last executing test programs:

33.595594824s ago: executing program 1 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)

33.579048233s ago: executing program 1 (id=153):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x3c, {0x3c, 0x9, "16cbe331f8aaa9bab9a6919493eec6620ba4c1a74cdb8bb6d8c7c8d02666cba3a3958c8846e3dffc047d0c33ae0703ff24e313be6f949087dd74"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

31.916204382s ago: executing program 1 (id=165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
getgroups(0x0, 0x0)

31.875033025s ago: executing program 1 (id=166):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x801, 0x0, 0x0, 0x0, 0x0)

31.408424163s ago: executing program 1 (id=173):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x74, {"b9800000c00f3235000800000f3066baf80cb88819458fef66bafc0cb8fac90000ef672e0f1f00360f7821c7442400a9f80b95c7442402a400c0fec7442406000000000f0114240f07460f09b9e30200000f32b9780300000f32c4a1a25d921e6b5458"}}], 0x74})
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0xc0000001, 0x3ff, 0x9, 0x8, 0x2}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

31.166613573s ago: executing program 1 (id=178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0xff7)

31.049284728s ago: executing program 32 (id=178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0xff7)

2.981051954s ago: executing program 5 (id=688):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.83082843s ago: executing program 0 (id=691):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.83068881s ago: executing program 5 (id=692):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})

2.678481507s ago: executing program 0 (id=693):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb})

2.522634483s ago: executing program 4 (id=695):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000060000000401"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r2 = socket$inet6(0xa, 0x3, 0x2f)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2.522280873s ago: executing program 4 (id=696):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r2, 0x400, 0x1)

1.682823919s ago: executing program 0 (id=697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3)

1.682621049s ago: executing program 5 (id=698):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

1.682501359s ago: executing program 4 (id=699):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.569470403s ago: executing program 5 (id=700):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

1.569290803s ago: executing program 2 (id=701):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.529503785s ago: executing program 4 (id=702):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff)

1.529067945s ago: executing program 5 (id=703):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

1.496941226s ago: executing program 0 (id=704):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee691ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b443033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5df76fecb0248f5afb1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2f00000000", @ANYRES8], 0xfd, 0x1222, &(0x7f0000001840)="$eJzs3MFrHFUcB/Bf1tRNUrOJWqvtQR94EQ9Dk4MnQYKkIFlQ20ZoBWFqJrpk3C2ZJbAiVk9e/Ts8exP8D3Lxb/CWS489iCOdbdqmJhQlmxX8fA47P+a9L+8Nsyy8Zd4cvPvjVzvbVbadD6M1MxOtOxHpfooUrTj0+sb4ePPWxlq3u34tpatrN1beSSl13vj102/aEXH+k587v7Rjf/mzg3urv+9f3L908OeNL3tV6lWpPximPN0eDIb57bKTtnrVTpbSR2WRV0Xq9ati94n2Im2/HRGjlPe3Fhfu7BZVlfL+KO0UozQcpOHuKOVf5L1+yrIsLS4EJzr37C6bP92v6zqirs/F81HXdT0fC3E+XojF6MR3EfFivBQvx4V4JS7Gq/FaXGp6ncX0AQAAAAAAAAAAAAAAAAAA4P/jhP3/H1+PTizFsv3/AAAAAAAAAAAAAAAAAAAAcAau37y1sdbtrl9LaS6i/GFvc29zfBy3Lz/4KKOIK7EUf0Sz+39sXF/9oLt+JTWW4/vy7sP83b3N55r82mF+pXmdwMP8bNN2mF8Z59PRfDsWHuS3o9fkV2MpLhw//uqx+bl4680n8lksxW+fxyDK2GrGfpz/diWl9z/sPpW/3PQ72fykbw0AAACcmiw9cuz6PctOah/nH62vn/3/wFPr69m4PDvdayeiGn29k7fKYrcpysNi7m9nJlfEGY51ukXEvbop2kebWhMatBX/Mt6OCcxn5r9wCxSnVczH0TPT/mXiLDz+Gkx7JgAAAAAAAAAAAPwTE36ucDaOebLsvYhoTedyAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwUwAAAP//r8vFDQ==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/37)

1.438126609s ago: executing program 5 (id=705):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.437831039s ago: executing program 4 (id=707):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})

601.024784ms ago: executing program 4 (id=708):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb})

600.374524ms ago: executing program 0 (id=718):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)

600.134234ms ago: executing program 2 (id=709):
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = io_uring_setup(0x1ad2, &(0x7f0000000740)={0x0, 0x1100, 0x0, 0xfffffffe, 0x3d0})
close(r1)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)

495.543909ms ago: executing program 0 (id=710):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1})
close_range(r1, 0xffffffffffffffff, 0x0)

495.386539ms ago: executing program 2 (id=711):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8a"}}, 0x119)

495.279079ms ago: executing program 3 (id=712):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a82b9a86dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

446.079961ms ago: executing program 2 (id=713):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
chown(&(0x7f0000000780)='./file0\x00', 0x0, 0x0)

366.717744ms ago: executing program 2 (id=714):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/161, 0x9e}, {0x0, 0x931}], 0x2)

366.371124ms ago: executing program 2 (id=715):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000580))

366.230514ms ago: executing program 3 (id=716):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x22020600)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
listen(r0, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x400}], 0x1, 0x81)

230.03272ms ago: executing program 3 (id=717):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
setresgid(0xee01, 0x0, 0x0)

202.623301ms ago: executing program 3 (id=720):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

34.518588ms ago: executing program 3 (id=721):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000ac0)="85", 0x1}], 0x1, 0x7abff, 0x0, 0x3)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

0s ago: executing program 3 (id=722):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})

kernel console output (not intermixed with test programs):

