] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   51.200500][   T28] audit: type=1400 audit(1757112304.318:4657): avc:  denied  { read } for  pid=2287 comm="syz.2.566" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.236237][   T28] audit: type=1400 audit(1757112304.348:4658): avc:  denied  { open } for  pid=2287 comm="syz.2.566" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.269871][  T633] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   51.275202][   T28] audit: type=1400 audit(1757112304.348:4659): avc:  denied  { ioctl } for  pid=2287 comm="syz.2.566" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.302587][   T28] audit: type=1400 audit(1757112304.398:4660): avc:  denied  { remove_name } for  pid=2279 comm="syz.5.565" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.325873][   T28] audit: type=1400 audit(1757112304.398:4661): avc:  denied  { unlink } for  pid=2279 comm="syz.5.565" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   51.356624][  T743] EXT4-fs (loop5): unmounting filesystem.
[   51.396851][ T2297] loop6: detected capacity change from 0 to 256
[   51.422493][ T2297] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   51.432546][   T28] audit: type=1400 audit(1757112304.558:4662): avc:  denied  { setopt } for  pid=2300 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.435514][ T2297] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[   51.453002][  T335] usb 4-1: cannot find UAC_HEADER
[   51.463724][ T2297] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[   51.476904][  T335] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   51.479833][   T28] audit: type=1400 audit(1757112304.588:4663): avc:  denied  { write } for  pid=2300 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.510611][  T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.529265][  T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.534201][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   51.549454][  T633] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   51.555910][  T335] usb 4-1: USB disconnect, device number 6
[   51.576756][  T633] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   51.602552][  T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.630894][  T633] usb 2-1: config 0 descriptor??
[   51.793638][ T2308] loop6: detected capacity change from 0 to 40427
[   51.813056][ T2308] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   51.827376][ T2308] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   51.851981][ T2308] F2FS-fs (loop6): Found nat_bits in checkpoint
[   51.897165][ T2308] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   51.904411][ T2308] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   51.962113][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   51.962136][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   51.970374][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   51.978007][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   51.999965][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   52.007826][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   52.016172][  T999] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   52.061655][  T633] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xe
[   52.083303][  T633] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[   52.091610][  T633] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[   52.107081][  T633] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   52.151907][ T2325] loop3: detected capacity change from 0 to 2048
[   52.206732][ T2325]  loop3: p1 < > p4
[   52.211931][ T2325] loop3: p4 size 8388608 extends beyond EOD, truncated
[   52.360741][   T19] usb 2-1: USB disconnect, device number 8
[   52.468001][ T2360] loop2: detected capacity change from 0 to 256
[   52.494913][ T2360] FAT-fs (loop2): Directory bread(block 64) failed
[   52.509847][ T2360] FAT-fs (loop2): Directory bread(block 65) failed
[   52.516421][ T2360] FAT-fs (loop2): Directory bread(block 66) failed
[   52.543763][ T2360] FAT-fs (loop2): Directory bread(block 67) failed
[   52.564887][ T2360] FAT-fs (loop2): Directory bread(block 68) failed
[   52.572859][ T2360] FAT-fs (loop2): Directory bread(block 69) failed
[   52.582385][ T2360] FAT-fs (loop2): Directory bread(block 70) failed
[   52.588942][ T2360] FAT-fs (loop2): Directory bread(block 71) failed
[   52.596008][ T2360] FAT-fs (loop2): Directory bread(block 72) failed
[   52.602919][ T2360] FAT-fs (loop2): Directory bread(block 73) failed
[   52.809872][  T633] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   52.962131][ T2391] loop1: detected capacity change from 0 to 128
[   52.979124][ T2391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   52.991151][ T2391] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.001650][    T6] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   53.009523][  T633] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   53.022584][  T633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.044872][  T633] usb 6-1: config 0 descriptor??
[   53.054588][  T284] EXT4-fs (loop1): unmounting filesystem.
[   53.072732][ T2398] netlink: 204 bytes leftover after parsing attributes in process `syz.1.612'.
[   53.200301][    T6] usb 7-1: Using ep0 maxpacket: 16
[   53.205399][ T2420] loop3: detected capacity change from 0 to 512
[   53.207930][    T6] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.212638][ T2420] EXT4-fs: Ignoring removed oldalloc option
[   53.226493][    T6] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.238407][    T6] usb 7-1: config 0 interface 0 has no altsetting 0
[   53.258320][ T2420] EXT4-fs (loop3): 1 truncate cleaned up
[   53.258652][    T6] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   53.273168][ T2420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   53.273210][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.312613][  T283] EXT4-fs (loop3): unmounting filesystem.
[   53.321892][    T6] usb 7-1: config 0 descriptor??
[   53.353684][ T2429] netlink: 76 bytes leftover after parsing attributes in process `syz.3.626'.
[   53.459907][   T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   53.638032][ T2460] device veth0_to_bridge entered promiscuous mode
[   53.645440][ T2459] device veth0_to_bridge left promiscuous mode
[   53.651687][   T19] usb 2-1: Using ep0 maxpacket: 16
[   53.656846][  T341] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   53.668637][   T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.681475][   T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.692175][   T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   53.698488][ T2464] x_tables: duplicate underflow at hook 4
[   53.701336][   T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.715119][   T19] usb 2-1: Product: syz
[   53.719477][   T19] usb 2-1: Manufacturer: syz
[   53.727702][   T19] usb 2-1: SerialNumber: syz
[   53.739407][    T6] hid (null): report_id 19321 is invalid
[   53.745802][    T6] hid (null): unknown global tag 0xe
[   53.752197][    T6] hid (null): unknown global tag 0xd
[   53.757581][    T6] hid (null): nested delimiters
[   53.859895][  T341] usb 4-1: Using ep0 maxpacket: 32
[   53.866959][  T341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   53.876305][  T341] usb 4-1: config 0 interface 0 has no altsetting 1
[   53.883769][  T341] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[   53.893015][  T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   53.901558][  T341] usb 4-1: SerialNumber: syz
[   53.909530][  T341] usb 4-1: config 0 descriptor??
[   53.918164][  T341] usb-storage 4-1:0.0: USB Mass Storage device detected
[   53.931301][  T341] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[   53.953637][   T19] usb 2-1: 0:2 : does not exist
[   53.970497][   T19] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   53.987630][  T341] usb 7-1: USB disconnect, device number 4
[   54.000679][   T19] usb 2-1: USB disconnect, device number 9
[   54.076698][  T633] usb 6-1: Cannot set autoneg
[   54.081958][  T633] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71
[   54.090868][  T633] usb 6-1: USB disconnect, device number 7
[   54.125754][   T24] usb 4-1: USB disconnect, device number 7
[   54.129352][ T2486] loop2: detected capacity change from 0 to 128
[   54.409912][  T288] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   54.553286][ T2498] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   54.599873][  T288] usb 3-1: Using ep0 maxpacket: 16
[   54.611702][  T288] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.622778][  T288] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.633009][  T288] usb 3-1: config 0 interface 0 has no altsetting 0
[   54.641240][  T288] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   54.650360][  T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.660141][  T288] usb 3-1: config 0 descriptor??
[   54.726169][ T2516] loop6: detected capacity change from 0 to 1024
[   54.749894][  T633] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   54.763754][ T2516] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.807395][ T2516] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   54.845377][  T999] EXT4-fs (loop6): unmounting filesystem.
[   54.869517][ T2536] loop3: detected capacity change from 0 to 1024
[   54.886179][ T2536] EXT4-fs: Ignoring removed bh option
[   54.897089][ T2536] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.939857][  T633] usb 2-1: Using ep0 maxpacket: 8
[   54.952073][ T2536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   54.969237][  T633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   54.977109][ T2548] 9pnet: p9_errstr2errno: server reported unknown error �@0x0000000000000003
[   54.982287][  T633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.995375][  T633] usb 2-1: Product: syz
[   55.000153][  T633] usb 2-1: Manufacturer: syz
[   55.004778][  T633] usb 2-1: SerialNumber: syz
[   55.014618][  T283] EXT4-fs (loop3): unmounting filesystem.
[   55.023132][ T2550] overlayfs: failed to resolve './bus': -2
[   55.072518][  T288] hid (null): report_id 0 is invalid
[   55.078017][  T288] hid (null): bogus close delimiter
[   55.087053][  T288] hid (null): invalid report_count 1939077990
[   55.093675][  T288] hid (null): invalid report_count 56161
[   55.099450][  T288] hid (null): bogus close delimiter
[   55.104985][  T288] hid (null): nested delimiters
[   55.110153][  T288] hid (null): unknown global tag 0xd
[   55.213193][  T633] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   55.222166][ T2558] loop6: detected capacity change from 0 to 40427
[   55.251625][ T2558] F2FS-fs (loop6): invalid crc value
[   55.277793][ T2558] F2FS-fs (loop6): Found nat_bits in checkpoint
[   55.278611][  T633] usb 3-1: USB disconnect, device number 9
[   55.321055][ T2558] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   55.388704][  T999] syz-executor: attempt to access beyond end of device
[   55.388704][  T999] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   55.392380][ T2593] device veth0_to_bridge entered promiscuous mode
[   55.422607][ T2592] device veth0_to_bridge left promiscuous mode
[   55.446552][ T2595] loop5: detected capacity change from 0 to 128
[   55.653329][ T2617] SELinux: failed to load policy
[   55.757001][ T2621] loop6: detected capacity change from 0 to 40427
[   55.766099][ T2621] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[   55.776999][ T2621] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   55.788092][ T2621] F2FS-fs (loop6): Found nat_bits in checkpoint
[   55.813594][ T2621] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   55.821034][ T2621] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   55.836138][  T341] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   55.915029][ T2627] syz.6.711: attempt to access beyond end of device
[   55.915029][ T2627] loop6: rw=2049, sector=53248, nr_sectors = 3008 limit=40427
[   55.943728][ T2627] syz.6.711: attempt to access beyond end of device
[   55.943728][ T2627] loop6: rw=2049, sector=56256, nr_sectors = 1088 limit=40427
[   55.982450][ T2627] syz.6.711: attempt to access beyond end of device
[   55.982450][ T2627] loop6: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[   56.031348][  T341] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   56.058731][  T341] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   56.067849][   T28] kauditd_printk_skb: 79 callbacks suppressed
[   56.067863][   T28] audit: type=1400 audit(1757112309.178:4743): avc:  denied  { connect } for  pid=2635 comm="syz.3.716" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   56.071513][ T2627] syz.6.711: attempt to access beyond end of device
[   56.071513][ T2627] loop6: rw=2049, sector=57344, nr_sectors = 7320 limit=40427
[   56.085954][ T2626] loop2: detected capacity change from 0 to 40427
[   56.121475][ T2626] F2FS-fs (loop2): invalid crc value
[   56.121773][  T341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   56.138578][  T341] usb 6-1: SerialNumber: syz
[   56.150689][ T2626] F2FS-fs (loop2): Found nat_bits in checkpoint
[   56.198382][ T2626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   56.220575][  T999] syz-executor: attempt to access beyond end of device
[   56.220575][  T999] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   56.262828][  T287] syz-executor: attempt to access beyond end of device
[   56.262828][  T287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   56.332160][ T2649] loop3: detected capacity change from 0 to 512
[   56.383074][ T2649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   56.399985][ T2649] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.418426][   T28] audit: type=1400 audit(1757112309.538:4744): avc:  denied  { read } for  pid=2648 comm="syz.3.722" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.496412][ T2657] loop2: detected capacity change from 0 to 2048
[   56.509436][ T1630] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   56.523971][ T1630] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28
[   56.531034][ T2657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   56.536529][ T1630] EXT4-fs (loop3): This should not happen!! Data will be lost
[   56.536529][ T1630] 
[   56.545307][ T2657] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.571460][ T1630] EXT4-fs (loop3): Total free blocks count 0
[   56.583997][ T1630] EXT4-fs (loop3): Free/Dirty block details
[   56.595485][ T1630] EXT4-fs (loop3): free_blocks=65280
[   56.605177][ T1630] EXT4-fs (loop3): dirty_blocks=1025
[   56.611148][   T28] audit: type=1400 audit(1757112309.738:4745): avc:  denied  { ioctl } for  pid=2656 comm="syz.2.720" path="/131/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.612731][ T1630] EXT4-fs (loop3): Block reservation details
[   56.636284][ T2657] fs-verity: sha512 using implementation "sha512-avx2"
[   56.644513][ T1630] EXT4-fs (loop3): i_reserved_data_blocks=1025
[   56.664113][  T287] EXT4-fs (loop2): unmounting filesystem.
