last executing test programs:

3.104374036s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000))
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')

2.977311674s ago: executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402f170200000000000001090224030100000000090400000103000000092100000007220500090581030000000000"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3, 0x4, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00), 0x0}, 0x0)

2.93858938s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0)

2.927418761s ago: executing program 0:
r0 = socket(0x10, 0x3, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0)

2.891713896s ago: executing program 0:
openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0)

2.459614328s ago: executing program 4:
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0)

2.436583281s ago: executing program 4:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = dup(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

1.556714837s ago: executing program 4:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = dup(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

1.46707352s ago: executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = dup(r0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4)
dup3(r2, r3, 0x0)

1.444268023s ago: executing program 4:
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0)
socket(0x2, 0x2, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
signalfd4(r0, &(0x7f0000000140), 0x8, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlockall(0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000002"], 0x1c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

600.587564ms ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010401010000000000010000000000200500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x5}, 0x14}}, 0x0)

591.671815ms ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

571.108498ms ago: executing program 2:
r0 = io_uring_setup(0x79bf, &(0x7f0000000180))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
accept$inet6(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

566.695699ms ago: executing program 1:
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x5543, &(0x7f0000003780)="$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")
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0)
lseek(r0, 0xffff, 0x0)
ftruncate(r1, 0x1f)
write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000880)=""/150, 0x96)
write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003)

554.578861ms ago: executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008060001080006040002"], 0x0)

534.591014ms ago: executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x80048a, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x7, 0x2b2, &(0x7f0000004080)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)

485.0532ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9d}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

460.415864ms ago: executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newae={0x64, 0x1e, 0x1, 0x0, 0x0, {{@in6=@private1}, @in6=@mcast2}, [@lifetime_val={0x24}]}, 0x64}}, 0x0)

442.058517ms ago: executing program 2:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xd2, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xad, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000f1ffff07000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000680)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

432.272258ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70)

411.847951ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

361.659378ms ago: executing program 3:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5524, &(0x7f0000007200)="$eJzs3M1rI2UcB/Anfdnum2sRD946sAgtbELTl0VvVXfxBbuUVQ+eNE2mIbtJpjRpWnvy4FE8+J+IgieP/g0ePHsTD4o3oZJ5prtbtSA2bdzu5wOT78yTyW+eJywLv5mSADyzZpPffy2FG+FKCGEyhHA9hHy/VGy5tRgvhRDmQggTT2ylYvzRwKUQwtUQwo1h8VizVLz15a3BzdVf3vntux9mpq599e2P41s1MG4vhxA623F/rxMza8Z8UIzXBq08OyuDIuMbnYfFcRZzL93MK+zVjs6r5bncjOdn27u9YW61a/VhNltb+fh2N16wN2ge1ck/8KC2kx830s08W70sz+ZBnNf+Qfzf8aDXj3UaRb1P8vKh3z/KOJ7up3E92w/zrHcPJ+N4rJs10v1hDoosLhfqWbuRz2PzFF/0/9y7re7ufjJId3qtrJusVqqvVKq3y9WdrJH205VyrdO4vZLMN9vD08r9tNZZa2ZZs51W6llnIZlv1uvlajWZv5NutmrdpFqtLFcWy6sLxd6t5M17HyTtRjI/zNdb3d1+q91LtrKdJH5iIVmqLL+6kNysJu+tbyQb9+/eXd94P9z58N5r62+/UZz0t2kl80uLS0vl6mJ5qbpwYdY/92j9H52w/s+KSY9w/XAqpXFPAODpo/8HxuHs+v+d++HwMB8fXf8/k+fj/j/mf+//+8W4/n9U/e/hKPv/k/rfi93/j2X9cCr6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ9ZP01+/le/MxuNrxfhzxdALxXEphDARQjj8B5Ph0rGak0Wd6RPOn/7LHL4vhbzC8BozxXY1hLBWbH88f9bfAgAAAFxc33w690Xs1uPL7LgnxHmKN20mrn88onqlEML07M8jqjYxfHlxRMXyf99TYX9E1fIbWJdHVCzecpsaVbV/ZfJYXH4iSjEmznU6AADAuTjeCZxvFwIAAMB5+nzcE2A8SuHoUebRs+D8L+8fPxC8cuwIAAAAeAqVxj0BAAAA4Mzl/b/f/wMAAICLLf7+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cc793OjNhDFAfjZxoH8U1CUe1rhBmWkhBxzjCggTVACaSENUAO5pYQIVni8aFmxq5U8tndX3yfBMBb8mEH4MG+kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD79rber3z+//uqaczh2k2c2AAAAwDX7ertqXsxT/317/WN76XPbLyKijIhra/cq3lxkVm1O/cD763tj+BPRJJy+Y9o+3kXEoopYRMT/T33/CgAAAPB67dabZVqtp6f52ANiSKloU374limviIh6/i9TWnnK+5IprPl/T+JHprSmgDXLFJZKbpNcaU/S3O7nqt3sTlOkpnz889nmDgAADKi6aIZdhQAAADCk72MPgHEUcbuVed4KnKam3d57e9EDAAAAXqBi7AEAAAAAvWvW/8/6/L9w/h8AAAB0lc7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE/7ervarTfLrjmHYzd5ZgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMP+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xpHFQcA/M3MzsZWxTXKHiKi4EEvNt3W1t7EgxI8+CcIId3W2FWx5mBLEXLxJjn3InoUEZR46//Qcwu91FsPe6jgwdPKzM4kr23E9UdnNtnPB9687w7DvO+bhZDvvJcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALXx2/txVhx60zitzt26f22j6G8/1Bdu7NxZKVoRJ00mfTi8GH9I+u0lAgAAwOLI6vo+hHA3310r+rRX1v95fU1R83/79DSu6/mH6/66r2v/ov3y873n9wbqTccpbnphczQ8+Wgqncc3y/n2zN9e0SmffPnuJSu/kPS97efGefk8k69v3nynW4ZLTWQLAPwbJ+q+Curfh4p+0GZiACyMTlR41/V/1ms3JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAmjLfDk3WchBBWOvtx4fb9axsH9Td27qzU7ez16zvxPYtb5CGEC5uj4ckG5zLvPr9y9dL6aDS83HzwUgihrdHfqqZ/6YMZLg6hlecj+J+CtPqy5yWfwxG0+EMJAIAjKa9aUdffzXfXinPJcgiT7x6s/1+N4jBj/X/vw7O34rHi+n/Q2AxbtBTF6V9ftrr1x2QyuXL19c2P1y8OLw4/eePU4M3B6XNnzpxbLd+VrHpjAgAAwH/TrVpc/6fLj67/H4/iMGP9/9k3gy/jsbJFq/9ntL/o13YmAAAAi+3Zl3//LTngfNLthi/Wt7YuD6bHvc+npscWUv3HlqoW1//ZcttZAQAAAE0YbycPrP+fj+Iw4/r/U9+/8GN8zyyEcKxa/z+x8enofHPTmWtN/Dlx23MEAACgXceqFq//5+X+/3Rvy0MaQnjtlWlc/RvAmer/7N2vfojHivf/n25uinMp7U+fR9n3Q+j0284IAACAo+yJqhXF/q/57tpHPx1/v2v/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/gwAAP//vE9Crw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000406)
truncate(&(0x7f0000000240)='./file0\x00', 0xa000a0)
open(&(0x7f00000000c0)='.\x00', 0x498003, 0x0)

341.689341ms ago: executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010401010000000000010000000000200500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x5}, 0x14}}, 0x0)

318.741694ms ago: executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402f170200000000000001090224030100000000090400000103000000092100000007220500090581030000000000"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3, 0x4, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00), 0x0}, 0x0)

264.750832ms ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

221.157998ms ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)

180.378484ms ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')

111.276694ms ago: executing program 1:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002200)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fec000/0x10000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x10000})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

50.777892ms ago: executing program 1:
r0 = io_uring_setup(0x79bf, &(0x7f0000000180))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
accept$inet6(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 0:
r0 = gettid()
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0)
read$hiddev(r1, &(0x7f0000000000)=""/59, 0x3b)

kernel console output (not intermixed with test programs):