ready
[   27.992506][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.000755][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.008640][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.017027][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.024712][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.034376][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.042758][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.059512][  T287] request_module fs-gadgetfs succeeded, but still no fs?
[   28.065596][  T284] device veth1_macvtap entered promiscuous mode
[   28.074378][  T283] device veth1_macvtap entered promiscuous mode
[   28.084194][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.092591][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.101056][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.129231][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.141635][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.149277][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.157896][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.166575][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.175199][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.187631][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.196224][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.204829][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.213411][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.221794][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.230106][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.238886][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.251670][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.260113][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.277861][  T286] device veth0_vlan entered promiscuous mode
[   28.331766][  T352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   28.364635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.367795][  T355] loop4: detected capacity change from 0 to 128
[   28.374955][  T286] device veth1_macvtap entered promiscuous mode
[   28.414892][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.434830][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.446162][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.458165][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.549387][  T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   28.559533][  T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   28.568682][  T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   28.679257][  T382] netlink: 'syz.2.17': attribute type 4 has an invalid length.
[   28.716970][  T382] netlink: 'syz.2.17': attribute type 4 has an invalid length.
[   28.770838][  T382] syz.2.17 (382) used greatest stack depth: 20584 bytes left
[   28.871250][  T376] loop4: detected capacity change from 0 to 2048
[   28.879672][  T376] EXT4-fs: Ignoring removed bh option
[   28.910207][  T393] loop1: detected capacity change from 0 to 2048
[   28.931307][  T376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   28.980879][  T393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   29.062309][  T393] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   29.082736][  T391] loop0: detected capacity change from 0 to 40427
[   29.093141][  T391] F2FS-fs (loop0): invalid crc value
[   29.099213][  T393] overlayfs: failed to set xattr on upper
[   29.106883][  T391] F2FS-fs (loop0): Found nat_bits in checkpoint
[   29.116118][  T287] EXT4-fs (loop4): unmounting filesystem.
[   29.152798][  T391] F2FS-fs (loop0): Start checkpoint disabled!
[   29.161086][  T391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   29.208424][  T283] EXT4-fs (loop1): unmounting filesystem.
[   29.252280][  T416] loop3: detected capacity change from 0 to 128
[   29.273553][  T391] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   29.288988][  T416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   29.308576][  T416] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   29.341424][   T43] kworker/u4:2: attempt to access beyond end of device
[   29.341424][   T43] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   29.406088][  T421] loop2: detected capacity change from 0 to 2048
[   29.438855][  T284] EXT4-fs (loop3): unmounting filesystem.
[   29.455025][  T421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   29.475571][  T336] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   29.496452][  T336] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   29.509236][  T336] EXT4-fs (loop2): This should not happen!! Data will be lost
[   29.509236][  T336] 
[   29.519525][  T336] EXT4-fs (loop2): Total free blocks count 0
[   29.525987][  T336] EXT4-fs (loop2): Free/Dirty block details
[   29.533483][  T336] EXT4-fs (loop2): free_blocks=2415919104
[   29.539468][   T28] kauditd_printk_skb: 73 callbacks suppressed
[   29.539492][   T28] audit: type=1400 audit(1764703688.462:147): avc:  denied  { read } for  pid=428 comm="syz.0.30" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   29.550497][  T336] EXT4-fs (loop2): dirty_blocks=32
[   29.579071][  T336] EXT4-fs (loop2): Block reservation details
[   29.585858][  T336] EXT4-fs (loop2): i_reserved_data_blocks=2
[   29.606545][  T336] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[   29.623917][   T28] audit: type=1400 audit(1764703688.462:148): avc:  denied  { open } for  pid=428 comm="syz.0.30" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   30.155533][   T28] audit: type=1400 audit(1764703689.082:149): avc:  denied  { block_suspend } for  pid=435 comm="syz.1.37" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   30.216101][  T431] loop3: detected capacity change from 0 to 131072
[   30.226554][  T431] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945)
[   30.234815][  T431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   30.243744][  T431] F2FS-fs (loop3): invalid crc value
[   30.365726][  T431] F2FS-fs (loop3): Found nat_bits in checkpoint
[   30.411010][  T431] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   30.418121][  T431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   30.462554][   T28] audit: type=1400 audit(1764703689.392:150): avc:  denied  { create } for  pid=451 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   30.488881][  T431] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix.
[   30.499294][  T431] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix.
[   30.556137][   T28] audit: type=1400 audit(1764703689.412:151): avc:  denied  { setopt } for  pid=451 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   30.599058][   T28] audit: type=1400 audit(1764703689.452:152): avc:  denied  { map } for  pid=451 comm="syz.4.40" path="socket:[16653]" dev="sockfs" ino=16653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   30.641322][   T28] audit: type=1400 audit(1764703689.452:153): avc:  denied  { read } for  pid=451 comm="syz.4.40" path="socket:[16653]" dev="sockfs" ino=16653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   30.667522][   T28] audit: type=1400 audit(1764703689.482:154): avc:  denied  { read write } for  pid=453 comm="syz.0.41" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   30.696383][   T28] audit: type=1400 audit(1764703689.482:155): avc:  denied  { open } for  pid=453 comm="syz.0.41" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   30.738397][   T28] audit: type=1400 audit(1764703689.572:156): avc:  denied  { read write } for  pid=459 comm="syz.4.45" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   30.809742][  T449] loop1: detected capacity change from 0 to 32768
[   30.834128][  T472] loop0: detected capacity change from 0 to 512
[   30.851854][  T449]  loop1: p1 p3 < >
[   30.872370][  T472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   30.906181][  T472] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   30.960694][   T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   30.969350][  T472] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   31.006546][  T335] udevd[335]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   31.006651][  T472] EXT4-fs (loop0): 1 truncate cleaned up
[   31.023391][  T358] udevd[358]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   31.030130][  T472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   31.079474][  T285] EXT4-fs (loop0): unmounting filesystem.
[   31.111402][  T334] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.124338][  T486] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   31.136294][  T491] loop3: detected capacity change from 0 to 1024
[   31.146750][  T491] EXT4-fs: Ignoring removed mblk_io_submit option
[   31.153346][   T19] usb 5-1: Using ep0 maxpacket: 32
[   31.170208][   T19] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   31.178583][   T19] usb 5-1: config 0 has no interface number 0
[   31.186096][  T491] EXT4-fs: Ignoring removed oldalloc option
[   31.192269][   T19] usb 5-1: config 0 interface 184 has no altsetting 0
[   31.200647][  T491] EXT4-fs: Ignoring removed nomblk_io_submit option
[   31.211246][   T19] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   31.220471][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.228801][   T19] usb 5-1: Product: syz
[   31.233212][   T19] usb 5-1: Manufacturer: syz
[   31.237821][   T19] usb 5-1: SerialNumber: syz
[   31.244342][  T491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   31.251058][   T19] usb 5-1: config 0 descriptor??
[   31.264798][   T19] smsc75xx v1.0.0
[   31.301944][  T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.302340][  T284] EXT4-fs (loop3): unmounting filesystem.
[   31.321979][  T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.337773][  T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.355366][  T334] usb 3-1: Product: syz
[   31.363010][  T334] usb 3-1: Manufacturer: syz
[   31.367644][  T334] usb 3-1: SerialNumber: syz
[   31.402503][  T501] loop3: detected capacity change from 0 to 512
[   31.450723][  T501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   31.484676][  T501] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.58: inode has both inline data and extents flags
[   31.515457][  T501] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.58: couldn't read orphan inode 15 (err -117)
[   31.518522][  T496] loop0: detected capacity change from 0 to 32768
[   31.537542][  T501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   31.581573][  T284] EXT4-fs (loop3): unmounting filesystem.
[   31.581847][  T496]  loop0: p1 p3 < >
[   31.752791][  T400] udevd[400]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   31.754445][  T504] udevd[504]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   31.957518][  T519] loop3: detected capacity change from 0 to 40427
[   31.977154][  T519] F2FS-fs (loop3): invalid crc value
[   32.001719][  T519] F2FS-fs (loop3): Found nat_bits in checkpoint
[   32.077922][  T519] F2FS-fs (loop3): Start checkpoint disabled!
[   32.084840][  T519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   32.160336][  T528] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.167452][  T528] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.170872][    T8] kworker/u4:0: attempt to access beyond end of device
[   32.170872][    T8] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   32.189433][    T8] kworker/u4:0: attempt to access beyond end of device
[   32.189433][    T8] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   32.392833][  T334] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[   32.399508][  T334] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   32.407202][  T334] cdc_ncm 3-1:1.0: setting rx_max = 2048
[   32.469830][   T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[   32.485409][   T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[   32.495588][   T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   32.506603][   T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   32.516717][   T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   32.527197][   T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   32.537014][   T19] smsc75xx: probe of 5-1:0.184 failed with error -71
[   32.552148][   T19] usb 5-1: USB disconnect, device number 2
[   32.600122][  T334] cdc_ncm 3-1:1.0: setting tx_max = 16384
[   32.611372][  T345] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   32.612384][  T334] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   32.637704][  T540] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[   32.649590][  T334] usb 3-1: USB disconnect, device number 2
[   32.656410][  T334] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[   32.709404][  T546] input: syz1 as /devices/virtual/input/input4
[   32.741458][  T550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.78'.
[   32.751524][  T550] netem: unknown loss type 13
[   32.756409][  T550] netem: change failed
[   32.791951][  T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   32.803452][  T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.813600][  T345] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   32.822902][  T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.845136][  T345] usb 4-1: config 0 descriptor??
[   32.846192][  T559] 9pnet: p9_errstr2errno: server reported unknown error œæçâ̼§6†Gµ)D»ÉoèÉï'óÖ)=0‹O]|”[
[   32.855583][  T345] hub 4-1:0.0: USB hub found
[   32.925980][  T569] loop1: detected capacity change from 0 to 256
[   32.937699][  T569] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   33.055624][  T345] hub 4-1:0.0: 2 ports detected
[   33.185562][  T585] xt_bpf: check failed: parse error
[   33.462683][  T345] usb 4-1: USB disconnect, device number 2
[   33.513295][  T589] loop2: detected capacity change from 0 to 40427
[   33.525587][  T589] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   33.534749][  T589] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   33.553900][  T589] F2FS-fs (loop2): invalid crc_offset: 33558524
[   33.567090][  T589] F2FS-fs (loop2): Found nat_bits in checkpoint
[   33.574362][   T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   33.620019][  T589] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   33.627229][  T589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   33.720614][  T346] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.733832][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.733860][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.741697][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.749284][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.756970][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.764754][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.771976][   T19] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[   33.772877][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.780212][   T19] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[   33.790222][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.808209][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.810640][   T19] usb 5-1: config 1 interface 0 has no altsetting 0
[   33.816330][  T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   33.831951][   T19] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   33.848689][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.857143][   T19] usb 5-1: Product: syz
[   33.867908][   T19] usb 5-1: Manufacturer: syz
[   33.872625][   T19] usb 5-1: SerialNumber: syz
[   33.891874][  T593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   33.899108][  T593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   33.911745][  T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.933014][  T346] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   33.944906][  T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.953875][  T346] usb 1-1: config 0 descriptor??
[   34.098276][  T618] =======================================================
[   34.098276][  T618] WARNING: The mand mount option has been deprecated and
[   34.098276][  T618]          and is ignored by this kernel. Remove the mand
[   34.098276][  T618]          option from the mount to silence this warning.
[   34.098276][  T618] =======================================================
[   34.146197][   T19] rtl8150 5-1:1.0: couldn't reset the device
[   34.146305][   T19] rtl8150: probe of 5-1:1.0 failed with error -5
[   34.150698][   T19] usb 5-1: USB disconnect, device number 3