[   56.664858][  T283] EXT4-fs (loop3): unmounting filesystem.
[   56.711034][   T28] audit: type=1400 audit(1757112309.838:4746): avc:  denied  { watch watch_reads } for  pid=2669 comm="syz.2.726" path="/133/file0" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   56.771456][  T341] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[   56.780090][ T2676] loop2: detected capacity change from 0 to 512
[   56.803616][ T2676] ext4: Bad value for 'mb_optimize_scan'
[   56.861659][  T339] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   56.920595][ T2698] loop2: detected capacity change from 0 to 512
[   56.950888][ T2698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   56.969094][  T287] EXT4-fs (loop2): unmounting filesystem.
[   57.082066][   T28] audit: type=1400 audit(1757112310.208:4747): avc:  denied  { read } for  pid=2719 comm="syz.6.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   57.133388][   T28] audit: type=1400 audit(1757112310.258:4748): avc:  denied  { setopt } for  pid=2719 comm="syz.6.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   57.210193][ T2726] syz.2.743[2726] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.210312][ T2726] syz.2.743[2726] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.217566][   T24] usb 6-1: USB disconnect, device number 8
[   57.241825][   T24] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[   57.288842][ T2733] IPv6: sit1: Disabled Multicast RS
[   57.313194][   T28] audit: type=1400 audit(1757112310.438:4749): avc:  denied  { append } for  pid=2740 comm="syz.6.747" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   57.597178][ T2751] loop2: detected capacity change from 0 to 40427
[   57.610495][ T2751] F2FS-fs (loop2): fault_injection options not supported
[   57.623428][ T2751] F2FS-fs (loop2): fault_type options not supported
[   57.648525][ T2751] F2FS-fs (loop2): invalid crc value
[   57.652047][ T2765] loop6: detected capacity change from 0 to 40427
[   57.670465][ T2765] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   57.675151][ T2751] F2FS-fs (loop2): Found nat_bits in checkpoint
[   57.685524][ T2765] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   57.702203][ T2765] F2FS-fs (loop6): invalid crc value
[   57.720773][ T2765] F2FS-fs (loop6): Found nat_bits in checkpoint
[   57.727166][ T2751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   57.778309][ T2765] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   57.790147][ T2765] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   57.836876][ T2790] loop3: detected capacity change from 0 to 512
[   57.844518][  T287] syz-executor: attempt to access beyond end of device
[   57.844518][  T287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   57.852714][ T2790] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.866274][ T2790] EXT4-fs: Ignoring removed bh option
[   57.886343][   T28] audit: type=1400 audit(1757112311.008:4750): avc:  denied  { rename } for  pid=2764 comm="syz.6.754" name="file0" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   57.910334][  T999] syz-executor: attempt to access beyond end of device
[   57.910334][  T999] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   57.924946][ T2790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   57.937788][ T2790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   57.950080][   T28] audit: type=1400 audit(1757112311.078:4751): avc:  denied  { ioctl } for  pid=2793 comm="syz.5.762" path="socket:[23788]" dev="sockfs" ino=23788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   57.997608][ T2790] EXT4-fs (loop3): 1 truncate cleaned up
[   58.033033][ T2790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   58.070941][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[   58.101794][ T2802] bridge0: port 3(vlan2) entered blocking state
[   58.108090][ T2802] bridge0: port 3(vlan2) entered disabled state
[   58.115180][ T2802] device vlan2 entered promiscuous mode
[   58.121031][ T2802] device ip6gretap0 entered promiscuous mode
[   58.135789][  T283] EXT4-fs (loop3): unmounting filesystem.
[   58.212179][   T28] audit: type=1400 audit(1757112311.338:4752): avc:  denied  { read write } for  pid=2812 comm="syz.5.771" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   58.241917][   T24] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0
[   58.250731][   T24] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0
[   58.258151][   T24] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0
[   58.266441][   T24] hid-generic 0000:0004:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   58.301583][ T2821] fido_id[2821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   58.558052][ T2856] loop2: detected capacity change from 0 to 512
[   58.572824][ T2856] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   58.586793][ T2856] EXT4-fs (loop2): invalid journal inode
[   58.593008][ T2856] EXT4-fs (loop2): can't get journal size
[   58.601014][ T2856] EXT4-fs (loop2): 1 truncate cleaned up
[   58.606913][ T2856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   58.699646][ T2875] loop3: detected capacity change from 0 to 256
[   58.700294][ T2876] loop6: detected capacity change from 0 to 128
[   58.711502][ T2875] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[   58.733140][  T287] EXT4-fs (loop2): unmounting filesystem.
[   58.784412][ T2882] loop6: detected capacity change from 0 to 128
[   58.858556][ T2892] netlink: 96 bytes leftover after parsing attributes in process `syz.3.805'.
[   58.870601][ T2891] loop6: detected capacity change from 0 to 16
[   58.879280][ T2891] erofs: (device loop6): mounted with root inode @ nid 36.
[   58.939021][ T2898] syzkaller1: tun_chr_ioctl cmd 1074025681
[   58.945938][ T2898] syzkaller1: tun_chr_ioctl cmd 1074025677
[   58.951926][ T2898] syzkaller1: linktype set to 773
[   58.957116][ T2900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.808'.
[   59.169731][ T2917] loop3: detected capacity change from 0 to 1024
[   59.199613][ T2917] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.265843][ T2917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   59.320748][ T2917] EXT4-fs (loop3): re-mounted. Quota mode: none.
[   59.331593][ T2880] loop2: detected capacity change from 0 to 131072
[   59.347442][ T2880] F2FS-fs (loop2): invalid crc value
[   59.347622][  T283] EXT4-fs (loop3): unmounting filesystem.
[   59.400859][ T2880] F2FS-fs (loop2): Found nat_bits in checkpoint
[   59.469330][ T2880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   59.619725][ T2956] loop3: detected capacity change from 0 to 256
[   59.639455][ T2956] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   59.669850][ T2956] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   59.689574][ T2956] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   59.849869][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   60.059973][   T24] usb 7-1: Using ep0 maxpacket: 16
[   60.066382][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.076564][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   60.087055][   T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   60.096202][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.104268][   T24] usb 7-1: Product: syz
[   60.108461][   T24] usb 7-1: Manufacturer: syz
[   60.113171][   T24] usb 7-1: SerialNumber: syz
[   60.269852][  T335] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   60.323087][   T24] usb 7-1: 0:2 : does not exist
[   60.330071][   T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[   60.341122][   T24] usb 7-1: USB disconnect, device number 5
[   60.450939][  T335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.459893][  T633] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   60.461120][  T335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   60.478238][  T335] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   60.487382][  T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   60.495547][  T335] usb 6-1: SerialNumber: syz
[   60.540252][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   60.640920][  T633] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   60.651997][  T633] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   60.662420][  T633] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   60.671493][  T633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   60.679496][  T633] usb 3-1: SerialNumber: syz
[   60.685848][  T633] cdc_ether: probe of 3-1:1.0 failed with error -22
[   60.692616][  T633] usb-storage 3-1:1.0: USB Mass Storage device detected
[   60.700637][  T633] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   60.708680][  T633] scsi host1: usb-storage 3-1:1.0
[   60.711687][  T335] usb 6-1: 0:2 : does not exist
[   60.725155][  T335] usb 6-1: USB disconnect, device number 9
[   60.894718][  T402] usb 3-1: USB disconnect, device number 10
[   61.043487][ T3005] loop3: detected capacity change from 0 to 40427
[   61.054748][ T3005] F2FS-fs (loop3): invalid crc value
[   61.061412][ T3005] F2FS-fs (loop3): Found nat_bits in checkpoint
[   61.087315][ T3005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   61.118625][ T3005] syz.3.853: attempt to access beyond end of device
[   61.118625][ T3005] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   61.138175][  T283] syz-executor: attempt to access beyond end of device
[   61.138175][  T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   61.243353][   T28] kauditd_printk_skb: 33 callbacks suppressed
[   61.243367][   T28] audit: type=1400 audit(1757112314.368:4786): avc:  denied  { mount } for  pid=3013 comm="syz.5.855" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   61.272473][   T28] audit: type=1400 audit(1757112314.368:4787): avc:  denied  { remount } for  pid=3013 comm="syz.5.855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   61.292512][   T28] audit: type=1400 audit(1757112314.398:4788): avc:  denied  { unmount } for  pid=743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   61.435548][   T28] audit: type=1400 audit(1757112314.558:4789): avc:  denied  { relabelfrom } for  pid=3029 comm="syz.5.862" name="" dev="pipefs" ino=24249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   61.473140][   T28] audit: type=1400 audit(1757112314.578:4790): avc:  denied  { bind } for  pid=3030 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.510907][   T28] audit: type=1400 audit(1757112314.578:4791): avc:  denied  { name_bind } for  pid=3030 comm="syz.2.864" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   61.532357][   T28] audit: type=1400 audit(1757112314.578:4792): avc:  denied  { node_bind } for  pid=3030 comm="syz.2.864" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   61.689029][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[   61.787280][ T3089] overlayfs: upper fs is r/o, try multi-lower layers mount
[   61.947075][ T3096] loop6: detected capacity change from 0 to 1024
[   61.963934][ T3096] EXT4-fs: Ignoring removed nobh option
[   61.969634][ T3096] EXT4-fs: Ignoring removed bh option
[   61.976503][ T3096] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   61.993861][ T3096] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   62.021489][ T3096] EXT4-fs (loop6): shut down requested (2)
[   62.027930][ T3096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[   62.036990][  T633] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   62.044846][   T28] audit: type=1400 audit(1757112315.168:4793): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   62.045382][ T3096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[   62.083996][   T28] audit: type=1400 audit(1757112315.168:4794): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.105590][   T28] audit: type=1400 audit(1757112315.168:4795): avc:  denied  { append } for  pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   62.120349][  T999] EXT4-fs (loop6): unmounting filesystem.