k becomes ready
[  146.620335][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.627991][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.636416][ T5315] device veth0_vlan entered promiscuous mode
[  146.649795][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  146.659153][ T5315] device veth1_macvtap entered promiscuous mode
[  146.670078][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.685865][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.705105][ T5330] loop3: detected capacity change from 0 to 128
[  146.717705][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.740160][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.751825][    T6] usb 3-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00
[  146.760926][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.769407][    T6] usb 3-1: config 0 descriptor??
[  146.829051][   T45] device bridge_slave_1 left promiscuous mode
[  146.840639][ T5029] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  146.850343][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.857952][   T45] device bridge_slave_0 left promiscuous mode
[  146.863909][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.871396][ T5029] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  146.884327][   T45] device veth1_macvtap left promiscuous mode
[  146.890485][   T45] device veth0_vlan left promiscuous mode
[  147.125606][ T5346] fuse: Bad value for 'fd'
[  147.327378][ T5355] syz-executor.0[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.327441][ T5355] syz-executor.0[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.330002][    T6] wacom 0003:056A:030A.0014: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.2-1/input0
[  147.525301][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.532199][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.539503][    T6] usb 3-1: USB disconnect, device number 11
[  147.548643][ T5358] device bridge_slave_0 entered promiscuous mode
[  147.563640][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.576870][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.584431][ T5358] device bridge_slave_1 entered promiscuous mode
[  147.664943][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.671916][ T5358] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.679024][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.685772][ T5358] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.724273][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.731940][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.739567][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.751026][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.759128][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.765991][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.773469][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.781440][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.788292][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.804190][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.818965][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.836807][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.850697][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.858825][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.866146][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.877475][ T5358] device veth0_vlan entered promiscuous mode
[  147.891005][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.900611][ T5358] device veth1_macvtap entered promiscuous mode
[  147.915045][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.933868][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  148.184119][   T30] kauditd_printk_skb: 52 callbacks suppressed
[  148.184133][   T30] audit: type=1326 audit(2000000035.520:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  148.224634][   T30] audit: type=1326 audit(2000000035.520:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  148.263965][   T30] audit: type=1326 audit(2000000035.550:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  148.288280][   T30] audit: type=1326 audit(2000000035.560:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  148.312828][   T45] device bridge_slave_1 left promiscuous mode
[  148.322019][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.336085][   T45] device bridge_slave_0 left promiscuous mode
[  148.343602][   T30] audit: type=1326 audit(2000000035.560:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  148.355985][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.374706][ T5412] loop3: detected capacity change from 0 to 256
[  148.389430][   T45] device veth1_macvtap left promiscuous mode
[  148.400428][   T45] device veth0_vlan left promiscuous mode
[  148.424921][ T5412] FAT-fs (loop3): Directory bread(block 64) failed
[  148.437650][ T5412] FAT-fs (loop3): Directory bread(block 65) failed
[  148.447634][ T5141] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  148.449509][ T5412] FAT-fs (loop3): Directory bread(block 66) failed
[  148.470026][   T30] audit: type=1400 audit(2000000035.810:3449): avc:  denied  { read } for  pid=5426 comm="syz-executor.1" name="/" dev="configfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.475295][ T5412] FAT-fs (loop3): Directory bread(block 67) failed
[  148.505409][ T5429] syz-executor.1[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.505487][ T5429] syz-executor.1[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.516482][   T30] audit: type=1400 audit(2000000035.810:3450): avc:  denied  { open } for  pid=5426 comm="syz-executor.1" path="/file0/root/syzkaller-testdir3101686024/syzkaller.llCkJl/471/file0" dev="configfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.517473][ T5412] FAT-fs (loop3): Directory bread(block 68) failed
[  148.539872][   T30] audit: type=1400 audit(2000000035.810:3451): avc:  denied  { unmount } for  pid=313 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  148.583151][ T5412] FAT-fs (loop3): Directory bread(block 69) failed
[  148.591485][ T5412] FAT-fs (loop3): Directory bread(block 70) failed
[  148.605198][ T5412] FAT-fs (loop3): Directory bread(block 71) failed
[  148.612013][ T5412] FAT-fs (loop3): Directory bread(block 72) failed
[  148.626690][ T5412] FAT-fs (loop3): Directory bread(block 73) failed
[  148.719246][   T30] audit: type=1326 audit(2000000036.060:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f86ec9ea9 code=0x7ffc0000
[  148.758558][ T5438] SELinux: security_context_str_to_sid(Õ) failed for (dev ?, type ?) errno=-22
[  148.767552][   T30] audit: type=1326 audit(2000000036.060:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f2f86ec9ea9 code=0x7ffc0000
[  148.791647][ T5141] usb 3-1: device descriptor read/64, error -71
[  148.798797][ T5438] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  149.056498][ T5457] loop3: detected capacity change from 0 to 256
[  149.093582][ T5457] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.358370][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  149.404110][ T5470] loop4: detected capacity change from 0 to 256
[  149.411948][ T5472] syz-executor.1[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.412045][ T5472] syz-executor.1[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.475536][ T5470] FAT-fs (loop4): Directory bread(block 64) failed
[  149.497603][ T5141] usb 3-1: device descriptor read/64, error -71
[  149.507735][ T5470] FAT-fs (loop4): Directory bread(block 65) failed
[  149.514409][ T5470] FAT-fs (loop4): Directory bread(block 66) failed
[  149.522337][ T5470] FAT-fs (loop4): Directory bread(block 67) failed
[  149.528942][ T5470] FAT-fs (loop4): Directory bread(block 68) failed
[  149.535487][ T5470] FAT-fs (loop4): Directory bread(block 69) failed
[  149.541905][ T5470] FAT-fs (loop4): Directory bread(block 70) failed
[  149.548945][ T5470] FAT-fs (loop4): Directory bread(block 71) failed
[  149.555457][ T5470] FAT-fs (loop4): Directory bread(block 72) failed
[  149.575622][ T5470] FAT-fs (loop4): Directory bread(block 73) failed
[  149.768400][ T5141] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  149.888243][ T5501] loop3: detected capacity change from 0 to 256
[  149.916122][ T5501] FAT-fs (loop3): Directory bread(block 64) failed
[  149.922645][ T5501] FAT-fs (loop3): Directory bread(block 65) failed
[  149.929116][ T5501] FAT-fs (loop3): Directory bread(block 66) failed
[  149.935481][ T5501] FAT-fs (loop3): Directory bread(block 67) failed
[  149.941865][ T5501] FAT-fs (loop3): Directory bread(block 68) failed
[  149.948425][ T5501] FAT-fs (loop3): Directory bread(block 69) failed
[  149.949112][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.957594][ T5501] FAT-fs (loop3): Directory bread(block 70) failed
[  149.963519][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.975012][ T5501] FAT-fs (loop3): Directory bread(block 71) failed
[  149.976322][ T5497] device bridge_slave_0 entered promiscuous mode
[  149.981397][ T5501] FAT-fs (loop3): Directory bread(block 72) failed
[  149.994111][ T5501] FAT-fs (loop3): Directory bread(block 73) failed
[  149.994230][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.007409][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.014703][ T5497] device bridge_slave_1 entered promiscuous mode
[  150.037769][ T5141] usb 3-1: device descriptor read/64, error -71
[  150.091184][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.098094][ T5497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.105259][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.112049][ T5497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.142463][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.150952][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.158514][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.176723][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.185009][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.191932][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.199457][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.207684][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.214554][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.232093][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.241298][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.257441][ T5497] device veth0_vlan entered promiscuous mode
[  150.263773][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.272080][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.279982][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.287211][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.361419][ T5516] loop3: detected capacity change from 0 to 256
[  150.501336][ T5516] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.625464][ T5497] device veth1_macvtap entered promiscuous mode
[  150.648204][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.661992][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.676667][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.701205][ T5522] SELinux: security_context_str_to_sid(Õ) failed for (dev ?, type ?) errno=-22
[  150.710977][ T5522] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  150.757633][ T5141] usb 3-1: device descriptor read/64, error -71
[  150.769521][ T5535] syz-executor.1[5535] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.769602][ T5535] syz-executor.1[5535] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.782663][    T8] device bridge_slave_1 left promiscuous mode
[  150.806065][ T5532] loop4: detected capacity change from 0 to 512
[  150.806828][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.819775][    T8] device bridge_slave_0 left promiscuous mode
[  150.825729][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.833876][    T8] device veth1_macvtap left promiscuous mode
[  150.839746][    T8] device veth0_vlan left promiscuous mode
[  150.858514][ T5532] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  150.878681][ T5141] usb usb3-port1: attempt power cycle
[  150.887582][ T5532] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086
[  150.906109][ T5532] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[  150.919099][ T5532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.930699][ T5532] ext2 filesystem being mounted at /root/syzkaller-testdir1023030601/syzkaller.Bx6AbP/2/file0 supports timestamps until 2038 (0x7fffffff)
[  150.957389][ T5548] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  151.029044][ T5556] SELinux: security_context_str_to_sid(Õ) failed for (dev ?, type ?) errno=-22
[  151.039449][ T5556] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  151.175504][ T5575] loop2: detected capacity change from 0 to 512
[  151.218613][ T5580] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  151.226617][ T5575] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  151.263818][ T5575] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz-executor.2: iget: bad i_size value: -67835469387268086
[  151.278581][ T5575] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  151.303313][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.314281][ T5575] ext2 filesystem being mounted at /root/syzkaller-testdir3410328741/syzkaller.U1B8do/4/file0 supports timestamps until 2038 (0x7fffffff)
[  151.687749][   T20] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  151.771207][ T5613] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  151.845676][ T5616] device syzkaller0 entered promiscuous mode
[  152.048081][   T20] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  152.057667][   T20] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.169609][ T5651] device wg2 entered promiscuous mode
[  152.217847][   T20] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99
[  152.226908][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.234886][  T577] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  152.242446][   T20] usb 4-1: Product: syz
[  152.246403][   T20] usb 4-1: Manufacturer: syz
[  152.250887][   T20] usb 4-1: SerialNumber: syz
[  152.255784][   T20] usb 4-1: config 0 descriptor??
[  152.437576][ T5141] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  152.501521][   T20] usb 4-1: USB disconnect, device number 12
[  152.537756][ T5141] usb 3-1: Using ep0 maxpacket: 32
[  152.597679][  T577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.608720][  T577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.618393][  T577] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  152.627356][  T577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.636227][  T577] usb 5-1: config 0 descriptor??
[  152.667683][ T5141] usb 3-1: descriptor type invalid, skip
[  152.673283][ T5141] usb 3-1: descriptor type invalid, skip
[  152.767653][ T5141] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping
[  152.776433][ T5141] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  152.784874][ T5141] usb 3-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config
[  152.794983][ T5141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.020808][ T5141] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.031458][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.045801][ T5141] usb 3-1: Product: syz
[  153.049816][ T5141] usb 3-1: Manufacturer: syz
[  153.054220][ T5141] usb 3-1: SerialNumber: syz
[  153.160113][  T577] pantherlord 0003:0810:0002.0015: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0
[  153.175312][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.182300][  T577] pantherlord 0003:0810:0002.0015: no output reports found