[   34.320774][  T620] loop1: detected capacity change from 0 to 40427
[   34.338158][  T620] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   34.338184][  T620] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   34.339077][  T620] F2FS-fs (loop1): invalid crc value
[   34.362653][  T620] F2FS-fs (loop1): Found nat_bits in checkpoint
[   34.363157][  T346] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   34.364780][  T346] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5
[   34.430887][  T620] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   34.430912][  T620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   34.449398][  T346] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   34.544789][   T28] kauditd_printk_skb: 72 callbacks suppressed
[   34.544805][   T28] audit: type=1400 audit(1764703693.472:229): avc:  denied  { unlink } for  pid=619 comm="syz.1.109" name="#7" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   34.579720][   T28] audit: type=1400 audit(1764703693.502:230): avc:  denied  { link } for  pid=619 comm="syz.1.109" name="file1" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   34.579818][   T28] audit: type=1400 audit(1764703693.502:231): avc:  denied  { read } for  pid=619 comm="syz.1.109" name="file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   34.588221][   T28] audit: type=1400 audit(1764703693.512:232): avc:  denied  { setattr } for  pid=619 comm="syz.1.109" name="#9" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   34.588256][   T28] audit: type=1400 audit(1764703693.512:233): avc:  denied  { rename } for  pid=619 comm="syz.1.109" name="#9" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   34.654865][   T19] usb 1-1: USB disconnect, device number 2
[   34.737359][   T28] audit: type=1400 audit(1764703693.662:234): avc:  denied  { unlink } for  pid=283 comm="syz-executor" name="file1" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   34.783120][  T640] SELinux:  unknown common 
[   34.783189][  T640] SELinux: failed to load policy
[   34.827309][   T28] audit: type=1400 audit(1764703693.712:235): avc:  denied  { load_policy } for  pid=637 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   34.827340][   T28] audit: type=1400 audit(1764703693.752:236): avc:  denied  { create } for  pid=642 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.827372][   T28] audit: type=1400 audit(1764703693.752:237): avc:  denied  { write } for  pid=642 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.827396][   T28] audit: type=1400 audit(1764703693.752:238): avc:  denied  { nlmsg_write } for  pid=642 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.972470][  T649] loop3: detected capacity change from 0 to 512
[   35.005889][  T649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   35.005967][  T649] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.036674][  T284] EXT4-fs (loop3): unmounting filesystem.
[   35.358422][  T692] input: syz0 as /devices/virtual/input/input6
[   35.660682][   T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   35.680719][  T345] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   35.765894][  T713] xt_bpf: check failed: parse error
[   35.820636][  T334] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   35.851770][   T39] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   35.859834][   T39] usb 1-1: config 0 has no interface number 0
[   35.862257][  T345] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   35.867072][   T39] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.876300][  T345] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   35.887200][   T39] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.906714][   T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   35.907181][  T345] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   35.916090][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.925042][  T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.941080][  T345] usb 4-1: Product: syz
[   35.943930][   T39] usb 1-1: config 0 descriptor??
[   35.945255][  T345] usb 4-1: Manufacturer: syz
[   35.945277][  T345] usb 4-1: SerialNumber: syz
[   35.953386][  T345] usb 4-1: config 0 descriptor??
[   35.964767][  T701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   35.972014][  T701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   36.012071][  T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.028896][  T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.039198][  T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   36.052610][  T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   36.070832][  T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.091789][  T334] usb 3-1: config 0 descriptor??
[   36.182154][  T701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   36.189395][  T701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   36.364599][   T39] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[   36.371765][   T39] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[   36.378851][   T39] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[   36.388028][   T39] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[   36.395357][   T39] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[   36.402931][   T39] uclogic 0003:256C:006D.0002: No inputs registered, leaving
[   36.410630][  T295] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   36.420963][   T39] uclogic 0003:256C:006D.0002: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1
[   36.501116][  T334] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   36.521172][  T334] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   36.592595][   T19] usb 1-1: USB disconnect, device number 3
[   36.600649][  T295] usb 5-1: Using ep0 maxpacket: 16
[   36.611049][  T295] usb 5-1: config 0 has no interfaces?
[   36.617765][  T295] usb 5-1: config 0 has no interfaces?
[   36.626839][  T295] usb 5-1: config 0 has no interfaces?
[   36.634268][  T295] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   36.643774][  T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.651856][  T295] usb 5-1: Product: syz
[   36.656294][  T295] usb 5-1: Manufacturer: syz
[   36.661060][  T295] usb 5-1: SerialNumber: syz
[   36.667029][  T295] r8152-cfgselector 5-1: config 0 descriptor??
[   36.877093][  T295] r8152-cfgselector 5-1: Unknown version 0x0000
[   37.002822][  T345] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   37.013627][  T345] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[   37.028290][  T345] usb 4-1: USB disconnect, device number 3
[   37.034609][  T345] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[   37.087437][  T334] r8152-cfgselector 5-1: USB disconnect, device number 4
[   37.250641][   T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   37.440599][   T39] usb 2-1: Using ep0 maxpacket: 32
[   37.447347][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.458524][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.468520][   T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   37.477812][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.500905][   T39] usb 2-1: config 0 descriptor??
[   37.506822][   T39] hub 2-1:0.0: USB hub found
[   37.570774][  T748] loop3: detected capacity change from 0 to 2048
[   37.627893][  T748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   37.693321][  T754] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   37.710989][   T39] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[   37.732169][  T754] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 576 with error 28
[   37.763123][  T754] EXT4-fs (loop3): This should not happen!! Data will be lost
[   37.763123][  T754] 
[   37.782841][  T754] EXT4-fs (loop3): Total free blocks count 0
[   37.796688][  T754] EXT4-fs (loop3): Free/Dirty block details
[   37.810416][  T754] EXT4-fs (loop3): free_blocks=2415919504
[   37.824082][  T754] EXT4-fs (loop3): dirty_blocks=592
[   37.836012][  T754] EXT4-fs (loop3): Block reservation details
[   37.852146][  T754] EXT4-fs (loop3): i_reserved_data_blocks=37
[   37.922706][   T39] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[   38.003550][  T753] loop4: detected capacity change from 0 to 40427
[   38.033539][  T753] F2FS-fs (loop4): invalid crc value
[   38.073927][  T753] F2FS-fs (loop4): Found nat_bits in checkpoint
[   38.137718][  T753] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   38.172013][  T753] syz.4.157: attempt to access beyond end of device
[   38.172013][  T753] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   38.189465][  T753] overlayfs: Cannot mount volatile when upperdir has an unseen error. Sync upperdir fs to clear state.
[   38.221827][  T287] syz-executor: attempt to access beyond end of device
[   38.221827][  T287] loop4: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[   38.240762][  T295] usb 2-1: USB disconnect, device number 2
[   38.494279][  T639] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 576 with max blocks 2048 with error 28
[   38.570698][   T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   38.661040][  T345] usb 3-1: USB disconnect, device number 3
[   38.733781][  T781] syz.3.167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   38.744184][    T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   38.765311][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   38.776558][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.786446][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[   38.795642][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.814032][   T24] usb 1-1: config 0 descriptor??
[   38.889999][  T785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'.
[   38.913710][  T777] loop1: detected capacity change from 0 to 40427
[   38.922932][  T777] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   38.930856][    T6] usb 5-1: Using ep0 maxpacket: 32
[   38.936174][  T777] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   38.937243][    T6] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   38.946548][    T6] usb 5-1: config 0 has no interface number 0
[   38.956721][  T777] F2FS-fs (loop1): Found nat_bits in checkpoint
[   38.961898][    T6] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   38.977085][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.985452][    T6] usb 5-1: Product: syz
[   38.989767][    T6] usb 5-1: Manufacturer: syz
[   38.994627][    T6] usb 5-1: SerialNumber: syz
[   39.000414][    T6] usb 5-1: config 0 descriptor??
[   39.007781][    T6] smsc95xx v2.0.0
[   39.013202][  T777] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   39.020328][  T777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   39.090906][  T777] loop1: detected capacity change from 40427 to 0
[   39.099720][  T336] loop: Write error at byte offset 9223372036871569407, length 4096.
[   39.107897][    C1] I/O error, dev loop1, sector 32800 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 2
[   39.108140][  T336] loop: Write error at byte offset 9223372036856872959, length 4096.
[   39.125835][    C0] I/O error, dev loop1, sector 4096 op 0x1:(WRITE) flags 0x3800 phys_seg 2 prio class 2
[   39.135721][  T777] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[   39.151556][  T283] f2fs_fill_dentries: 25 callbacks suppressed
[   39.151572][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.157692][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.165608][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.179813][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.187697][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.195547][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.203268][  T283] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   39.223905][   T24] apple 0003:05AC:029C.0005: invalid report_size 54646
[   39.248172][   T24] apple 0003:05AC:029C.0005: item 0 2 1 7 parsing failed
[   39.256398][   T24] apple 0003:05AC:029C.0005: parse failed
[   39.267174][   T24] apple: probe of 0003:05AC:029C.0005 failed with error -22
[   39.272959][  T801] netlink: 'syz.2.175': attribute type 4 has an invalid length.
[   39.334807][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.343053][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.350507][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.358227][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.366009][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.373661][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.381346][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.388828][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.396632][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.404334][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.412044][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.419529][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.420142][    T6] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   39.440612][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.450150][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.450331][    T6] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   39.458121][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.474527][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.482414][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.497460][   T24] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   39.512093][  T346] usb 1-1: USB disconnect, device number 4
[   39.518196][   T24] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   39.584301][  T813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'.
[   39.584585][  T809] fido_id[809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   39.683324][   T28] kauditd_printk_skb: 15 callbacks suppressed
[   39.683340][   T28] audit: type=1400 audit(1764703698.612:254): avc:  denied  { mounton } for  pid=819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   39.774354][  T824] kvm: MWAIT instruction emulated as NOP!
[   39.785192][  T819] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.792547][  T819] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.800141][  T819] device bridge_slave_0 entered promiscuous mode
[   39.807573][  T819] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.814680][  T819] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.822273][  T819] device bridge_slave_1 entered promiscuous mode
[   39.950690][  T838] SELinux: failed to load policy
[   39.976014][   T28] audit: type=1400 audit(1764703698.872:255): avc:  denied  { load_policy } for  pid=834 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   41.210554][    C1] sched: RT throttling activated
[   41.218888][    T6] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[   41.230685][    T6] smsc95xx: probe of 5-1:0.67 failed with error -71
[   41.238728][    T6] usb 5-1: USB disconnect, device number 5
[   41.301715][  T639] device bridge_slave_1 left promiscuous mode
[   41.308240][  T639] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.316834][  T639] device bridge_slave_0 left promiscuous mode
[   41.332870][  T639] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.343156][  T639] device veth1_macvtap left promiscuous mode
[   41.349215][  T639] device veth0_vlan left promiscuous mode
[   41.441923][  T857] loop0: detected capacity change from 0 to 128
[   41.469250][  T861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'.
[   41.492957][  T857] syz.0.195: attempt to access beyond end of device
[   41.492957][  T857] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[   41.508444][  T857] Buffer I/O error on dev loop0, logical block 128, lost async page write
[   41.519390][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   41.537311][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   41.549499][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   41.560619][   T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   41.575365][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   41.584913][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.592012][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.600477][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   41.617768][  T865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   41.635841][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   41.652235][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.670626][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.677704][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.694956][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   41.703485][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.713318][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   41.721796][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.737026][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.744373][  T863] loop2: detected capacity change from 0 to 40427