[   62.259745][ T3086] loop5: detected capacity change from 0 to 131072
[   62.269308][ T3086] F2FS-fs (loop5): QUOTA feature is enabled, so ignore qf_name
[   62.277059][  T633] usb 4-1: Using ep0 maxpacket: 16
[   62.280611][ T3086] F2FS-fs (loop5): invalid crc value
[   62.283438][  T633] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[   62.295783][  T633] usb 4-1: config 0 has no interface number 0
[   62.302010][  T633] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   62.302729][ T3086] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   62.312079][  T633] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   62.332774][  T633] usb 4-1: config 0 interface 41 has no altsetting 0
[   62.345607][ T3086] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix.
[   62.355310][  T633] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   62.355376][ T3086] F2FS-fs (loop5): Bad quota inode 2:393216
[   62.364662][  T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.370851][ T3086] F2FS-fs (loop5): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[   62.378662][  T633] usb 4-1: Product: syz
[   62.389072][ T3086] F2FS-fs (loop5): Cannot turn on quotas: error -22
[   62.393310][  T633] usb 4-1: Manufacturer: syz
[   62.400212][ T3086] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[   62.404535][  T633] usb 4-1: SerialNumber: syz
[   62.421833][  T288] usb 2-1: USB disconnect, device number 10
[   62.435645][  T633] usb 4-1: config 0 descriptor??
[   62.440999][  T288] usblp0: removed
[   62.445739][ T3085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   62.453124][ T3085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   62.468679][ T3086] F2FS-fs (loop5): quota file may be corrupted, skip loading it
[   62.639779][ T3136] input: syz0 as /devices/virtual/input/input9
[   62.676621][ T3085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   62.691814][ T3085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   63.108900][  T633] Error reading MAC address
[   63.113968][ T3085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   63.123686][ T3085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   63.517565][ T3194] loop6: detected capacity change from 0 to 40427
[   63.534665][ T3194] F2FS-fs (loop6): invalid crc value
[   63.547001][ T3194] F2FS-fs (loop6): Found nat_bits in checkpoint
[   63.581077][ T3194] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   63.630604][ T3186] loop5: detected capacity change from 0 to 131072
[   63.638914][  T633] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[   63.648208][ T3186] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[   63.648601][  T999] syz-executor: attempt to access beyond end of device
[   63.648601][  T999] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   63.656304][ T3186] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   63.659919][  T633] usb 4-1: USB disconnect, device number 8
[   63.684557][ T3186] F2FS-fs (loop5): invalid crc value
[   63.720718][ T3186] F2FS-fs (loop5): Found nat_bits in checkpoint
[   63.750609][  T335] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   63.761831][ T3186] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   63.768880][ T3186] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   63.946055][  T335] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.960320][  T335] usb 3-1: config 0 interface 0 has no altsetting 0
[   63.974616][  T335] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[   63.979686][ T3216] loop5: detected capacity change from 0 to 256
[   63.986970][  T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.017562][  T335] usb 3-1: config 0 descriptor??
[   64.049491][ T3228] syz.3.946[3228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.049562][ T3228] syz.3.946[3228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.182561][ T3247] loop5: detected capacity change from 0 to 512
[   64.221810][ T3247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   64.230870][ T3247] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.284655][  T743] EXT4-fs (loop5): unmounting filesystem.
[   64.456614][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.471131][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.478291][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.490958][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.498457][ T3258] device bridge_slave_0 entered promiscuous mode
[   64.504995][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.505974][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.520078][  T633] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   64.527884][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.529894][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.535568][ T3258] device bridge_slave_1 entered promiscuous mode
[   64.559888][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.581646][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.590195][ T3262] loop5: detected capacity change from 0 to 40427
[   64.601983][ T3262] F2FS-fs (loop5): fault_injection options not supported
[   64.609047][ T3262] F2FS-fs (loop5): Image doesn't support compression
[   64.615736][  T335] wacom 0003:056A:00BA.0011: unknown main item tag 0x0
[   64.616227][  T335] wacom 0003:056A:00BA.0011: Unknown device_type for 'HID 056a:00ba'. Assuming pen.
[   64.625675][ T3262] F2FS-fs (loop5): Image doesn't support compression
[   64.639772][ T3262] F2FS-fs (loop5): invalid crc value
[   64.649392][ T3262] F2FS-fs (loop5): Found nat_bits in checkpoint
[   64.655259][  T335] wacom 0003:056A:00BA.0011: hidraw0: USB HID v10.00 Device [HID 056a:00ba] on usb-dummy_hcd.2-1/input0
[   64.681417][ T3262] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   64.683425][  T335] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BA.0011/input/input10
[   64.737059][  T402] usb 3-1: USB disconnect, device number 11
[   64.746461][ T3261] syz.5.962: attempt to access beyond end of device
[   64.746461][ T3261] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   64.750927][  T633] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   64.770153][ T3262] syz.5.962: attempt to access beyond end of device
[   64.770153][ T3262] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   64.774621][ T3281] fido_id[3281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[   64.799541][  T633] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[   64.811000][  T633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   64.814472][  T743] syz-executor: attempt to access beyond end of device
[   64.814472][  T743] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   64.821223][  T633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.842191][  T633] usb 2-1: Product: syz
[   64.846607][  T633] usb 2-1: Manufacturer: syz
[   64.851364][  T633] usb 2-1: SerialNumber: syz
[   64.859625][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.866689][ T3258] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.874136][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.881181][ T3258] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.910973][ T3290] loop6: detected capacity change from 0 to 256
[   64.917299][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.925407][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.935832][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.984027][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.015238][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.024787][ T3294] xt_bpf: check failed: parse error
[   65.039144][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.064583][ T3258] device veth0_vlan entered promiscuous mode
[   65.080389][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.089371][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.098942][  T633] cdc_ncm 2-1:1.0: bind() failure
[   65.105197][  T633] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   65.112146][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.125717][ T3258] device veth1_macvtap entered promiscuous mode
[   65.132115][  T633] cdc_ncm 2-1:1.1: bind() failure
[   65.145077][  T633] usb 2-1: USB disconnect, device number 11
[   65.151335][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.168361][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.177968][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.451033][ T1484] device bridge_slave_1 left promiscuous mode
[   65.458765][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.466531][ T1484] device bridge_slave_0 left promiscuous mode
[   65.472858][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.481029][ T1484] device veth1_macvtap left promiscuous mode
[   65.486953][ T3292] loop6: detected capacity change from 0 to 131072
[   65.496330][ T3292] F2FS-fs (loop6): Test dummy encryption mode enabled
[   65.510101][ T3292] F2FS-fs (loop6): invalid crc value
[   65.519880][  T341] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   65.530332][ T3292] F2FS-fs (loop6): Found nat_bits in checkpoint
[   65.554367][ T3292] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   65.579902][  T335] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   65.700966][  T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.712556][  T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.722931][  T341] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   65.733197][  T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.745213][  T341] usb 4-1: config 0 descriptor??
[   65.759915][  T335] usb 6-1: Using ep0 maxpacket: 16
[   65.767136][  T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.778887][  T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.799439][  T335] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   65.812603][  T335] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   65.822101][  T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.837246][  T335] usb 6-1: config 0 descriptor??
[   65.939848][  T633] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   66.129926][  T633] usb 2-1: Using ep0 maxpacket: 32
[   66.137668][  T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.149002][  T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.159228][  T633] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   66.169818][  T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.178101][  T341] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   66.190015][  T633] usb 2-1: config 0 descriptor??
[   66.245502][  T335] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[   66.254747][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.256885][ T3359] loop6: detected capacity change from 0 to 1024
[   66.262086][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.269119][ T3359] EXT4-fs: Ignoring removed bh option
[   66.275831][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.288372][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.295647][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.301652][ T3359] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   66.302944][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.318578][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.325883][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.329876][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   66.329890][   T28] audit: type=1400 audit(1757112319.458:4826): avc:  denied  { mounton } for  pid=3358 comm="syz.6.997" path="/201/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   66.333167][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.344669][   T28] audit: type=1400 audit(1757112319.458:4827): avc:  denied  { setattr } for  pid=3358 comm="syz.6.997" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.362337][  T335] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   66.370658][ T3359] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.997: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   66.392003][  T335] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0
[   66.399399][   T28] audit: type=1400 audit(1757112319.458:4828): avc:  denied  { setattr } for  pid=3358 comm="syz.6.997" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   66.399495][  T341] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00
[   66.450357][ T3359] EXT4-fs (loop6): Remounting filesystem read-only
[   66.457406][   T28] audit: type=1400 audit(1757112319.458:4829): avc:  denied  { write open } for  pid=3358 comm="syz.6.997" path=2F202864656C6574656429 dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.468882][ T3359] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2818: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   66.487776][  T335] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0
[   66.502064][   T28] audit: type=1400 audit(1757112319.488:4830): avc:  denied  { link } for  pid=3358 comm="syz.6.997" name="#20" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.520181][  T335] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[   66.538728][  T335] microsoft 0003:045E:07DA.0013: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[   66.548245][   T28] audit: type=1400 audit(1757112319.658:4831): avc:  denied  { rmdir } for  pid=999 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   66.550212][  T335] microsoft 0003:045E:07DA.0013: no inputs found
[   66.579260][  T335] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[   66.588387][  T999] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /201/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   66.610871][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.611523][  T341] cp2112 0003:10C4:EA90.0012: error requesting SMBus config
[   66.617838][  T999] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /201/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   66.647302][  T341] cp2112: probe of 0003:10C4:EA90.0012 failed with error -71
[   66.647456][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.659244][  T341] usb 4-1: USB disconnect, device number 9
[   66.668612][  T999] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   66.688542][  T633] savu 0003:1E7D:2D5A.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   66.699671][ T3362] fido_id[3362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[   66.739867][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.749732][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   66.781581][  T999] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /201/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   66.793510][   T28] audit: type=1400 audit(1757112319.908:4832): avc:  denied  { write } for  pid=3365 comm="syz.2.999" name="mcfilter6" dev="proc" ino=4026532699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   66.816753][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.833434][  T999] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /201/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   66.855067][  T633] usb 6-1: USB disconnect, device number 10
[   66.858308][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.870489][  T999] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   66.890633][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.897269][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   66.912005][  T999] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /201/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   66.934414][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.940676][  T402] usb 2-1: USB disconnect, device number 12
[   66.943175][  T999] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /201/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   66.969227][  T999] EXT4-fs (loop6): Remounting filesystem read-only
[   66.976028][  T999] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   66.996045][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.010909][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.025897][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.041726][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.056597][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.071456][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.086265][  T999] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   67.289404][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.296524][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.304305][ T3371] device bridge_slave_0 entered promiscuous mode
[   67.312065][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.319131][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.326514][ T3371] device bridge_slave_1 entered promiscuous mode
[   67.402243][ T3390] loop5: detected capacity change from 0 to 512
[   67.416019][ T3390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   67.426376][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.427474][ T3390] EXT4-fs (loop5): 1 truncate cleaned up
[   67.433997][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.439713][ T3390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   67.461187][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.476265][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.484782][ T1630] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.491857][ T1630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.500088][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.508471][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.516931][ T1630] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.523994][ T1630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.531459][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.547655][ T3371] device veth0_vlan entered promiscuous mode
[   67.555605][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.564254][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.572367][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.583090][  T743] EXT4-fs (loop5): unmounting filesystem.