[  153.189391][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.196735][ T5693] device bridge_slave_0 entered promiscuous mode
[  153.204035][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.210991][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.218461][ T5693] device bridge_slave_1 entered promiscuous mode
[  153.305183][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.312056][ T5693] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.319193][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.326030][ T5693] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.350572][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.358531][ T2753] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.365712][ T2753] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.369891][ T5636] UDC core: couldn't find an available UDC or it's busy: -16
[  153.380270][ T5636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  153.389670][  T332] usb 5-1: USB disconnect, device number 13
[  153.397916][ T5141] usb 3-1: 0:2 : does not exist
[  153.397993][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.410718][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.417575][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.418684][ T5141] usb 3-1: USB disconnect, device number 14
[  153.441248][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.449422][  T577] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.456279][  T577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.463949][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.481489][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.495763][ T5693] device veth0_vlan entered promiscuous mode
[  153.502334][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  153.511037][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  153.519202][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  153.526451][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  153.541659][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  153.550764][ T5693] device veth1_macvtap entered promiscuous mode
[  153.561153][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.573088][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.688311][   T10] device bridge_slave_1 left promiscuous mode
[  153.694321][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.701726][   T10] device bridge_slave_0 left promiscuous mode
[  153.707835][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.715739][   T10] device veth1_macvtap left promiscuous mode
[  153.721580][   T10] device veth0_vlan left promiscuous mode
[  153.802865][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  153.802880][   T30] audit: type=1400 audit(2000000041.140:3460): avc:  denied  { wake_alarm } for  pid=5723 comm="syz-executor.1" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  153.853346][ T5725] device wg2 entered promiscuous mode
[  153.904783][ T5729] device syzkaller0 entered promiscuous mode
[  153.967610][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  153.993512][ T5743] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  154.020600][ T5743] overlayfs: missing 'lowerdir'
[  154.062527][ T5731] loop3: detected capacity change from 0 to 40427
[  154.163029][ T5747] overlayfs: failed to resolve './file0': -2
[  154.198447][ T5731] F2FS-fs (loop3): Found nat_bits in checkpoint
[  154.238126][ T5731] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  154.247817][ T5731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  154.269902][ T5731] attempt to access beyond end of device
[  154.269902][ T5731] loop3: rw=2049, want=45112, limit=40427
[  154.559257][  T335] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  154.683637][    T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  154.746895][ T5776] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  154.758378][ T5776] overlayfs: missing 'lowerdir'
[  154.771585][ T5778] fuse: Unknown parameter 'æHßÏܼïßsOèP`ýïi‡µ²Ûˆ6ïX8ËdCc€7±i÷Aý¶‘õóÄM)ܘ×a%(â„]ã"36'
[  155.007703][  T335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  155.017658][  T335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  155.047704][    T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.177812][  T335] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  155.186920][  T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.194833][  T335] usb 3-1: Product: syz
[  155.200002][  T335] usb 3-1: Manufacturer: syz
[  155.205496][  T335] usb 3-1: SerialNumber: syz
[  155.238974][ T5800] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  155.434409][    T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.444594][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.452674][  T335] usb 3-1: config 0 descriptor??
[  155.457767][    T6] usb 5-1: Product: syz
[  155.461754][    T6] usb 5-1: Manufacturer: syz
[  155.466427][    T6] usb 5-1: SerialNumber: syz
[  155.477669][ T5756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  155.485476][ T5756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  155.564579][   T30] audit: type=1400 audit(2000000042.900:3461): avc:  denied  { accept } for  pid=5812 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.637905][   T30] audit: type=1400 audit(2000000042.980:3462): avc:  denied  { getopt } for  pid=5819 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  155.698577][ T5756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  155.709527][ T5756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  155.725665][ T5828] xt_bpf: check failed: parse error
[  155.731580][ T5828] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  155.781705][   T30] audit: type=1326 audit(2000000043.120:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  155.807898][   T30] audit: type=1326 audit(2000000043.140:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  155.835246][   T30] audit: type=1326 audit(2000000043.170:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  155.865508][   T30] audit: type=1326 audit(2000000043.170:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  155.891409][   T30] audit: type=1326 audit(2000000043.170:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x7ffc0000
[  156.203228][ T5864] loop3: detected capacity change from 0 to 40427
[  156.259898][ T5864] F2FS-fs (loop3): invalid crc value
[  156.267192][ T5864] F2FS-fs (loop3): Found nat_bits in checkpoint
[  156.299446][ T5864] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  156.306242][ T5864] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  156.330897][ T5864] attempt to access beyond end of device
[  156.330897][ T5864] loop3: rw=2049, want=45104, limit=40427
[  156.347941][ T5693] attempt to access beyond end of device
[  156.347941][ T5693] loop3: rw=524288, want=45072, limit=40427
[  156.359533][ T5693] attempt to access beyond end of device
[  156.359533][ T5693] loop3: rw=0, want=45072, limit=40427
[  156.377677][  T335] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  156.388191][  T335] usb 3-1: USB disconnect, device number 15
[  156.608206][    T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  156.616784][    T6] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  156.624684][    T6] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  156.785719][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.792928][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.800237][ T5874] device bridge_slave_0 entered promiscuous mode
[  156.807363][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.814427][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.822573][ T5874] device bridge_slave_1 entered promiscuous mode
[  156.828969][    T6] cdc_ncm 5-1:1.0: setting tx_max = 184
[  156.841303][    T6] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[  156.859697][    T6] usb 5-1: USB disconnect, device number 14
[  156.870650][    T6] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[  156.927448][   T30] audit: type=1400 audit(2000000044.260:3468): avc:  denied  { setopt } for  pid=5880 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  156.956306][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.963209][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.970414][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.977179][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.001798][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.011868][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.019491][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.120629][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.137322][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.144243][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.248132][   T30] audit: type=1400 audit(2000000044.590:3469): avc:  denied  { mount } for  pid=5892 comm="syz-executor.1" name="/" dev="ramfs" ino=37231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  157.271051][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.280887][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.287755][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.309320][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.332340][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.349847][ T5874] device veth0_vlan entered promiscuous mode
[  157.360830][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.369915][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.386924][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.442404][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.473488][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.806051][ T5874] device veth1_macvtap entered promiscuous mode
[  157.849856][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.864227][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.875153][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  157.885915][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.907075][   T10] device bridge_slave_1 left promiscuous mode
[  157.920576][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.930039][   T10] device bridge_slave_0 left promiscuous mode
[  157.936307][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.952325][   T10] device veth1_macvtap left promiscuous mode
[  157.958556][   T10] device veth0_vlan left promiscuous mode
[  158.047080][ T5939] loop3: detected capacity change from 0 to 256
[  158.223467][ T5961] fuse: Bad value for 'fd'
[  158.423664][ T5980] loop3: detected capacity change from 0 to 512
[  158.462804][ T5980] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.473820][ T5980] ext4 filesystem being mounted at /root/syzkaller-testdir47058691/syzkaller.tpW2Zf/4/file0 supports timestamps until 2038 (0x7fffffff)
[  158.492577][ T5980] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz-executor.3: corrupted inode contents
[  158.504923][ T5980] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor.3: mark_inode_dirty error
[  158.505060][ T5999] tipc: Failed to remove unknown binding: 66,1,1/0:1778940940/1778940942
[  158.526118][ T5980] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz-executor.3: corrupted inode contents
[  158.529885][ T6001] fuse: Bad value for 'fd'
[  158.538645][ T5999] tipc: Failed to remove unknown binding: 66,1,1/0:1778940940/1778940942
[  158.557630][ T2753] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  158.565099][ T5980] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error
[  158.582227][ T6006] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  158.807660][ T2753] usb 5-1: Using ep0 maxpacket: 32
[  158.937659][ T2753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.948410][ T2753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.958129][ T2753] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  158.970791][ T2753] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  158.979609][ T2753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.988727][ T2753] usb 5-1: config 0 descriptor??
[  159.264182][ T6073] loop2: detected capacity change from 0 to 128
[  159.400584][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  159.478785][ T2753] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  159.487835][ T2753] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  159.494833][ T2753] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  159.517396][ T2753] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  159.536716][ T2753] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  159.546735][ T2753] ntrig 0003:1B96:000A.0016: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0
[  159.558891][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  159.558906][   T30] audit: type=1400 audit(2000000046.900:3472): avc:  denied  { mounton } for  pid=6093 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  159.607280][ T6099] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[  159.634473][ T6103] loop3: detected capacity change from 0 to 128
[  159.669134][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.676063][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.683375][ T6093] device bridge_slave_0 entered promiscuous mode
[  159.692536][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.699442][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.706605][ T6093] device bridge_slave_1 entered promiscuous mode
[  159.763108][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.769992][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.777120][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.778838][ T2753] usb 5-1: USB disconnect, device number 15
[  159.784011][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.818905][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.826673][   T20] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.833890][   T20] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.862696][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.871022][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.877890][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.885050][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.893278][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.900139][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.907276][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  159.915045][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.949190][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.957443][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.965501][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.972876][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.984493][ T6093] device veth0_vlan entered promiscuous mode
[  160.009904][ T6093] device veth1_macvtap entered promiscuous mode
[  160.019903][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.028836][   T10] device bridge_slave_1 left promiscuous mode
[  160.034779][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.042249][   T10] device bridge_slave_0 left promiscuous mode
[  160.048495][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.056487][   T10] device veth1_macvtap left promiscuous mode
[  160.062461][   T10] device veth0_vlan left promiscuous mode
[  160.139582][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.146459][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.153708][ T6112] device bridge_slave_0 entered promiscuous mode
[  160.161295][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.168436][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.175712][ T6112] device bridge_slave_1 entered promiscuous mode