[   41.755402][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.764272][  T863] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(3199) blocks(1024)
[   41.773760][  T863] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   41.782089][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.792226][  T819] device veth0_vlan entered promiscuous mode
[   41.799673][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.809668][   T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   41.827715][  T863] F2FS-fs (loop2): invalid crc value
[   41.840327][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.853843][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.867292][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.875043][   T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   41.885290][  T863] F2FS-fs (loop2): Found nat_bits in checkpoint
[   41.891957][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.908529][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.910350][  T819] device veth1_macvtap entered promiscuous mode
[   41.936779][   T60] usb 4-1: config 0 descriptor??
[   41.951723][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.961597][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.977378][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.987533][  T863] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   41.992204][  T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.994797][  T863] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   42.013425][  T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.052808][  T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.063424][   T28] audit: type=1400 audit(1764703700.992:256): avc:  denied  { mounton } for  pid=819 comm="syz-executor" path="/root/syzkaller.UVfAMo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   42.102033][  T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.111038][  T286] syz-executor: attempt to access beyond end of device
[   42.111038][  T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   42.121927][   T28] audit: type=1400 audit(1764703701.022:257): avc:  denied  { create } for  pid=862 comm="syz.2.198" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.195832][   T28] audit: type=1400 audit(1764703701.022:258): avc:  denied  { read write open } for  pid=862 comm="syz.2.198" path="/39/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.254195][   T28] audit: type=1400 audit(1764703701.022:259): avc:  denied  { ioctl } for  pid=862 comm="syz.2.198" path="/39/file0/file1" dev="loop2" ino=10 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.316633][   T28] audit: type=1400 audit(1764703701.192:260): avc:  denied  { bind } for  pid=885 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   42.349955][   T28] audit: type=1400 audit(1764703701.272:261): avc:  denied  { sqpoll } for  pid=890 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   42.353882][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.376883][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.390736][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.398183][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.406593][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.417394][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.425724][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.433788][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.433817][   T60] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[   42.434592][   T60] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   42.439538][   T60] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   42.587184][  T338] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[   42.607945][  T907] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   42.630653][   T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   42.817119][  T917] loop4: detected capacity change from 0 to 1024
[   42.848640][  T917] EXT4-fs: Ignoring removed bh option
[   42.858799][  T917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   42.878726][  T917] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.216: lblock 2 mapped to illegal pblock 2 (length 1)
[   42.892942][  T917] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   42.892979][  T917] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.216: lblock 0 mapped to illegal pblock 48 (length 1)
[   42.893125][  T917] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   42.893142][  T917] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.216: Failed to acquire dquot type 0
[   42.893291][  T917] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem
[   42.893443][  T917] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.216: mark_inode_dirty error
[   42.893560][  T917] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   42.893603][  T917] EXT4-fs (loop4): 1 orphan inode deleted
[   42.893637][  T917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   42.911691][  T338] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[   42.939847][   T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.009826][  T338] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 0
[   43.010006][  T917] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.216: lblock 0 mapped to illegal pblock 48 (length 1)
[   43.035856][   T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.035887][   T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   43.035926][   T60] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   43.035950][   T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.041139][   T60] usb 6-1: config 0 descriptor??
[   43.045359][  T287] EXT4-fs (loop4): unmounting filesystem.
[   43.340431][  T941] netlink: 'syz.2.226': attribute type 4 has an invalid length.
[   43.349239][  T941] netlink: 'syz.2.226': attribute type 4 has an invalid length.
[   43.444958][   T60] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[   43.453831][   T60] plantronics 0003:047F:FFFF.0008: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   43.550794][  T953] overlayfs: failed to set xattr on upper
[   43.569204][  T955] loop2: detected capacity change from 0 to 512
[   43.590265][  T955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   43.619224][  T955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   43.628431][  T955] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.659916][  T286] EXT4-fs (loop2): unmounting filesystem.
[   43.717700][  T968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   43.721000][  T848] usb 4-1: string descriptor 0 read error: -2
[   43.732636][  T345] usb 6-1: USB disconnect, device number 2
[   44.276083][  T978] netlink: 'syz.5.239': attribute type 4 has an invalid length.
[   44.297235][  T978] netlink: 'syz.5.239': attribute type 4 has an invalid length.
[   44.380688][  T345] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   44.551391][   T60] usb 4-1: USB disconnect, device number 4
[   44.571811][  T345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.571867][  T345] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   44.571901][  T345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.572690][  T345] usb 3-1: config 0 descriptor??
[   44.730385][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   44.730414][   T28] audit: type=1400 audit(1764703703.652:267): avc:  denied  { getopt } for  pid=997 comm="syz.5.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   44.821938][ T1004] loop0: detected capacity change from 0 to 16
[   44.825553][ T1004] erofs: (device loop0): mounted with root inode @ nid 36.
[   44.833341][   T28] audit: type=1400 audit(1764703703.762:268): avc:  denied  { mounton } for  pid=1003 comm="syz.0.253" path="/60/file0" dev="loop0" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   44.864514][ T1004] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36
[   44.886691][ T1006] netlink: 'syz.0.254': attribute type 4 has an invalid length.
[   44.899000][ T1006] netlink: 'syz.0.254': attribute type 4 has an invalid length.
[   44.976710][  T345] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[   44.987092][  T345] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input7
[   45.003374][ T1013] syz.4.257[1013] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.003440][ T1013] syz.4.257[1013] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.016778][   T28] audit: type=1400 audit(1764703703.952:269): avc:  denied  { write } for  pid=1012 comm="syz.4.257" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   45.052136][   T28] audit: type=1400 audit(1764703703.952:270): avc:  denied  { append } for  pid=1012 comm="syz.4.257" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   45.085912][  T345] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   45.200603][    T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   45.282132][ T1020] kvm [1019]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111
[   45.410630][    T6] usb 1-1: Using ep0 maxpacket: 32
[   45.417035][    T6] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   45.425630][    T6] usb 1-1: config 0 has no interface number 0
[   45.433517][    T6] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   45.449298][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.459322][    T6] usb 1-1: Product: syz
[   45.463645][    T6] usb 1-1: Manufacturer: syz
[   45.468357][    T6] usb 1-1: SerialNumber: syz
[   45.477683][    T6] usb 1-1: config 0 descriptor??
[   45.485078][    T6] smsc95xx v2.0.0
[   45.523562][ T1027] tmpfs: Unknown parameter 'nolazytimeÿÿ'
[   45.544051][  T345] usb 3-1: USB disconnect, device number 4
[   45.615557][ T1036] netlink: 'syz.3.266': attribute type 4 has an invalid length.
[   45.628380][ T1036] netlink: 'syz.3.266': attribute type 4 has an invalid length.
[   45.773080][   T28] audit: type=1400 audit(1764703704.702:271): avc:  denied  { create } for  pid=1048 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   45.885891][    T6] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   45.896803][    T6] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   46.010644][  T295] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   46.050625][   T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   46.191766][  T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.202780][  T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.212550][  T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   46.225521][  T295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   46.234623][  T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.240632][   T60] usb 4-1: Using ep0 maxpacket: 8
[   46.248216][  T295] usb 5-1: config 0 descriptor??
[   46.251759][   T60] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[   46.261488][   T60] usb 4-1: config 0 has no interface number 0
[   46.269104][   T60] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   46.278359][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.286463][   T60] usb 4-1: Product: syz
[   46.290723][   T60] usb 4-1: Manufacturer: syz
[   46.295342][   T60] usb 4-1: SerialNumber: syz
[   46.300653][   T60] usb 4-1: config 0 descriptor??
[   46.509468][    T6] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[   46.509638][   T60] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[   46.521693][    T6] smsc95xx: probe of 1-1:0.67 failed with error -71
[   46.527097][   T60] usb 4-1: No valid video chain found.
[   46.546267][    T6] usb 1-1: USB disconnect, device number 5
[   46.552072][   T60] usb 4-1: USB disconnect, device number 5
[   46.657615][  T295] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[   46.666757][  T295] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   47.112739][   T28] audit: type=1400 audit(1764703706.042:272): avc:  denied  { setopt } for  pid=1073 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.225071][   T28] audit: type=1400 audit(1764703706.152:273): avc:  denied  { append } for  pid=1080 comm="syz.2.285" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   47.330584][   T60] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   47.531711][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.542911][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.552752][   T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   47.565707][   T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   47.574779][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.583413][   T60] usb 4-1: config 0 descriptor??
[   47.700580][    T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   47.880584][    T6] usb 3-1: Using ep0 maxpacket: 32
[   47.880669][    C1] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1
[   47.887051][    T6] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   47.901860][    T6] usb 3-1: config 0 has no interface number 0
[   47.909481][    T6] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   47.918598][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.926718][    T6] usb 3-1: Product: syz
[   47.931067][    T6] usb 3-1: Manufacturer: syz
[   47.935692][    T6] usb 3-1: SerialNumber: syz
[   47.941316][    T6] usb 3-1: config 0 descriptor??
[   47.947069][    T6] smsc95xx v2.0.0
[   47.991999][   T60] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[   48.000967][   T60] plantronics 0003:047F:FFFF.000B: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   48.261330][   T60] usb 4-1: USB disconnect, device number 6
[   48.349017][    T6] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   48.359761][    T6] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   48.710837][  T346] usb 5-1: USB disconnect, device number 6
[   48.792412][   T28] audit: type=1400 audit(1764703707.722:274): avc:  denied  { create } for  pid=1106 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.843608][   T28] audit: type=1400 audit(1764703707.742:275): avc:  denied  { connect } for  pid=1106 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.895200][   T28] audit: type=1400 audit(1764703707.742:276): avc:  denied  { write } for  pid=1106 comm="syz.5.297" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.970594][    T6] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[   48.988574][    T6] smsc95xx: probe of 3-1:0.67 failed with error -71
[   48.999066][    T6] usb 3-1: USB disconnect, device number 5
[   49.007554][ T1115] sch_fq: defrate 4294967295 ignored.
[   49.165644][  T295] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   49.326102][ T1104] loop4: detected capacity change from 0 to 131072
[   49.333283][ T1104] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945)
[   49.341522][ T1104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   49.350278][ T1104] F2FS-fs (loop4): invalid crc value
[   49.356884][  T295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   49.357532][ T1104] F2FS-fs (loop4): Found nat_bits in checkpoint
[   49.373452][  T295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.397019][  T295] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[   49.406567][  T295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.415140][ T1104] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   49.416580][  T295] usb 6-1: config 0 descriptor??
[   49.423901][ T1104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   49.464643][ T1104] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix.
[   49.832017][  T295] apple 0003:05AC:029C.000C: invalid report_size 54646
[   49.838974][  T295] apple 0003:05AC:029C.000C: item 0 2 1 7 parsing failed
[   49.846293][  T295] apple 0003:05AC:029C.000C: parse failed
[   49.852407][  T295] apple: probe of 0003:05AC:029C.000C failed with error -22
[   50.037957][  T295] usb 6-1: USB disconnect, device number 3
[   50.070465][   T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   50.251638][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.262616][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.272485][   T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   50.285412][   T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   50.294496][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.303456][   T19] usb 5-1: config 0 descriptor??