[   67.586855][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.596665][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.604888][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.636003][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.647973][ T3371] device veth1_macvtap entered promiscuous mode
[   67.660222][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   67.682587][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.690605][   T28] audit: type=1326 audit(1757112320.818:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3367 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99dcb8ebe9 code=0x7fc00000
[   67.700258][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.725234][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   67.733821][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.742372][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   67.745157][   T28] audit: type=1400 audit(1757112320.848:4834): avc:  denied  { mount } for  pid=3405 comm="syz.1.1012" name="/" dev="ramfs" ino=27286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   67.751135][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.781336][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.790605][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.804134][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.813620][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.814682][   T28] audit: type=1400 audit(1757112320.938:4835): avc:  denied  { unlink } for  pid=3407 comm="syz.1.1013" name="#b" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   67.891137][ T3404] loop5: detected capacity change from 0 to 40427
[   67.906668][ T3404] F2FS-fs (loop5): invalid crc value
[   67.921888][ T3404] F2FS-fs (loop5): Found nat_bits in checkpoint
[   67.933708][ T3417] xt_bpf: check failed: parse error
[   68.047887][ T3404] F2FS-fs (loop5): Start checkpoint disabled!
[   68.057310][ T3404] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   68.096719][ T3404] syz.5.1010: attempt to access beyond end of device
[   68.096719][ T3404] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   68.134218][ T1548] kworker/u4:156: attempt to access beyond end of device
[   68.134218][ T1548] loop5: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   68.148162][ T1548] kworker/u4:156: attempt to access beyond end of device
[   68.148162][ T1548] loop5: rw=1, sector=77888, nr_sectors = 8 limit=40427
[   68.163339][ T1548] kworker/u4:156: attempt to access beyond end of device
[   68.163339][ T1548] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   68.269862][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   68.280924][ T1484] device bridge_slave_1 left promiscuous mode
[   68.287087][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.309224][ T1484] device bridge_slave_0 left promiscuous mode
[   68.315481][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.335283][ T1484] device veth1_macvtap left promiscuous mode
[   68.341512][ T1484] device veth0_vlan left promiscuous mode
[   68.409169][ T3467] loop5: detected capacity change from 0 to 256
[   68.423430][ T3467] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   68.434261][ T3467] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[   68.445064][ T3467] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   68.471396][   T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.482763][   T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.493174][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[   68.500120][   T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   68.509226][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.519330][   T24] usb 4-1: config 0 descriptor??
[   68.719833][  T335] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   68.902379][  T335] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[   68.911607][  T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.922660][ T3482] sch_fq: defrate 4294967295 ignored.
[   68.923328][  T335] usb 3-1: config 0 descriptor??
[   69.133506][   T24] usb 4-1: string descriptor 0 read error: -22
[   69.299877][  T402] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   69.335787][   T24] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input13
[   69.348517][  T335] smartjoyplus 0003:0925:8866.0016: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0
[   69.360421][  T335] smartjoyplus 0003:0925:8866.0016: Force feedback for SmartJoy PLUS PS2/USB adapter
[   69.370487][   T24] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input14
[   69.382938][   T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input15
[   69.411198][   T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input16
[   69.427665][   T24] uclogic 0003:256C:006D.0015: input,hiddev96,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[   69.481244][  T402] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.496899][  T402] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.508199][  T402] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   69.521182][  T402] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   69.530317][  T402] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.553962][  T402] usb 8-1: config 0 descriptor??
[   69.564032][   T24] usb 4-1: USB disconnect, device number 10
[   69.576043][  T633] usb 3-1: USB disconnect, device number 12
[   69.590148][ T3515] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1061'.
[   69.926414][ T3555] 9p: Unknown access argument 18446744073709551615: -34
[   69.951672][ T3559] loop5: detected capacity change from 0 to 512
[   69.977062][  T402] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xe
[   69.977325][ T3559] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   69.989243][  T402] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[   70.001503][  T402] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[   70.010758][  T402] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[   70.030679][ T3559] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   70.045689][ T3559] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1080: bg 0: block 248: padding at end of block bitmap is not set
[   70.070140][ T3559] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1080: Failed to acquire dquot type 1
[   70.121504][ T3559] EXT4-fs (loop5): 1 truncate cleaned up
[   70.130374][ T3559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   70.256811][  T743] EXT4-fs (loop5): unmounting filesystem.
[   70.267567][ T1630] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:237: Failed to release dquot type 1
[   70.280363][ T3586] incfs: Options parsing error. -22
[   70.285651][ T3586] incfs: mount failed -22
[   70.292458][   T24] usb 8-1: USB disconnect, device number 2
[   70.423844][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3612 comm=syz.5.1104
[   70.477732][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   70.709116][ T3638] loop3: detected capacity change from 0 to 256
[   70.726964][ T3638] FAT-fs (loop3): Unrecognized mount option "iochars.het=cp950" or missing value
[   70.875661][ T3650] loop3: detected capacity change from 0 to 128
[   70.890835][ T3650] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   70.962260][ T3656] loop3: detected capacity change from 0 to 1024
[   70.982399][ T3656] EXT4-fs: Ignoring removed nobh option
[   70.988355][ T3656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   71.012191][ T3656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   71.026415][ T3656] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.1125: Allocating blocks 385-513 which overlap fs metadata
[   71.044667][ T3655] EXT4-fs (loop3): pa ffff888136ddbb28: logic 16, phys. 129, len 24
[   71.052822][ T3655] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8
[   71.066945][ T3258] EXT4-fs (loop3): unmounting filesystem.
[   71.079975][  T341] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   71.245588][ T3679] loop3: detected capacity change from 0 to 40427
[   71.252058][   T19] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   71.260031][ T3679] F2FS-fs (loop3): fault_injection options not supported
[   71.267210][ T3679] F2FS-fs (loop3): heap/no_heap options were deprecated
[   71.269905][  T402] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   71.281986][ T3679] F2FS-fs (loop3): Image doesn't support compression
[   71.289922][  T341] usb 6-1: Using ep0 maxpacket: 16
[   71.293002][ T3679] F2FS-fs (loop3): invalid crc value
[   71.296151][  T341] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.301722][ T3679] F2FS-fs (loop3): Found nat_bits in checkpoint
[   71.311235][  T341] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.311269][  T341] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   71.311294][  T341] usb 6-1: config 0 interface 0 has no altsetting 0
[   71.311320][  T341] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   71.311341][  T341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.350969][ T3679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   71.356937][  T341] usb 6-1: config 0 descriptor??
[   71.401100][ T3258] syz-executor: attempt to access beyond end of device
[   71.401100][ T3258] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   71.415622][ T3258] syz-executor: attempt to access beyond end of device
[   71.415622][ T3258] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   71.450328][ T1548] kworker/u4:156: attempt to access beyond end of device
[   71.450328][ T1548] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   71.468344][   T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.470879][  T402] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[   71.479322][   T19] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.497111][   T19] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   71.500920][  T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   71.506232][   T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   71.526869][   T19] usb 8-1: SerialNumber: syz
[   71.533424][  T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   71.545028][  T402] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   71.558295][  T402] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   71.567876][  T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.589200][  T402] usb 2-1: config 0 descriptor??
[   71.600263][ T3662] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   71.738398][   T19] usb 8-1: 0:2 : does not exist
[   71.750864][   T19] usb 8-1: USB disconnect, device number 3
[   71.925708][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.932855][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.940426][ T3686] device bridge_slave_0 entered promiscuous mode
[   71.947513][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.954656][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.962494][ T3686] device bridge_slave_1 entered promiscuous mode
[   71.970710][ T2147] udevd[2147]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.002661][   T24] usb 6-1: USB disconnect, device number 11
[   72.023387][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.033255][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.049878][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.065936][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.081031][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.098610][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.113342][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.121366][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.129187][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.137089][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.145403][  T402] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[   72.153371][  T402] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[   72.167954][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.175035][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.182327][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.189359][ T3686] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.199398][  T402] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   72.266258][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.276421][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.289609][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.306684][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.315269][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.322417][ T1484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.339498][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.341773][  T288] usb 2-1: USB disconnect, device number 13
[   72.349107][ T1548] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.360428][ T1548] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.374421][ T1500] device bridge_slave_1 left promiscuous mode
[   72.383079][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.391277][ T1500] device bridge_slave_0 left promiscuous mode
[   72.397423][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.406169][ T1500] device veth1_macvtap left promiscuous mode
[   72.412597][ T1500] device veth0_vlan left promiscuous mode
[   72.475001][ T3709] device veth1_macvtap left promiscuous mode
[   72.483657][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.494738][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.508637][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.524926][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.533567][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.541694][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.550586][ T3686] device veth0_vlan entered promiscuous mode
[   72.569350][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.580206][ T3686] device veth1_macvtap entered promiscuous mode
[   72.599356][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.608967][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.617543][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.627379][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.630257][  T341] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   72.735188][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   72.735202][   T28] audit: type=1400 audit(1757112325.858:4847): avc:  denied  { ioctl } for  pid=3738 comm="syz.2.1156" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28211 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   72.830971][  T341] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.859897][  T341] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.878385][  T341] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   72.892039][  T341] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   72.901441][  T341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.909919][  T288] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   72.924564][  T341] usb 8-1: config 0 descriptor??
[   72.941668][ T3763] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   72.951452][ T3763] SELinux: failed to load policy
[   72.981058][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[   72.997904][ T3769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3769 comm=syz.8.1170
[   73.036847][ T3772] overlayfs: missing 'lowerdir'
[   73.054471][   T28] audit: type=1400 audit(1757112328.181:4848): avc:  denied  { ioctl } for  pid=3774 comm="syz.2.1174" path="socket:[29190]" dev="sockfs" ino=29190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.110930][  T288] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.129824][  T288] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.154587][  T288] usb 6-1: config 0 interface 0 has no altsetting 0
[   73.169855][  T288] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   73.189838][  T288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.207465][  T288] usb 6-1: config 0 descriptor??
[   73.330324][ T3793] loop8: detected capacity change from 0 to 40427
[   73.342843][  T341] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving
[   73.346470][ T3793] F2FS-fs (loop8): Small segment_count (9 < 1 * 24)
[   73.360321][ T3793] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   73.371311][  T341] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[   73.410348][ T3793] F2FS-fs (loop8): Found nat_bits in checkpoint
[   73.465224][ T3793] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   73.472916][ T3793] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   73.549302][   T28] audit: type=1400 audit(1757112328.671:4849): avc:  denied  { setopt } for  pid=3811 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   73.597757][   T28] audit: type=1400 audit(1757112328.701:4850): avc:  denied  { write } for  pid=3813 comm="syz.1.1190" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   73.608603][ T3818] syz.8.1182: attempt to access beyond end of device
[   73.608603][ T3818] loop8: rw=2049, sector=53248, nr_sectors = 2048 limit=40427
[   73.649278][ T3818] syz.8.1182: attempt to access beyond end of device
[   73.649278][ T3818] loop8: rw=2049, sector=55296, nr_sectors = 2048 limit=40427
[   73.665938][  T341] usb 8-1: USB disconnect, device number 4
[   73.667051][ T3818] syz.8.1182: attempt to access beyond end of device
[   73.667051][ T3818] loop8: rw=2049, sector=49152, nr_sectors = 576 limit=40427
[   73.765416][ T3686] syz-executor: attempt to access beyond end of device
[   73.765416][ T3686] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   73.802538][   T28] audit: type=1326 audit(1757112328.931:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.1197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f918818ebe9 code=0x0
[   73.825774][  T288] usb 6-1: string descriptor 0 read error: -22
[   73.901314][   T28] audit: type=1400 audit(1757112329.031:4852): avc:  denied  { sys_module } for  pid=3832 comm="syz.8.1195" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   74.033548][  T288] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input17
[   74.045850][  T288] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input18
[   74.058117][  T288] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input19
[   74.071467][  T288] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001B/input/input20
[   74.085153][  T288] uclogic 0003:256C:006D.001B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[   74.213203][ T3847] loop7: detected capacity change from 0 to 128
[   74.222189][ T3847] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[   74.230827][ T3847] FAT-fs (loop7): Filesystem has been set read-only
[   74.256337][   T24] usb 6-1: USB disconnect, device number 12
[   74.278987][ T3853] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[   74.288088][   T28] audit: type=1400 audit(1757112329.421:4853): avc:  denied  { relabelto } for  pid=3852 comm="syz.7.1205" name="25" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[   74.314298][   T28] audit: type=1400 audit(1757112329.421:4854): avc:  denied  { associate } for  pid=3852 comm="syz.7.1205" name="25" dev="tmpfs" ino=144 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0"
[   74.341594][   T28] audit: type=1400 audit(1757112329.441:4855): avc:  denied  { write } for  pid=3371 comm="syz-executor" name="25" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[   74.367506][   T28] audit: type=1400 audit(1757112329.441:4856): avc:  denied  { remove_name } for  pid=3371 comm="syz-executor" name="binderfs" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[   74.709871][  T402] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   74.778941][ T3876] loop5: detected capacity change from 0 to 16
[   74.785699][ T3876] erofs: (device loop5): mounted with root inode @ nid 36.
[   74.795837][ T3876] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89
[   74.805246][ T3876] syz.5.1216: attempt to access beyond end of device
[   74.805246][ T3876] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16
[   74.819571][ T3876] syz.5.1216: attempt to access beyond end of device
[   74.819571][ T3876] loop5: rw=0, sector=524296, nr_sectors = 8 limit=16
[   74.833458][ T3876] syz.5.1216: attempt to access beyond end of device
[   74.833458][ T3876] loop5: rw=0, sector=524296, nr_sectors = 8 limit=16
[   74.847609][ T3876] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100]
[   74.871701][ T3882] input: syz1 as /devices/virtual/input/input21
[   74.878027][ T3882] input: failed to attach handler leds to device input21, error: -6
[   74.893701][  T402] usb 3-1: config 0 has an invalid interface number: 101 but max is 0
[   74.905980][  T402] usb 3-1: config 0 has no interface number 0
[   74.926137][  T402] usb 3-1: config 0 interface 101 has no altsetting 0
[   74.943772][  T402] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18
[   74.962916][  T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.971558][  T402] usb 3-1: Product: syz
[   74.975732][  T402] usb 3-1: Manufacturer: syz
[   74.980478][  T402] usb 3-1: SerialNumber: syz
[   74.989305][  T402] usb 3-1: config 0 descriptor??
[   74.996199][  T402] usb 3-1: bad CDC descriptors
[   75.124101][ T3901] loop5: detected capacity change from 0 to 8192
[   75.227248][ T3905] loop5: detected capacity change from 0 to 256
[   75.233859][ T3905] exfat: Deprecated parameter 'utf8'
[   75.241600][ T3905] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   75.260686][  T633] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   75.459245][ T3911] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.466461][ T3911] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.473644][  T633] usb 9-1: Using ep0 maxpacket: 32
[   75.474152][ T3911] device bridge_slave_0 entered promiscuous mode
[   75.480021][  T633] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.485964][ T3911] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.503068][  T633] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.503143][ T3911] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.523226][ T3911] device bridge_slave_1 entered promiscuous mode
[   75.531212][  T633] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   75.540387][  T633] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   75.556020][  T633] usb 9-1: Product: syz
[   75.560276][  T633] usb 9-1: Manufacturer: syz
[   75.572821][  T633] hub 9-1:4.0: USB hub found
[   75.631416][ T3911] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.638454][ T3911] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.645742][ T3911] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.652784][ T3911] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.674963][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.682912][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.690862][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.714451][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.723226][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.730287][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.737676][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.746580][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.753646][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.761063][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.769098][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.777820][  T633] hub 9-1:4.0: config failed, hub has too many ports! (err -19)
[   75.792436][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.805756][ T3911] device veth0_vlan entered promiscuous mode
[   75.812387][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.822191][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.829747][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.845557][ T3911] device veth1_macvtap entered promiscuous mode
[   75.852625][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.868153][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.877046][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.878070][ T3935] loop7: detected capacity change from 0 to 40427
[   75.893336][ T3935] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   75.919163][ T3935] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   75.931955][ T3935] F2FS-fs (loop7): invalid crc value
[   75.941539][ T3935] F2FS-fs (loop7): Found nat_bits in checkpoint
[   76.000260][ T3935] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   76.007496][ T3935] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   76.060342][ T1500] kworker/u4:108: attempt to access beyond end of device
[   76.060342][ T1500] loop7: rw=1, sector=45096, nr_sectors = 16 limit=40427
[   76.120249][  T402] usb 9-1: USB disconnect, device number 2
[   76.132611][ T3947] loop9: detected capacity change from 0 to 40427
[   76.139710][ T3947] F2FS-fs (loop9): fault_injection options not supported
[   76.147589][ T3947] F2FS-fs (loop9): heap/no_heap options were deprecated
[   76.154782][ T3947] F2FS-fs (loop9): Image doesn't support compression
[   76.170176][ T3947] F2FS-fs (loop9): invalid crc value
[   76.186557][ T3947] F2FS-fs (loop9): Found nat_bits in checkpoint
[   76.222766][ T3947] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   76.257076][ T3911] syz-executor: attempt to access beyond end of device
[   76.257076][ T3911] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   76.271382][ T3911] syz-executor: attempt to access beyond end of device
[   76.271382][ T3911] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   76.518013][ T1548] device bridge_slave_1 left promiscuous mode
[   76.535185][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.543201][ T1548] device bridge_slave_0 left promiscuous mode
[   76.549345][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.557571][ T1548] device veth1_macvtap left promiscuous mode
[   76.564328][ T1548] device veth0_vlan left promiscuous mode
[   76.689224][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.696799][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.704584][ T3964] device bridge_slave_0 entered promiscuous mode
[   76.711647][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.718679][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.730294][ T3874] Bluetooth: hci0: command 0x1003 tx timeout
[   76.736362][ T2912] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   76.738446][ T3964] device bridge_slave_1 entered promiscuous mode
[   76.875206][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.882250][ T3989] SELinux: failed to load policy
[   76.887195][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.894482][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.901519][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.949675][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.958165][ T1630] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.967527][ T1630] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.984924][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.992058][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.999360][ T3984] device bridge_slave_0 entered promiscuous mode
[   77.007377][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.015706][ T1630] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.022764][ T1630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.033482][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.042714][ T1630] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.049776][ T1630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.057915][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.065135][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.072618][ T3984] device bridge_slave_1 entered promiscuous mode
[   77.101481][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.109754][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.140357][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.157890][ T3964] device veth0_vlan entered promiscuous mode
[   77.167907][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.176294][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.184404][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.219169][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.229130][ T3964] device veth1_macvtap entered promiscuous mode
[   77.249295][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.292628][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.339010][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.346951][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.362837][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.371720][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.380248][ T1630] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.387320][ T1630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.396517][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.405145][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.413608][ T1630] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.420679][ T1630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.428085][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.447199][  T402] usb 3-1: USB disconnect, device number 13
[   77.459621][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.469247][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.489484][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.498033][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.516677][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.542115][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.557318][ T3984] device veth0_vlan entered promiscuous mode
[   77.570986][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.582202][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.596820][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.607109][ T4037] loop8: detected capacity change from 0 to 512
[   77.614050][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.629430][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   77.650547][ T4037] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.1278: casefold flag without casefold feature
[   77.663526][ T1548] device bridge_slave_1 left promiscuous mode
[   77.670427][ T4037] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1278: couldn't read orphan inode 15 (err -117)
[   77.684183][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.691788][ T4037] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   77.700570][ T1548] device bridge_slave_0 left promiscuous mode
[   77.719075][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.727599][ T3686] EXT4-fs (loop8): unmounting filesystem.
[   77.733946][ T1548] device bridge_slave_1 left promiscuous mode
[   77.740407][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.754449][ T1548] device bridge_slave_0 left promiscuous mode
[   77.762284][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.771007][ T1548] device veth1_macvtap left promiscuous mode
[   77.779571][ T1548] device veth0_vlan left promiscuous mode
[   77.789499][ T1548] device veth1_macvtap left promiscuous mode
[   77.795984][ T1548] device veth0_vlan left promiscuous mode
[   77.943679][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.951962][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.984366][ T3984] device veth1_macvtap entered promiscuous mode
[   78.025240][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.035385][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.052702][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.080805][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.096197][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.131979][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[   78.178748][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.188989][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.200788][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.216968][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.230973][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.243939][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.265527][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.287885][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.306214][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.325440][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.353164][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.373335][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.390682][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.405733][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.427251][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.450888][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.478165][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.497293][ T4061] loop4: detected capacity change from 0 to 40427
[   78.508791][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.520488][ T4061] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   78.528893][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.536360][ T4061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   78.558986][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.566957][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.570754][ T4061] F2FS-fs (loop4): Found nat_bits in checkpoint
[   78.574628][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.585483][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.587762][ T4065] device bridge_slave_0 entered promiscuous mode
[   78.611151][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.614867][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.618205][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.618630][ T4065] device bridge_slave_1 entered promiscuous mode
[   78.642044][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.656498][ T4061] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   78.661825][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.663626][ T4061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   78.696494][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.717705][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.738580][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.763150][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.786970][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.797250][ T4071] bio_check_eod: 1 callbacks suppressed
[   78.797265][ T4071] syz.4.1286: attempt to access beyond end of device
[   78.797265][ T4071] loop4: rw=2049, sector=53248, nr_sectors = 4096 limit=40427
[   78.803771][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.862623][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.863974][ T4071] syz.4.1286: attempt to access beyond end of device
[   78.863974][ T4071] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[   78.884150][  T402] hid-generic 0000:0005:0000.001C: unknown main item tag 0x0
[   78.898820][  T402] hid-generic 0000:0005:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   78.928521][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.935619][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.942900][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.949944][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.967476][ T1500] Bluetooth: hci0: Frame reassembly failed (-84)
[   78.994688][ T4083] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[   79.002460][ T4083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1289'.