[  160.188942][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  160.199075][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  160.304855][   T30] audit: type=1400 audit(2000000047.640:3473): avc:  denied  { create } for  pid=6129 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  160.338428][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.345307][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.352427][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.359302][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.422191][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.433038][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.440817][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.459224][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.467199][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.474065][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.481625][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.489657][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.496508][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.527111][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.535285][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.555065][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.581092][ T6112] device veth0_vlan entered promiscuous mode
[  160.598012][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.605914][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.613675][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.627402][ T6112] device veth1_macvtap entered promiscuous mode
[  160.639495][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  160.647956][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.656689][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  160.681138][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  160.689340][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  160.701829][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  160.710528][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  160.719971][ T6147] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  160.742184][ T6150] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd
[  160.766113][ T6157] syz-executor.2[6157] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.766179][ T6157] syz-executor.2[6157] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.892867][ T6175] syz-executor.1[6175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.909054][ T6175] syz-executor.1[6175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.928982][ T6179] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd
[  161.500890][ T6201] syz-executor.4[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.500974][ T6201] syz-executor.4[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.515096][ T6201] syz-executor.4[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.526800][ T6201] syz-executor.4[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.606408][ T6213] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd
[  161.765759][ T6229] loop2: detected capacity change from 0 to 2048
[  161.844696][ T6236] loop3: detected capacity change from 0 to 256
[  161.869359][ T6240] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd
[  161.883331][ T6229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.894157][ T6229] ext4 filesystem being mounted at /root/syzkaller-testdir308262894/syzkaller.WVqRsj/12/file0 supports timestamps until 2038 (0x7fffffff)
[  161.910362][ T6236] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  161.927588][   T30] audit: type=1400 audit(2000000049.250:3474): avc:  denied  { read } for  pid=6228 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  161.951483][ T6229] fs-verity: sha512 using implementation "sha512-avx2"
[  161.965987][ T6226] loop4: detected capacity change from 0 to 40427
[  161.973339][   T30] audit: type=1400 audit(2000000049.250:3475): avc:  denied  { open } for  pid=6228 comm="syz-executor.2" path="/root/syzkaller-testdir308262894/syzkaller.WVqRsj/12/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  162.001690][   T30] audit: type=1400 audit(2000000049.290:3476): avc:  denied  { ioctl } for  pid=6228 comm="syz-executor.2" path="/root/syzkaller-testdir308262894/syzkaller.WVqRsj/12/file0/file0/file0" dev="loop2" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  162.033094][   T30] audit: type=1400 audit(2000000049.290:3477): avc:  denied  { write } for  pid=6228 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  162.058190][ T6229] syz-executor.2 (6229) used greatest stack depth: 18944 bytes left
[  162.078661][ T6226] F2FS-fs (loop4): Found nat_bits in checkpoint
[  162.181914][ T6226] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  162.275539][ T5497] attempt to access beyond end of device
[  162.275539][ T5497] loop4: rw=2049, want=45104, limit=40427
[  162.472091][   T30] audit: type=1400 audit(2000000049.810:3478): avc:  denied  { read } for  pid=6265 comm="syz-executor.2" name="file0" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[  162.502652][   T30] audit: type=1400 audit(2000000049.810:3479): avc:  denied  { open } for  pid=6265 comm="syz-executor.2" path="/root/syzkaller-testdir308262894/syzkaller.WVqRsj/15/file0" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[  162.539976][   T30] audit: type=1400 audit(2000000049.810:3480): avc:  denied  { ioctl } for  pid=6265 comm="syz-executor.2" path="/root/syzkaller-testdir308262894/syzkaller.WVqRsj/15/file0" dev="sda1" ino=1956 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[  162.581998][ T6273] loop3: detected capacity change from 0 to 512
[  162.756986][ T6273] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.783350][ T6273] ext4 filesystem being mounted at /root/syzkaller-testdir1381538867/syzkaller.qZRPka/7/file0 supports timestamps until 2038 (0x7fffffff)
[  162.980548][ T6273] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz-executor.3: corrupted inode contents
[  163.167074][ T6273] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor.3: mark_inode_dirty error
[  163.213653][ T6273] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz-executor.3: corrupted inode contents
[  163.243349][ T6291] loop4: detected capacity change from 0 to 256
[  163.259510][ T6273] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error
[  163.311640][ T6291] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  163.488703][   T45] device bridge_slave_1 left promiscuous mode
[  163.496908][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.520345][   T45] device bridge_slave_0 left promiscuous mode
[  163.530352][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.539629][   T45] device veth1_macvtap left promiscuous mode
[  163.572294][   T45] device veth0_vlan left promiscuous mode
[  163.580304][   T30] audit: type=1326 audit(2000000050.920:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2051aea9 code=0x0
[  163.763183][ T6330] loop3: detected capacity change from 0 to 256
[  163.970866][ T6330] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  164.130343][ T6340] syz-executor.1[6340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.130422][ T6340] syz-executor.1[6340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.890949][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  165.890964][   T30] audit: type=1400 audit(2000000053.230:3483): avc:  denied  { write } for  pid=6382 comm="syz-executor.0" path="socket:[39989]" dev="sockfs" ino=39989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  166.115109][ T6405] loop4: detected capacity change from 0 to 16
[  166.151789][ T6407] fuse: Bad value for 'fd'
[  166.188789][ T6405] erofs: (device loop4): mounted with root inode @ nid 36.
[  166.201474][ T6405] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  166.254877][ T6405] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  166.294625][   T30] audit: type=1400 audit(2000000053.630:3484): avc:  denied  { mount } for  pid=6410 comm="syz-executor.1" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  166.340594][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.394445][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.611382][   T30] audit: type=1400 audit(2000000053.720:3485): avc:  denied  { unmount } for  pid=313 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  166.635176][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.647909][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.656896][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.665227][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.674505][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.683279][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.691397][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.699818][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.707967][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.715981][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.724050][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.732209][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.740336][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.750130][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.758923][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.769014][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.778708][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.793982][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.803187][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.811882][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.820765][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.838296][ T6440] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22
[  166.848474][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.858774][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.866757][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.875095][ T6440] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  166.885422][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.893805][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.902087][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.910480][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.918557][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.926823][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.935303][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.943605][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.951944][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.977680][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  166.987983][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.011216][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.019899][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.028503][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.037059][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.046317][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.055316][ T6449] bpf_get_probe_write_proto: 2 callbacks suppressed
[  167.055360][ T6449] syz-executor.1[6449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.062719][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.083391][ T6449] syz-executor.1[6449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.084066][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.105447][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.115129][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.124542][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.133895][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.157231][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.168377][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.177222][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.185767][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.219448][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.268156][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.277285][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.286388][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.295865][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.306841][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.327474][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.336772][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.350399][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.359359][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.368253][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.377681][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.389445][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.413055][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.431198][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.447478][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.465846][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.476585][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.487287][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.503911][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.528975][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  167.533650][ T6472] device veth0_vlan left promiscuous mode
[  168.667596][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.679880][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.697219][ T6472] device veth0_vlan entered promiscuous mode