[   50.448357][ T1175] loop2: detected capacity change from 0 to 128
[   50.459683][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   50.459700][   T28] audit: type=1400 audit(1764703709.392:279): avc:  denied  { mount } for  pid=1174 comm="syz.2.323" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   50.474680][ T1175] syz.2.323: attempt to access beyond end of device
[   50.474680][ T1175] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[   50.490431][   T60] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   50.534661][ T1177] loop0: detected capacity change from 0 to 1024
[   50.542017][ T1177] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   50.573568][ T1177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   50.587399][ T1177] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   50.603966][ T1177] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   50.616760][ T1177] EXT4-fs (loop0): This should not happen!! Data will be lost
[   50.616760][ T1177] 
[   50.626712][ T1177] EXT4-fs (loop0): Total free blocks count 0
[   50.632819][   T28] audit: type=1400 audit(1764703709.552:280): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   50.633026][ T1177] EXT4-fs (loop0): Free/Dirty block details
[   50.658723][ T1177] EXT4-fs (loop0): free_blocks=20480
[   50.664125][ T1177] EXT4-fs (loop0): dirty_blocks=48
[   50.669319][ T1177] EXT4-fs (loop0): Block reservation details
[   50.675467][ T1177] EXT4-fs (loop0): i_reserved_data_blocks=3
[   50.704905][  T639] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 4 with error 28
[   50.711878][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.718891][   T19] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[   50.736552][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.747458][   T19] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   50.751783][ T1185] loop2: detected capacity change from 0 to 4096
[   50.766379][ T1187] futex_wake_op: syz.5.327 tries to shift op by 144; fix this program
[   50.776683][ T1185] EXT4-fs (loop2): Test dummy encryption mode enabled
[   50.790664][ T1185] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[   50.800412][   T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   50.829128][ T1185] System zones: 0-5
[   50.838483][ T1185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   50.852298][ T1185] EXT4-fs error (device loop2): __ext4_remount:6612: comm syz.2.326: Abort forced by user
[   50.864324][ T1185] EXT4-fs (loop2): Remounting filesystem read-only
[   50.867934][ T1191] loop5: detected capacity change from 0 to 16
[   50.871186][ T1185] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   50.891309][ T1191] erofs: (device loop5): mounted with root inode @ nid 36.
[   50.897148][   T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   50.907871][ T1185] EXT4-fs error (device loop2): __ext4_remount:6612: comm syz.2.326: Abort forced by user
[   50.920636][   T28] audit: type=1400 audit(1764703709.852:281): avc:  denied  { write } for  pid=1190 comm="syz.5.329" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.928160][ T1185] EXT4-fs (loop2): Remounting filesystem read-only
[   50.949240][ T1185] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   50.964820][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.993638][  T286] EXT4-fs (loop2): unmounting filesystem.
[   50.996770][   T28] audit: type=1400 audit(1764703709.852:282): avc:  denied  { add_name } for  pid=1190 comm="syz.5.329" name="file1" dev="overlay" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.022963][   T60] usb 4-1: config 0 descriptor??
[   51.029948][   T28] audit: type=1400 audit(1764703709.852:283): avc:  denied  { link } for  pid=1190 comm="syz.5.329" name="file1" dev="overlay" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   51.053317][   T28] audit: type=1400 audit(1764703709.852:284): avc:  denied  { create } for  pid=1190 comm="syz.5.329" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.084254][   T28] audit: type=1400 audit(1764703709.852:285): avc:  denied  { associate } for  pid=1190 comm="syz.5.329" name="#11" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   51.106755][   T28] audit: type=1400 audit(1764703709.852:286): avc:  denied  { setattr } for  pid=1190 comm="syz.5.329" name="#11" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.128909][   T28] audit: type=1400 audit(1764703709.852:287): avc:  denied  { rename } for  pid=1190 comm="syz.5.329" name="#11" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.151099][   T28] audit: type=1400 audit(1764703709.852:288): avc:  denied  { reparent } for  pid=1190 comm="syz.5.329" name="#11" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.432590][   T60] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[   51.440466][  T346] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   51.450197][   T60] plantronics 0003:047F:FFFF.000E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   51.564642][ T1232] netlink: 'syz.5.346': attribute type 1 has an invalid length.
[   51.621510][  T346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   51.632889][  T346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   51.644048][  T346] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   51.655181][  T346] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   51.667514][  T346] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   51.677008][  T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.685194][  T346] usb 1-1: Product: syz
[   51.689620][  T346] usb 1-1: Manufacturer: syz
[   51.694344][  T346] usb 1-1: SerialNumber: syz
[   51.700703][ T1204] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   51.708852][  T346] cdc_mbim 1-1:1.0: skipping garbage
[   51.915713][ T1204] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   51.923375][ T1204] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   51.985963][  T334] usb 4-1: USB disconnect, device number 7
[   52.050351][ T1236] loop5: detected capacity change from 0 to 131072
[   52.057646][ T1236] F2FS-fs (loop5): Unrecognized mount option "ÿÿzkaller" or missing value
[   52.126629][ T1244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.351'.
[   52.327775][ T1263] SELinux: failed to load policy
[   52.349788][ T1268] xt_hashlimit: size too large, truncated to 1048576
[   52.531952][ T1204] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   52.539197][ T1204] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   52.549058][  T346] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   52.560646][  T346] cdc_mbim 1-1:1.0: setting rx_max = 2048
[   52.761203][  T346] cdc_mbim 1-1:1.0: setting tx_max = 184
[   52.768033][  T346] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[   52.776695][  T346] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 4a:12:49:ce:1d:27
[   52.810312][   T19] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   52.865666][ T1305] overlayfs: missing 'lowerdir'
[   52.937427][ T1317] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   52.969402][  T346] usb 1-1: USB disconnect, device number 6
[   52.985248][ T1323] netlink: 'syz.3.378': attribute type 12 has an invalid length.
[   53.000496][ T1323] netlink: 'syz.3.378': attribute type 29 has an invalid length.
[   53.002851][  T346] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[   53.009275][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.033571][ T1323] netlink: 148 bytes leftover after parsing attributes in process `syz.3.378'.
[   53.043415][ T1323] Zero length message leads to an empty skb
[   53.048620][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.070666][   T19] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   53.090080][   T19] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   53.102603][   T19] usb 6-1: Manufacturer: syz
[   53.108583][   T19] usb 6-1: config 0 descriptor??
[   53.133203][   T39] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[   53.320655][   T39] usb 5-1: device firmware changed
[   53.327643][   T60] usb 5-1: USB disconnect, device number 7
[   53.490256][   T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   53.499682][ T1372] loop0: detected capacity change from 0 to 256
[   53.511418][ T1372] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   53.529684][ T1372] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[   53.564091][ T1376] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'.
[   53.654497][ T1379] input: syz1 as /devices/virtual/input/input10
[   53.681977][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.693149][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.704119][   T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   53.713768][   T60] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   53.722161][   T60] usb 5-1: Manufacturer: syz
[   53.728529][   T60] usb 5-1: config 0 descriptor??
[   53.761027][ T1386] input: syz0 as /devices/virtual/input/input11
[   53.767527][ T1386] input: failed to attach handler leds to device input11, error: -6
[   53.799216][ T1390] syz.3.402[1390] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.799334][ T1390] syz.3.402[1390] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.811821][ T1390] netlink: 'syz.3.402': attribute type 12 has an invalid length.
[   53.868954][ T1394] netlink: 'syz.3.404': attribute type 12 has an invalid length.
[   53.877162][ T1394] netlink: 'syz.3.404': attribute type 29 has an invalid length.
[   53.885117][ T1394] netlink: 148 bytes leftover after parsing attributes in process `syz.3.404'.
[   53.894739][ T1394] netlink: 'syz.3.404': attribute type 2 has an invalid length.
[   53.902907][ T1394] netlink: 'syz.3.404': attribute type 3 has an invalid length.
[   53.911068][ T1394] netlink: 15 bytes leftover after parsing attributes in process `syz.3.404'.
[   54.128352][   T19] uclogic 0003:256C:006D.000F: v1 frame probing failed: -71
[   54.136186][   T19] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[   54.143858][   T19] uclogic: probe of 0003:256C:006D.000F failed with error -71
[   54.152688][   T19] usb 6-1: USB disconnect, device number 4
[   54.189904][ T1403] SELinux: failed to load policy
[   54.350272][  T346] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   54.378345][ T1407] loop2: detected capacity change from 0 to 40427
[   54.381623][ T1415] loop0: detected capacity change from 0 to 256
[   54.424101][ T1407] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.467342][ T1407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   54.494348][  T286] syz-executor: attempt to access beyond end of device
[   54.494348][  T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   54.529752][ T1425] loop0: detected capacity change from 0 to 512
[   54.537050][ T1425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.548895][  T346] usb 4-1: Using ep0 maxpacket: 16
[   54.558557][   T60] uclogic 0003:256C:006D.0010: interface is invalid, ignoring
[   54.567910][  T346] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[   54.567963][ T1425] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   54.578145][  T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.593350][  T346] usb 4-1: Product: syz
[   54.597536][  T346] usb 4-1: Manufacturer: syz
[   54.602391][  T346] usb 4-1: SerialNumber: syz
[   54.610082][ T1425] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.416: invalid indirect mapped block 2683928664 (level 1)
[   54.621876][  T346] usb 4-1: config 0 descriptor??
[   54.629543][ T1425] EXT4-fs (loop0): Remounting filesystem read-only
[   54.656641][  T346] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   54.670450][ T1425] EXT4-fs (loop0): 1 truncate cleaned up
[   54.676333][ T1425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   54.687274][  T346] usb 4-1: Detected FT-X
[   54.715805][  T285] EXT4-fs (loop0): unmounting filesystem.
[   54.761159][   T19] usb 5-1: USB disconnect, device number 8
[   54.854353][  T346] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   54.866665][  T295] hid-generic FFFF:0008:0003.0011: item fetching failed at offset 0/1
[   54.877340][  T295] hid-generic: probe of FFFF:0008:0003.0011 failed with error -22
[   54.909050][ T1456] SELinux: failed to load policy
[   55.088687][ T1475] loop5: detected capacity change from 0 to 4096
[   55.109769][ T1475] EXT4-fs (loop5): Test dummy encryption mode enabled
[   55.131329][ T1475] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   55.139756][ T1475] System zones: 0-5
[   55.146129][ T1475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   55.231789][  T819] EXT4-fs (loop5): unmounting filesystem.
[   55.279053][  T346] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   55.336927][ T1506] loop4: detected capacity change from 0 to 512
[   55.374164][ T1506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   55.383550][ T1506] process 'syz.4.451' launched './file0' with NULL argv: empty string added
[   55.397174][ T1506] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.451: checksumming directory block 0
[   55.417494][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'.
[   55.428714][ T1513] device xfrm1 entered promiscuous mode
[   55.434669][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'.
[   55.444286][  T287] EXT4-fs (loop4): unmounting filesystem.
[   55.465521][ T1515] loop5: detected capacity change from 0 to 512
[   55.481736][  T346] usb 4-1: USB disconnect, device number 8
[   55.498045][ T1515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   55.520143][  T346] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   55.532967][  T819] EXT4-fs (loop5): unmounting filesystem.
[   55.538592][  T346] ftdi_sio 4-1:0.0: device disconnected
[   55.580563][ T1528] loop5: detected capacity change from 0 to 128
[   55.630933][  T504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   55.757262][   T28] kauditd_printk_skb: 65 callbacks suppressed
[   55.757277][   T28] audit: type=1400 audit(1764703714.682:354): avc:  denied  { mounton } for  pid=1551 comm="syz.5.472" path="/69/file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   55.875012][ T1561] SELinux: failed to load policy
[   55.905909][ T1565] netlink: 'syz.5.478': attribute type 1 has an invalid length.
[   55.924499][ T1567] syz.5.479 uses obsolete (PF_INET,SOCK_PACKET)
[   55.930966][   T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   55.952444][ T1569] loop5: detected capacity change from 0 to 512
[   55.967113][ T1569] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   55.976751][ T1569] EXT4-fs error (device loop5): ext4_readdir:223: inode #2: comm syz.5.480: path /77/file0: directory fails checksum at offset 0
[   56.002017][  T819] EXT4-fs (loop5): unmounting filesystem.
[   56.110125][   T19] usb 3-1: Using ep0 maxpacket: 16
[   56.116594][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.127797][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.137628][   T19] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[   56.147057][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.156329][   T19] usb 3-1: config 0 descriptor??
[   56.171052][ T1581] device gretap1 entered promiscuous mode
[   56.178313][   T28] audit: type=1400 audit(1764703715.102:355): avc:  denied  { write } for  pid=1580 comm="syz.5.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   56.286593][   T28] audit: type=1400 audit(1764703715.212:356): avc:  denied  { relabelfrom } for  pid=1595 comm="syz.5.492" name="" dev="pipefs" ino=22833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   56.335575][ T1600] loop5: detected capacity change from 0 to 128
[   56.347839][ T1600] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   56.360069][  T295] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   56.365030][ T1600] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.400988][   T28] audit: type=1400 audit(1764703715.332:357): avc:  denied  { ioctl } for  pid=1604 comm="syz.4.496" path="socket:[22382]" dev="sockfs" ino=22382 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   56.430746][  T819] EXT4-fs (loop5): unmounting filesystem.
[   56.571926][   T19] wacom 0003:056A:0084.0012: unbalanced delimiter at end of report description
[   56.581007][  T295] usb 4-1: Using ep0 maxpacket: 16