[   79.033507][ T4080] fido_id[4080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   79.057883][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.067381][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.068757][ T4071] syz.4.1286: attempt to access beyond end of device
[   79.068757][ T4071] loop4: rw=2049, sector=57344, nr_sectors = 11104 limit=40427
[   79.106199][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.126850][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.143312][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.150389][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.181166][ T3964] syz-executor: attempt to access beyond end of device
[   79.181166][ T3964] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.196641][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.208023][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.215100][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.234842][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.249130][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.277384][ T1548] device bridge_slave_1 left promiscuous mode
[   79.284761][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.299410][ T1548] device bridge_slave_0 left promiscuous mode
[   79.310945][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.325247][ T1548] device veth1_macvtap left promiscuous mode
[   79.335482][ T1548] device veth0_vlan left promiscuous mode
[   79.369871][  T335] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   79.399416][ T4089] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   79.409855][ T4089] SELinux: failed to load policy
[   79.475268][ T4065] device veth0_vlan entered promiscuous mode
[   79.482340][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.490860][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.499156][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.507019][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.537231][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.549048][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.564127][  T335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.575516][ T4065] device veth1_macvtap entered promiscuous mode
[   79.595966][  T335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   79.596350][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.613453][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.621104][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   79.621117][   T28] audit: type=1400 audit(1757112334.751:4861): avc:  denied  { name_bind } for  pid=4102 comm="syz.8.1298" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[   79.622005][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.630683][  T335] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   79.681985][  T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   79.690284][  T335] usb 3-1: SerialNumber: syz
[   79.695265][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.703943][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.925808][  T335] usb 3-1: 0:2 : does not exist
[   79.935960][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.943426][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.951716][ T4112] device bridge_slave_0 entered promiscuous mode
[   79.958233][  T335] usb 3-1: USB disconnect, device number 14
[   79.965036][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.970473][ T3701] udevd[3701]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   79.972316][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.995343][ T4112] device bridge_slave_1 entered promiscuous mode
[   80.019864][  T633] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   80.054832][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.061921][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.069151][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.076174][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.094112][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.102131][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.109360][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.120695][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.128890][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.135925][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.144239][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.152545][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.159579][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.173657][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.182640][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.195623][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.206322][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.214375][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.215459][  T633] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   80.222510][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.232871][  T633] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8
[   80.232899][  T633] usb 5-1: config 0 interface 0 has no altsetting 0
[   80.232924][  T633] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[   80.241927][ T4112] device veth0_vlan entered promiscuous mode
[   80.250788][  T633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.270058][  T633] usb 5-1: config 0 descriptor??
[   80.272854][  T402] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   80.280824][ T4110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   80.306865][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.316167][ T4112] device veth1_macvtap entered promiscuous mode
[   80.325520][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.335733][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.459889][  T402] usb 9-1: Using ep0 maxpacket: 16
[   80.470079][  T402] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.481053][  T402] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.490848][  T402] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   80.503722][  T402] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.512898][  T402] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.523989][  T633] usb 5-1: string descriptor 0 read error: -71
[   80.524856][  T402] usb 9-1: config 0 descriptor??
[   80.535167][  T633] usbhid 5-1:0.0: can't add hid device: -71
[   80.541233][  T633] usbhid: probe of 5-1:0.0 failed with error -71
[   80.549457][  T633] usb 5-1: USB disconnect, device number 4
[   80.690476][ T1548] device bridge_slave_1 left promiscuous mode
[   80.696685][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.704177][ T1548] device bridge_slave_0 left promiscuous mode
[   80.710421][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.718403][ T1548] device veth1_macvtap left promiscuous mode
[   80.724682][ T1548] device veth0_vlan left promiscuous mode
[   80.938385][  T402] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max
[   80.948002][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   80.955297][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   80.962675][ T3874] Bluetooth: hci0: command 0x1003 tx timeout
[   80.968742][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   80.970190][ T2912] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.976181][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   80.984469][ T4078] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   80.989218][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   81.003318][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   81.010611][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   81.019866][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   81.027123][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   81.034419][  T402] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0
[   81.042315][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.049418][  T402] microsoft 0003:045E:07DA.001D: unsupported Resolution Multiplier 0
[   81.060031][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.067525][ T4133] device bridge_slave_0 entered promiscuous mode
[   81.081903][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.088959][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.096523][ T4133] device bridge_slave_1 entered promiscuous mode
[   81.146804][  T402] microsoft 0003:045E:07DA.001D: unsupported Resolution Multiplier 0
[   81.160022][  T288] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   81.161919][  T402] microsoft 0003:045E:07DA.001D: No inputs registered, leaving
[   81.185578][  T402] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[   81.197093][  T402] microsoft 0003:045E:07DA.001D: no inputs found
[   81.203695][  T402] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway
[   81.245920][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.253005][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.260285][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.267301][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.286414][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.293994][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.301395][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.310576][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.318749][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.325771][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.334265][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.342484][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.349523][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.370915][  T288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.381361][  T288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.390670][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.395879][    T6] usb 9-1: USB disconnect, device number 3
[   81.398700][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.405135][  T288] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   81.422371][  T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   81.430637][  T288] usb 3-1: SerialNumber: syz
[   81.437090][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.445849][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.454114][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.459906][  T341] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   81.462816][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.477878][ T4133] device veth0_vlan entered promiscuous mode
[   81.490808][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.500251][ T4133] device veth1_macvtap entered promiscuous mode
[   81.509685][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.519884][   T19] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   81.522470][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.536089][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.648231][  T288] usb 3-1: 0:2 : does not exist
[   81.654525][  T341] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.665786][  T341] usb 2-1: config 0 interface 0 has no altsetting 0
[   81.673527][  T288] usb 3-1: USB disconnect, device number 15
[   81.681391][  T341] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[   81.690501][  T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.699069][  T341] usb 2-1: config 0 descriptor??
[   81.706012][   T19] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[   81.715303][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.723828][   T19] usb 5-1: config 0 descriptor??
[   81.850439][ T1548] device bridge_slave_1 left promiscuous mode
[   81.856581][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.864296][ T1548] device bridge_slave_0 left promiscuous mode
[   81.870565][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.878482][ T1548] device veth1_macvtap left promiscuous mode
[   81.884842][ T1548] device veth0_vlan left promiscuous mode
[   81.973483][    T6] ==================================================================
[   81.981565][    T6] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[   81.988584][    T6] Write of size 8 at addr ffff88812ab18a00 by task kworker/0:0/6
[   81.996280][    T6] 
[   81.998593][    T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted syzkaller #0
[   82.005768][    T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   82.015808][    T6] Workqueue: ipv6_addrconf addrconf_dad_work
[   82.021798][    T6] Call Trace:
[   82.025057][    T6]  <TASK>
[   82.027975][    T6]  __dump_stack+0x21/0x24
[   82.032288][    T6]  dump_stack_lvl+0xee/0x150
[   82.036862][    T6]  ? __cfi_dump_stack_lvl+0x8/0x8
[   82.041869][    T6]  ? _raw_spin_lock+0x8e/0xe0
[   82.046537][    T6]  ? wq_worker_running+0x104/0x1a0
[   82.051635][    T6]  ? enqueue_timer+0xae/0x480
[   82.056298][    T6]  print_address_description+0x71/0x1e0
[   82.061829][    T6]  print_report+0x4a/0x60
[   82.066143][    T6]  kasan_report+0x122/0x150
[   82.070629][    T6]  ? enqueue_timer+0xae/0x480
[   82.075291][    T6]  __asan_report_store8_noabort+0x17/0x20
[   82.080996][    T6]  enqueue_timer+0xae/0x480
[   82.085488][    T6]  __mod_timer+0x79f/0xb30
[   82.089888][    T6]  add_timer+0x68/0x80
[   82.093938][    T6]  __queue_delayed_work+0x173/0x200
[   82.099142][    T6]  mod_delayed_work_on+0x74/0xe0
[   82.104061][    T6]  addrconf_mod_dad_work+0x7d/0x120
[   82.109304][    T6]  addrconf_dad_work+0x933/0x14b0
[   82.114346][    T6]  ? __kasan_check_write+0x14/0x20
[   82.119462][    T6]  ? __cfi_addrconf_dad_work+0x10/0x10
[   82.124912][    T6]  ? __kasan_check_write+0x14/0x20
[   82.130010][    T6]  ? _raw_spin_lock_irq+0x8f/0xe0
[   82.135016][    T6]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   82.140542][    T6]  ? pwq_dec_nr_in_flight+0x18c/0x3c0
[   82.145899][    T6]  process_one_work+0x71f/0xc40
[   82.150730][    T6]  worker_thread+0xa29/0x11f0
[   82.155389][    T6]  kthread+0x281/0x320
[   82.159439][    T6]  ? __cfi_worker_thread+0x10/0x10
[   82.164533][    T6]  ? __cfi_kthread+0x10/0x10
[   82.169105][    T6]  ret_from_fork+0x1f/0x30
[   82.173506][    T6]  </TASK>
[   82.176513][    T6] 
[   82.178839][    T6] Allocated by task 4078:
[   82.183155][    T6]  kasan_set_track+0x4b/0x70
[   82.187746][    T6]  kasan_save_alloc_info+0x25/0x30
[   82.192845][    T6]  __kasan_kmalloc+0x95/0xb0
[   82.197415][    T6]  __kmalloc+0xb1/0x1e0
[   82.201578][    T6]  hci_alloc_dev_priv+0x27/0x1bd0
[   82.206582][    T6]  hci_uart_tty_ioctl+0x3d6/0xa20
[   82.211588][    T6]  tty_ioctl+0x8ef/0xc60
[   82.215809][    T6]  __se_sys_ioctl+0x12f/0x1b0
[   82.220471][    T6]  __x64_sys_ioctl+0x7b/0x90
[   82.225061][    T6]  x64_sys_call+0x58b/0x9a0
[   82.229546][    T6]  do_syscall_64+0x4c/0xa0
[   82.233942][    T6]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.239816][    T6] 
[   82.242122][    T6] Freed by task 4078:
[   82.246077][    T6]  kasan_set_track+0x4b/0x70
[   82.250646][    T6]  kasan_save_free_info+0x31/0x50
[   82.255652][    T6]  ____kasan_slab_free+0x132/0x180
[   82.260744][    T6]  __kasan_slab_free+0x11/0x20
[   82.265486][    T6]  slab_free_freelist_hook+0xc2/0x190
[   82.270840][    T6]  __kmem_cache_free+0xb7/0x1b0
[   82.275670][    T6]  kfree+0x6f/0xf0
[   82.279380][    T6]  hci_release_dev+0x12a3/0x13b0
[   82.284299][    T6]  bt_host_release+0x82/0x90
[   82.288868][    T6]  device_release+0xa4/0x1d0
[   82.293436][    T6]  kobject_put+0x19d/0x280
[   82.297830][    T6]  put_device+0x1f/0x30
[   82.302000][    T6]  hci_dev_cmd+0x265/0x720
[   82.306418][    T6]  hci_sock_ioctl+0x41e/0x7f0
[   82.311083][    T6]  sock_do_ioctl+0x101/0x310
[   82.315666][    T6]  sock_ioctl+0x4d8/0x6e0
[   82.319985][    T6]  __se_sys_ioctl+0x12f/0x1b0
[   82.324682][    T6]  __x64_sys_ioctl+0x7b/0x90
[   82.329250][    T6]  x64_sys_call+0x58b/0x9a0
[   82.333737][    T6]  do_syscall_64+0x4c/0xa0
[   82.338132][    T6]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.344007][    T6] 
[   82.346309][    T6] Last potentially related work creation:
[   82.352000][    T6]  kasan_save_stack+0x3a/0x60
[   82.356659][    T6]  __kasan_record_aux_stack+0xb6/0xc0
[   82.362012][    T6]  kasan_record_aux_stack_noalloc+0xb/0x10
[   82.367802][    T6]  insert_work+0x51/0x300
[   82.372116][    T6]  __queue_work+0x9b1/0xd30
[   82.376599][    T6]  queue_work_on+0xd2/0x140
[   82.381098][    T6]  __hci_cmd_sync_sk+0xa3e/0xcf0
[   82.386015][    T6]  hci_cmd_sync_status+0x53/0x120
[   82.391016][    T6]  hci_dev_cmd+0x33b/0x720
[   82.395423][    T6]  hci_sock_ioctl+0x41e/0x7f0
[   82.400091][    T6]  sock_do_ioctl+0x101/0x310
[   82.404668][    T6]  sock_ioctl+0x4d8/0x6e0
[   82.408981][    T6]  __se_sys_ioctl+0x12f/0x1b0
[   82.413633][    T6]  __x64_sys_ioctl+0x7b/0x90
[   82.418201][    T6]  x64_sys_call+0x58b/0x9a0
[   82.422687][    T6]  do_syscall_64+0x4c/0xa0
[   82.427168][    T6]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.433059][    T6] 
[   82.435400][    T6] Second to last potentially related work creation:
[   82.441962][    T6]  kasan_save_stack+0x3a/0x60
[   82.446630][    T6]  __kasan_record_aux_stack+0xb6/0xc0
[   82.451990][    T6]  kasan_record_aux_stack_noalloc+0xb/0x10
[   82.457784][    T6]  insert_work+0x51/0x300
[   82.462102][    T6]  __queue_work+0x9b1/0xd30
[   82.466586][    T6]  queue_work_on+0xd2/0x140
[   82.471069][    T6]  hci_cmd_timeout+0x191/0x200
[   82.475812][    T6]  process_one_work+0x71f/0xc40
[   82.480638][    T6]  worker_thread+0xa29/0x11f0
[   82.485295][    T6]  kthread+0x281/0x320
[   82.489341][    T6]  ret_from_fork+0x1f/0x30
[   82.493736][    T6] 
[   82.496039][    T6] The buggy address belongs to the object at ffff88812ab18000
[   82.496039][    T6]  which belongs to the cache kmalloc-8k of size 8192
[   82.510071][    T6] The buggy address is located 2560 bytes inside of
[   82.510071][    T6]  8192-byte region [ffff88812ab18000, ffff88812ab1a000)
[   82.523497][    T6] 
[   82.525797][    T6] The buggy address belongs to the physical page:
[   82.532191][    T6] page:ffffea0004aac600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12ab18
[   82.542415][    T6] head:ffffea0004aac600 order:3 compound_mapcount:0 compound_pincount:0
[   82.550716][    T6] flags: 0x4000000000010200(slab|head|zone=1)
[   82.556776][    T6] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500
[   82.565339][    T6] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   82.573899][    T6] page dumped because: kasan: bad access detected
[   82.580298][    T6] page_owner tracks the page as allocated
[   82.585987][    T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 402, tgid 402 (kworker/1:4), ts 78896426821, free_ts 77542494961
[   82.608457][    T6]  post_alloc_hook+0x1f5/0x210
[   82.613220][    T6]  prep_new_page+0x1c/0x110
[   82.617717][    T6]  get_page_from_freelist+0x2c7b/0x2cf0
[   82.623246][    T6]  __alloc_pages+0x1c3/0x450
[   82.627817][    T6]  alloc_slab_page+0x6e/0xf0
[   82.632389][    T6]  new_slab+0x98/0x3d0
[   82.636446][    T6]  ___slab_alloc+0x6f6/0xb50
[   82.641020][    T6]  __slab_alloc+0x5e/0xa0
[   82.645330][    T6]  __kmem_cache_alloc_node+0x203/0x2c0
[   82.650770][    T6]  kmalloc_trace+0x29/0xb0
[   82.655175][    T6]  uhid_hid_start+0x77/0x520
[   82.659755][    T6]  hid_hw_start+0x7a/0x150
[   82.664155][    T6]  hid_generic_probe+0x68/0x90
[   82.668897][    T6]  hid_device_probe+0x268/0x390
[   82.673729][    T6]  really_probe+0x2cb/0x960
[   82.678214][    T6]  __driver_probe_device+0x198/0x280
[   82.683486][    T6] page last free stack trace:
[   82.688136][    T6]  free_unref_page_prepare+0x742/0x750
[   82.693575][    T6]  free_unref_page+0x8f/0x530
[   82.698235][    T6]  free_compound_page+0x99/0xd0
[   82.703064][    T6]  destroy_large_folio+0x68/0xa0
[   82.707984][    T6]  __folio_put+0xd1/0xe0
[   82.712214][    T6]  skb_release_data+0x47f/0x890
[   82.717050][    T6]  __kfree_skb+0x50/0x70
[   82.721278][    T6]  __tcp_close+0x226/0xe90
[   82.725675][    T6]  tcp_close+0x29/0x110
[   82.729813][    T6]  inet_release+0x1ac/0x2a0
[   82.734293][    T6]  sock_close+0xf1/0x290
[   82.738515][    T6]  __fput+0x1fc/0x8f0
[   82.742475][    T6]  ____fput+0x15/0x20
[   82.746437][    T6]  task_work_run+0x1db/0x240
[   82.751012][    T6]  get_signal+0x12e6/0x1520
[   82.755498][    T6]  arch_do_signal_or_restart+0xb0/0x1030
[   82.761118][    T6] 
[   82.763421][    T6] Memory state around the buggy address:
[   82.769026][    T6]  ffff88812ab18900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.777067][    T6]  ffff88812ab18980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.785116][    T6] >ffff88812ab18a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.793155][    T6]                    ^
[   82.797203][    T6]  ffff88812ab18a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.805245][    T6]  ffff88812ab18b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.813283][    T6] ==================================================================
[   82.821321][    T6] Disabling lock debugging due to kernel taint
[   82.831453][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
[   82.832202][   T28] audit: type=1400 audit(1757112337.961:4862): avc:  denied  { write } for  pid=275 comm="syz-executor" path="pipe:[13753]" dev="pipefs" ino=13753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   82.838532][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.870931][   T19] smartjoyplus 0003:0925:8866.001F: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0
[   82.883249][   T19] smartjoyplus 0003:0925:8866.001F: Force feedback for SmartJoy PLUS PS2/USB adapter
[   82.971071][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
[   82.977991][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
[   83.000402][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
[   83.007313][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
[   83.029885][  T341] wacom 0003:056A:00BA.001E: unknown main item tag 0x0
[   83.037033][  T341] wacom 0003:056A:00BA.001E: Unknown device_type for 'HID 056a:00ba'. Assuming pen.
[   83.046557][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   83.046578][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   83.046591][    C0] CPU: 0 PID: 341 Comm: kworker/0:3 Tainted: G    B              syzkaller #0
[   83.046608][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   83.046617][    C0] Workqueue: usb_hub_wq hub_event
[   83.046646][    C0] RIP: 0010:__queue_work+0x575/0xd30
[   83.046670][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dd 28 00 4c 89 ff e8 a0 80 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 6c 43 6d 00 49 8b 7d 00 e8 83 7c
[   83.046686][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[   83.046701][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881143fd100
[   83.046714][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   83.046726][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[   83.046738][    C0] R10: ffffed1025563139 R11: 1ffff11025563139 R12: dffffc0000000000
[   83.046752][    C0] R13: 0000000000000000 R14: ffff88812ab189c8 R15: 0000000000000008
[   83.046764][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   83.046780][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.046793][    C0] CR2: 00007f69e5907008 CR3: 000000010f633000 CR4: 00000000003506b0
[   83.046809][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   83.046820][    C0] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   83.046831][    C0] Call Trace:
[   83.046837][    C0]  <IRQ>
[   83.046846][    C0]  delayed_work_timer_fn+0x61/0x80
[   83.046869][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   83.046891][    C0]  call_timer_fn+0x46/0x2a0
[   83.046913][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   83.046936][    C0]  __run_timers+0x667/0x9a0
[   83.046966][    C0]  ? calc_index+0x200/0x200
[   83.046990][    C0]  ? kvm_sched_clock_read+0x18/0x40
[   83.047015][    C0]  run_timer_softirq+0x6a/0xf0
[   83.047036][    C0]  handle_softirqs+0x1d7/0x600
[   83.047056][    C0]  ? irqtime_account_irq+0xc4/0x240
[   83.047081][    C0]  __irq_exit_rcu+0x52/0xf0
[   83.047099][    C0]  irq_exit_rcu+0x9/0x10
[   83.047116][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   83.047138][    C0]  </IRQ>
[   83.047143][    C0]  <TASK>
[   83.047149][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   83.047170][    C0] RIP: 0010:console_emit_next_record+0x9e3/0xbc0
[   83.047203][    C0] Code: de 48 81 e6 00 02 00 00 31 ff e8 e8 49 19 00 48 81 e3 00 02 00 00 75 07 e8 1a 45 19 00 eb 06 e8 13 45 19 00 fb 0f b6 5c 24 07 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4b c7 04 2e 00 00 00 00 4b c7
[   83.047217][    C0] RSP: 0018:ffffc9000de3df00 EFLAGS: 00000283
[   83.047230][    C0] RAX: ffffffff8156c44d RBX: 0000000000000001 RCX: 0000000000100000
[   83.047243][    C0] RDX: ffffc9000e9cf000 RSI: 00000000000f2551 RDI: 00000000000f2552
[   83.047255][    C0] RBP: ffffc9000de3e110 R08: 0000000000000004 R09: 0000000000000003
[   83.047266][    C0] R10: fffff52001bc7bd0 R11: 1ffff92001bc7bd0 R12: ffffc9000de3e15f
[   83.047280][    C0] R13: dffffc0000000000 R14: 1ffff92001bc7bf0 R15: 0000000000000069
[   83.047294][    C0]  ? console_emit_next_record+0x9dd/0xbc0
[   83.047320][    C0]  ? __kasan_check_write+0x14/0x20
[   83.047347][    C0]  ? info_print_prefix+0x300/0x300
[   83.047372][    C0]  ? _raw_spin_lock_irqsave+0xb0/0x110
[   83.047399][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   83.047425][    C0]  ? __cfi_vprintk_store+0x10/0x10
[   83.047446][    C0]  console_unlock+0x23d/0x550
[   83.047463][    C0]  ? down_trylock+0x52/0xb0
[   83.047483][    C0]  ? __cfi_console_unlock+0x10/0x10
[   83.047503][    C0]  ? snprintf+0xd7/0x120
[   83.047519][    C0]  vprintk_emit+0x14d/0x410
[   83.047538][    C0]  ? __cfi_vprintk_emit+0x10/0x10
[   83.047555][    C0]  ? format_decode+0xbee/0x1520
[   83.047573][    C0]  ? dev_vprintk_emit+0x15c/0x3d8
[   83.047597][    C0]  dev_vprintk_emit+0x330/0x3d8
[   83.047619][    C0]  ? __cfi_dev_vprintk_emit+0x8/0x8
[   83.047644][    C0]  dev_printk_emit+0xdd/0x120
[   83.047667][    C0]  ? usb_probe_interface+0x610/0xaf0
[   83.047691][    C0]  ? really_probe+0x2cb/0x960
[   83.047707][    C0]  ? __driver_probe_device+0x198/0x280
[   83.047732][    C0]  ? kfree_const+0x39/0x40
[   83.047757][    C0]  ? __cfi_dev_printk_emit+0x8/0x8
[   83.047779][    C0]  ? kfree_const+0x39/0x40
[   83.047803][    C0]  __dev_printk+0x17f/0x1b0
[   83.047819][    C0]  _dev_warn+0x107/0x150
[   83.047842][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   83.047869][    C0]  ? __cfi__dev_warn+0x8/0x8
[   83.047891][    C0]  ? add_dr+0xdd/0x290
[   83.047917][    C0]  wacom_parse_and_register+0x5600/0x65f0
[   83.047936][    C0]  ? debug_smp_processor_id+0x17/0x20
[   83.047960][    C0]  ? __kmem_cache_free+0xb7/0x1b0
[   83.047982][    C0]  ? slab_free_freelist_hook+0xc2/0x190
[   83.048010][    C0]  ? wacom_mode_change_work+0x470/0x470
[   83.048028][    C0]  ? __vunmap+0xab0/0xb70
[   83.048043][    C0]  ? __cfi_bpf_trace_run2+0x10/0x10
[   83.048066][    C0]  ? hid_open_report+0xa5f/0xec0
[   83.048084][    C0]  ? vunmap+0x60/0x60
[   83.048099][    C0]  ? hid_open_report+0xa5f/0xec0
[   83.048114][    C0]  ? __bpf_trace_kfree+0x6f/0x90
[   83.048136][    C0]  ? vfree+0x61/0x90
[   83.048149][    C0]  ? hid_open_report+0xa67/0xec0
[   83.048166][    C0]  ? __cfi_hid_open_report+0x10/0x10
[   83.048189][    C0]  ? memset+0x35/0x40
[   83.048212][    C0]  ? init_timer_key+0x8b/0x1b0
[   83.048230][    C0]  wacom_probe+0x736/0x950
[   83.048246][    C0]  ? __cfi_wacom_probe+0x10/0x10
[   83.048263][    C0]  hid_device_probe+0x268/0x390
[   83.048282][    C0]  ? __cfi_hid_device_probe+0x10/0x10
[   83.048301][    C0]  really_probe+0x2cb/0x960
[   83.048318][    C0]  ? pm_runtime_barrier+0x161/0x1e0
[   83.048339][    C0]  __driver_probe_device+0x198/0x280
[   83.048364][    C0]  driver_probe_device+0x54/0x3e0
[   83.048379][    C0]  ? __device_attach_driver+0x2d3/0x4a0
[   83.048396][    C0]  __device_attach_driver+0x2e9/0x4a0
[   83.048413][    C0]  ? __cfi___device_attach_driver+0x10/0x10
[   83.048429][    C0]  bus_for_each_drv+0x183/0x210
[   83.048448][    C0]  ? __kasan_check_write+0x14/0x20
[   83.048474][    C0]  ? __cfi_bus_for_each_drv+0x10/0x10
[   83.048495][    C0]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   83.048512][    C0]  __device_attach+0x2a2/0x400
[   83.048535][    C0]  ? __kmem_cache_free+0xb7/0x1b0
[   83.048556][    C0]  ? device_attach+0x20/0x20
[   83.048579][    C0]  ? kfree+0x6f/0xf0
[   83.048603][    C0]  ? kobject_uevent_env+0x35d/0x730
[   83.048625][    C0]  device_initial_probe+0x1a/0x20
[   83.048649][    C0]  bus_probe_device+0xc0/0x1f0
[   83.048669][    C0]  device_add+0xb4d/0xef0
[   83.048693][    C0]  hid_add_device+0x38f/0x540
[   83.048713][    C0]  usbhid_probe+0xbb6/0xfa0
[   83.048736][    C0]  usb_probe_interface+0x610/0xaf0
[   83.048761][    C0]  ? __cfi_usb_probe_interface+0x10/0x10
[   83.048786][    C0]  really_probe+0x2cb/0x960
[   83.048802][    C0]  ? pm_runtime_barrier+0x161/0x1e0
[   83.048822][    C0]  __driver_probe_device+0x198/0x280
[   83.048848][    C0]  driver_probe_device+0x54/0x3e0
[   83.048864][    C0]  ? __device_attach_driver+0x2d3/0x4a0
[   83.048880][    C0]  __device_attach_driver+0x2e9/0x4a0
[   83.048895][    C0]  ? __cfi___device_attach_driver+0x10/0x10
[   83.048913][    C0]  bus_for_each_drv+0x183/0x210
[   83.048932][    C0]  ? __kasan_check_write+0x14/0x20
[   83.048957][    C0]  ? __cfi_bus_for_each_drv+0x10/0x10
[   83.048978][    C0]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   83.048996][    C0]  __device_attach+0x2a2/0x400
[   83.049020][    C0]  ? device_attach+0x20/0x20
[   83.049043][    C0]  ? kobject_uevent_env+0x35d/0x730
[   83.049064][    C0]  device_initial_probe+0x1a/0x20
[   83.049089][    C0]  bus_probe_device+0xc0/0x1f0
[   83.049109][    C0]  device_add+0xb4d/0xef0
[   83.049134][    C0]  usb_set_configuration+0x19c2/0x1f10
[   83.049163][    C0]  usb_generic_driver_probe+0x91/0x150
[   83.049192][    C0]  usb_probe_device+0x159/0x270
[   83.049216][    C0]  ? __cfi_usb_probe_device+0x10/0x10
[   83.049239][    C0]  really_probe+0x2cb/0x960
[   83.049255][    C0]  ? pm_runtime_barrier+0x161/0x1e0
[   83.049275][    C0]  __driver_probe_device+0x198/0x280
[   83.049302][    C0]  driver_probe_device+0x54/0x3e0
[   83.049317][    C0]  ? __device_attach_driver+0x2d3/0x4a0
[   83.049334][    C0]  __device_attach_driver+0x2e9/0x4a0
[   83.049349][    C0]  ? __cfi___device_attach_driver+0x10/0x10
[   83.049366][    C0]  bus_for_each_drv+0x183/0x210
[   83.049385][    C0]  ? __kasan_check_write+0x14/0x20
[   83.049411][    C0]  ? __cfi_bus_for_each_drv+0x10/0x10
[   83.049431][    C0]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   83.049449][    C0]  __device_attach+0x2a2/0x400
[   83.049475][    C0]  ? device_attach+0x20/0x20
[   83.049500][    C0]  device_initial_probe+0x1a/0x20
[   83.049525][    C0]  bus_probe_device+0xc0/0x1f0
[   83.049545][    C0]  device_add+0xb4d/0xef0
[   83.049571][    C0]  usb_new_device+0xa70/0x1520
[   83.049595][    C0]  ? __cfi_usb_new_device+0x10/0x10
[   83.049617][    C0]  hub_event+0x2850/0x4350
[   83.049640][    C0]  ? debug_smp_processor_id+0x17/0x20
[   83.049673][    C0]  ? __cfi_hub_event+0x10/0x10
[   83.049694][    C0]  ? __kasan_check_write+0x14/0x20
[   83.049719][    C0]  ? _raw_spin_lock_irq+0x8f/0xe0
[   83.049734][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   83.049751][    C0]  ? pwq_dec_nr_in_flight+0x18c/0x3c0
[   83.049779][    C0]  process_one_work+0x71f/0xc40
[   83.049800][    C0]  worker_thread+0xa29/0x11f0
[   83.049819][    C0]  kthread+0x281/0x320
[   83.049836][    C0]  ? __cfi_worker_thread+0x10/0x10
[   83.049851][    C0]  ? __cfi_kthread+0x10/0x10
[   83.049869][    C0]  ret_from_fork+0x1f/0x30
[   83.049892][    C0]  </TASK>
[   83.049904][    C0] Modules linked in:
[   83.049918][    C0] ---[ end trace 0000000000000000 ]---
[   83.049925][    C0] RIP: 0010:__queue_work+0x575/0xd30
[   83.049947][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dd 28 00 4c 89 ff e8 a0 80 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 6c 43 6d 00 49 8b 7d 00 e8 83 7c
[   83.049961][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[   83.049975][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881143fd100
[   83.049986][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   83.049998][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[   83.050010][    C0] R10: ffffed1025563139 R11: 1ffff11025563139 R12: dffffc0000000000
[   83.050023][    C0] R13: 0000000000000000 R14: ffff88812ab189c8 R15: 0000000000000008
[   83.050035][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   83.050049][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.050063][    C0] CR2: 00007f69e5907008 CR3: 000000010f633000 CR4: 00000000003506b0
[   83.050077][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   83.050088][    C0] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   83.050100][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[   83.050325][    C0] Kernel Offset: disabled
[   84.100206][    C0] Rebooting in 86400 seconds..