[  168.703704][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.726489][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.726662][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.726797][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.726946][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.727093][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.735586][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.735794][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.735952][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.736114][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.736250][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.736807][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.736966][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.737127][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.737264][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.737480][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.743620][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.743909][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.744196][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.744435][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.744752][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.745041][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.745307][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.745684][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.745913][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.746207][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.746479][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.746777][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.747080][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.747348][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.747781][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.748068][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.748280][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.748455][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.748611][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.748842][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749017][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749172][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749321][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749465][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749651][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749849][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.749997][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.750156][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.750302][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.750450][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.750607][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.750741][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.751570][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.751725][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.752598][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.752765][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.754374][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.754530][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.754666][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.754814][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.764154][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.764319][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.764471][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.764621][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.764820][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.764965][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.765123][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.765273][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.765427][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.765603][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.765866][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.766026][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.766174][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.766329][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.766484][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.766631][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.766850][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.767008][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.767186][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.767328][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.767652][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.833852][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.834332][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.834709][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.836692][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.836883][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.837044][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.837234][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.837392][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.839419][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.839578][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.839726][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.839874][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840019][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840182][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840366][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840523][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840676][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840827][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.840989][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.841142][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.841295][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.841449][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.841605][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.841764][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.841922][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.842074][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.842220][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.842396][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.842555][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.842714][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.842891][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.843063][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.843229][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.843382][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.843543][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.843704][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.843849][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.844029][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.844202][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.844363][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.870305][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.870497][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.871262][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.871423][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.871583][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.871737][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.871894][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.872055][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.872237][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.872400][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.872545][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.872701][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.872861][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873025][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873193][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873353][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873510][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873654][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873816][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.873973][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.874138][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.874303][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.874489][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.874659][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.874807][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.874981][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.875151][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.875314][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.875470][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.875670][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.875839][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.875994][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.876167][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.876359][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.876521][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.876702][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.876867][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.877047][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.877223][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.877390][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.898570][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  168.899373][ T5497] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  169.350362][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.350380][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.350813][ T6488] device bridge_slave_0 entered promiscuous mode
[  169.351653][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.351670][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.352099][ T6488] device bridge_slave_1 entered promiscuous mode
[  169.536932][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.536954][ T6488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.537059][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.537076][ T6488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.618787][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.618807][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.619282][ T6501] device bridge_slave_0 entered promiscuous mode
[  169.620021][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.620037][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.620530][ T6501] device bridge_slave_1 entered promiscuous mode
[  169.666091][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.666551][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.666825][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.669136][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.669318][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.669335][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.672325][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.672497][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.672513][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.500300][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.500551][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.585667][ T6488] device veth0_vlan entered promiscuous mode
[  171.375358][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.377462][ T6530] syz-executor.3[6530] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.383398][ T6530] syz-executor.3[6530] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.394868][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.395147][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.426593][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.449675][ T6488] device veth1_macvtap entered promiscuous mode
[  171.456342][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.463735][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.471764][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.480000][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.488072][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.516030][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.524774][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.534512][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.542670][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.615349][  T339] device bridge_slave_1 left promiscuous mode
[  171.628755][  T339] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.676343][  T339] device bridge_slave_0 left promiscuous mode
[  171.682829][ T6563] SELinux:  Context system_u: is not valid (left unmapped).
[  171.690102][   T30] audit: type=1400 audit(2000000059.020:3486): avc:  denied  { relabelfrom } for  pid=6562 comm="syz-executor.2" name="" dev="pipefs" ino=39711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  171.712860][  T339] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.728758][  T339] device veth1_macvtap left promiscuous mode
[  171.734683][  T339] device veth0_vlan left promiscuous mode
[  171.737554][   T30] audit: type=1400 audit(2000000059.060:3487): avc:  denied  { relabelto } for  pid=6562 comm="syz-executor.2" name="" dev="pipefs" ino=39711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:"
[  172.028930][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.037852][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.058564][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.066890][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.088074][  T577] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.094951][  T577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.118416][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.136808][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.170554][  T577] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.178037][  T577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.459239][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.475791][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.674037][ T6606] loop0: detected capacity change from 0 to 128
[  173.314348][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.324185][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.332462][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.352529][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  173.364091][ T6601] device syz_tun entered promiscuous mode
[  173.369712][ T6601] device macsec1 entered promiscuous mode
[  173.376408][ T6601] device syz_tun left promiscuous mode
[  173.396566][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.404725][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.413794][ T6501] device veth0_vlan entered promiscuous mode
[  173.431445][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.440887][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.455638][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.463934][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.477843][ T6501] device veth1_macvtap entered promiscuous mode
[  173.489375][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  173.502187][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  173.521304][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  173.529569][  T577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  173.565081][   T30] audit: type=1400 audit(2000000060.900:3488): avc:  denied  { relabelfrom } for  pid=6622 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=40970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  173.663177][   T30] audit: type=1400 audit(2000000060.900:3489): avc:  denied  { relabelto } for  pid=6622 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=40970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  173.937612][ T2748] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  174.089887][  T339] device veth1_macvtap left promiscuous mode
[  174.096535][  T339] device veth0_vlan left promiscuous mode
[  174.499896][ T2748] usb 3-1: too many configurations: 65, using maximum allowed: 8
[  174.527896][  T313] ------------[ cut here ]------------
[  174.533206][  T313] WARNING: CPU: 0 PID: 313 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0
[  174.542515][  T313] Modules linked in:
[  174.546259][  T313] CPU: 0 PID: 313 Comm: syz-executor.1 Tainted: G        W         5.15.149-syzkaller-00165-g85445b5a2107 #0
[  174.557728][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  174.569074][  T313] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0
[  174.574639][  T313] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1
[  174.594144][  T313] RSP: 0018:ffffc90000b27b60 EFLAGS: 00010293
[  174.600147][  T313] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff88811b4462c0
[  174.607938][  T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  174.615703][  T313] RBP: ffffc90000b27b90 R08: ffffffff8212b6f4 R09: ffffed10238d63f1
[  174.623607][  T313] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810f463aa0
[  174.631442][  T313] R13: ffff88810f463ad0 R14: 1ffff11021e8c75a R15: ffff88811c6b1ee0
[  174.639259][  T313] FS:  0000555557219480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  174.639382][ T6657] device veth0_vlan left promiscuous mode
[  174.647993][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.648014][  T313] CR2: 00007f13e785b6cc CR3: 00000001251af000 CR4: 00000000003526a0
[  174.654972][ T6657] device veth0_vlan entered promiscuous mode
[  174.660002][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  174.682984][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  174.690824][  T313] Call Trace:
[  174.696807][  T313]  <TASK>
[  174.701913][  T313]  ? show_regs+0x58/0x60
[  174.705984][  T313]  ? __warn+0x160/0x2f0
[  174.710463][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  174.716979][  T313]  ? report_bug+0x3d9/0x5b0
[  174.726066][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  174.735275][  T313]  ? handle_bug+0x41/0x70
[  174.741546][  T313]  ? exc_invalid_op+0x1b/0x50
[  174.746317][  T313]  ? asm_exc_invalid_op+0x1b/0x20
[  174.756741][  T313]  ? ovl_dir_modified+0xa4/0x1e0
[  174.762878][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  174.768693][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  174.773678][  T313]  ovl_do_remove+0x64c/0xa30
[  174.778934][  T313]  ? ovl_set_redirect+0x690/0x690
[  174.783786][  T313]  ? selinux_inode_rmdir+0x22/0x30
[  174.789721][  T313]  ovl_rmdir+0x1a/0x20
[  174.794006][  T313]  vfs_rmdir+0x324/0x470
[  174.798664][  T313]  incfs_kill_sb+0x113/0x230
[  174.803172][  T313]  deactivate_locked_super+0xad/0x110
[  174.809945][  T313]  deactivate_super+0xbe/0xf0
[  174.895362][  T313]  cleanup_mnt+0x45c/0x510
[  174.899786][  T313]  __cleanup_mnt+0x19/0x20
[  174.904038][  T313]  task_work_run+0x129/0x190
[  174.910301][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.917222][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.924292][  T313]  exit_to_user_mode_loop+0xc4/0xe0
[  174.929422][  T313]  exit_to_user_mode_prepare+0x5a/0xa0
[  174.935428][ T6665] device bridge_slave_0 entered promiscuous mode
[  174.942789][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.950056][  T313]  syscall_exit_to_user_mode+0x26/0x160
[  174.955467][  T313]  do_syscall_64+0x49/0xb0
[  174.959955][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  174.965693][  T313] RIP: 0033:0x7f13e6bf31d7
[  174.967777][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.977572][  T313] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[  174.999743][ T6665] device bridge_slave_1 entered promiscuous mode
[  175.015015][  T313] RSP: 002b:00007ffc19a05808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  175.089801][  T313] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f13e6bf31d7
[  175.127220][  T313] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc19a058c0
[  175.166555][  T313] RBP: 00007ffc19a058c0 R08: 0000000000000000 R09: 0000000000000000
[  175.203980][  T313] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc19a06970
[  175.233433][  T313] R13: 00007f13e6c4e636 R14: 000000000002a99a R15: 000000000000000a
[  175.241413][  T313]  </TASK>
[  175.244197][  T313] ---[ end trace cc4db1dc16176f1e ]---
[  175.250298][  T313] ------------[ cut here ]------------
[  175.255575][  T313] WARNING: CPU: 0 PID: 313 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0
[  175.264908][  T313] Modules linked in:
[  175.269024][  T313] CPU: 0 PID: 313 Comm: syz-executor.1 Tainted: G        W         5.15.149-syzkaller-00165-g85445b5a2107 #0
[  175.280423][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  175.290435][  T313] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0
[  175.295868][  T313] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1
[  175.315935][  T313] RSP: 0018:ffffc90000b27b60 EFLAGS: 00010293
[  175.321848][  T313] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff88811b4462c0
[  175.329742][  T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  175.337467][  T313] RBP: ffffc90000b27b90 R08: ffffffff8212b6f4 R09: ffffed10238d63f1
[  175.345655][  T313] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810f463aa0
[  175.353836][  T313] R13: ffff88810f463ad0 R14: 1ffff11021e8c75a R15: ffff88811c6b1ee0
[  175.362063][  T313] FS:  0000555557219480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  175.376037][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.382582][  T313] CR2: 0000001b31b3b000 CR3: 00000001251af000 CR4: 00000000003506b0
[  175.394761][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  175.403940][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  175.411827][  T313] Call Trace:
[  175.414945][  T313]  <TASK>
[  175.417678][  T313]  ? show_regs+0x58/0x60
[  175.421716][  T313]  ? __warn+0x160/0x2f0
[  175.425842][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  175.431134][ T2748] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  175.440165][  T313]  ? report_bug+0x3d9/0x5b0
[  175.444609][ T2748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.453614][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  175.458760][  T313]  ? handle_bug+0x41/0x70
[  175.463682][  T313]  ? exc_invalid_op+0x1b/0x50
[  175.469024][  T313]  ? asm_exc_invalid_op+0x1b/0x20
[  175.473977][  T313]  ? ovl_dir_modified+0xa4/0x1e0
[  175.478836][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  175.483641][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  175.488632][  T313]  ovl_do_remove+0x64c/0xa30
[  175.493175][  T313]  ? ovl_set_redirect+0x690/0x690
[  175.498091][  T313]  ? selinux_inode_rmdir+0x22/0x30
[  175.503017][  T313]  ovl_rmdir+0x1a/0x20
[  175.508116][  T313]  vfs_rmdir+0x324/0x470
[  175.512840][ T2748] usb 3-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  175.514317][  T313]  incfs_kill_sb+0x1b4/0x230
[  175.522085][ T2748] usb 3-1: No valid video chain found.
[  175.524004][  T313]  deactivate_locked_super+0xad/0x110
[  175.530831][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.534895][  T313]  deactivate_super+0xbe/0xf0
[  175.541418][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.545931][  T313]  cleanup_mnt+0x45c/0x510
[  175.553036][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.553055][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.571209][  T313]  __cleanup_mnt+0x19/0x20
[  175.575621][  T313]  task_work_run+0x129/0x190
[  175.580121][  T313]  exit_to_user_mode_loop+0xc4/0xe0
[  175.585110][  T313]  exit_to_user_mode_prepare+0x5a/0xa0
[  175.590446][  T313]  syscall_exit_to_user_mode+0x26/0x160
[  175.595795][  T313]  do_syscall_64+0x49/0xb0
[  175.600043][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  175.605778][  T313] RIP: 0033:0x7f13e6bf31d7
[  175.610073][  T313] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[  175.629558][  T313] RSP: 002b:00007ffc19a05808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  175.637881][  T313] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f13e6bf31d7
[  175.645835][  T313] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc19a058c0
[  175.653665][  T313] RBP: 00007ffc19a058c0 R08: 0000000000000000 R09: 0000000000000000
[  175.661812][  T313] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc19a06970
[  175.683378][  T313] R13: 00007f13e6c4e636 R14: 000000000002a99a R15: 000000000000000a
[  175.691234][  T313]  </TASK>
[  175.694105][  T313] ---[ end trace cc4db1dc16176f1f ]---
[  175.712650][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  175.720560][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.730194][  T577] usb 3-1: USB disconnect, device number 16
[  175.736294][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.760015][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  175.768239][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.776265][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.783131][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.800413][ T6702] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  175.801319][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.814915][ T6704] x_tables: duplicate entry at hook 2
[  175.816153][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.832629][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.839514][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.853461][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.861548][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.869795][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.878367][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.893600][ T6665] device veth0_vlan entered promiscuous mode
[  175.900744][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.917275][ T6665] device veth1_macvtap entered promiscuous mode
[  175.923495][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.930780][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.946402][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.959375][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.975522][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.983689][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  175.993997][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.002220][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.009556][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.016765][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.024185][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.032050][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.039521][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.046733][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.054291][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.089069][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.097556][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.108735][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.116430][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.124885][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.443333][  T339] device bridge_slave_1 left promiscuous mode
[  176.446792][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.458351][  T339] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.473748][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.481024][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.488231][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.495561][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.495581][  T339] device bridge_slave_0 left promiscuous mode
[  176.502802][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.502826][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.523189][ T6733] x_tables: duplicate entry at hook 2
[  176.526478][  T339] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.536809][  T339] device veth1_macvtap left promiscuous mode
[  176.542835][  T339] device veth0_vlan left promiscuous mode
[  176.548563][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.555992][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.563304][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.570902][   T20] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  176.578673][   T20] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  176.645360][ T6743] serio: Serial port pts0
[  176.693284][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.706358][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.714850][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.722683][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.733236][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  176.743712][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  176.751788][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  176.759495][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  176.767632][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  176.775737][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  176.783894][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.792248][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.799646][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.947793][    T6] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  176.979981][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  177.127751][   T20] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  177.307608][    T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  177.320276][    T6] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  177.329253][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.337728][    T6] usb 4-1: config 0 descriptor??
[  177.378268][    T6] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  177.497800][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.516155][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.535582][   T20] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  177.560994][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.586056][   T20] usb 5-1: config 0 descriptor??
[  177.599249][    T6] usb 4-1: USB disconnect, device number 13
[  177.641742][  T313] ------------[ cut here ]------------
[  177.657584][  T313] WARNING: CPU: 0 PID: 313 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0
[  177.683362][  T313] Modules linked in:
[  177.695718][  T313] CPU: 0 PID: 313 Comm: syz-executor.1 Tainted: G        W         5.15.149-syzkaller-00165-g85445b5a2107 #0
[  177.727372][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  177.747584][  T313] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0
[  177.757644][  T313] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1
[  177.797561][  T313] RSP: 0018:ffffc90000b27b60 EFLAGS: 00010293
[  177.811025][  T313] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff88811b4462c0
[  177.827608][  T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  177.828812][ T6808] loop0: detected capacity change from 0 to 131072
[  177.835404][  T313] RBP: ffffc90000b27b90 R08: ffffffff8212b6f4 R09: ffffed10238d62fb
[  177.835423][  T313] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810f535dd0
[  177.857614][  T313] R13: ffff88810f535e00 R14: 1ffff11021ea6bc0 R15: ffff88811c6b1730
[  177.865411][  T313] FS:  0000555557219480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  177.876802][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.883417][  T313] CR2: 0000001b31b2b000 CR3: 00000001251af000 CR4: 00000000003506b0
[  177.892158][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.900246][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.908307][  T313] Call Trace:
[  177.911472][  T313]  <TASK>
[  177.914240][  T313]  ? show_regs+0x58/0x60
[  177.918459][  T313]  ? __warn+0x160/0x2f0
[  177.922448][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  177.927419][  T313]  ? report_bug+0x3d9/0x5b0
[  177.931771][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  177.936605][  T313]  ? handle_bug+0x41/0x70
[  177.941864][ T6808] F2FS-fs (loop0): Found nat_bits in checkpoint
[  177.954589][  T313]  ? exc_invalid_op+0x1b/0x50
[  177.959284][  T313]  ? asm_exc_invalid_op+0x1b/0x20
[  177.967115][  T313]  ? ovl_dir_modified+0xa4/0x1e0
[  177.971975][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  177.976818][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  177.981676][  T313]  ovl_do_remove+0x64c/0xa30
[  177.986111][  T313]  ? ovl_set_redirect+0x690/0x690
[  177.986509][ T6808] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  177.991006][  T313]  ? selinux_inode_rmdir+0x22/0x30
[  177.998148][ T6808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  178.002421][  T313]  ovl_rmdir+0x1a/0x20
[  178.013563][  T313]  vfs_rmdir+0x324/0x470
[  178.017661][  T313]  incfs_kill_sb+0x113/0x230
[  178.022082][  T313]  deactivate_locked_super+0xad/0x110
[  178.027443][  T313]  deactivate_super+0xbe/0xf0
[  178.033113][  T313]  cleanup_mnt+0x45c/0x510
[  178.037410][  T313]  __cleanup_mnt+0x19/0x20
[  178.041824][  T313]  task_work_run+0x129/0x190
[  178.049424][  T313]  exit_to_user_mode_loop+0xc4/0xe0
[  178.054456][  T313]  exit_to_user_mode_prepare+0x5a/0xa0
[  178.059926][  T313]  syscall_exit_to_user_mode+0x26/0x160
[  178.065655][  T313]  do_syscall_64+0x49/0xb0
[  178.069955][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  178.075632][  T313] RIP: 0033:0x7f13e6bf31d7
[  178.080114][  T313] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[  178.118296][   T20] uclogic 0003:5543:0522.0018: unknown main item tag 0x0
[  178.125257][   T20] uclogic 0003:5543:0522.0018: unknown main item tag 0x0
[  178.141107][  T313] RSP: 002b:00007ffc19a05808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.149683][  T313] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f13e6bf31d7
[  178.150116][   T20] uclogic 0003:5543:0522.0018: unknown main item tag 0x0
[  178.164639][  T313] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc19a058c0
[  178.173622][  T313] RBP: 00007ffc19a058c0 R08: 0000000000000000 R09: 0000000000000000
[  178.181714][  T313] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc19a06970
[  178.189791][  T313] R13: 00007f13e6c4e636 R14: 000000000002b57f R15: 000000000000000d
[  178.197874][  T313]  </TASK>
[  178.200798][  T313] ---[ end trace cc4db1dc16176f20 ]---
[  178.210173][  T313] ------------[ cut here ]------------
[  178.215536][  T313] WARNING: CPU: 1 PID: 313 at fs/overlayfs/util.c:470 ovl_dir_modified+0x1a5/0x1e0
[  178.257738][   T30] audit: type=1326 audit(2000000065.590:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f393b895ea9 code=0x0
[  178.281777][  T313] Modules linked in:
[  178.285601][  T313] CPU: 1 PID: 313 Comm: syz-executor.1 Tainted: G        W         5.15.149-syzkaller-00165-g85445b5a2107 #0
[  178.297362][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  178.382065][   T20] uclogic 0003:5543:0522.0018: unknown main item tag 0x0
[  178.389501][   T20] uclogic 0003:5543:0522.0018: unknown main item tag 0x0
[  178.396636][   T20] uclogic 0003:5543:0522.0018: No inputs registered, leaving
[  178.404886][   T20] uclogic 0003:5543:0522.0018: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0
[  178.413937][  T313] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0
[  178.417456][   T20] usb 5-1: USB disconnect, device number 16
[  178.431822][  T313] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 f2 b8 9f ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 7f 5d ff <0f> 0b e9 06 ff ff ff e8 5f 7f 5d ff 0f 0b e9 3d ff ff ff 44 89 e1
[  178.451472][  T313] RSP: 0018:ffffc90000b27b60 EFLAGS: 00010293
[  178.457430][  T313] RAX: ffffffff8212b7f5 RBX: 0000000000000000 RCX: ffff88811b4462c0
[  178.465864][  T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  178.473755][  T313] RBP: ffffc90000b27b90 R08: ffffffff8212b6f4 R09: ffffed10238d62fb
[  178.481771][  T313] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810f535dd0
[  178.489640][  T313] R13: ffff88810f535e00 R14: 1ffff11021ea6bc0 R15: ffff88811c6b1730
[  178.497557][  T313] FS:  0000555557219480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  178.552605][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.569326][  T313] CR2: 0000001b30221000 CR3: 00000001251af000 CR4: 00000000003526a0
[  178.579123][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  178.587064][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.595501][  T313] Call Trace:
[  178.598720][  T313]  <TASK>
[  178.601407][  T313]  ? show_regs+0x58/0x60
[  178.609320][  T313]  ? __warn+0x160/0x2f0
[  178.613422][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  178.620318][  T313]  ? report_bug+0x3d9/0x5b0
[  178.624696][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  178.632763][  T313]  ? handle_bug+0x41/0x70
[  178.636938][  T313]  ? exc_invalid_op+0x1b/0x50
[  178.641643][  T313]  ? asm_exc_invalid_op+0x1b/0x20
[  178.646498][  T313]  ? ovl_dir_modified+0xa4/0x1e0
[  178.659009][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  178.675486][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.677694][  T313]  ? ovl_dir_modified+0x1a5/0x1e0
[  178.683575][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.695128][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.697839][  T313]  ovl_do_remove+0x64c/0xa30
[  178.727633][  T313]  ? ovl_set_redirect+0x690/0x690
[  178.732599][  T313]  ? selinux_inode_rmdir+0x22/0x30
[  178.737468][  T313]  ovl_rmdir+0x1a/0x20
[  178.751669][  T313]  vfs_rmdir+0x324/0x470
[  178.761768][  T313]  incfs_kill_sb+0x1b4/0x230
[  178.766223][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.766474][  T313]  deactivate_locked_super+0xad/0x110
[  178.773728][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.785871][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.793178][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.800644][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.807925][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.815051][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.816668][  T313]  deactivate_super+0xbe/0xf0
[  178.822342][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.834065][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.836900][  T313]  cleanup_mnt+0x45c/0x510
[  178.841200][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.845432][  T313]  __cleanup_mnt+0x19/0x20
[  178.852683][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.852708][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.852730][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.878562][  T313]  task_work_run+0x129/0x190
[  178.882924][  T313]  exit_to_user_mode_loop+0xc4/0xe0
[  178.888009][  T313]  exit_to_user_mode_prepare+0x5a/0xa0
[  178.945041][  T313]  syscall_exit_to_user_mode+0x26/0x160
[  178.956636][  T313]  do_syscall_64+0x49/0xb0
[  178.961007][  T313]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  178.966943][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.974269][  T313] RIP: 0033:0x7f13e6bf31d7
[  178.978827][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  178.986307][  T313] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[  179.006139][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.083921][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.101923][  T313] RSP: 002b:00007ffc19a05808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  179.110251][  T313] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f13e6bf31d7
[  179.118149][  T313] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc19a058c0
[  179.127211][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.127549][  T313] RBP: 00007ffc19a058c0 R08: 0000000000000000 R09: 0000000000000000
[  179.141687][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.142783][  T313] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc19a06970
[  179.157852][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.172428][  T313] R13: 00007f13e6c4e636 R14: 000000000002b57f R15: 000000000000000d
[  179.177536][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.187519][  T313]  </TASK>
[  179.190302][  T313] ---[ end trace cc4db1dc16176f21 ]---
[  179.190578][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.215618][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.227626][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.235079][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.242461][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.250076][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.257684][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.266025][ T2753] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  179.277877][ T2753] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  179.290466][ T6862] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  179.388573][ T6879] fuse: Bad value for 'fd'
[  179.393653][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.400661][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.431122][ T6883] device bridge_slave_0 left promiscuous mode
[  179.437149][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.444828][ T6883] device bridge_slave_1 left promiscuous mode
[  179.451155][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.471602][ T6883] bridge0: port 1(syz_tun) entered blocking state
[  179.478005][ T6883] bridge0: port 1(syz_tun) entered disabled state
[  179.484813][ T6883] device syz_tun entered promiscuous mode
[  179.557573][ T1295] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  179.674383][ T2753] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  181.538403][ T1295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  181.586274][ T1295] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  181.595335][ T1295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.604250][ T1295] usb 3-1: config 0 descriptor??
[  181.609125][ T2753] usb 5-1: config index 0 descriptor too short (expected 804, got 36)
[  181.617184][ T2753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.627902][ T2753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.637507][ T2753] usb 5-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00
[  181.646320][ T2753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.654613][ T1295] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  181.662563][ T2753] usb 5-1: config 0 descriptor??
[  181.671006][ T1295] usb 3-1: USB disconnect, device number 17
[  181.765630][ T6927] loop3: detected capacity change from 0 to 512
[  181.804003][ T6927] EXT4-fs (loop3): 1 truncate cleaned up
[  181.809638][ T6927] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  181.832803][   T30] audit: type=1400 audit(2000000069.170:3491): avc:  denied  { map } for  pid=6926 comm="syz-executor.3" path="/root/syzkaller-testdir1381538867/syzkaller.qZRPka/49/file0/file0/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.846456][ T6927] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  181.875605][ T6927] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  181.888911][ T6927] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  181.898792][ T6927] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #12: comm syz-executor.3: mark_inode_dirty error
[  181.936461][ T6112] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 13: comm syz-executor.3: lblock 0 mapped to illegal pblock 13 (length 1)
[  181.974049][ T6112] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block
[  181.988377][ T6112] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  182.001698][ T6112] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  182.011525][ T6112] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor.3: mark_inode_dirty error
[  182.027556][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  182.208167][  T339] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  182.239925][  T339] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  182.417553][   T26] usb 1-1: Using ep0 maxpacket: 8
[  182.442878][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.449944][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.457329][ T6940] device bridge_slave_0 entered promiscuous mode
[  182.468296][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.475310][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.482532][ T6940] device bridge_slave_1 entered promiscuous mode
[  182.536100][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.543049][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.550147][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.556918][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.567662][   T26] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56
[  182.581127][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.591631][   T26] usb 1-1: config 0 descriptor??
[  182.599081][ T6945] usb usb8: usbfs: process 6945 (syz-executor.2) did not claim interface 0 before use
[  182.601237][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.616661][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.624074][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.638093][   T26] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  182.649394][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  182.657415][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.664263][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.672299][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.680317][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.687153][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.694347][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.702186][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.723524][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  182.736467][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  182.744649][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  182.752386][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  182.760828][ T6940] device veth0_vlan entered promiscuous mode
[  182.779774][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.790193][ T6940] device veth1_macvtap entered promiscuous mode
[  182.808165][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.822493][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.836808][ T6955] fuse: Bad value for 'fd'
[  182.847626][   T26] usb 1-1: Detected FT8U232AM
[  182.852965][   T26] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  182.873576][ T6959] device bridge_slave_0 left promiscuous mode
[  182.879879][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.888811][ T6959] device bridge_slave_1 left promiscuous mode
[  182.895958][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.897652][ T6963] input: syz1 as /devices/virtual/input/input31
[  182.924696][ T6959] bridge0: port 1(syz_tun) entered blocking state
[  182.931014][ T6959] bridge0: port 1(syz_tun) entered disabled state
[  182.938636][ T6959] device syz_tun entered promiscuous mode
[  182.943562][ T6966] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.946031][ T6959] bridge0: port 1(syz_tun) entered blocking state
[  182.959572][ T6959] bridge0: port 1(syz_tun) entered forwarding state
[  182.978435][ T6967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6967 comm=syz-executor.1
[  183.029133][  T339] device bridge_slave_1 left promiscuous mode
[  183.038828][  T339] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.050388][    T6] usb 1-1: USB disconnect, device number 4
[  183.059960][  T339] device bridge_slave_0 left promiscuous mode
[  183.065974][  T339] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.074954][  T339] device veth1_macvtap left promiscuous mode
[  183.084851][  T339] device veth0_vlan left promiscuous mode
[  183.087905][    T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  183.124266][    T6] ftdi_sio 1-1:0.0: device disconnected
[  183.157802][ T2753] usbhid 5-1:0.0: can't add hid device: -71
[  183.163804][ T2753] usbhid: probe of 5-1:0.0 failed with error -71
[  183.220079][ T2753] usb 5-1: USB disconnect, device number 17
[  183.455886][ T6985] fuse: Bad value for 'fd'
[  183.488005][ T6987] loop4: detected capacity change from 0 to 1024
[  183.512011][ T6987] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802e118, mo2=0000]
[  183.520118][ T6987] System zones: 0-1, 3-12
[  183.525831][ T6987] EXT4-fs error (device loop4): ext4_map_blocks:716: inode #3: block 1: comm syz-executor.4: lblock 1 mapped to illegal pblock 1 (length 1)
[  183.538553][ T6973] loop3: detected capacity change from 0 to 40427
[  183.540286][ T6987] Quota error (device loop4): write_blk: dquota write failed
[  183.553551][ T6987] Quota error (device loop4): find_free_dqentry: Can't write quota data block 1
[  183.562589][ T6987] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  183.572674][ T6987] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 1: comm syz-executor.4: lblock 1 mapped to illegal pblock 1 (length 1)
[  183.592859][ T6987] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1
[  183.602141][ T6987] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  183.605060][ T6973] F2FS-fs (loop3): invalid crc value
[  183.612159][ T6987] EXT4-fs error (device loop4): ext4_free_blocks:6193: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096
[  183.631674][ T6987] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 1: comm syz-executor.4: lblock 1 mapped to illegal pblock 1 (length 1)
[  183.649138][ T6987] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1
[  183.659835][ T6973] F2FS-fs (loop3): Found nat_bits in checkpoint
[  183.662273][ T6987] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  183.676018][ T6987] EXT4-fs (loop4): 1 orphan inode deleted
[  183.681859][ T6987] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,barrier,auto_da_alloc,noload,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue. Quota mode: writeback.
[  183.716619][ T6987] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 1: comm syz-executor.4: lblock 1 mapped to illegal pblock 1 (length 1)
[  183.736103][ T6987] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1
[  183.749997][ T6987] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  183.757312][ T6998] device syz_tun left promiscuous mode
[  183.766530][ T6973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  183.774756][ T6998] bridge0: port 1(syz_tun) entered disabled state
[  183.784374][   T30] audit: type=1326 audit(2000000071.120:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337d772ea9 code=0x7ffc0000
[  183.838736][ T7001] bridge0: port 1(syz_tun) entered blocking state
[  183.853288][ T7001] bridge0: port 1(syz_tun) entered disabled state
[  183.860557][ T7001] device syz_tun entered promiscuous mode
[  183.930357][ T7008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7008 comm=syz-executor.0
[  183.943239][ T6973] attempt to access beyond end of device
[  183.943239][ T6973] loop3: rw=0, want=73736, limit=40427
[  183.964686][ T6973] attempt to access beyond end of device
[  183.964686][ T6973] loop3: rw=2049, want=45104, limit=40427
[  184.026698][ T7012] loop4: detected capacity change from 0 to 512
[  184.071140][ T7012] EXT4-fs (loop4): 1 truncate cleaned up
[  184.076726][ T7012] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  184.116566][ T7012] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  184.129896][ T7012] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  184.142952][ T7012] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  184.152491][ T7012] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #12: comm syz-executor.4: mark_inode_dirty error
[  184.168499][  T303] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  184.171660][ T6665] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 13: comm syz-executor.4: lblock 0 mapped to illegal pblock 13 (length 1)
[  184.190810][ T6665] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  184.205458][ T6665] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  184.218557][ T6665] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  184.227985][ T6665] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz-executor.4: mark_inode_dirty error
[  184.242546][  T339] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  184.247577][   T20] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  184.260556][  T339] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  184.310325][ T7021] loop3: detected capacity change from 0 to 256
[  184.331495][ T7021] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  184.491719][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.498726][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.508161][ T7023] device bridge_slave_0 entered promiscuous mode
[  184.516899][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.523920][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.531517][ T7023] device bridge_slave_1 entered promiscuous mode
[  184.547643][   T20] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  184.557617][  T303] usb 3-1: config index 0 descriptor too short (expected 804, got 36)
[  184.565658][  T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.576458][  T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.586126][  T303] usb 3-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00
[  184.595205][  T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.604296][  T303] usb 3-1: config 0 descriptor??
[  184.633571][ T7029] bridge0: port 1(syz_tun) entered blocking state
[  184.640091][ T7029] bridge0: port 1(syz_tun) entered disabled state
[  184.646645][ T7029] device syz_tun entered promiscuous mode
[  184.688974][ T7033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7033 comm=syz-executor.1
[  184.722209][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  184.729867][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  184.742562][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  184.751850][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  184.759928][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.766787][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.774376][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  184.784365][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  184.792733][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  184.801511][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.808389][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.829516][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  184.847941][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  184.856215][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  184.864368][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  184.871750][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  184.879946][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  184.933223][ T7023] device veth0_vlan entered promiscuous mode
[  185.087838][ T7023] device veth1_macvtap entered promiscuous mode
[  185.235747][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  185.251131][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  185.265500][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  185.299894][ T7047] syz-executor.4[7047] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.299974][ T7047] syz-executor.4[7047] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.313208][ T7047] syz-executor.4[7047] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.325045][ T7047] syz-executor.4[7047] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.398516][  T339] device bridge_slave_1 left promiscuous mode
[  185.416510][  T339] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.551167][  T339] device bridge_slave_0 left promiscuous mode
[  185.728289][  T339] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.736484][  T339] device veth1_macvtap left promiscuous mode
[  185.750653][  T339] device veth0_vlan left promiscuous mode
[  185.787972][   T20] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  185.800088][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.858108][   T20] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  185.864939][   T20] usb 1-1: No valid video chain found.
[  185.891240][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  185.925945][ T7061] fuse: Bad value for 'fd'
[  186.066614][    T6] usb 1-1: USB disconnect, device number 5
[  186.320012][ T7086] loop3: detected capacity change from 0 to 256
[  186.327614][  T303] usbhid 3-1:0.0: can't add hid device: -71
[  186.333480][  T303] usbhid: probe of 3-1:0.0 failed with error -71
[  186.347657][  T303] usb 3-1: USB disconnect, device number 18
[  186.418555][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  186.447567][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  186.468706][ T7093] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  186.593531][ T7105] loop0: detected capacity change from 0 to 1024
[  186.638318][ T7107] loop4: detected capacity change from 0 to 512
[  186.678946][ T7107] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  186.687613][ T7105] EXT4-fs (loop0): Ignoring removed orlov option
[  186.694026][ T7105] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  186.708550][ T7107] EXT4-fs (loop4): orphan cleanup on readonly fs
[  186.717832][ T7107] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  186.744478][ T7107] EXT4-fs error (device loop4): ext4_quota_enable:6369: comm syz-executor.4: Bad quota inode: 3, type: 0
[  186.746290][ T7105] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  186.756174][ T7107] EXT4-fs warning (device loop4): ext4_enable_quotas:6410: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  186.788068][ T7099] loop3: detected capacity change from 0 to 40427
[  186.799750][ T7107] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  186.806455][ T7107] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  186.816802][ T7105] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.0: corrupt xattr in inline inode
[  186.831188][ T7105] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr
[  186.846430][ T7107] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  186.856051][ T6488] ==================================================================
[  186.856053][ T7107] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock
[  186.874362][ T6488] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  186.882156][ T6488] Read of size 4 at addr ffff888132b86000 by task syz-executor.0/6488
[  186.890140][ T6488] 
[  186.892320][ T6488] CPU: 0 PID: 6488 Comm: syz-executor.0 Tainted: G        W         5.15.149-syzkaller-00165-g85445b5a2107 #0
[  186.903769][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  186.913665][ T6488] Call Trace:
[  186.916789][ T6488]  <TASK>
[  186.919570][ T6488]  dump_stack_lvl+0x151/0x1b7
[  186.924078][ T6488]  ? io_uring_drop_tctx_refs+0x190/0x190
[  186.929547][ T6488]  ? panic+0x751/0x751
[  186.933480][ T6488]  print_address_description+0x87/0x3b0
[  186.938836][ T6488]  kasan_report+0x179/0x1c0
[  186.943172][ T6488]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  186.948646][ T6488]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  186.954129][ T6488]  __asan_report_load4_noabort+0x14/0x20
[  186.959577][ T6488]  ext4_xattr_delete_inode+0xcd0/0xce0
[  186.964873][ T6488]  ? sb_end_intwrite+0x120/0x120
[  186.969644][ T6488]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  186.975637][ T6488]  ? ext4_journal_check_start+0x16c/0x230
[  186.981190][ T6488]  ? __kasan_check_read+0x11/0x20
[  186.986051][ T6488]  ? ext4_inode_is_fast_symlink+0x295/0x3d0
[  186.991776][ T6488]  ? ext4_evict_inode+0xb8d/0x14e0
[  186.996723][ T6488]  ext4_evict_inode+0xea1/0x14e0
[  187.001498][ T6488]  ? _raw_spin_unlock+0x4d/0x70
[  187.006196][ T6488]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[  187.011918][ T6488]  ? _raw_spin_unlock+0x4d/0x70
[  187.016597][ T6488]  ? inode_io_list_del+0x18b/0x1a0
[  187.021548][ T6488]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[  187.027273][ T6488]  evict+0x2a3/0x630
[  187.031005][ T6488]  iput+0x63b/0x7e0
[  187.034652][ T6488]  vfs_rmdir+0x359/0x470
[  187.038732][ T6488]  do_rmdir+0x3ab/0x630
[  187.042725][ T6488]  ? d_delete_notify+0x160/0x160
[  187.047610][ T6488]  __x64_sys_unlinkat+0xdf/0xf0
[  187.052290][ T6488]  do_syscall_64+0x3d/0xb0
[  187.056726][ T6488]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  187.062441][ T6488] RIP: 0033:0x7f393b895687
[  187.066694][ T6488] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  187.086141][ T6488] RSP: 002b:00007ffc71b2d388 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  187.094403][ T6488] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f393b895687
[  187.102189][ T6488] RDX: 0000000000000200 RSI: 00007ffc71b2e530 RDI: 00000000ffffff9c
[  187.110012][ T6488] RBP: 00007f393b8f2636 R08: 0000000000000000 R09: 0000000000000000
[  187.117810][ T6488] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc71b2e530
[  187.125622][ T6488] R13: 00007f393b8f2636 R14: 000000000002d8c9 R15: 0000000000000007
[  187.133445][ T6488]  </TASK>
[  187.136300][ T6488] 
[  187.138466][ T6488] The buggy address belongs to the page:
[  187.143947][ T6488] page:ffffea0004cae180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x132b86
[  187.154121][ T6488] flags: 0x4000000000000000(zone=1)
[  187.159157][ T6488] raw: 4000000000000000 ffffea0004cae1c8 ffffea0004cae108 0000000000000000
[  187.167764][ T6488] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  187.176175][ T6488] page dumped because: kasan: bad access detected
[  187.182435][ T6488] page_owner tracks the page as freed
[  187.187629][ T6488] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 7108, ts 186676103962, free_ts 186737308894
[  187.202135][ T6488]  post_alloc_hook+0x1a3/0x1b0
[  187.206723][ T6488]  prep_new_page+0x1b/0x110
[  187.211063][ T6488]  get_page_from_freelist+0x3550/0x35d0
[  187.216442][ T6488]  __alloc_pages+0x27e/0x8f0
[  187.220877][ T6488]  wp_page_copy+0x200/0x1b00
[  187.225298][ T6488]  do_wp_page+0x6fa/0xb60
[  187.229460][ T6488]  handle_pte_fault+0x7c0/0x24d0
[  187.234245][ T6488]  do_handle_mm_fault+0x1ea9/0x23a0
[  187.239291][ T6488]  exc_page_fault+0x3b5/0x830
[  187.243786][ T6488]  asm_exc_page_fault+0x27/0x30
[  187.248472][ T6488] page last free stack trace:
[  187.252985][ T6488]  free_unref_page_prepare+0x7c8/0x7d0
[  187.258278][ T6488]  free_unref_page_list+0x14b/0xa60
[  187.263331][ T6488]  release_pages+0x1310/0x1370
[  187.267913][ T6488]  free_pages_and_swap_cache+0x8a/0xa0
[  187.273205][ T6488]  tlb_finish_mmu+0x177/0x320
[  187.277815][ T6488]  exit_mmap+0x40d/0x940
[  187.281910][ T6488]  __mmput+0x95/0x310
[  187.285762][ T6488]  mmput+0x5b/0x170
[  187.289359][ T6488]  do_exit+0xb9c/0x2ca0
[  187.293348][ T6488]  do_group_exit+0x141/0x310
[  187.297796][ T6488]  get_signal+0x7a3/0x1630
[  187.302031][ T6488]  arch_do_signal_or_restart+0xbd/0x1680
[  187.307505][ T6488]  exit_to_user_mode_loop+0xa0/0xe0
[  187.312535][ T6488]  exit_to_user_mode_prepare+0x5a/0xa0
[  187.317826][ T6488]  syscall_exit_to_user_mode+0x26/0x160
[  187.323206][ T6488]  do_syscall_64+0x49/0xb0
[  187.327461][ T6488] 
[  187.329628][ T6488] Memory state around the buggy address:
[  187.335100][ T6488]  ffff888132b85f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  187.343015][ T6488]  ffff888132b85f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  187.350897][ T6488] >ffff888132b86000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  187.358793][ T6488]                    ^
[  187.362702][ T6488]  ffff888132b86080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  187.370599][ T6488]  ffff888132b86100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2033/05/18 03:34:34 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  187.378494][ T6488] ==================================================================
[  187.386390][ T6488] Disabling lock debugging due to kernel taint
[  187.418705][ T7099] F2FS-fs (loop3): invalid crc value
[  187.419110][  T313] device syz_tun left promiscuous mode
[  187.423847][ T7099] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[  187.430833][  T313] bridge0: port 1(syz_tun) entered disabled state
[  187.477535][  T303] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  187.507063][ T7099] bridge0: port 1(syz_tun) entered disabled state
[  187.514498][ T7099] device syz_tun left promiscuous mode
[  187.520990][ T7099] bridge0: port 1(syz_tun) entered disabled state
[