[   56.586976][   T19] wacom 0003:056A:0084.0012: parse failed
[   56.599097][  T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.610833][   T19] wacom: probe of 0003:056A:0084.0012 failed with error -22
[   56.618168][   T28] audit: type=1400 audit(1764703715.542:358): avc:  denied  { validate_trans } for  pid=1625 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   56.640370][  T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.650362][  T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[   56.659426][  T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.680743][  T295] usb 4-1: config 0 descriptor??
[   56.772682][  T345] usb 3-1: USB disconnect, device number 6
[   56.785625][ T1638] loop0: detected capacity change from 0 to 512
[   56.792303][ T1638] EXT4-fs: Ignoring removed i_version option
[   56.798378][ T1638] EXT4-fs: Ignoring removed bh option
[   56.812640][ T1638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   56.821800][ T1638] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.834944][   T28] audit: type=1400 audit(1764703715.762:359): avc:  denied  { execmem } for  pid=1637 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   56.840142][   T19] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   56.863104][  T285] EXT4-fs (loop0): unmounting filesystem.
[   56.935789][   T28] audit: type=1400 audit(1764703715.862:360): avc:  denied  { write } for  pid=1641 comm="syz.0.510" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   56.957510][  T346] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   57.041020][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.053140][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.062958][   T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.076025][   T19] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.085119][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.094711][  T295] logitech-hidpp-device 0003:046D:C091.0013: item fetching failed at offset 1/5
[   57.104458][   T19] usb 6-1: config 0 descriptor??
[   57.109575][  T295] logitech-hidpp-device 0003:046D:C091.0013: hidpp_probe:parse failed
[   57.117840][  T295] logitech-hidpp-device: probe of 0003:046D:C091.0013 failed with error -22
[   57.141200][  T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.151216][  T346] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   57.160379][  T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.169115][  T346] usb 5-1: config 0 descriptor??
[   57.300920][   T39] usb 4-1: USB disconnect, device number 9
[   57.435446][ T1659] loop2: detected capacity change from 0 to 512
[   57.442656][ T1659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   57.461754][ T1659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.470815][ T1659] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.487316][   T28] audit: type=1400 audit(1764703716.412:361): avc:  denied  { append } for  pid=1658 comm="syz.2.517" path="/102/file0/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.514275][  T286] EXT4-fs (loop2): unmounting filesystem.
[   57.529311][   T19] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[   57.539666][   T19] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   57.551252][ T1663] loop2: detected capacity change from 0 to 1024
[   57.559199][ T1663] EXT4-fs: Ignoring removed orlov option
[   57.577653][  T346] lenovo 0003:17EF:6047.0015: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[   57.594178][ T1663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.606100][   T28] audit: type=1400 audit(1764703716.532:362): avc:  denied  { setattr } for  pid=1662 comm="syz.2.518" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.658663][  T286] EXT4-fs (loop2): unmounting filesystem.
[   57.999440][ T1694] overlayfs: failed to verify origin (newroot/112, ino=592, err=-116)
[   58.008040][ T1694] overlayfs: failed to verify upper root origin
[   58.028313][ T1698] loop0: detected capacity change from 0 to 256
[   58.057101][ T1702] syz.3.534[1702] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.057205][ T1702] syz.3.534[1702] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.069629][  T358] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   58.093216][ T1698] input: syz1 as /devices/virtual/input/input12
[   58.144979][ T1710] loop0: detected capacity change from 0 to 128
[   58.221685][ T1717] loop0: detected capacity change from 0 to 512
[   58.243516][ T1717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   58.252823][ T1717] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.273196][  T285] EXT4-fs (loop0): unmounting filesystem.
[   58.357779][ T1728] syz.0.545[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.357838][ T1728] syz.0.545[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.370503][ T1728] syz.0.545[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.382477][  T346] lenovo 0003:17EF:6047.0015: Sensitivity setting failed: -71
[   58.384819][ T1728] syz.0.545[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.399486][  T346] usb 5-1: USB disconnect, device number 9
[   58.426446][ T1729] fido_id[1729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   58.446296][   T28] audit: type=1400 audit(1764703717.372:363): avc:  denied  { watch_reads } for  pid=1730 comm="syz.0.546" path="/129" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   58.759957][  T295] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   58.939917][  T295] usb 1-1: Using ep0 maxpacket: 16
[   58.946330][  T295] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[   58.965666][  T295] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30
[   58.977181][  T295] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 238
[   58.982084][   T60] kernel write not supported for file [eventfd] (pid: 60 comm: kworker/1:2)
[   58.990386][  T295] usb 1-1: New USB device found, idVendor=796d, idProduct=c22e, bcdDevice= 0.00
[   59.008769][  T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.029134][  T295] usb 1-1: config 0 descriptor??
[   59.075552][ T1751] SELinux: failed to load policy
[   59.159990][  T345] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   59.339961][  T345] usb 5-1: Using ep0 maxpacket: 16
[   59.346350][  T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.357328][  T345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   59.370243][  T295] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   59.377766][  T345] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   59.386907][  T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.395769][  T345] usb 5-1: config 0 descriptor??
[   59.399939][   T60] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   59.579945][  T295] usb 3-1: Using ep0 maxpacket: 16
[   59.581208][   T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.586593][  T295] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   59.596138][   T60] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   59.609344][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   59.618585][   T60] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 37084, setting to 64
[   59.630141][  T295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   59.642982][   T60] usb 4-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40
[   59.653737][  T295] usb 3-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00
[   59.662540][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.671929][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.679949][   T60] usb 4-1: Product: syz
[   59.693536][  T295] usb 3-1: config 0 descriptor??
[   59.699142][   T60] usb 4-1: Manufacturer: syz
[   59.708879][   T60] usb 4-1: SerialNumber: syz
[   59.736353][ T1765] device bridge0 entered promiscuous mode
[   59.742240][ T1765] device macsec1 entered promiscuous mode
[   59.748962][ T1765] bridge0: port 3(macsec1) entered blocking state
[   59.757272][ T1765] bridge0: port 3(macsec1) entered disabled state
[   59.764927][ T1765] device bridge0 left promiscuous mode
[   59.811313][  T345] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max
[   59.823269][  T345] HID 045e:07da: Invalid code 65791 type 1
[   59.830473][  T345] HID 045e:07da: Invalid code 768 type 1
[   59.839130][  T345] HID 045e:07da: Invalid code 769 type 1
[   59.845254][  T345] HID 045e:07da: Invalid code 770 type 1
[   59.850994][  T345] HID 045e:07da: Invalid code 771 type 1
[   59.856764][  T345] HID 045e:07da: Invalid code 772 type 1
[   59.862691][  T345] HID 045e:07da: Invalid code 773 type 1
[   59.868370][  T345] HID 045e:07da: Invalid code 774 type 1
[   59.874485][  T345] HID 045e:07da: Invalid code 775 type 1
[   59.880233][  T345] HID 045e:07da: Invalid code 776 type 1
[   59.902521][  T345] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input13
[   59.941710][ T1773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'.
[   59.951348][ T1773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.566'.
[   59.981240][  T345] microsoft 0003:045E:07DA.0016: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   60.000831][   T39] usb 6-1: USB disconnect, device number 5
[   60.018472][  T346] usb 5-1: USB disconnect, device number 10
[   60.019629][ T1777] loop5: detected capacity change from 0 to 512
[   60.044598][ T1778] fido_id[1778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[   60.131537][  T295] lg-g15 0003:046D:C22E.0017: item fetching failed at offset 1/5
[   60.139682][  T295] lg-g15: probe of 0003:046D:C22E.0017 failed with error -22
[   60.348633][  T295] usb 3-1: USB disconnect, device number 7
[   60.468329][ T1788] loop5: detected capacity change from 0 to 131072
[   60.479015][ T1788] F2FS-fs (loop5): Test dummy encryption mode enabled
[   60.486904][ T1788] F2FS-fs (loop5): invalid crc value
[   60.493763][ T1788] F2FS-fs (loop5): Found nat_bits in checkpoint
[   60.531603][ T1788] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   60.546413][ T1788] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   60.856342][ T1815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.582'.
[   61.024339][   T60] cdc_ncm 4-1:1.0: bind() failure
[   61.025113][ T1818] loop5: detected capacity change from 0 to 40427
[   61.034164][   T60] cdc_ncm: probe of 4-1:1.1 failed with error -71
[   61.043797][ T1818] F2FS-fs (loop5): fault_injection options not supported
[   61.050962][ T1818] F2FS-fs (loop5): fault_type options not supported
[   61.058552][ T1818] F2FS-fs (loop5): invalid crc value
[   61.063415][   T60] cdc_mbim: probe of 4-1:1.1 failed with error -71
[   61.075351][ T1818] F2FS-fs (loop5): Found nat_bits in checkpoint
[   61.111040][   T60] usb 4-1: USB disconnect, device number 10
[   61.122694][ T1818] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   61.173858][   T28] audit: type=1400 audit(1764703720.102:364): avc:  denied  { compute_member } for  pid=1838 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   61.223594][ T1843] loop2: detected capacity change from 0 to 512
[   61.277335][ T1843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   61.286482][ T1843] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   61.305701][ T1843] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.595: corrupted inode contents
[   61.324542][ T1843] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #2: comm syz.2.595: mark_inode_dirty error
[   61.339618][ T1843] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.595: corrupted inode contents
[   61.351938][ T1843] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.595: mark_inode_dirty error
[   61.365023][   T28] audit: type=1400 audit(1764703720.292:365): avc:  denied  { setattr } for  pid=1842 comm="syz.2.595" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.365062][ T1843] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.595: corrupted inode contents
[   61.402118][ T1843] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #2: comm syz.2.595: mark_inode_dirty error
[   61.413759][ T1843] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.595: corrupted inode contents
[   61.426300][ T1861] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.595: corrupted inode contents
[   61.438359][ T1861] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.595: mark_inode_dirty error
[   61.450359][ T1861] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem
[   61.498155][   T60] usb 1-1: USB disconnect, device number 7
[   61.515781][  T286] EXT4-fs (loop2): unmounting filesystem.
[   61.727490][ T1901] netlink: 'syz.2.619': attribute type 27 has an invalid length.
[   61.738735][ T1906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[   61.740252][ T1901] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   61.786582][ T1908] loop2: detected capacity change from 0 to 128
[   61.811680][ T1908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   61.826236][ T1908] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   61.869807][  T346] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   61.911314][   T28] audit: type=1400 audit(1764703720.842:366): avc:  denied  { create } for  pid=1924 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.931691][   T28] audit: type=1400 audit(1764703720.842:367): avc:  denied  { write } for  pid=1924 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.952140][  T286] EXT4-fs (loop2): unmounting filesystem.
[   61.952977][   T28] audit: type=1400 audit(1764703720.842:368): avc:  denied  { nlmsg_write } for  pid=1924 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.998510][ T1932] loop4: detected capacity change from 0 to 128
[   62.012342][ T1932] FAT-fs (loop4): bogus logical sector size 8
[   62.024118][ T1932] FAT-fs (loop4): Can't find a valid FAT filesystem
[   62.050424][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.057732][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.070924][  T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.079797][ T1932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.632'.
[   62.083296][  T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.091816][ T1932] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   62.102006][  T346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   62.131951][  T346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   62.146439][  T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.166875][  T346] usb 4-1: config 0 descriptor??
[   62.177242][ T1942] loop4: detected capacity change from 0 to 16
[   62.198188][ T1946] loop2: detected capacity change from 0 to 512
[   62.204364][ T1942] erofs: (device loop4): mounted with root inode @ nid 36.
[   62.226449][   T28] audit: type=1400 audit(1764703721.152:369): avc:  denied  { map } for  pid=1941 comm="syz.4.638" path="/96/file2/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.227302][ T1942] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[   62.252031][ T1946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   62.258442][ T1942] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89
[   62.267696][ T1946] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.288195][ T1942] syz.4.638: attempt to access beyond end of device
[   62.288195][ T1942] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16
[   62.302548][ T1942] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   62.311226][ T1942] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   62.320028][ T1942] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   62.328456][ T1942] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   62.332054][ T1946] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 3: comm syz.2.637: lblock 8 mapped to illegal pblock 3 (length 26)
[   62.392974][  T286] EXT4-fs (loop2): unmounting filesystem.
[   62.418417][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'.
[   62.586786][  T346] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[   62.599840][  T345] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   62.607903][  T346] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   62.659778][   T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   62.699744][  T295] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   62.799723][  T345] usb 1-1: Using ep0 maxpacket: 8
[   62.806192][  T345] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.819029][  T345] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.829260][  T345] usb 1-1: config 0 interface 0 has no altsetting 0
[   62.836147][  T345] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[   62.845554][  T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.849749][   T60] usb 5-1: Using ep0 maxpacket: 32
[   62.855111][  T345] usb 1-1: config 0 descriptor??
[   62.860926][   T60] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   62.871942][   T60] usb 5-1: config 0 has no interface number 0
[   62.878084][   T60] usb 5-1: config 0 interface 184 has no altsetting 0
[   62.890906][  T295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.902218][  T295] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   62.911501][   T60] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   62.911764][  T295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.932076][ T1970] loop3: detected capacity change from 0 to 512
[   62.938957][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.949109][   T60] usb 5-1: Product: syz
[   62.950311][  T295] usb 6-1: config 0 descriptor??
[   62.960234][   T60] usb 5-1: Manufacturer: syz
[   62.960335][ T1970] EXT4-fs (loop3): 1 truncate cleaned up
[   62.964869][   T60] usb 5-1: SerialNumber: syz
[   62.975703][   T60] usb 5-1: config 0 descriptor??
[   62.986286][   T60] smsc75xx v1.0.0
[   62.999300][ T1970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   63.268922][  T345] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[   63.276212][  T345] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[   63.283510][  T345] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[   63.290663][  T345] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[   63.297604][  T345] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[   63.306082][  T345] ntrig 0003:1B96:0004.0019: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0
[   63.389535][  T295] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor
[   63.407315][  T295] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001A/input/input14
[   63.427895][ T1973] netlink: 'syz.2.649': attribute type 15 has an invalid length.
[   63.435786][ T1973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'.
[   63.473983][  T345] usb 1-1: USB disconnect, device number 8
[   63.492905][  T295] keytouch 0003:0926:3333.001A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[   63.515740][ T1977] fido_id[1977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   63.538499][ T1979] loop2: detected capacity change from 0 to 2048
[   63.571243][ T1979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   63.613943][  T295] usb 6-1: USB disconnect, device number 6
[   63.654398][ T1983] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   63.669445][ T1983] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 704 with error 28
[   63.682159][ T1983] EXT4-fs (loop2): This should not happen!! Data will be lost
[   63.682159][ T1983] 
[   63.691960][ T1983] EXT4-fs (loop2): Total free blocks count 0
[   63.698086][ T1983] EXT4-fs (loop2): Free/Dirty block details
[   63.704063][ T1983] EXT4-fs (loop2): free_blocks=2415919504
[   63.709883][ T1983] EXT4-fs (loop2): dirty_blocks=720
[   63.715117][ T1983] EXT4-fs (loop2): Block reservation details
[   63.721167][ T1983] EXT4-fs (loop2): i_reserved_data_blocks=45
[   63.889750][    C0] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -1
[   63.900282][  T345] usb 4-1: USB disconnect, device number 11
[   63.989115][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   64.189723][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   64.207231][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   64.226912][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   64.248358][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   64.266757][   T60] smsc75xx: probe of 5-1:0.184 failed with error -71
[   64.282409][   T60] usb 5-1: USB disconnect, device number 11
[   64.408513][  T284] EXT4-fs (loop3): unmounting filesystem.
[   64.425302][  T639] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 704 with max blocks 2048 with error 28
[   64.425791][  T345] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   64.452270][ T1995] xt_bpf: check failed: parse error
[   64.619657][  T345] usb 1-1: Using ep0 maxpacket: 8
[   64.627102][  T345] usb 1-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.648378][  T345] usb 1-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.668998][  T345] usb 1-1: config 0 interface 0 has no altsetting 0
[   64.684619][  T345] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[   64.702672][  T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.727020][  T345] usb 1-1: config 0 descriptor??
[   64.881109][  T295] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[   64.890171][ T2007] loop2: detected capacity change from 0 to 512
[   64.899086][ T2007] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.657: inode has both inline data and extents flags
[   64.912590][ T2007] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.657: couldn't read orphan inode 15 (err -117)
[   64.924991][ T2007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   64.982548][  T286] EXT4-fs (loop2): unmounting filesystem.
[   65.017829][   T28] audit: type=1400 audit(1764703723.943:370): avc:  denied  { write } for  pid=2009 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   65.082794][   T28] audit: type=1400 audit(1764703724.013:371): avc:  denied  { bind } for  pid=2012 comm="syz.5.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.090818][  T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10
[   65.127591][  T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[   65.142290][  T345] holtek 0003:1241:5015.001B: unknown main item tag 0x0
[   65.159655][  T345] holtek 0003:1241:5015.001B: unknown global tag 0xd
[   65.166494][  T345] holtek 0003:1241:5015.001B: item 0 2 1 13 parsing failed
[   65.175006][  T345] holtek 0003:1241:5015.001B: parse failed
[   65.175098][  T295] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[   65.190216][  T345] holtek: probe of 0003:1241:5015.001B failed with error -22
[   65.199379][  T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.207652][  T295] usb 4-1: Product: syz
[   65.217762][  T295] usb 4-1: Manufacturer: syz
[   65.222454][  T295] usb 4-1: SerialNumber: syz
[   65.230905][  T295] usb 4-1: config 0 descriptor??
[   65.248879][  T295] hub 4-1:0.0: bad descriptor, ignoring hub
[   65.254870][  T295] hub: probe of 4-1:0.0 failed with error -5
[   65.271891][  T295] snd-usb-audio: probe of 4-1:0.0 failed with error -12
[   65.302564][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   65.356382][   T60] usb 1-1: USB disconnect, device number 9
[   65.570798][  T295] usb 4-1: USB disconnect, device number 12
[   65.575579][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.584280][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.591756][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.599223][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.607117][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.615115][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.622616][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.630079][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.637479][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.644925][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.652364][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.659824][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.667242][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.674703][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.682143][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.689620][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.697047][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.704505][   T60] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0
[   65.712539][   T60] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   65.756436][ T2025] fido_id[2025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   65.879796][ T2037] loop0: detected capacity change from 0 to 2048
[   65.907500][ T2037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   65.982935][ T2049] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   65.984702][ T2049] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28
[   66.011334][ T2049] EXT4-fs (loop0): This should not happen!! Data will be lost
[   66.011334][ T2049] 
[   66.011359][ T2049] EXT4-fs (loop0): Total free blocks count 0
[   66.011374][ T2049] EXT4-fs (loop0): Free/Dirty block details
[   66.011387][ T2049] EXT4-fs (loop0): free_blocks=2415919504
[   66.011401][ T2049] EXT4-fs (loop0): dirty_blocks=400
[   66.011413][ T2049] EXT4-fs (loop0): Block reservation details
[   66.011425][ T2049] EXT4-fs (loop0): i_reserved_data_blocks=25
[   66.099540][   T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   66.143301][   T28] audit: type=1326 audit(1764703725.053:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2020 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ba18f749 code=0x7fc00000
[   66.143336][   T28] audit: type=1326 audit(1764703725.053:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2020 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff1ba18f749 code=0x7fc00000
[   66.281147][   T60] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   66.281183][   T60] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   66.282654][   T60] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   66.331964][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.331993][   T60] usb 5-1: Product: syz
[   66.332009][   T60] usb 5-1: Manufacturer: syz
[   66.332024][   T60] usb 5-1: SerialNumber: syz
[   66.332823][   T60] usb 5-1: config 0 descriptor??
[   66.369280][ T2033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   66.369315][ T2033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   66.509538][  T295] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   66.570839][ T2033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   66.570876][ T2033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   66.700426][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.700462][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.700487][  T295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   66.700532][  T295] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   66.700558][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.701315][  T295] usb 3-1: config 0 descriptor??
[   66.802645][  T336] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 2048 with error 28
[   67.036748][ T2061] input: syz0 as /devices/virtual/input/input15
[   67.104576][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104610][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104634][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104657][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104679][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104701][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104721][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104743][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104765][  T295] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[   67.104956][  T295] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[   67.110798][  T295] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   67.112669][ T2065] loop3: detected capacity change from 0 to 512
[   67.129883][ T2065] EXT4-fs: Ignoring removed oldalloc option
[   67.145784][ T2065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.156779][ T2065] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.683: Parent and EA inode have the same ino 15
[   67.156987][ T2065] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.683: Parent and EA inode have the same ino 15
[   67.157208][ T2065] EXT4-fs (loop3): 1 orphan inode deleted
[   67.157231][ T2065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   67.159329][   T28] kauditd_printk_skb: 74 callbacks suppressed
[   67.159343][   T28] audit: type=1400 audit(1764703726.083:448): avc:  denied  { unlink } for  pid=2064 comm="syz.3.683" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.159809][ T2065] EXT4-fs warning (device loop3): __ext4_unlink:3335: inode #15: comm syz.3.683: Deleting file 'file1' with no links
[   67.160207][   T28] audit: type=1400 audit(1764703726.093:449): avc:  denied  { rename } for  pid=2064 comm="syz.3.683" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.175149][  T284] EXT4-fs (loop3): unmounting filesystem.
[   67.226952][ T2071] loop0: detected capacity change from 0 to 256
[   67.419836][   T60] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   67.431147][   T60] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[   67.444963][   T60] usb 5-1: USB disconnect, device number 12
[   67.451363][   T60] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet
[   67.483200][ T2074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   67.559452][  T346] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   67.672836][ T2083] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   67.699982][ T2085] loop5: detected capacity change from 0 to 2048
[   67.731167][ T2085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   67.745052][  T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.778316][  T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.796328][  T346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   67.810280][ T2092] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   67.826361][  T346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   67.835638][  T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.843904][ T2092] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 704 with error 28
[   67.856494][ T2092] EXT4-fs (loop5): This should not happen!! Data will be lost
[   67.856494][ T2092] 
[   67.866860][ T2092] EXT4-fs (loop5): Total free blocks count 0
[   67.869284][  T346] usb 4-1: config 0 descriptor??
[   67.873350][ T2092] EXT4-fs (loop5): Free/Dirty block details
[   67.884159][ T2092] EXT4-fs (loop5): free_blocks=2415919504
[   67.890018][ T2092] EXT4-fs (loop5): dirty_blocks=720
[   67.895260][ T2092] EXT4-fs (loop5): Block reservation details
[   67.901535][ T2092] EXT4-fs (loop5): i_reserved_data_blocks=45
[   68.010750][   T28] audit: type=1400 audit(1764703726.943:450): avc:  denied  { setopt } for  pid=2099 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.283419][  T346] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[   68.284453][  T346] plantronics 0003:047F:FFFF.001E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   68.411305][ T2058] usb 3-1: string descriptor 0 read error: -2
[   68.562020][   T60] usb 4-1: USB disconnect, device number 13
[   68.624971][  T336] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 704 with max blocks 2048 with error 28
[   68.891328][   T28] audit: type=1400 audit(1764703727.823:451): avc:  denied  { mount } for  pid=2104 comm="syz.4.699" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   68.891362][   T28] audit: type=1400 audit(1764703727.823:452): avc:  denied  { remount } for  pid=2104 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   68.894279][   T28] audit: type=1400 audit(1764703727.823:453): avc:  denied  { mounton } for  pid=2104 comm="syz.4.699" path="/108/file0/file0" dev="bpf" ino=24957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   68.968058][ T2105] overlayfs: upper fs does not support tmpfile.
[   68.995339][   T28] audit: type=1400 audit(1764703727.923:454): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   69.041676][   T28] audit: type=1400 audit(1764703727.973:455): avc:  denied  { setopt } for  pid=2117 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.096450][   T28] audit: type=1400 audit(1764703728.013:456): avc:  denied  { read write } for  pid=2124 comm="syz.5.705" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.131100][ T2122] loop4: detected capacity change from 0 to 2048
[   69.132728][ T2127] xt_hashlimit: size too large, truncated to 1048576
[   69.151250][   T28] audit: type=1400 audit(1764703728.013:457): avc:  denied  { open } for  pid=2124 comm="syz.5.705" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.158549][ T2120] loop0: detected capacity change from 0 to 8192
[   69.216335][ T2122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   69.227475][ T2120] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   69.248814][   T39] usb 3-1: USB disconnect, device number 8
[   69.322444][ T2131] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   69.337723][ T2131] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28
[   69.350497][ T1614] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   69.358442][ T2131] EXT4-fs (loop4): This should not happen!! Data will be lost
[   69.358442][ T2131] 
[   69.368449][ T2131] EXT4-fs (loop4): Total free blocks count 0
[   69.374641][ T2131] EXT4-fs (loop4): Free/Dirty block details
[   69.380743][ T2131] EXT4-fs (loop4): free_blocks=2415919504
[   69.386479][ T2131] EXT4-fs (loop4): dirty_blocks=464
[   69.391939][ T2131] EXT4-fs (loop4): Block reservation details
[   69.398026][ T2131] EXT4-fs (loop4): i_reserved_data_blocks=29
[   69.530502][ T1614] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   69.540409][ T1614] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   69.552140][ T1614] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   69.561613][ T1614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.569837][ T1614] usb 6-1: Product: syz
[   69.574128][ T1614] usb 6-1: Manufacturer: syz
[   69.578802][ T1614] usb 6-1: SerialNumber: syz
[   69.584457][ T1614] usb 6-1: config 0 descriptor??
[   69.589927][ T2125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.597249][ T2125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.808208][ T2125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.815834][ T2125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.965147][    T8] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 448 with max blocks 2048 with error 28
[   70.078456][  T345] hid-generic FFFF:0008:0003.001F: item fetching failed at offset 0/1
[   70.087319][  T345] hid-generic: probe of FFFF:0008:0003.001F failed with error -22
[   70.369325][   T60] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   70.380999][ T2155] device bridge0 entered promiscuous mode
[   70.381035][ T2155] device macsec1 entered promiscuous mode
[   70.381548][ T2155] bridge0: port 3(macsec1) entered blocking state
[   70.399599][ T2155] bridge0: port 3(macsec1) entered disabled state
[   70.407066][ T2155] device bridge0 left promiscuous mode
[   70.459358][  T295] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   70.494254][ T2161] loop3: detected capacity change from 0 to 2048
[   70.514852][ T2161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   70.541611][ T2161] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   70.541938][ T2161] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28
[   70.541968][ T2161] EXT4-fs (loop3): This should not happen!! Data will be lost
[   70.541968][ T2161] 
[   70.541981][ T2161] EXT4-fs (loop3): Total free blocks count 0
[   70.541995][ T2161] EXT4-fs (loop3): Free/Dirty block details
[   70.542006][ T2161] EXT4-fs (loop3): free_blocks=4096
[   70.542020][ T2161] EXT4-fs (loop3): dirty_blocks=512
[   70.542032][ T2161] EXT4-fs (loop3): Block reservation details
[   70.542043][ T2161] EXT4-fs (loop3): i_reserved_data_blocks=32
[   70.569973][  T284] EXT4-fs (loop3): unmounting filesystem.
[   70.580416][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.580449][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.580472][   T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   70.580506][   T60] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.580529][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.581369][   T60] usb 1-1: config 0 descriptor??
[   70.650528][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.699707][ T1614] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   70.701867][ T1614] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[   70.702683][ T1614] usb 6-1: USB disconnect, device number 7
[   70.709086][ T1614] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet
[   70.713619][ T2166] loop3: detected capacity change from 0 to 2048
[   70.720866][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.783476][ T2166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   70.806192][  T295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   70.819264][  T295] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.828332][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.828744][   T19] ==================================================================
[   70.828754][   T19] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[   70.828783][   T19] Read of size 8 at addr ffff88811c1c2cf0 by task kworker/0:1/19
[   70.828801][   T19] 
[   70.828807][   T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted syzkaller #0
[   70.828826][   T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   70.828838][   T19] Workqueue: rcu_gp process_srcu
[   70.828871][   T19] Call Trace:
[   70.828877][   T19]  <TASK>
[   70.828884][   T19]  __dump_stack+0x21/0x24
[   70.828909][   T19]  dump_stack_lvl+0xee/0x150
[   70.828931][   T19]  ? __cfi_dump_stack_lvl+0x8/0x8
[   70.828956][   T19]  ? __list_del_entry_valid+0xa6/0x130
[   70.828980][   T19]  print_address_description+0x71/0x200
[   70.829002][   T19]  print_report+0x4a/0x60
[   70.829020][   T19]  kasan_report+0x122/0x150
[   70.829046][   T19]  ? __list_del_entry_valid+0xa6/0x130
[   70.829073][   T19]  __asan_report_load8_noabort+0x14/0x20
[   70.829104][   T19]  __list_del_entry_valid+0xa6/0x130
[   70.829128][   T19]  process_one_work+0x4b9/0xc40
[   70.829152][   T19]  worker_thread+0xa29/0x11f0
[   70.829178][   T19]  kthread+0x281/0x320
[   70.829203][   T19]  ? __cfi_worker_thread+0x10/0x10
[   70.829240][   T19]  ? __cfi_kthread+0x10/0x10
[   70.829261][   T19]  ret_from_fork+0x1f/0x30
[   70.829288][   T19]  </TASK>
[   70.829293][   T19] 
[   70.829297][   T19] Allocated by task 1614:
[   70.829306][   T19]  kasan_set_track+0x4b/0x70
[   70.829326][   T19]  kasan_save_alloc_info+0x25/0x30
[   70.829353][   T19]  __kasan_kmalloc+0x95/0xb0
[   70.829376][   T19]  __kmalloc_node+0xb2/0x1e0
[   70.829404][   T19]  kvmalloc_node+0x294/0x480
[   70.829419][   T19]  alloc_netdev_mqs+0x8d/0xf90
[   70.829453][   T19]  alloc_etherdev_mqs+0x37/0x40
[   70.829471][   T19]  usbnet_probe+0x20c/0x2780
[   70.829499][   T19]  usb_probe_interface+0x610/0xaf0
[   70.829517][   T19]  really_probe+0x2cb/0x960
[   70.829536][   T19]  __driver_probe_device+0x198/0x280
[   70.829554][   T19]  driver_probe_device+0x54/0x3e0
[   70.829573][   T19]  __device_attach_driver+0x2e9/0x4a0
[   70.829592][   T19]  bus_for_each_drv+0x183/0x210
[   70.829615][   T19]  __device_attach+0x2a2/0x400
[   70.829631][   T19]  device_initial_probe+0x1a/0x20
[   70.829648][   T19]  bus_probe_device+0xc0/0x1f0
[   70.829672][   T19]  device_add+0xb4d/0xef0
[   70.829688][   T19]  usb_set_configuration+0x19c2/0x1f10
[   70.855256][ T2169] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, 
[   70.861350][   T19]  usb_generic_driver_probe+0x91/0x150
[   70.861382][   T19]  usb_probe_device+0x159/0x270
[   70.861398][   T19]  really_probe+0x2cb/0x960
[   70.861418][   T19]  __driver_probe_device+0x198/0x280
[   70.863776][ T2169] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   70.871037][   T19]  driver_probe_device+0x54/0x3e0
[   70.871060][   T19]  __device_attach_driver+0x2e9/0x4a0
[   70.871078][   T19]  bus_for_each_drv+0x183/0x210
[   70.871102][   T19]  __device_attach+0x2a2/0x400
[   70.916310][ T2169] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28
[   70.917229][   T19]  device_initial_probe+0x1a/0x20
[   70.917255][   T19]  bus_probe_device+0xc0/0x1f0
[   70.928240][ T2169] EXT4-fs (loop3): This should not happen!! Data will be lost
[   70.928240][ T2169] 
[   70.931533][   T19]  device_add+0xb4d/0xef0
[   70.931556][   T19]  usb_new_device+0xa70/0x1520
[   70.931581][   T19]  hub_event+0x2850/0x4350
[   70.947784][ T2169] EXT4-fs (loop3): Total free blocks count 0
[   70.952103][   T19]  process_one_work+0x71f/0xc40
[   70.952129][   T19]  worker_thread+0xa29/0x11f0
[   70.952147][   T19]  kthread+0x281/0x320
[   70.952167][   T19]  ret_from_fork+0x1f/0x30
[   70.962755][ T2169] EXT4-fs (loop3): Free/Dirty block details
[   70.966017][   T19] 
[   70.966023][   T19] Freed by task 1614:
[   70.966035][   T19]  kasan_set_track+0x4b/0x70
[   70.979292][ T2169] EXT4-fs (loop3): free_blocks=2415919504
[   70.980141][   T19]  kasan_save_free_info+0x31/0x50
[   70.989517][ T2169] EXT4-fs (loop3): dirty_blocks=464
[   70.989861][   T19]  ____kasan_slab_free+0x132/0x180
[   71.002039][ T2169] EXT4-fs (loop3): Block reservation details
[   71.003631][   T19]  __kasan_slab_free+0x11/0x20
[   71.003660][   T19]  slab_free_freelist_hook+0xc2/0x190
[   71.016027][ T2169] EXT4-fs (loop3): i_reserved_data_blocks=29
[   71.017846][   T19]  __kmem_cache_free+0xb7/0x1b0
[   71.087218][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.090865][   T19]  kfree+0x6f/0xf0
[   71.090899][   T19]  kvfree+0x35/0x40
[   71.108107][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.109372][   T19]  netdev_freemem+0x3f/0x60
[   71.109405][   T19]  netdev_release+0x7f/0xb0
[   71.109427][   T19]  device_release+0xa4/0x1d0
[   71.115038][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.119833][   T19]  kobject_put+0x19d/0x280
[   71.119863][   T19]  put_device+0x1f/0x30
[   71.119886][   T19]  free_netdev+0x392/0x490
[   71.137153][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.141800][   T19]  usbnet_disconnect+0x25a/0x3b0
[   71.141835][   T19]  usb_unbind_interface+0x223/0x8d0
[   71.167464][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.170424][   T19]  device_release_driver_internal+0x508/0x820
[   71.170453][   T19]  device_release_driver+0x19/0x20
[   71.187618][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.190377][   T19]  bus_remove_device+0x2ee/0x350
[   71.190413][   T19]  device_del+0x6a4/0xeb0
[   71.190430][   T19]  usb_disable_device+0x3a8/0x750
[   71.377353][   T19]  usb_disconnect+0x31e/0x860
[   71.377380][   T19]  hub_event+0x1a78/0x4350
[   71.377395][   T19]  process_one_work+0x71f/0xc40
[   71.377409][   T19]  worker_thread+0xd2e/0x11f0
[   71.377421][   T19]  kthread+0x281/0x320
[   71.377435][   T19]  ret_from_fork+0x1f/0x30
[   71.377452][   T19] 
[   71.377455][   T19] Last potentially related work creation:
[   71.377460][   T19]  kasan_save_stack+0x3a/0x60
[   71.377475][   T19]  __kasan_record_aux_stack+0xb6/0xc0
[   71.377495][   T19]  kasan_record_aux_stack_noalloc+0xb/0x10
[   71.377516][   T19]  insert_work+0x51/0x300
[   71.377527][   T19]  __queue_work+0x9b1/0xd30
[   71.377544][   T19]  queue_work_on+0xd2/0x140
[   71.377560][   T19]  usbnet_link_change+0x189/0x1b0
[   71.377580][   T19]  usbnet_probe+0x1d55/0x2780
[   71.377600][   T19]  usb_probe_interface+0x610/0xaf0
[   71.377613][   T19]  really_probe+0x2cb/0x960
[   71.377627][   T19]  __driver_probe_device+0x198/0x280
[   71.377639][   T19]  driver_probe_device+0x54/0x3e0
[   71.377652][   T19]  __device_attach_driver+0x2e9/0x4a0
[   71.377666][   T19]  bus_for_each_drv+0x183/0x210
[   71.377682][   T19]  __device_attach+0x2a2/0x400
[   71.377694][   T19]  device_initial_probe+0x1a/0x20
[   71.377706][   T19]  bus_probe_device+0xc0/0x1f0
[   71.377723][   T19]  device_add+0xb4d/0xef0
[   71.377733][   T19]  usb_set_configuration+0x19c2/0x1f10
[   71.377754][   T19]  usb_generic_driver_probe+0x91/0x150
[   71.377772][   T19]  usb_probe_device+0x159/0x270
[   71.377783][   T19]  really_probe+0x2cb/0x960
[   71.377796][   T19]  __driver_probe_device+0x198/0x280
[   71.377808][   T19]  driver_probe_device+0x54/0x3e0
[   71.377821][   T19]  __device_attach_driver+0x2e9/0x4a0
[   71.377834][   T19]  bus_for_each_drv+0x183/0x210
[   71.377851][   T19]  __device_attach+0x2a2/0x400
[   71.377863][   T19]  device_initial_probe+0x1a/0x20
[   71.377875][   T19]  bus_probe_device+0xc0/0x1f0
[   71.377891][   T19]  device_add+0xb4d/0xef0
[   71.377902][   T19]  usb_new_device+0xa70/0x1520
[   71.377920][   T19]  hub_event+0x2850/0x4350
[   71.377931][   T19]  process_one_work+0x71f/0xc40
[   71.377943][   T19]  worker_thread+0xa29/0x11f0
[   71.377955][   T19]  kthread+0x281/0x320
[   71.377968][   T19]  ret_from_fork+0x1f/0x30
[   71.377984][   T19] 
[   71.377987][   T19] The buggy address belongs to the object at ffff88811c1c2000
[   71.377987][   T19]  which belongs to the cache kmalloc-4k of size 4096
[   71.377999][   T19] The buggy address is located 3312 bytes inside of
[   71.377999][   T19]  4096-byte region [ffff88811c1c2000, ffff88811c1c3000)
[   71.378013][   T19] 
[   71.378017][   T19] The buggy address belongs to the physical page:
[   71.378024][   T19] page:ffffea0004707000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c1c0
[   71.378051][   T19] head:ffffea0004707000 order:3 compound_mapcount:0 compound_pincount:0
[   71.378062][   T19] flags: 0x4000000000010200(slab|head|zone=1)
[   71.378088][   T19] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380
[   71.378101][   T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   71.378108][   T19] page dumped because: kasan: bad access detected
[   71.378115][   T19] page_owner tracks the page as allocated
[   71.378120][   T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 358, tgid 358 (udevd), ts 69253498203, free_ts 69235944816
[   71.378147][   T19]  post_alloc_hook+0x1f5/0x210
[   71.378165][   T19]  prep_new_page+0x1c/0x110
[   71.378182][   T19]  get_page_from_freelist+0x2c7b/0x2cf0
[   71.378201][   T19]  __alloc_pages+0x1c3/0x450
[   71.378219][   T19]  alloc_slab_page+0x6e/0xf0
[   71.378239][   T19]  new_slab+0x98/0x3d0
[   71.378258][   T19]  ___slab_alloc+0x6bd/0xb20
[   71.378275][   T19]  __slab_alloc+0x5e/0xa0
[   71.378293][   T19]  __kmem_cache_alloc_node+0x203/0x2c0
[   71.378311][   T19]  kmalloc_trace+0x29/0xb0
[   71.378322][   T19]  kernfs_iop_get_link+0x65/0x620
[   71.378337][   T19]  pick_link+0x6dd/0xe30
[   71.378356][   T19]  step_into+0xc4c/0xf30
[   71.378374][   T19]  path_openat+0x1651/0x2f50
[   71.378394][   T19]  do_filp_open+0x1c1/0x3c0
[   71.378408][   T19]  do_sys_openat2+0x185/0x7e0
[   71.378425][   T19] page last free stack trace:
[   71.378432][   T19]  free_unref_page_prepare+0x742/0x750
[   71.378450][   T19]  free_unref_page+0x8f/0x530
[   71.378467][   T19]  __free_pages+0x67/0x100
[   71.378482][   T19]  __free_slab+0xca/0x1a0
[   71.378501][   T19]  __unfreeze_partials+0x160/0x190
[   71.378521][   T19]  put_cpu_partial+0xa9/0x100
[   71.378539][   T19]  __slab_free+0x1c4/0x280
[   71.378557][   T19]  ___cache_free+0xbf/0xd0
[   71.378573][   T19]  qlist_free_all+0xc6/0x140
[   71.378586][   T19]  kasan_quarantine_reduce+0x14a/0x170
[   71.378599][   T19]  __kasan_slab_alloc+0x24/0x80
[   71.378615][   T19]  slab_post_alloc_hook+0x4f/0x2d0
[   71.378632][   T19]  kmem_cache_alloc+0x16e/0x330
[   71.378649][   T19]  getname_flags+0xb9/0x500
[   71.378660][   T19]  getname+0x19/0x20
[   71.378671][   T19]  do_sys_openat2+0xcb/0x7e0
[   71.378688][   T19] 
[   71.378690][   T19] Memory state around the buggy address:
[   71.378697][   T19]  ffff88811c1c2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.378707][   T19]  ffff88811c1c2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.378716][   T19] >ffff88811c1c2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.378723][   T19]                                                              ^
[   71.378731][   T19]  ffff88811c1c2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.378740][   T19]  ffff88811c1c2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.378747][   T19] ==================================================================
[   71.378753][   T19] Disabling lock debugging due to kernel taint
[   71.381134][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.381175][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.381199][   T60] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[   71.381413][   T60] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving
[   71.383550][   T60] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   71.385843][   T60] usb 1-1: USB disconnect, device number 10
[   71.401632][  T295] usb 3-1: config 0 descriptor??
[   71.419833][ T2170] fido_id[2170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   71.646745][  T639] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 448 with max blocks 2048 with error 28
[   71.845063][  T295] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[   72.210404][  T295] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   72.226896][  T295] usb 3-1: USB disconnect, device number 9
[   72.255369][ T2171] fido_id[2171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory