last executing test programs:

4.361241189s ago: executing program 1 (id=7150):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x300000, 0x11c)
recvfrom$inet_nvme(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0)

4.331158249s ago: executing program 1 (id=7153):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, "e0fd"}, @local, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x1, 0x1, 0x2, "aa"}]}}, 0x0}, 0x0)

2.662958552s ago: executing program 2 (id=7183):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x14, r1, 0x1, 0x1000000, 0x0, {0x3}}, 0x14}}, 0x0)

2.548615071s ago: executing program 2 (id=7186):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0)

2.33830655s ago: executing program 4 (id=7204):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
rt_sigsuspend(0x0, 0x0)

2.31000862s ago: executing program 4 (id=7205):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.26283314s ago: executing program 4 (id=7207):
mlockall(0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00')
read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0x2020)

1.722533287s ago: executing program 4 (id=7228):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000000)={0xc, 0x0, 0x2000000, 0x4})

1.625417797s ago: executing program 4 (id=7231):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c17c3, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

1.308329626s ago: executing program 1 (id=7232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x404c894)

1.271568375s ago: executing program 1 (id=7233):
ioperm(0x0, 0x2, 0x2)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r0, 0x4b35, 0x3c7)

1.186701525s ago: executing program 1 (id=7234):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x1063a, &(0x7f0000020c40)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0)

878.956703ms ago: executing program 4 (id=7240):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x1, 0x3)

613.166612ms ago: executing program 2 (id=7248):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000780)={[{@data_err_abort}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000001200)="$eJzs3MtvG8UfAPDv2nHS5y/5lfJoaCFQEBGPpEkf9MAFBBIHkJC4FHEKSVqFpg1qgkSrCAKHcESVuCOOSPwFnOCCgBMSV7ijShXKpYWT0dq7qZvYaZw4del+PtLGM96xZr67O/bsjJ0ACmso/ZNE7IuI3yOiv569vcBQ/eHmyuLk3yuLk0lUq2//ldTK3VhZnMyL5q/bW89Uq1m+r0m9y+9GTMzOTl/K8qMLFz4Ynb985YWZCxPnps9NXxw/ffrE8SO9p8ZPdiTONK4bgx/PHT70+jtX35w8c/W9n79N27sv298YR6cM1Y9uU09XOl1bd+1vSCc9XWwIbSlHRHq6KrX+3x/l2L26rz9e+6yrjQN2VLVarTb7fM4sVYH7WBLdbgHQHfkHfXr/m293aehxT7j+cv0GKI37ZrbV9/REKStTWXN/20lDEXFm6Z+v0i12aB4CAKDR9+n45/lm479SPNRQ7n/ZGspARPw/Ig5ExAMRcTAiHoyolX04Ih5ps/61KyTrxz+la1sKbJPS8d9L2drW7eO/fPQXA+Ust78WfyU5OzM7fSw7JsNR6UvzYxvU8cOrv33Ral/j+C/d0vrzsWDWjms9aybopiYWJrYTc6Prn0YM9jSLP4l8GSeJiEMRMbjFOmae/eZwq313jn8DHVhnqn4d8Uz9/C/FmvhzScv1ybEXT42fHN0Vs9PHRvOrYr1ffl1+q1X924q/A9Lzv6fp9b8a/0CyK2L+8pXztfXa+fbrWP7j85b3NFu7/mdWG9ebPX40sbBwaSyiN3lj/fPjt16b5/PyafzDR5v3/wNx60g8GhHpRXwkIh6LiMeztj8REU9GxNEN4v/plafebz/+DWblOyiNf+pO5z8az3/7ifL5H79rP/5cev5P1FLD2TObef/bbAO3c+wAAADgv6JU+w58UhpZTZdKIyP17/AfjD1LMTe/8NzZuQ8vTtW/Kz8QlVI+09XfMB86ls0N5/nxNfnj2bzxl+XdtfzI5NzsVLeDh4Lb26L/p/4sd7t1wI7zey0oLv0fikv/h+LS/6G49H8ormb9/5MutAO4+3z+Q3Hp/1Bc+j8Ul/4PhdTyt/Glbf3kf7uJpBuVSrSTiNI90Yz7P9Gz6X9mscVEX9Nd3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//+UFuN0")
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500))
quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)

537.351232ms ago: executing program 0 (id=7254):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x40}, 0x0, 0x0}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8)

494.762662ms ago: executing program 0 (id=7256):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0180c200000000000000000086dd600000000030000000000000ff0200000000000000000000000000014e220e22003090782102000039ef"], 0x0)

377.066782ms ago: executing program 0 (id=7258):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x2b, 0x3})

288.690291ms ago: executing program 2 (id=7260):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1)

258.738761ms ago: executing program 0 (id=7262):
unshare(0x4000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x3a0, 0x5, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x20)

258.005131ms ago: executing program 3 (id=7263):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

224.52181ms ago: executing program 2 (id=7264):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
nanosleep(&(0x7f0000000080), 0x0)

211.518671ms ago: executing program 3 (id=7265):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57})

188.70907ms ago: executing program 0 (id=7266):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})

138.96495ms ago: executing program 2 (id=7267):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x27}, 0x0}, 0x0)

138.8582ms ago: executing program 0 (id=7268):
r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x5, {0x5, 0xf, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

123.00846ms ago: executing program 3 (id=7269):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
getdents64(r0, &(0x7f0000000040)=""/44, 0x2c)
getdents64(r0, &(0x7f0000002180)=""/4102, 0x1006)

82.95106ms ago: executing program 3 (id=7270):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

6.978289ms ago: executing program 3 (id=7271):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
setgroups(0x0, 0x0)

6.840399ms ago: executing program 3 (id=7272):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setreuid(0xffffffffffffffff, 0xee00)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)

0s ago: executing program 1 (id=7273):
r0 = socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input52
[  133.579499][T11788] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[  133.583564][T11794] loop4: detected capacity change from 0 to 2048
[  133.636224][T11788] EXT4-fs (loop2): Ignoring removed orlov option
[  133.646867][T11802] loop1: detected capacity change from 0 to 512
[  133.663524][T11788] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,dioread_lock,debug_want_extra_isize=0x0000000000000080,lazytime,noquota,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: none.
[  133.664049][T11802] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  133.687436][T11788] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop2, type ext4) errno=-22
[  133.711854][T11802] ext4 filesystem being mounted at /1044/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.725775][  T298] usb 1-1: USB disconnect, device number 15
[  133.734866][T11794] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.752164][  T298] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  133.760682][T11794] ext4 filesystem being mounted at /1014/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.807440][T11812] loop2: detected capacity change from 0 to 256
[  133.869845][T11823] loop4: detected capacity change from 0 to 256
[  133.938159][   T39] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  134.136428][T11867] loop4: detected capacity change from 0 to 16
[  134.158262][    T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  134.208189][   T39] usb 4-1: Using ep0 maxpacket: 16
[  134.218698][T11867] erofs: (device loop4): mounted with root inode @ nid 36.
[  134.227396][T11867] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  134.310221][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5443'.
[  134.335490][T11888] loop4: detected capacity change from 0 to 16
[  134.345098][T11888] erofs: (device loop4): mounted with root inode @ nid 36.
[  134.518217][    T6] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  134.528442][   T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  134.537258][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.541486][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.549854][    T6] usb 3-1: config 0 descriptor??
[  134.557645][   T39] usb 4-1: Product: syz
[  134.562779][   T39] usb 4-1: Manufacturer: syz
[  134.567391][   T39] usb 4-1: SerialNumber: syz
[  134.583461][   T39] r8152-cfgselector 4-1: config 0 descriptor??
[  134.646159][T11914] loop4: detected capacity change from 0 to 40427
[  134.699960][T11914] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  134.707781][T11914] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  134.723526][T11914] F2FS-fs (loop4): invalid crc value
[  134.730457][T11914] F2FS-fs (loop4): Found nat_bits in checkpoint
[  134.773091][T11914] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  134.780478][T11914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.866968][T11806] syz.3.5408 uses obsolete (PF_INET,SOCK_PACKET)
[  134.965940][T11946] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  134.988556][   T20] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.011323][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5476'.
[  135.079182][    T6] cherry 0003:046A:0027.0021: item fetching failed at offset 2/5
[  135.087566][    T6] cherry: probe of 0003:046A:0027.0021 failed with error -22
[  135.118228][   T39] r8152-cfgselector 4-1: Unknown version 0x0000
[  135.124763][   T39] r8152-cfgselector 4-1: bad CDC descriptors
[  135.158210][   T39] r8152-cfgselector 4-1: Unknown version 0x0000
[  135.171517][   T39] r8152-cfgselector 4-1: USB disconnect, device number 13
[  135.281450][ T1802] usb 3-1: USB disconnect, device number 15
[  135.738325][    T6] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  137.141498][T11990] loop3: detected capacity change from 0 to 16
[  137.184958][   T30] kauditd_printk_skb: 176 callbacks suppressed
[  137.184976][   T30] audit: type=1400 audit(2000000017.100:1255): avc:  denied  { read write } for  pid=11993 comm="syz.4.5489" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  137.194830][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5491'.
[  137.219362][T11994] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  137.241057][T11990] erofs: (device loop3): mounted with root inode @ nid 36.
[  137.265477][T11990] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.275205][T11990] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -27 in[61, 4035] out[1851]
[  137.300250][   T30] audit: type=1400 audit(2000000017.140:1256): avc:  denied  { open } for  pid=11993 comm="syz.4.5489" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  137.328285][T11990] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  137.461142][T12005] bridge0: port 3(dummy0) entered blocking state
[  137.471919][T12007] loop2: detected capacity change from 0 to 256
[  137.478246][T12005] bridge0: port 3(dummy0) entered disabled state
[  137.487940][T12005] device dummy0 entered promiscuous mode
[  137.494766][T12005] bridge0: port 3(dummy0) entered blocking state
[  137.500964][T12005] bridge0: port 3(dummy0) entered forwarding state
[  137.518890][T12007] FAT-fs (loop2): Directory bread(block 64) failed
[  137.525256][T12007] FAT-fs (loop2): Directory bread(block 65) failed
[  137.540770][T12007] FAT-fs (loop2): Directory bread(block 66) failed
[  137.562220][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5503'.
[  137.571259][T12007] FAT-fs (loop2): Directory bread(block 67) failed
[  137.577887][T12007] FAT-fs (loop2): Directory bread(block 68) failed
[  137.590844][T12007] FAT-fs (loop2): Directory bread(block 69) failed
[  137.597412][T12007] FAT-fs (loop2): Directory bread(block 70) failed
[  137.619145][T12007] FAT-fs (loop2): Directory bread(block 71) failed
[  137.640891][T12007] FAT-fs (loop2): Directory bread(block 72) failed
[  137.647258][T12007] FAT-fs (loop2): Directory bread(block 73) failed
[  137.676808][T12025] loop1: detected capacity change from 0 to 512
[  137.739761][T12025] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.786065][   T30] audit: type=1400 audit(2000000017.700:1257): avc:  denied  { getopt } for  pid=12038 comm="syz.2.5512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  137.838074][T12025] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  137.852824][T12025] Quota error (device loop1): write_blk: dquota write failed
[  137.861395][T12025] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  137.870958][T12025] Quota error (device loop1): write_blk: dquota write failed
[  137.878843][T12025] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  137.888909][T12025] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.5508: Failed to acquire dquot type 1
[  137.900890][T12025] EXT4-fs (loop1): 1 truncate cleaned up
[  137.908298][T12025] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,inlinecrypt,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[  137.935124][   T30] audit: type=1326 audit(2000000017.860:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.4.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  137.946299][T12025] Quota error (device loop1): write_blk: dquota write failed
[  137.975943][T12025] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  138.007667][T12025] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.5508: Failed to acquire dquot type 1
[  138.177490][T12083] netlink: 'syz.2.5543': attribute type 5 has an invalid length.
[  138.200227][T12085] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  138.252795][T12094] dummy0: mtu less than device minimum
[  138.268552][T12097] SELinux:  policydb string  does not match my string SE Linux
[  138.292013][T12097] SELinux: failed to load policy
[  138.379763][T12116] 9pnet: p9_fd_create_tcp (12116): problem connecting socket to 127.0.0.1
[  138.450993][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5555'.
[  138.465845][T12131] loop3: detected capacity change from 0 to 1024
[  138.493148][T12138] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5558'.
[  138.582100][T12131] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.5565: Invalid block bitmap block 0 in block_group 0
[  138.598888][T12131] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.5565: Failed to acquire dquot type 0
[  138.634339][T12131] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.5565: Freeing blocks not in datazone - block = 0, count = 4096
[  138.648353][T12131] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.5565: Invalid inode bitmap blk 0 in block_group 0
[  138.663274][T12131] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  138.671974][T12131] EXT4-fs (loop3): 1 orphan inode deleted
[  138.672491][   T10] EXT4-fs error (device loop3): ext4_release_dquot:6211: comm kworker/u4:1: Failed to release dquot type 0
[  138.677752][T12131] EXT4-fs (loop3): mounted filesystem without journal. Opts: €�; ,errors=continue. Quota mode: writeback.
[  138.711934][T12131] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.5565: iget: bad extra_isize 65535 (inode size 256)
[  138.714120][T12171] loop1: detected capacity change from 0 to 1024
[  138.732600][T12173] loop2: detected capacity change from 0 to 256
[  138.882744][T12207] loop2: detected capacity change from 0 to 512
[  138.938156][T12207] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.5590: corrupted xattr block 255
[  138.965163][T12207] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  138.978947][T12207] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.noload,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  139.021970][T12207] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.5590: corrupted xattr block 255
[  139.091167][T12207] SELinux: (dev loop2, type ext4) getxattr errno 117
[  139.118758][T12243] loop1: detected capacity change from 0 to 512
[  139.152212][  T313] udevd[313]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  139.163365][T12243] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.1.5608: corrupted xattr block 95
[  139.187369][T12243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.5608: bg 0: block 7: invalid block bitmap
[  139.199971][T12243] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  139.220364][T12243] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2932: inode #11: comm syz.1.5608: corrupted xattr block 95
[  139.235693][T12243] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117)
[  139.245263][T12243] EXT4-fs (loop1): 1 orphan inode deleted
[  139.250877][T12243] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  139.368161][    T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  139.608255][   T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  139.628279][    T6] usb 5-1: Using ep0 maxpacket: 16
[  139.748365][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.759082][    T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  139.771669][    T6] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  139.780498][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.789049][    T6] usb 5-1: config 0 descriptor??
[  139.848187][   T26] usb 1-1: Using ep0 maxpacket: 8
[  139.968238][   T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  139.980981][   T26] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[  139.989851][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.998310][   T26] usb 1-1: config 0 descriptor??
[  140.269142][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0x6
[  140.275912][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0x1
[  140.282566][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0xe
[  140.289231][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0x0
[  140.295866][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0x0
[  140.302588][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0x5
[  140.309273][    T6] ortek 0003:1223:3F07.0022: unknown main item tag 0xd
[  140.315951][    T6] ortek 0003:1223:3F07.0022: item fetching failed at offset 61/69
[  140.323770][    T6] ortek: probe of 0003:1223:3F07.0022 failed with error -22
[  140.472010][    T6] usb 5-1: USB disconnect, device number 16
[  140.480646][   T26] wacom 0003:056A:00F0.0023: unknown main item tag 0x0
[  140.488091][   T26] wacom 0003:056A:00F0.0023: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0
[  140.682103][   T26] usb 1-1: USB disconnect, device number 16
[  141.084700][T12326] loop2: detected capacity change from 0 to 1024
[  141.100999][T12326] EXT4-fs (loop2): Ignoring removed nobh option
[  141.125886][T12326] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.5643: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  141.168241][T12326] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5643: couldn't read orphan inode 11 (err -117)
[  141.188168][T12326] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback.
[  141.216654][T12326] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.5643: Invalid block bitmap block 0 in block_group 0
[  141.250554][T12326] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.5643: Failed to acquire dquot type 0
[  141.394573][T12354] syz.0.5664[12354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.394653][T12354] syz.0.5664[12354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.728210][   T39] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.746973][   T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  141.988187][   T39] usb 3-1: Using ep0 maxpacket: 8
[  141.993091][   T26] usb 1-1: Using ep0 maxpacket: 16
[  142.108307][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.108344][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.108368][   T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.108404][   T26] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  142.108428][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.109281][   T26] usb 1-1: config 0 descriptor??
[  142.163294][   T39] usb 3-1: unable to get BOS descriptor or descriptor too short
[  142.238350][   T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.249327][   T39] usb 3-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  142.262498][   T39] usb 3-1: config 1 interface 0 has no altsetting 0
[  142.428243][   T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.437181][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.445004][   T39] usb 3-1: Product: syz
[  142.448988][   T39] usb 3-1: Manufacturer: syz
[  142.453350][   T39] usb 3-1: SerialNumber: syz
[  142.639364][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.646394][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.653507][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.660734][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.667749][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.674845][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.682211][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.689261][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.696273][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.703383][   T26] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  142.713026][   T26] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0024/input/input56
[  142.725864][   T26] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  142.838507][   T39] usb 3-1: bad CDC descriptors
[  142.843994][   T39] usb 3-1: USB disconnect, device number 16
[  142.859916][   T26] usb 1-1: USB disconnect, device number 17
[  143.249819][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  143.249837][   T30] audit: type=1400 audit(2000000023.170:1271): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  143.349944][T12457] netlink: 'syz.3.5713': attribute type 1 has an invalid length.
[  143.396042][   T30] audit: type=1400 audit(2000000023.310:1272): avc:  denied  { bind } for  pid=12468 comm="syz.0.5718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  143.422629][T12470] loop2: detected capacity change from 0 to 512
[  143.440611][T12470] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  143.449842][T12470] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.5717: invalid block
[  143.461311][T12470] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5717: invalid indirect mapped block 10 (level 1)
[  143.478505][T12470] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5717: invalid indirect mapped block 8 (level 1)
[  143.492659][T12470] EXT4-fs (loop2): 1 truncate cleaned up
[  143.499887][T12470] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  143.574821][T12499] loop4: detected capacity change from 0 to 512
[  143.639250][    T6] kernel write not supported for file /2341/net/rt_cache (pid: 6 comm: kworker/0:0)
[  143.649204][T12499] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  143.656691][T12499] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  143.706464][T12499] Quota error (device loop4): do_check_range: Getting dqdh_next_free 15 out of range 0-5
[  143.725152][T12499] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  143.751312][T12499] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.5730: Failed to acquire dquot type 1
[  143.776132][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  143.796731][T12499] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  143.838386][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  143.854505][T12499] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.5730: corrupted inode contents
[  143.888355][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  143.894710][T12499] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #12: comm syz.4.5730: mark_inode_dirty error
[  143.938392][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  143.944801][T12499] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.5730: corrupted inode contents
[  143.988354][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  143.994794][T12499] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.5730: mark_inode_dirty error
[  143.996014][T12528] loop2: detected capacity change from 0 to 40427
[  144.022815][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  144.038201][T12499] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.5730: corrupted inode contents
[  144.049580][T12528] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  144.057897][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  144.060866][T12528] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  144.072372][T12499] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  144.088376][T12528] F2FS-fs (loop2): invalid crc value
[  144.098353][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  144.104716][T12499] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.5730: corrupted inode contents
[  144.138148][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  144.149761][T12499] EXT4-fs error (device loop4): ext4_truncate:4303: inode #12: comm syz.4.5730: mark_inode_dirty error
[  144.161855][T12528] F2FS-fs (loop2): Found nat_bits in checkpoint
[  144.168347][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  144.174863][T12499] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  144.198360][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  144.208204][T12499] EXT4-fs (loop4): 1 truncate cleaned up
[  144.213709][T12499] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,abort,nouid32,errors=remount-ro,resgid=0x000000000000ee002. Quota mode: writeback.
[  144.254536][T12528] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  144.268218][T12528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.050978][   T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  147.073121][   T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  147.123788][   T30] audit: type=1400 audit(2000000027.040:1273): avc:  denied  { read } for  pid=12555 comm="syz.4.5754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  147.636569][T12573] loop4: detected capacity change from 0 to 40427
[  147.656358][T12573] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  147.673131][T12579] loop1: detected capacity change from 0 to 40427
[  147.679519][T12573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  147.698893][T12573] F2FS-fs (loop4): invalid crc value
[  147.729119][T12573] F2FS-fs (loop4): Found nat_bits in checkpoint
[  147.739809][T12579] F2FS-fs (loop1): fault_injection options not supported
[  147.746732][T12579] F2FS-fs (loop1): fault_type options not supported
[  147.779156][T12579] F2FS-fs (loop1): invalid crc value
[  147.786247][T12579] F2FS-fs (loop1): Found nat_bits in checkpoint
[  147.843993][T12573] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  147.858171][T12573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  147.872741][T12579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  147.993159][  T293] attempt to access beyond end of device
[  147.993159][  T293] loop1: rw=2049, want=45104, limit=40427
[  148.107247][   T30] audit: type=1400 audit(2000000028.020:1274): avc:  denied  { connect } for  pid=12605 comm="syz.0.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  148.169598][   T30] audit: type=1400 audit(2000000028.050:1275): avc:  denied  { write } for  pid=12605 comm="syz.0.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  148.361318][T12636] loop1: detected capacity change from 0 to 256
[  148.377153][T12636] exfat: Deprecated parameter 'utf8'
[  148.392181][T12636] exfat: Deprecated parameter 'namecase'
[  148.399335][T12638] loop4: detected capacity change from 0 to 256
[  148.414202][T12636] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1d0c1f25, utbl_chksum : 0xe619d30d)
[  148.502684][T12645] loop2: detected capacity change from 0 to 512
[  148.529767][T12645] EXT4-fs (loop2): filesystem is read-only
[  148.538228][   T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  148.553437][T12653] loop1: detected capacity change from 0 to 256
[  148.620869][T12653] exfat: Deprecated parameter 'namecase'
[  148.652041][T12653] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  148.689722][   T30] audit: type=1400 audit(2000000028.610:1276): avc:  denied  { bind } for  pid=12672 comm="syz.2.5808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  148.726071][   T30] audit: type=1400 audit(2000000028.620:1277): avc:  denied  { mounton } for  pid=12650 comm="syz.1.5796" path="/1097/file1/file0" dev="loop1" ino=1048730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  148.776353][   T30] audit: type=1400 audit(2000000028.690:1278): avc:  denied  { mount } for  pid=12685 comm="syz.4.5812" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  148.803697][   T26] usb 1-1: Using ep0 maxpacket: 16
[  148.848742][   T30] audit: type=1326 audit(2000000028.770:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  148.853958][T12694] netlink: 'syz.4.5816': attribute type 2 has an invalid length.
[  148.927222][   T30] audit: type=1326 audit(2000000028.800:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  148.950771][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.962863][   T30] audit: type=1326 audit(2000000028.800:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  148.963736][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.996777][   T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  148.997521][T12707] loop2: detected capacity change from 0 to 256
[  149.009844][   T26] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  149.015499][   T30] audit: type=1326 audit(2000000028.800:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  149.025222][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.055513][   T30] audit: type=1326 audit(2000000028.800:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd239d2ce7 code=0x7ffc0000
[  149.056877][   T26] usb 1-1: config 0 descriptor??
[  149.084205][   T30] audit: type=1326 audit(2000000028.800:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd23977f29 code=0x7ffc0000
[  149.085102][T12707] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.110359][   T30] audit: type=1326 audit(2000000028.800:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.1.5819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  149.119252][T12707] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  149.152300][T12707] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  149.228267][    T6] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  149.238248][   T39] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  149.468222][    T6] usb 5-1: Using ep0 maxpacket: 16
[  149.559390][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.566488][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.573608][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.580682][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.587660][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.588271][    T6] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  149.594837][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.612651][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.612735][    T6] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.623381][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.633272][    T6] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.652528][   T39] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  149.652832][    T6] usb 5-1: config 0 interface 0 has no altsetting 0
[  149.667816][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.668138][    T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  149.675633][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.684814][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.692454][   T39] usb 4-1: config 0 descriptor??
[  149.704175][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.708457][    T6] usb 5-1: config 0 descriptor??
[  149.711323][   T26] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  149.723224][   T26] HID 045e:07da: Invalid code 65791 type 1
[  149.731666][   T26] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0025/input/input57
[  149.744037][   T26] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  149.797286][   T20] usb 1-1: USB disconnect, device number 18
[  150.179226][   T39] pantherlord 0003:0810:0001.0026: unknown main item tag 0x0
[  150.187056][   T39] pantherlord 0003:0810:0001.0026: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.3-1/input0
[  150.189220][    T6] logitech 0003:046D:C298.0027: unknown main item tag 0x0
[  150.198790][   T39] pantherlord 0003:0810:0001.0026: no output reports found
[  150.205902][    T6] logitech 0003:046D:C298.0027: unknown main item tag 0x0
[  150.220041][    T6] logitech 0003:046D:C298.0027: hidraw1: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.4-1/input0
[  150.231230][    T6] logitech 0003:046D:C298.0027: no inputs found
[  150.396602][    T6] usb 4-1: USB disconnect, device number 14
[  150.461402][   T26] usb 5-1: USB disconnect, device number 17
[  151.136583][T12770] loop2: detected capacity change from 0 to 512
[  151.146993][T12770] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  151.147016][T12770] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  151.158728][T12770] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  151.158902][T12770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  151.158969][T12770] System zones: 0-2, 18-18, 34-34
[  151.234176][T12770] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  151.234604][T12770] EXT4-fs (loop2): 1 truncate cleaned up
[  151.234628][T12770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.368192][T12797] loop1: detected capacity change from 0 to 256
[  151.425303][T12797] FAT-fs (loop1): Directory bread(block 64) failed
[  151.435935][T12797] FAT-fs (loop1): Directory bread(block 65) failed
[  151.447298][T12803] netlink: 'syz.3.5868': attribute type 2 has an invalid length.
[  151.448985][T12797] FAT-fs (loop1): Directory bread(block 66) failed
[  151.463063][T12797] FAT-fs (loop1): Directory bread(block 67) failed
[  151.485526][T12797] FAT-fs (loop1): Directory bread(block 68) failed
[  151.492608][T12797] FAT-fs (loop1): Directory bread(block 69) failed
[  151.499711][T12797] FAT-fs (loop1): Directory bread(block 70) failed
[  151.506107][T12797] FAT-fs (loop1): Directory bread(block 71) failed
[  151.512689][T12797] FAT-fs (loop1): Directory bread(block 72) failed
[  151.519347][T12797] FAT-fs (loop1): Directory bread(block 73) failed
[  151.984811][T12843] loop1: detected capacity change from 0 to 131072
[  152.039999][T12843] F2FS-fs (loop1): invalid crc value
[  152.053642][T12843] F2FS-fs (loop1): Found nat_bits in checkpoint
[  152.088784][T12843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  152.298753][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  152.467660][T12873] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56
[  152.476832][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5908'.
[  152.659839][T12869] loop1: detected capacity change from 0 to 40427
[  152.667469][T12877] loop2: detected capacity change from 0 to 40427
[  152.674746][T12869] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  152.682340][T12869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  152.692742][T12869] F2FS-fs (loop1): Found nat_bits in checkpoint
[  152.723958][T12869] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  152.730894][T12869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  152.756335][T12869] fscrypt (loop1, inode 3): Error -61 getting encryption context
[  152.764004][T12877] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  152.775622][T12877] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  152.790113][T12891] xt_hashlimit: max too large, truncated to 1048576
[  152.796915][T12877] F2FS-fs (loop2): invalid crc value
[  152.826805][T12877] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.925567][T12877] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  152.934255][T12877] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  153.045413][   T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  153.069209][   T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  153.278861][T12980] loop2: detected capacity change from 0 to 16
[  153.291124][T12980] erofs: (device loop2): mounted with root inode @ nid 36.
[  153.442715][T13003] loop2: detected capacity change from 0 to 512
[  153.472104][T13003] EXT4-fs (loop2): Test dummy encryption mode enabled
[  153.480855][T13003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  153.494223][T12985] loop4: detected capacity change from 0 to 40427
[  153.495315][T13003] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #15: comm syz.2.5959: inline data xattr refers to an external xattr inode
[  153.515900][T13003] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5959: couldn't read orphan inode 15 (err -117)
[  153.527901][T13003] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,jqfmt=vfsv1,inlinecrypt,auto_da_alloc,barrier,quota,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  153.548641][   T39] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  153.561456][T12985] F2FS-fs (loop4): invalid crc value
[  153.569704][T12985] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.615585][T12985] F2FS-fs (loop4): Start checkpoint disabled!
[  153.622346][T12985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  153.700634][T13031] loop2: detected capacity change from 0 to 256
[  153.728455][T13031] exfat: Deprecated parameter 'utf8'
[  153.751900][T13031] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa943978a, utbl_chksum : 0xe619d30d)
[  153.788208][   T39] usb 4-1: Using ep0 maxpacket: 8
[  153.901150][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  153.901168][   T30] audit: type=1326 audit(2000000033.820:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  153.908269][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.967612][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.983960][   T30] audit: type=1326 audit(2000000033.820:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  153.990638][   T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.033059][T13077] 9pnet: p9_fd_create_tcp (13077): problem binding to privport
[  154.038229][   T39] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[  154.049452][   T30] audit: type=1326 audit(2000000033.860:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  154.056115][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.101388][   T39] usb 4-1: config 0 descriptor??
[  154.129937][   T30] audit: type=1326 audit(2000000033.860:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  154.162729][   T30] audit: type=1326 audit(2000000033.860:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  154.188856][   T30] audit: type=1400 audit(2000000034.100:1299): avc:  denied  { mac_admin } for  pid=13092 comm="syz.2.6002" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  154.212467][   T30] audit: type=1400 audit(2000000034.100:1300): avc:  denied  { relabelto } for  pid=13092 comm="syz.2.6002" name="memory.swap.events" dev="tmpfs" ino=6195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  154.240700][   T30] audit: type=1400 audit(2000000034.100:1301): avc:  denied  { associate } for  pid=13092 comm="syz.2.6002" name="memory.swap.events" dev="tmpfs" ino=6195 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[  154.266654][   T30] audit: type=1400 audit(2000000034.120:1302): avc:  denied  { unlink } for  pid=290 comm="syz-executor" name="memory.swap.events" dev="tmpfs" ino=6195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  154.299689][   T30] audit: type=1326 audit(2000000034.210:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  154.380579][T13114] loop2: detected capacity change from 0 to 512
[  154.462649][T13114] EXT4-fs error (device loop2): ext4_quota_enable:6375: comm syz.2.6009: Bad quota inum: 524292, type: 1
[  154.474076][T13114] EXT4-fs warning (device loop2): ext4_enable_quotas:6423: Failed to enable quota tracking (type=1, err=-117, ino=524292). Please run e2fsck to fix.
[  154.490034][T13114] EXT4-fs (loop2): mount failed
[  154.572705][   T39] wacom 0003:056A:00B5.0028: Unknown device_type for 'HID 056a:00b5'. Assuming pen.
[  154.592534][   T39] wacom 0003:056A:00B5.0028: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.3-1/input0
[  154.606333][   T39] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B5.0028/input/input58
[  154.636196][T13146] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  154.794477][    T6] usb 4-1: USB disconnect, device number 15
[  156.550688][T13212] loop1: detected capacity change from 0 to 16
[  156.608635][T13212] erofs: (device loop1): mounted with root inode @ nid 36.
[  156.825057][T13259] tipc: Started in network mode
[  156.854296][T13259] tipc: Node identity ffffffffffffffff, cluster identity 4711
[  156.991016][T13282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13282 comm=syz.0.6092
[  156.991051][T13282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13282 comm=syz.0.6092
[  157.151160][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6101'.
[  157.403497][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6116'.
[  157.666308][T13395] loop2: detected capacity change from 0 to 128
[  157.738556][T13395] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  157.765758][T13395] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  157.815813][T13423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13423 comm=syz.1.6162
[  157.958212][   T20] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  158.213166][   T20] usb 5-1: Using ep0 maxpacket: 32
[  158.238265][  T298] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  158.278187][   T39] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  158.338238][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.349099][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.359235][   T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  158.368328][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.380573][   T20] usb 5-1: config 0 descriptor??
[  158.419513][   T20] hub 5-1:0.0: USB hub found
[  158.444319][T13455] loop1: detected capacity change from 0 to 131072
[  158.478201][  T298] usb 1-1: Using ep0 maxpacket: 32
[  158.508430][ T1802] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  158.530349][T13455] F2FS-fs (loop1): invalid crc value
[  158.537919][T13455] F2FS-fs (loop1): Found nat_bits in checkpoint
[  158.572035][T13455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  158.598217][  T298] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  158.606234][  T298] usb 1-1: config 0 has no interface number 0
[  158.678232][   T20] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  158.708297][   T39] usb 3-1: config 0 interface 0 has no altsetting 0
[  158.714743][   T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  158.724046][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.732821][   T39] usb 3-1: config 0 descriptor??
[  158.768234][  T298] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  158.777268][  T298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.778137][ T1802] usb 4-1: Using ep0 maxpacket: 16
[  158.785479][  T298] usb 1-1: Product: syz
[  158.794469][  T298] usb 1-1: Manufacturer: syz
[  158.799058][  T298] usb 1-1: SerialNumber: syz
[  158.808039][  T298] usb 1-1: config 0 descriptor??
[  158.848633][  T298] smsc95xx v2.0.0
[  158.948201][ T1802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.958930][ T1802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  158.971792][ T1802] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  158.975566][T13470] loop1: detected capacity change from 0 to 40427
[  158.980926][ T1802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.987050][   T20] usbhid 5-1:0.0: can't add hid device: -71
[  158.995819][ T1802] usb 4-1: config 0 descriptor??
[  159.004406][   T20] usbhid: probe of 5-1:0.0 failed with error -71
[  159.030262][T13470] F2FS-fs (loop1): invalid crc value
[  159.036579][T13470] F2FS-fs (loop1): Found nat_bits in checkpoint
[  159.038966][   T20] usb 5-1: USB disconnect, device number 18
[  159.072962][T13470] F2FS-fs (loop1): recover fsync data on readonly fs
[  159.079592][T13470] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  159.085949][T13470] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  159.092661][T13470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  159.200968][T13473] syz.1.6183[13473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  159.201025][T13473] syz.1.6183[13473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  159.239081][   T39] logitech 0003:046D:C50C.0029: unknown main item tag 0x0
[  159.257389][   T39] logitech 0003:046D:C50C.0029: unknown main item tag 0x0
[  159.265376][   T39] logitech 0003:046D:C50C.0029: unknown main item tag 0x0
[  159.272632][   T39] logitech 0003:046D:C50C.0029: unknown main item tag 0x0
[  159.279805][   T39] logitech 0003:046D:C50C.0029: unknown main item tag 0x0
[  159.286765][   T39] logitech 0003:046D:C50C.0029: unbalanced collection at end of report description
[  159.296378][   T39] logitech 0003:046D:C50C.0029: parse failed
[  159.302388][   T39] logitech: probe of 0003:046D:C50C.0029 failed with error -22
[  159.314439][T13484] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6188'.
[  159.323584][T13484] Zero length message leads to an empty skb
[  159.440309][   T39] usb 3-1: USB disconnect, device number 17
[  159.479774][ T1802] HID 045e:07da: Invalid code 65791 type 1
[  159.485720][ T1802] HID 045e:07da: Invalid code 768 type 1
[  159.501469][ T1802] HID 045e:07da: Invalid code 769 type 1
[  159.508353][  T298] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  159.511564][ T1802] HID 045e:07da: Invalid code 770 type 1
[  159.528167][  T298] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  159.534617][ T1802] HID 045e:07da: Invalid code 771 type 1
[  159.554830][ T1802] HID 045e:07da: Invalid code 772 type 1
[  159.558210][  T298] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  159.560429][ T1802] HID 045e:07da: Invalid code 773 type 1
[  159.578354][T13490] loop1: detected capacity change from 0 to 40427
[  159.586804][  T298] smsc95xx: probe of 1-1:0.67 failed with error -71
[  159.589085][ T1802] HID 045e:07da: Invalid code 774 type 1
[  159.605558][  T298] usb 1-1: USB disconnect, device number 19
[  159.612100][ T1802] HID 045e:07da: Invalid code 775 type 1
[  159.617567][ T1802] HID 045e:07da: Invalid code 776 type 1
[  159.630907][ T1802] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002A/input/input61
[  159.641164][T13496] loop4: detected capacity change from 0 to 40427
[  159.669065][T13490] F2FS-fs (loop1): fault_injection options not supported
[  159.676849][T13490] F2FS-fs (loop1): invalid crc value
[  159.683802][T13490] F2FS-fs (loop1): Found nat_bits in checkpoint
[  159.689322][T13496] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  159.696772][T13496] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  159.713880][T13496] F2FS-fs (loop4): invalid crc value
[  159.719579][ T1802] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  159.721189][T13496] F2FS-fs (loop4): Found nat_bits in checkpoint
[  159.748289][ T1802] usb 4-1: USB disconnect, device number 16
[  159.775886][T13490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  159.787184][T13496] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  159.801893][T13496] F2FS-fs (loop4): Start checkpoint disabled!
[  159.808956][T13496] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  159.815980][T13496] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  159.816332][  T293] attempt to access beyond end of device
[  159.816332][  T293] loop1: rw=2049, want=45104, limit=40427
[  159.844100][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  159.844117][   T30] audit: type=1400 audit(2000000039.760:1329): avc:  denied  { remove_name } for  pid=13495 comm="syz.4.6194" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.873413][   T30] audit: type=1400 audit(2000000039.760:1330): avc:  denied  { rename } for  pid=13495 comm="syz.4.6194" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  159.897739][  T322] attempt to access beyond end of device
[  159.897739][  T322] loop4: rw=2049, want=40984, limit=40427
[  160.035203][T13508] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13508 comm=syz.1.6195
[  160.099346][T13522] loop4: detected capacity change from 0 to 256
[  160.191983][T13522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  160.289037][T13520] loop2: detected capacity change from 0 to 40427
[  160.324789][T13546] loop4: detected capacity change from 0 to 256
[  160.349361][T13520] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  160.356315][T13520] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  160.399301][T13520] F2FS-fs (loop2): fault_injection options not supported
[  160.406286][T13520] F2FS-fs (loop2): fault_type options not supported
[  160.414315][T13550] loop1: detected capacity change from 0 to 4096
[  160.418387][T13520] F2FS-fs (loop2): invalid crc value
[  160.432071][T13520] F2FS-fs (loop2): Found nat_bits in checkpoint
[  160.459239][T13550] EXT4-fs (loop1): Ignoring removed orlov option
[  160.486259][T13550] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,nolazytime,orlov,data_err=abort,errors=remount-ro,nobarrier,quota,. Quota mode: writeback.
[  160.504000][T13520] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  160.510970][T13520] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  160.526247][T13550] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.6217: corrupted inode contents
[  160.526372][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.526391][T13550] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #15: comm syz.1.6217: mark_inode_dirty error
[  160.526488][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.526520][T13550] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.6217: corrupted inode contents
[  160.529221][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.529241][T13550] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.6217: mark_inode_dirty error
[  160.529397][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.529422][T13550] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.6217: corrupted inode contents
[  160.529874][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.529894][T13550] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.6217: mark_inode_dirty error
[  160.529999][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.530029][T13550] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.6217: corrupted inode contents
[  160.530128][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.530143][T13550] EXT4-fs error (device loop1): ext4_truncate:4303: inode #15: comm syz.1.6217: mark_inode_dirty error
[  160.530248][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.530264][T13550] EXT4-fs error (device loop1) in ext4_setattr:5609: Corrupt filesystem
[  160.530349][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.531153][T13550] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #15: comm syz.1.6217: corrupted inode contents
[  160.531303][T13550] EXT4-fs (loop1): Remounting filesystem read-only
[  160.538145][   T30] audit: type=1400 audit(2000000040.450:1331): avc:  denied  { unlink } for  pid=13549 comm="syz.1.6217" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  160.538822][  T290] attempt to access beyond end of device
[  160.538822][  T290] loop2: rw=2049, want=45104, limit=40427
[  160.566097][  T293] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117)
[  160.940386][T13589] loop1: detected capacity change from 0 to 512
[  160.969061][T13589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  160.981054][T13589] EXT4-fs (loop1): 1 truncate cleaned up
[  160.981080][T13589] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none.
[  161.066636][   T30] audit: type=1400 audit(2000000040.980:1332): avc:  denied  { mount } for  pid=13602 comm="syz.0.6240" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  161.166154][T13614] loop1: detected capacity change from 0 to 512
[  161.182819][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6246'.
[  161.213162][T13614] EXT4-fs (loop1): Ignoring removed orlov option
[  161.224519][   T30] audit: type=1326 audit(2000000041.140:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.0.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  161.238563][T13614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  161.278462][   T30] audit: type=1326 audit(2000000041.170:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.0.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  161.318557][T13614] EXT4-fs (loop1): 1 truncate cleaned up
[  161.324052][T13614] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,grpjquota=,orlov,noblock_validity,,errors=continue. Quota mode: none.
[  161.336541][   T30] audit: type=1326 audit(2000000041.170:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.0.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  161.339738][ T1802] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  161.382084][T13614] EXT4-fs (loop1): Online resizing not supported with sparse_super2
[  161.457176][T13621] loop4: detected capacity change from 0 to 40427
[  161.512136][T13621] F2FS-fs (loop4): invalid crc value
[  161.521863][T13621] F2FS-fs (loop4): Found nat_bits in checkpoint
[  161.565641][T13621] F2FS-fs (loop4): Start checkpoint disabled!
[  161.573175][T13621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  161.629196][  T322] attempt to access beyond end of device
[  161.629196][  T322] loop4: rw=2049, want=40976, limit=40427
[  161.648256][   T30] audit: type=1400 audit(2000000041.570:1336): avc:  denied  { getattr } for  pid=13679 comm="syz.1.6275" name="/" dev="incremental-fs" ino=6046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  161.658216][  T298] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  161.778357][ T1802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.801252][ T1802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.818159][ T1802] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  161.827062][ T1802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.854531][ T1802] usb 4-1: config 0 descriptor??
[  161.984292][T13714] usb usb9: usbfs: process 13714 (syz.1.6289) did not claim interface 0 before use
[  162.008564][T13716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6290'.
[  162.068235][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  162.079397][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  162.081597][   T30] audit: type=1326 audit(2000000042.000:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  162.090714][  T298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  162.130797][  T298] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  162.140239][   T30] audit: type=1326 audit(2000000042.040:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.1.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  162.143353][  T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.175095][  T298] usb 3-1: config 0 descriptor??
[  162.198227][T13639] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  162.339406][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.346208][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.353039][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.359740][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.366755][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.373566][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.380313][ T1802] waltop 0003:172F:0034.002B: unknown main item tag 0x0
[  162.387790][ T1802] waltop 0003:172F:0034.002B: hidraw0: USB HID v1.ff Device [HID 172f:0034] on usb-dummy_hcd.3-1/input0
[  162.542664][   T20] usb 4-1: USB disconnect, device number 17
[  162.658954][  T298] elecom 0003:056E:00FC.002C: unknown main item tag 0xd
[  162.665770][  T298] elecom 0003:056E:00FC.002C: collection stack underflow
[  162.672622][  T298] elecom 0003:056E:00FC.002C: item 0 4 0 12 parsing failed
[  162.679768][  T298] elecom: probe of 0003:056E:00FC.002C failed with error -22
[  162.864529][   T59] usb 3-1: USB disconnect, device number 18
[  162.986920][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'.
[  163.086015][T13786] cgroup2: Unknown parameter 'fscontext
'
[  163.268180][  T298] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  163.518154][  T298] usb 1-1: Using ep0 maxpacket: 16
[  163.638215][  T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.649075][  T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.658735][  T298] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  163.667598][  T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.676205][  T298] usb 1-1: config 0 descriptor??
[  163.887369][T13835] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.980896][T13849] loop4: detected capacity change from 0 to 512
[  164.051144][T13849] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[  164.064735][T13849] ext4 filesystem being mounted at /1243/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.159118][  T298] ntrig 0003:1B96:0008.002D: unbalanced collection at end of report description
[  164.169030][  T298] ntrig 0003:1B96:0008.002D: parse failed
[  164.174582][  T298] ntrig: probe of 0003:1B96:0008.002D failed with error -22
[  164.254570][T13858] loop2: detected capacity change from 0 to 256
[  164.296290][T13858] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  164.360755][  T298] usb 1-1: USB disconnect, device number 20
[  164.408163][ T8016] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  164.486204][T13879] tipc: Cannot configure node identity twice
[  164.492064][T13879] tipc: Cannot configure node identity twice
[  164.533036][T13885] loop2: detected capacity change from 0 to 512
[  164.628270][   T39] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  164.640175][T13885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  164.651070][T13885] ext4 filesystem being mounted at /1250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.808202][ T8016] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  164.809374][T13890] loop2: detected capacity change from 0 to 40427
[  164.819008][ T8016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.836011][ T8016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1600, setting to 64
[  164.837668][T13890] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (4285726721, 24)
[  164.846896][ T8016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  164.855337][T13890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  164.874709][ T8016] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  164.879299][T13890] F2FS-fs (loop2): invalid crc value
[  164.890883][T13890] F2FS-fs (loop2): Found nat_bits in checkpoint
[  164.894827][ T8016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.917162][ T8016] usb 5-1: config 0 descriptor??
[  164.936931][T13890] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  164.942513][T13854] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  164.943850][T13890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.008244][   T39] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.017816][   T39] usb 4-1: config 0 interface 0 has no altsetting 0
[  165.033510][   T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  165.042934][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.052142][   T39] usb 4-1: config 0 descriptor??
[  165.188315][T13890] F2FS-fs (loop2): fault_injection options not supported
[  165.195188][T13890] F2FS-fs (loop2): fault_type options not supported
[  165.201838][T13890] F2FS-fs (loop2): switch compress_cache option is not allowed
[  165.329054][T13926] loop1: detected capacity change from 0 to 256
[  165.389607][T13932] loop2: detected capacity change from 0 to 1024
[  165.400572][ T8016] kye 0003:0458:501A.002E: unknown main item tag 0x0
[  165.409114][ T8016] kye 0003:0458:501A.002E: hidraw0: USB HID vff.fd Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0
[  165.414131][T13926] FAT-fs (loop1): Directory bread(block 64) failed
[  165.420202][ T8016] kye 0003:0458:501A.002E: tablet-enabling feature report not found
[  165.428458][T13926] FAT-fs (loop1): Directory bread(block 65) failed
[  165.435807][ T8016] kye 0003:0458:501A.002E: tablet enabling failed
[  165.441104][T13926] FAT-fs (loop1): Directory bread(block 66) failed
[  165.453475][T13934] xt_hashlimit: size too large, truncated to 1048576
[  165.459041][T13926] FAT-fs (loop1): Directory bread(block 67) failed
[  165.466345][T13926] FAT-fs (loop1): Directory bread(block 68) failed
[  165.472865][T13926] FAT-fs (loop1): Directory bread(block 69) failed
[  165.473945][T13932] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.6390: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  165.479275][T13926] FAT-fs (loop1): Directory bread(block 70) failed
[  165.504771][T13926] FAT-fs (loop1): Directory bread(block 71) failed
[  165.510915][   T39] magicmouse 0003:05AC:0269.002F: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0
[  165.511188][T13926] FAT-fs (loop1): Directory bread(block 72) failed
[  165.528947][T13926] FAT-fs (loop1): Directory bread(block 73) failed
[  165.551437][T13932] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.6390: couldn't read orphan inode 11 (err -117)
[  165.563664][T13932] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback.
[  165.602386][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  165.602400][   T30] audit: type=1400 audit(2000000045.520:1340): avc:  denied  { create } for  pid=13931 comm="syz.2.6390" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  165.603464][ T8016] usb 5-1: USB disconnect, device number 19
[  165.619037][T13932] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.6390: Invalid block bitmap block 0 in block_group 0
[  165.656440][T13938] syz.1.6392 (13938): attempted to duplicate a private mapping with mremap.  This is not supported.
[  165.667512][T13932] Quota error (device loop2): write_blk: dquota write failed
[  165.675181][T13932] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  165.685607][T13932] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.6390: Failed to acquire dquot type 0
[  165.696308][T13940] loop1: detected capacity change from 0 to 512
[  165.710354][   T39] usb 4-1: USB disconnect, device number 18
[  165.717313][T13940] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.6393: iget: bad extended attribute block 1
[  165.753599][T13940] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.6393: couldn't read orphan inode 15 (err -117)
[  165.766059][T13940] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  165.825390][T13940] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  165.965008][T13968] tipc: Enabled bearer <udp:syz0>, priority 9
[  166.039065][T13984] xt_hashlimit: max too large, truncated to 1048576
[  166.078885][   T30] audit: type=1400 audit(2000000046.000:1341): avc:  denied  { execute } for  pid=13992 comm="syz.2.6419" name="file2" dev="tmpfs" ino=6485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  166.108698][   T30] audit: type=1400 audit(2000000046.000:1342): avc:  denied  { execute_no_trans } for  pid=13992 comm="syz.2.6419" path="/1263/file2" dev="tmpfs" ino=6485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  166.188329][T14008] xt_hashlimit: size too large, truncated to 1048576
[  167.870812][   T20] tipc: Node number set to 4292870144
[  168.039627][T14048] loop2: detected capacity change from 0 to 128
[  168.091835][T14048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.109479][T14048] ext4 filesystem being mounted at /1270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  168.154476][   T30] audit: type=1400 audit(2000000048.070:1343): avc:  denied  { create } for  pid=14047 comm="syz.2.6444" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  168.246136][   T30] audit: type=1326 audit(2000000048.160:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.6455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  168.302402][   T30] audit: type=1326 audit(2000000048.160:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.6455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  168.353483][   T30] audit: type=1326 audit(2000000048.160:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.6455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  168.428179][   T30] audit: type=1326 audit(2000000048.160:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.6455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  168.457545][T14031] loop4: detected capacity change from 0 to 131072
[  168.472112][T14031] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  168.480313][T14031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  168.503091][T14031] F2FS-fs (loop4): Found nat_bits in checkpoint
[  168.545049][T14031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  168.552162][T14031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  168.639632][T14099] loop2: detected capacity change from 0 to 40427
[  168.723728][T14099] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  168.731517][T14099] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  168.740637][T14099] F2FS-fs (loop2): invalid crc value
[  168.747136][T14099] F2FS-fs (loop2): Found nat_bits in checkpoint
[  168.790392][T14099] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  168.797258][T14099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  168.821643][T14103] attempt to access beyond end of device
[  168.821643][T14103] loop2: rw=2049, want=45104, limit=40427
[  168.872244][T14113] loop4: detected capacity change from 0 to 2048
[  168.983399][T14113] EXT4-fs (loop4): error: journal path . is not a block device
[  169.109393][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.117411][T14128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  169.151015][T14121] loop2: detected capacity change from 0 to 40427
[  169.239728][T14121] F2FS-fs (loop2): invalid crc value
[  169.252322][T14121] F2FS-fs (loop2): Found nat_bits in checkpoint
[  169.283578][T14121] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  169.304923][  T290] attempt to access beyond end of device
[  169.304923][  T290] loop2: rw=2049, want=45104, limit=40427
[  169.788197][ T8016] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  170.028500][ T8016] usb 3-1: Using ep0 maxpacket: 16
[  170.145557][T14157] loop4: detected capacity change from 0 to 40427
[  170.151921][ T8016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.162621][ T8016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.172194][ T8016] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.184762][ T8016] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  170.193620][ T8016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.202170][ T8016] usb 3-1: config 0 descriptor??
[  170.218804][T14157] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  170.226695][T14157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  170.235776][T14157] F2FS-fs (loop4): invalid crc value
[  170.242670][T14157] F2FS-fs (loop4): Found nat_bits in checkpoint
[  170.273960][T14157] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  170.280926][T14157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  170.301783][   T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  170.311025][   T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  170.462427][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6494'.
[  170.496265][T14173] loop4: detected capacity change from 0 to 1024
[  170.578703][T14173] EXT4-fs (loop4): Ignoring removed orlov option
[  170.589831][T14173] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,sysvgroups,discard,debug_want_extra_isize=0x0000000000000080,orlov,data_err=ignore,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[  170.678922][ T8016] ryos 0003:1E7D:31CE.0030: unbalanced delimiter at end of report description
[  170.687746][ T8016] ryos 0003:1E7D:31CE.0030: parse failed
[  170.695791][ T8016] ryos: probe of 0003:1E7D:31CE.0030 failed with error -22
[  170.716884][T14180] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6498'.
[  170.726016][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6498'.
[  170.879363][   T26] usb 3-1: USB disconnect, device number 19
[  171.078301][   T59] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  171.448220][   T59] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.461983][   T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.499595][T14209] loop2: detected capacity change from 0 to 128
[  171.568257][   T59] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.583283][   T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.596074][   T59] usb 5-1: SerialNumber: syz
[  171.642513][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6522'.
[  171.690825][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  171.690842][   T30] audit: type=1400 audit(2000000051.610:1351): avc:  denied  { read } for  pid=14240 comm="syz.0.6526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  171.853637][T14244] xt_TCPMSS: Only works on TCP SYN packets
[  171.878942][   T59] usb 5-1: 0:2 : does not exist
[  171.883744][   T26] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  171.892199][   T59] usb 5-1: USB disconnect, device number 20
[  172.108088][T14258] binfmt_misc: register: failed to install interpreter file ./file0
[  172.148198][   T26] usb 3-1: Using ep0 maxpacket: 8
[  172.278498][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.289496][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.299098][   T26] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  172.307915][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.316409][   T26] usb 3-1: config 0 descriptor??
[  172.383359][T14303] loop4: detected capacity change from 0 to 512
[  172.412698][T14303] EXT4-fs (loop4): 1 truncate cleaned up
[  172.418227][T14303] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  172.485545][T14313] netlink: 'syz.0.6568': attribute type 9 has an invalid length.
[  172.673364][T14317] loop4: detected capacity change from 0 to 512
[  172.727373][T14317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.6560: inode #1: comm syz.4.6560: iget: illegal inode #
[  172.740755][T14317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.6560: error while reading EA inode 1 err=-117
[  172.751598][T14322] bridge0: port 3(dummy0) entered blocking state
[  172.753809][T14317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.6560: inode #1: comm syz.4.6560: iget: illegal inode #
[  172.759257][T14322] bridge0: port 3(dummy0) entered disabled state
[  172.772382][T14317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.6560: error while reading EA inode 1 err=-117
[  172.778637][T14322] device dummy0 entered promiscuous mode
[  172.791089][T14317] EXT4-fs (loop4): 1 orphan inode deleted
[  172.796165][T14322] bridge0: port 3(dummy0) entered blocking state
[  172.802162][T14317] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.
[  172.807568][T14322] bridge0: port 3(dummy0) entered forwarding state
[  172.843406][   T26] smartjoyplus 0003:6666:8804.0031: unknown main item tag 0x0
[  172.850766][   T26] smartjoyplus 0003:6666:8804.0031: unknown main item tag 0x0
[  172.858011][   T26] smartjoyplus 0003:6666:8804.0031: unknown main item tag 0x0
[  172.865367][   T26] smartjoyplus 0003:6666:8804.0031: unknown main item tag 0x0
[  172.873472][   T26] smartjoyplus 0003:6666:8804.0031: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0
[  172.885364][   T26] smartjoyplus 0003:6666:8804.0031: no output reports found
[  173.040158][   T26] usb 3-1: USB disconnect, device number 20
[  178.552901][T14331] loop2: detected capacity change from 0 to 512
[  178.585395][   T30] audit: type=1326 audit(2000000058.500:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.0.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  178.635284][   T30] audit: type=1326 audit(2000000058.500:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.0.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  178.649144][T14352] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  178.673638][T14331] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  178.686991][   T30] audit: type=1326 audit(2000000058.500:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.0.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7ffc0000
[  178.744241][T14363] loop1: detected capacity change from 0 to 128
[  178.757887][T14331] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  178.777088][T14331] Quota error (device loop2): write_blk: dquota write failed
[  178.783441][T14363] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  178.784909][T14331] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  178.805420][T14331] Quota error (device loop2): write_blk: dquota write failed
[  178.818205][T14331] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  178.828236][T14363] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  178.840216][T14331] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.6564: Failed to acquire dquot type 1
[  178.851719][T14331] EXT4-fs (loop2): 1 truncate cleaned up
[  178.857533][T14331] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,inlinecrypt,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[  178.902503][T14331] Quota error (device loop2): write_blk: dquota write failed
[  178.910003][T14331] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  178.920126][T14331] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.6564: Failed to acquire dquot type 1
[  179.032852][   T30] audit: type=1326 audit(2000000058.950:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.2.6592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff5d962d29 code=0x0
[  179.115961][T14403] loop4: detected capacity change from 0 to 512
[  179.203877][T14403] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,grpid,grpjquota=,min_batch_time=0x0000000000000010,journal_dev=0x00000000000000ff,,errors=continue. Quota mode: writeback.
[  179.222672][T14403] ext4 filesystem being mounted at /1290/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.238714][T14403] EXT4-fs warning (device loop4): ext4_group_extend:1823: can't shrink FS - resize aborted
[  179.343658][T14417] loop1: detected capacity change from 0 to 128
[  179.687734][T14429] loop4: detected capacity change from 0 to 256
[  179.728883][T14429] exfat: Deprecated parameter 'utf8'
[  179.734053][T14429] exfat: Deprecated parameter 'namecase'
[  179.761331][T14429] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1d0c1f25, utbl_chksum : 0xe619d30d)
[  180.149994][T14468] loop2: detected capacity change from 0 to 40427
[  180.209056][T14468] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  180.215693][T14468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  180.226780][T14468] F2FS-fs (loop2): Found nat_bits in checkpoint
[  180.268881][T14468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  180.275746][T14468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  180.332292][  T290] attempt to access beyond end of device
[  180.332292][  T290] loop2: rw=2049, want=45104, limit=40427
[  180.529711][T14475] loop1: detected capacity change from 0 to 256
[  180.561537][T14483] loop2: detected capacity change from 0 to 2048
[  180.566654][T14485] loop4: detected capacity change from 0 to 512
[  180.574603][T14475] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.585390][T14475] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  180.594929][T14483] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  180.597309][T14475] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  180.603031][T14483] EXT4-fs (loop2): Unrecognized mount option "smackfshat=mblk_io_submit" or missing value
[  180.623762][T14485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  180.644279][T14485] EXT4-fs (loop4): 1 orphan inode deleted
[  180.655538][T14485] EXT4-fs (loop4): 1 truncate cleaned up
[  180.661077][T14485] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.008944][T14505] loop1: detected capacity change from 0 to 40427
[  181.078938][T14505] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  181.096776][T14505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  181.107980][T14505] F2FS-fs (loop1): invalid crc value
[  181.115970][T14515] loop2: detected capacity change from 0 to 40427
[  181.136150][T14505] F2FS-fs (loop1): Found nat_bits in checkpoint
[  181.182681][T14515] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  181.193157][T14515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  181.217772][T14515] F2FS-fs (loop2): invalid crc value
[  181.223517][T14505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  181.230628][T14505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.253642][T14515] F2FS-fs (loop2): Found nat_bits in checkpoint
[  181.335306][T14515] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  181.348414][T14515] F2FS-fs (loop2): Start checkpoint disabled!
[  181.378461][T14515] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  181.385364][T14515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  181.505203][   T45] attempt to access beyond end of device
[  181.505203][   T45] loop2: rw=2049, want=40984, limit=40427
[  181.609415][T14555] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6663'.
[  181.776194][T14573] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  181.798207][  T298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.964139][T14524] loop4: detected capacity change from 0 to 131072
[  182.034102][T14524] F2FS-fs (loop4): invalid crc value
[  182.061765][T14524] F2FS-fs (loop4): Found nat_bits in checkpoint
[  182.089726][T14571] loop1: detected capacity change from 0 to 40427
[  182.167531][T14524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  182.178787][T14571] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  182.185624][T14571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  182.204844][T14581] loop2: detected capacity change from 0 to 40427
[  182.211407][T14571] F2FS-fs (loop1): fault_injection options not supported
[  182.218816][T14571] F2FS-fs (loop1): fault_type options not supported
[  182.226373][T14571] F2FS-fs (loop1): invalid crc value
[  182.248225][ T8016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.257730][T14571] F2FS-fs (loop1): Found nat_bits in checkpoint
[  182.288700][T14581] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  182.301550][T14581] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  182.336487][T14571] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  182.343700][T14571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  182.359388][T14581] F2FS-fs (loop2): Found nat_bits in checkpoint
[  182.410476][T14581] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  182.417473][T14581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  182.434868][  T293] attempt to access beyond end of device
[  182.434868][  T293] loop1: rw=2049, want=45104, limit=40427
[  182.740082][T14633] loop4: detected capacity change from 0 to 512
[  182.805261][T14633] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  182.823669][T14649] loop2: detected capacity change from 0 to 1024
[  182.832589][T14633] ext4 filesystem being mounted at /1307/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.895277][T14649] EXT4-fs (loop2): Ignoring removed nobh option
[  182.920299][T14649] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.6709: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  182.920507][T14649] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.6709: couldn't read orphan inode 11 (err -117)
[  182.920606][T14649] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback.
[  182.958747][T14649] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.6709: Invalid block bitmap block 0 in block_group 0
[  183.014850][T14674] loop1: detected capacity change from 0 to 256
[  183.035703][T14677] device batadv_slave_0 entered promiscuous mode
[  183.052260][T14649] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.6709: Failed to acquire dquot type 0
[  183.070545][T14674] FAT-fs (loop1): Directory bread(block 64) failed
[  183.078004][T14677] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  183.083009][T14674] FAT-fs (loop1): Directory bread(block 65) failed
[  183.100652][T14674] FAT-fs (loop1): Directory bread(block 66) failed
[  183.108305][T14674] FAT-fs (loop1): Directory bread(block 67) failed
[  183.114835][T14674] FAT-fs (loop1): Directory bread(block 68) failed
[  183.121728][  T312] EXT4-fs error (device loop2): ext4_release_dquot:6211: comm kworker/u4:3: Failed to release dquot type 0
[  183.136979][T14674] FAT-fs (loop1): Directory bread(block 69) failed
[  183.152065][T14674] FAT-fs (loop1): Directory bread(block 70) failed
[  183.158877][T14674] FAT-fs (loop1): Directory bread(block 71) failed
[  183.167694][T14674] FAT-fs (loop1): Directory bread(block 72) failed
[  183.174509][T14674] FAT-fs (loop1): Directory bread(block 73) failed
[  183.501356][T14753] loop1: detected capacity change from 0 to 256
[  183.510404][T14754] loop2: detected capacity change from 0 to 512
[  183.530757][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6749'.
[  183.540764][T14754] EXT4-fs (loop2): error: could not find journal device path: error -2
[  183.549151][T14753] exfat: Deprecated parameter 'utf8'
[  183.560560][T14762] loop4: detected capacity change from 0 to 1024
[  183.585635][T14753] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  183.600989][T14762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  183.611636][T14762] ext4 filesystem being mounted at /1320/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.718516][T14789] loop1: detected capacity change from 0 to 512
[  183.778581][T14789] EXT4-fs (loop1): Test dummy encryption mode enabled
[  183.787275][T14789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  183.809799][T14789] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.6763: inline data xattr refers to an external xattr inode
[  183.824918][T14789] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.6763: couldn't read orphan inode 15 (err -117)
[  183.837069][T14789] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,jqfmt=vfsv1,inlinecrypt,auto_da_alloc,barrier,quota,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  183.949603][   T20] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  183.978197][ T1802] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  184.006923][T14817] loop1: detected capacity change from 0 to 512
[  184.023769][T14819] loop2: detected capacity change from 0 to 256
[  184.039652][T14817] EXT4-fs error (device loop1): ext4_quota_enable:6375: comm syz.1.6775: Bad quota inum: 524292, type: 1
[  184.050925][T14817] EXT4-fs warning (device loop1): ext4_enable_quotas:6423: Failed to enable quota tracking (type=1, err=-117, ino=524292). Please run e2fsck to fix.
[  184.066772][T14817] EXT4-fs (loop1): mount failed
[  184.100928][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  184.100947][   T30] audit: type=1326 audit(2000000064.020:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14705 comm="syz.0.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48914c5d29 code=0x7fc00000
[  184.218140][ T1802] usb 5-1: Using ep0 maxpacket: 16
[  184.308212][   T20] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.329573][   T20] usb 4-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  184.359843][ T1802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.363761][   T20] usb 4-1: config 0 interface 0 has no altsetting 0
[  184.387287][   T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00
[  184.396374][ T1802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.407582][ T1802] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  184.409951][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.428248][ T1802] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  184.439870][ T1802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.442164][   T20] usb 4-1: config 0 descriptor??
[  184.459880][ T1802] usb 5-1: config 0 descriptor??
[  184.618028][T14874] loop1: detected capacity change from 0 to 512
[  184.698498][T14874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  184.718721][T14874] EXT4-fs error (device loop1): __ext4_iget:4903: inode #11: block 393240: comm syz.1.6811: invalid block
[  184.730278][T14874] EXT4-fs (loop1): Remounting filesystem read-only
[  184.736647][T14874] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.6811: couldn't read orphan inode 11 (err -117)
[  184.750828][T14874] EXT4-fs (loop1): Remounting filesystem read-only
[  184.757165][T14874] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,stripe=0x0000000000000007. Quota mode: none.
[  184.858007][T14898] loop2: detected capacity change from 0 to 512
[  184.919954][T14898] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,grpid,grpjquota=,min_batch_time=0x0000000000000010,journal_dev=0x00000000000000ff,,errors=continue. Quota mode: writeback.
[  184.941801][   T20] logitech 0003:046D:C219.0032: hidraw0: USB HID vff.fe Device [HID 046d:c219] on usb-dummy_hcd.3-1/input0
[  184.949675][ T1802] microsoft 0003:045E:07DA.0033: unbalanced collection at end of report description
[  184.963163][ T1802] microsoft 0003:045E:07DA.0033: parse failed
[  184.964245][   T20] logitech 0003:046D:C219.0032: no inputs found
[  184.971054][ T1802] microsoft: probe of 0003:045E:07DA.0033 failed with error -22
[  184.983095][T14898] ext4 filesystem being mounted at /1341/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.121135][T14925] loop2: detected capacity change from 0 to 512
[  185.154401][   T20] usb 4-1: USB disconnect, device number 19
[  185.163869][ T1802] usb 5-1: USB disconnect, device number 21
[  185.210633][T14925] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.6824: casefold flag without casefold feature
[  185.224072][T14925] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.6824: couldn't read orphan inode 15 (err -117)
[  185.235987][T14925] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.448556][T14956] tipc: Started in network mode
[  185.453276][T14956] tipc: Node identity ffffffffffffffff, cluster identity 4711
[  185.536458][T14972] netlink: 'syz.1.6846': attribute type 9 has an invalid length.
[  185.559306][T14976] loop1: detected capacity change from 0 to 256
[  185.582290][   T30] audit: type=1326 audit(2000000065.500:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14979 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  185.616514][   T30] audit: type=1326 audit(2000000065.520:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14979 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  185.625049][T14976] FAT-fs (loop1): Directory bread(block 64) failed
[  185.640295][   T30] audit: type=1326 audit(2000000065.520:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14979 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  185.646261][T14976] FAT-fs (loop1): Directory bread(block 65) failed
[  185.683618][   T30] audit: type=1326 audit(2000000065.520:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14979 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  185.687583][T14976] FAT-fs (loop1): Directory bread(block 66) failed
[  185.725728][T14976] FAT-fs (loop1): Directory bread(block 67) failed
[  185.739174][T14986] usb usb1: usbfs: process 14986 (syz.3.6854) did not claim interface 0 before use
[  185.752877][T14976] FAT-fs (loop1): Directory bread(block 68) failed
[  185.761691][T14976] FAT-fs (loop1): Directory bread(block 69) failed
[  185.763596][   T30] audit: type=1326 audit(2000000065.520:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14979 comm="syz.2.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  185.775267][T14976] FAT-fs (loop1): Directory bread(block 70) failed
[  185.816439][   T30] audit: type=1326 audit(2000000065.730:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.3.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  185.825145][T14998] loop2: detected capacity change from 0 to 256
[  185.846221][T14976] FAT-fs (loop1): Directory bread(block 71) failed
[  185.852057][   T30] audit: type=1326 audit(2000000065.730:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.3.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  185.855242][T14976] FAT-fs (loop1): Directory bread(block 72) failed
[  185.883792][   T30] audit: type=1326 audit(2000000065.760:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.3.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  185.907503][T14976] FAT-fs (loop1): Directory bread(block 73) failed
[  185.948852][   T30] audit: type=1326 audit(2000000065.760:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.3.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8301fdad29 code=0x7ffc0000
[  186.130249][T15038] loop2: detected capacity change from 0 to 256
[  186.145851][T15031] loop4: detected capacity change from 0 to 8192
[  186.159202][T15038] exfat: Deprecated parameter 'namecase'
[  186.175109][T15031] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  186.183750][T15031] FAT-fs (loop4): Filesystem has been set read-only
[  186.207757][T15038] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3fc8de3, utbl_chksum : 0xe619d30d)
[  186.259157][ T1802] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  186.314546][T15058] loop2: detected capacity change from 0 to 256
[  186.323185][T15055] loop4: detected capacity change from 0 to 8192
[  186.359250][T15055] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  186.384066][T15058] FAT-fs (loop2): Directory bread(block 64) failed
[  186.397164][T15058] FAT-fs (loop2): Directory bread(block 65) failed
[  186.403663][T15058] FAT-fs (loop2): Directory bread(block 66) failed
[  186.410072][T15058] FAT-fs (loop2): Directory bread(block 67) failed
[  186.416392][T15058] FAT-fs (loop2): Directory bread(block 68) failed
[  186.422742][T15058] FAT-fs (loop2): Directory bread(block 69) failed
[  186.442265][T15058] FAT-fs (loop2): Directory bread(block 70) failed
[  186.448690][T15058] FAT-fs (loop2): Directory bread(block 71) failed
[  186.456012][T15058] FAT-fs (loop2): Directory bread(block 72) failed
[  186.456688][T15061] syz.4.6889[15061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  186.462444][T15061] syz.4.6889[15061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  186.462832][T15058] FAT-fs (loop2): Directory bread(block 73) failed
[  186.628185][ T1802] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  186.641777][ T1802] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  186.655440][ T1802] usb 4-1: config 0 interface 0 has no altsetting 0
[  186.670448][ T1802] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  186.679556][ T1802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.688233][ T1802] usb 4-1: config 0 descriptor??
[  186.759302][T15079] loop2: detected capacity change from 0 to 40427
[  186.838771][T15079] F2FS-fs (loop2): fault_injection options not supported
[  186.847092][T15079] F2FS-fs (loop2): invalid crc value
[  186.853604][T15079] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.885606][T15079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  186.921772][  T290] attempt to access beyond end of device
[  186.921772][  T290] loop2: rw=2049, want=45104, limit=40427
[  187.142294][T15100] loop2: detected capacity change from 0 to 512
[  187.160236][ T1802] holtek_mouse 0003:04D9:A0C2.0034: hidraw0: USB HID vff.fe Device [HID 04d9:a0c2] on usb-dummy_hcd.3-1/input0
[  187.221655][T15100] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  187.253449][T15100] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,jqfmt=vfsold,minixdf,,errors=continue. Quota mode: writeback.
[  187.266690][T15100] ext4 filesystem being mounted at /1384/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.362321][   T59] usb 4-1: USB disconnect, device number 20
[  187.431188][T15139] incfs: Options parsing error. -22
[  187.436263][T15139] incfs: mount failed -22
[  187.474831][T15149] xt_bpf: check failed: parse error
[  187.557147][T15163] loop2: detected capacity change from 0 to 512
[  187.572312][T15163] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[  187.586406][T15163] ext4 filesystem being mounted at /1397/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.659874][T15178] tipc: Started in network mode
[  187.664545][T15178] tipc: Node identity , cluster identity 4711
[  187.671032][T15178] tipc: Failed to set node id, please configure manually
[  187.677966][T15178] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  188.028140][ T1802] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  190.058196][ T1802] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  190.079517][ T1802] usb 5-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  190.088786][ T1802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.097337][ T1802] usb 5-1: config 0 descriptor??
[  190.265437][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  190.265453][   T30] audit: type=1400 audit(2000000070.180:1374): avc:  denied  { remount } for  pid=15237 comm="syz.0.6971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  190.302667][   T30] audit: type=1400 audit(2000000070.210:1375): avc:  denied  { mounton } for  pid=15241 comm="syz.1.6973" path="/1303/file0" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  190.325698][   T30] audit: type=1400 audit(2000000070.220:1376): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  190.458188][   T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  190.579681][ T1802] wacom 0003:056A:00F4.0035: unknown main item tag 0x0
[  190.587341][ T1802] wacom 0003:056A:00F4.0035: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.4-1/input0
[  190.678827][   T30] audit: type=1326 audit(2000000070.600:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.0.6983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48914c5d29 code=0x0
[  190.687516][T15269] netlink: 'syz.1.6985': attribute type 30 has an invalid length.
[  190.718234][   T26] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  190.748193][   T39] usb 4-1: Using ep0 maxpacket: 32
[  190.782884][   T20] usb 5-1: USB disconnect, device number 22
[  190.801815][   T30] audit: type=1400 audit(2000000070.720:1378): avc:  denied  { relabelfrom } for  pid=15273 comm="syz.1.6987" name="" dev="pipefs" ino=65239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  190.888204][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.898966][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.908499][   T39] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  190.917428][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.926593][   T39] usb 4-1: config 0 descriptor??
[  190.988150][   T26] usb 3-1: Using ep0 maxpacket: 16
[  191.148239][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.159017][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.168550][   T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.181165][   T26] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.190188][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.198942][   T26] usb 3-1: config 0 descriptor??
[  191.399037][   T39] greenasia 0003:0E8F:0012.0036: unknown main item tag 0x0
[  191.418190][   T39] greenasia 0003:0E8F:0012.0036: unknown main item tag 0x0
[  191.425278][   T39] greenasia 0003:0E8F:0012.0036: unknown main item tag 0x0
[  191.448608][   T39] greenasia 0003:0E8F:0012.0036: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0
[  191.460138][   T39] greenasia 0003:0E8F:0012.0036: no inputs found
[  191.603362][ T8016] usb 4-1: USB disconnect, device number 21
[  191.679615][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.686676][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.708601][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.738475][T15298] syz.0.6997[15298] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.738563][T15298] syz.0.6997[15298] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.749891][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.788167][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.795313][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.814138][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.821474][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.828611][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.835567][   T26] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0
[  191.859097][   T26] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0037/input/input68
[  191.893261][   T26] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  191.927404][   T26] usb 3-1: USB disconnect, device number 21
[  192.539591][T15332] loop4: detected capacity change from 0 to 256
[  192.737960][T15344] loop4: detected capacity change from 0 to 256
[  192.823543][T15344] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  192.860054][T15358] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  193.113602][T15379] loop1: detected capacity change from 0 to 256
[  193.181346][T15379] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  193.818258][   T20] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  193.914700][T15439] usb usb9: usbfs: process 15439 (syz.0.7064) did not claim interface 0 before use
[  193.938596][T15443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7065'.
[  193.978134][  T298] tipc: Node number set to 4294967295
[  194.063932][   T30] audit: type=1326 audit(2000000073.980:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.2.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  194.107623][   T30] audit: type=1326 audit(2000000073.980:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.2.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  194.145627][   T30] audit: type=1326 audit(2000000073.980:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15453 comm="syz.2.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d962d29 code=0x7ffc0000
[  194.178299][   T20] usb 5-1: config 0 interface 0 has no altsetting 0
[  194.186294][   T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  194.214469][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.238783][   T20] usb 5-1: config 0 descriptor??
[  194.283725][T15478] loop2: detected capacity change from 0 to 2048
[  194.339685][T15478] EXT4-fs (loop2): error: journal path . is not a block device
[  194.495424][T15494] loop2: detected capacity change from 0 to 256
[  194.541689][T15494] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  194.729090][   T20] logitech 0003:046D:C50C.0038: unknown main item tag 0x0
[  194.736165][   T20] logitech 0003:046D:C50C.0038: unknown main item tag 0x0
[  194.745088][   T20] logitech 0003:046D:C50C.0038: unknown main item tag 0x0
[  194.752213][   T20] logitech 0003:046D:C50C.0038: unknown main item tag 0x0
[  194.759335][   T20] logitech 0003:046D:C50C.0038: unknown main item tag 0x0
[  194.759369][   T20] logitech 0003:046D:C50C.0038: unbalanced collection at end of report description
[  194.759586][   T20] logitech 0003:046D:C50C.0038: parse failed
[  194.759632][   T20] logitech: probe of 0003:046D:C50C.0038 failed with error -22
[  194.932707][   T20] usb 5-1: USB disconnect, device number 23
[  194.978205][ T8016] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  195.062739][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7114'.
[  195.184551][T15563] loop1: detected capacity change from 0 to 256
[  195.218210][ T8016] usb 4-1: Using ep0 maxpacket: 8
[  195.378185][ T8016] usb 4-1: unable to get BOS descriptor or descriptor too short
[  195.468209][ T8016] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.482117][ T8016] usb 4-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  195.498046][ T8016] usb 4-1: config 1 interface 0 has no altsetting 0
[  195.528963][T15577] loop2: detected capacity change from 0 to 128
[  195.562952][   T30] audit: type=1326 audit(2000000075.480:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  195.595508][   T30] audit: type=1326 audit(2000000075.480:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  195.622407][   T30] audit: type=1326 audit(2000000075.480:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd239dbd29 code=0x7ffc0000
[  195.684450][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7140'.
[  195.695388][T15577] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  195.706167][ T8016] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.718217][T15577] ext4 filesystem being mounted at /1450/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.723701][ T8016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.768046][ T8016] usb 4-1: Product: syz
[  195.768071][ T8016] usb 4-1: Manufacturer: syz
[  195.768334][ T8016] usb 4-1: SerialNumber: syz
[  195.937881][T15621] loop1: detected capacity change from 0 to 1024
[  196.078180][  T298] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  196.183823][T15631] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7165'.
[  196.184485][T15632] xt_hashlimit: size too large, truncated to 1048576
[  196.192967][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7165'.
[  196.208688][ T8016] usb 4-1: bad CDC descriptors
[  196.214543][ T8016] usb 4-1: USB disconnect, device number 22
[  196.328133][  T298] usb 3-1: Using ep0 maxpacket: 16
[  196.448245][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.448283][  T298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  196.448320][  T298] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  196.448347][  T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.449141][  T298] usb 3-1: config 0 descriptor??
[  196.719655][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7176'.
[  196.968981][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0x6
[  196.975721][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0x1
[  196.982403][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0xe
[  196.989059][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0x0
[  196.995709][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0x0
[  197.002442][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0x5
[  197.009113][  T298] ortek 0003:1223:3F07.0039: unknown main item tag 0xd
[  197.015805][  T298] ortek 0003:1223:3F07.0039: item fetching failed at offset 61/69
[  197.023647][  T298] ortek: probe of 0003:1223:3F07.0039 failed with error -22
[  197.175357][  T298] usb 3-1: USB disconnect, device number 22
[  197.445448][T15678] loop4: detected capacity change from 0 to 256
[  197.462471][T15678] FAT-fs (loop4): Directory bread(block 64) failed
[  197.478404][T15678] FAT-fs (loop4): Directory bread(block 65) failed
[  197.486079][T15678] FAT-fs (loop4): Directory bread(block 66) failed
[  197.493879][T15678] FAT-fs (loop4): Directory bread(block 67) failed
[  197.500376][T15678] FAT-fs (loop4): Directory bread(block 68) failed
[  197.507594][T15678] FAT-fs (loop4): Directory bread(block 69) failed
[  197.507650][T15678] FAT-fs (loop4): Directory bread(block 70) failed
[  197.520400][T15678] FAT-fs (loop4): Directory bread(block 71) failed
[  197.526787][T15678] FAT-fs (loop4): Directory bread(block 72) failed
[  197.526815][T15678] FAT-fs (loop4): Directory bread(block 73) failed
[  197.605332][   T30] audit: type=1326 audit(2000000077.520:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  197.630014][   T30] audit: type=1326 audit(2000000077.520:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  197.655262][   T30] audit: type=1326 audit(2000000077.550:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  197.703150][   T30] audit: type=1326 audit(2000000077.610:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  197.738044][   T30] audit: type=1326 audit(2000000077.610:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  197.790396][   T30] audit: type=1326 audit(2000000077.610:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f443cf735e5 code=0x7ffc0000
[  197.817345][   T30] audit: type=1326 audit(2000000077.650:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f443cf40d29 code=0x7ffc0000
[  197.905959][T15706] usb usb7: usbfs: process 15706 (syz.0.7189) did not claim interface 0 before use
[  198.059846][  T298] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  198.418208][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.440967][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.458231][  T298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.481090][  T298] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  198.498136][  T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.518740][  T298] usb 3-1: config 0 descriptor??
[  198.655463][T15787] binder: 15785:15787 ioctl c0306201 20000680 returned -14
[  198.655710][T15786] loop4: detected capacity change from 0 to 512
[  198.708468][T15786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  198.727176][T15786] ext4 filesystem being mounted at /1410/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.009116][  T298] dragonrise 0003:0079:0011.003A: unknown main item tag 0x0
[  199.026408][  T298] dragonrise 0003:0079:0011.003A: unknown main item tag 0x0
[  199.033905][  T298] dragonrise 0003:0079:0011.003A: unknown main item tag 0x0
[  199.051252][  T298] dragonrise 0003:0079:0011.003A: unknown main item tag 0x0
[  199.068239][  T298] dragonrise 0003:0079:0011.003A: unknown main item tag 0x0
[  199.088456][  T298] dragonrise 0003:0079:0011.003A: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0
[  199.153941][T15793] loop4: detected capacity change from 0 to 40427
[  199.209764][  T298] usb 3-1: USB disconnect, device number 23
[  199.220399][T15793] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  199.238194][T15793] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  199.259195][T15793] F2FS-fs (loop4): invalid crc value
[  199.288791][T15793] F2FS-fs (loop4): Found nat_bits in checkpoint
[  199.394417][T15793] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  199.408266][T15793] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  199.501647][  T292] ------------[ cut here ]------------
[  199.506949][  T292] WARNING: CPU: 1 PID: 292 at fs/f2fs/inode.c:882 f2fs_evict_inode+0x1246/0x1520
[  199.528129][  T292] Modules linked in:
[  199.531860][  T292] CPU: 0 PID: 292 Comm: syz-executor Tainted: G        W         5.15.175-syzkaller-00803-g19092c8155b4 #0
[  199.553487][  T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  199.573641][  T292] RIP: 0010:f2fs_evict_inode+0x1246/0x1520
[  199.587870][  T292] Code: ff ff e8 9d e0 52 ff eb 08 e8 96 e0 52 ff 4d 89 e5 48 8b 7c 24 10 e8 39 26 03 00 4c 8b 64 24 58 e9 b4 fc ff ff e8 7a e0 52 ff <0f> 0b 4c 89 f7 be 08 00 00 00 e8 db 3b 95 ff f0 41 80 0e 04 e9 96
[  199.609453][T15820] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7243'.
[  199.627975][  T292] RSP: 0018:ffffc900009c78a0 EFLAGS: 00010293
[  199.628601][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7243'.
[  199.642922][  T292] RAX: ffffffff821d8be6 RBX: 0000000000000002 RCX: ffff88810aeb93c0
[  199.658146][  T292] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  199.676162][  T292] RBP: ffffc900009c7a10 R08: ffffffff821d8881 R09: ffffed1027008c83
[  199.688233][  T292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888138046140
[  199.716244][  T292] R13: dffffc0000000000 R14: ffff88810dcb8078 R15: 1ffff92000138f28
[  199.738332][  T292] FS:  00005555847ba500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  199.751339][T15830] loop2: detected capacity change from 0 to 512
[  199.757384][  T292] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.757410][  T292] CR2: 00007ffd086934a8 CR3: 0000000125bd8000 CR4: 00000000003506b0
[  199.757430][  T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  199.757444][  T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  199.828925][  T292] Call Trace:
[  199.838460][  T292]  <TASK>
[  199.841558][  T292]  ? show_regs+0x58/0x60
[  199.847582][  T292]  ? __warn+0x160/0x2f0
[  199.858977][  T292]  ? f2fs_evict_inode+0x1246/0x1520
[  199.861401][T15830] EXT4-fs (loop2): Ignoring removed bh option
[  199.865961][  T292]  ? report_bug+0x3d9/0x5b0
[  199.874488][T15830] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  199.895306][  T292]  ? f2fs_evict_inode+0x1246/0x1520
[  199.900207][T15830] EXT4-fs error (device loop2): __ext4_iget:4903: inode #15: block 1803188595: comm syz.2.7248: invalid block
[  199.905481][  T292]  ? handle_bug+0x41/0x70
[  199.916191][  T292]  ? exc_invalid_op+0x1b/0x50
[  199.920840][  T292]  ? asm_exc_invalid_op+0x1b/0x20
[  199.926036][  T292]  ? f2fs_evict_inode+0xee1/0x1520
[  199.931411][  T292]  ? f2fs_evict_inode+0x1246/0x1520
[  199.936666][  T292]  ? f2fs_evict_inode+0x1246/0x1520
[  199.941699][  T292]  ? _raw_spin_unlock+0x4d/0x70
[  199.946451][  T292]  ? f2fs_write_inode+0x640/0x640
[  199.947157][T15830] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.7248: couldn't read orphan inode 15 (err -117)
[  199.952007][  T292]  ? bit_waitqueue+0x30/0x30
[  199.967479][  T292]  ? locks_free_lock_context+0x42/0x70
[  199.973206][  T292]  ? __destroy_inode+0x35f/0x4e0
[  199.979492][  T292]  ? f2fs_write_inode+0x640/0x640
[  199.984357][  T292]  evict+0x529/0x930
[  199.988333][T15830] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  200.016758][  T292]  ? mode_strip_sgid+0x220/0x220
[  200.021637][  T292]  ? __kasan_check_write+0x14/0x20
[  200.055525][  T292]  ? _raw_spin_lock+0xa4/0x1b0
[  200.066137][  T292]  ? _raw_spin_unlock+0x4d/0x70
[  200.070876][  T292]  ? list_lru_del+0x295/0x2d0
[  200.075352][  T292]  evict_inodes+0x642/0x6d0
[  200.083087][  T292]  ? clear_inode+0x150/0x150
[  200.090698][  T292]  generic_shutdown_super+0x97/0x330
[  200.095831][  T292]  kill_block_super+0x7e/0xe0
[  200.109394][  T292]  kill_f2fs_super+0x2f9/0x3c0
[  200.114145][  T292]  ? f2fs_mount+0x40/0x40
[  200.118318][  T292]  ? unregister_shrinker+0x23c/0x2d0
[  200.150777][  T292]  deactivate_locked_super+0xad/0x110
[  200.159934][  T292]  deactivate_super+0xbe/0xf0
[  200.164839][  T292]  cleanup_mnt+0x45c/0x510
[  200.169135][  T292]  __cleanup_mnt+0x19/0x20
[  200.182573][  T292]  task_work_run+0x129/0x190
[  200.190049][  T292]  exit_to_user_mode_loop+0xc4/0xe0
[  200.195206][  T292]  exit_to_user_mode_prepare+0x5a/0xa0
[  200.207827][  T292]  syscall_exit_to_user_mode+0x26/0x160
[  200.220755][  T292]  do_syscall_64+0x47/0xb0
[  200.225005][  T292]  ? clear_bhb_loop+0x35/0x90
[  200.229926][  T292]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.236019][  T292] RIP: 0033:0x7f443cf42057
[  200.252341][  T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  200.274074][  T292] RSP: 002b:00007fff7be15ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  200.282387][  T292] RAX: 0000000000000000 RBX: 00007f443cfbc8f4 RCX: 00007f443cf42057
[  200.290584][  T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7be15f90
[  200.304159][  T292] RBP: 00007fff7be15f90 R08: 0000000000000000 R09: 0000000000000000
[  200.312882][  T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7be17010
[  200.322452][  T292] R13: 00007f443cfbc8f4 R14: 00007fff7be17050 R15: 0000000000000584
[  200.332300][  T292]  </TASK>
[  200.335147][  T292] ---[ end trace a2dee96a6f77c072 ]---
[  200.391294][  T292] ==================================================================
[  200.399192][  T292] BUG: KASAN: use-after-free in _raw_spin_lock+0x97/0x1b0
[  200.406134][  T292] Write of size 4 at addr ffff888138046188 by task syz-executor/292
[  200.414022][  T292] 
[  200.416221][  T292] CPU: 0 PID: 292 Comm: syz-executor Tainted: G        W         5.15.175-syzkaller-00803-g19092c8155b4 #0
[  200.427388][  T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  200.437282][  T292] Call Trace:
[  200.440409][  T292]  <TASK>
[  200.443193][  T292]  dump_stack_lvl+0x151/0x1c0
[  200.447696][  T292]  ? io_uring_drop_tctx_refs+0x190/0x190
[  200.453166][  T292]  ? __wake_up_klogd+0xd5/0x110
[  200.457851][  T292]  ? panic+0x760/0x760
[  200.461782][  T292]  ? __schedule+0xcd4/0x1590
[  200.466201][  T292]  print_address_description+0x87/0x3b0
[  200.471568][  T292]  kasan_report+0x179/0x1c0
[  200.475906][  T292]  ? _raw_spin_lock+0x97/0x1b0
[  200.480508][  T292]  ? _raw_spin_lock+0x97/0x1b0
[  200.485106][  T292]  kasan_check_range+0x293/0x2a0
[  200.489968][  T292]  __kasan_check_write+0x14/0x20
[  200.494743][  T292]  _raw_spin_lock+0x97/0x1b0
[  200.499181][  T292]  ? _raw_spin_trylock_bh+0x190/0x190
[  200.504378][  T292]  igrab+0x20/0xa0
[  200.507946][  T292]  f2fs_sync_inode_meta+0x14d/0x2a0
[  200.512966][  T292]  f2fs_write_checkpoint+0xab4/0x1fb0
[  200.518203][  T292]  ? f2fs_get_sectors_written+0x500/0x500
[  200.523732][  T292]  ? rwsem_write_trylock+0x153/0x340
[  200.528849][  T292]  ? __kasan_check_write+0x14/0x20
[  200.533797][  T292]  ? mutex_unlock+0xb2/0x260
[  200.538224][  T292]  f2fs_issue_checkpoint+0x31b/0x4d0
[  200.543344][  T292]  ? f2fs_destroy_checkpoint_caches+0x30/0x30
[  200.549245][  T292]  ? sync_inodes_sb+0x7cd/0x8b0
[  200.553946][  T292]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[  200.559489][  T292]  f2fs_sync_fs+0x186/0x2f0
[  200.563829][  T292]  sync_filesystem+0x1cf/0x250
[  200.568432][  T292]  f2fs_quota_off_umount+0x20e/0x220
[  200.573579][  T292]  f2fs_put_super+0xbc/0xb80
[  200.577976][  T292]  ? fsnotify_sb_delete+0x480/0x4e0
[  200.583008][  T292]  ? f2fs_drop_inode+0xa20/0xa20
[  200.587783][  T292]  ? __fsnotify_vfsmount_delete+0x20/0x20
[  200.593340][  T292]  ? clear_inode+0x150/0x150
[  200.597768][  T292]  ? fscrypt_destroy_keyring+0x287/0x2a0
[  200.603236][  T292]  ? f2fs_drop_inode+0xa20/0xa20
[  200.608006][  T292]  generic_shutdown_super+0x14f/0x330
[  200.613216][  T292]  kill_block_super+0x7e/0xe0
[  200.617728][  T292]  kill_f2fs_super+0x2f9/0x3c0
[  200.622331][  T292]  ? f2fs_mount+0x40/0x40
[  200.626495][  T292]  ? unregister_shrinker+0x23c/0x2d0
[  200.631616][  T292]  deactivate_locked_super+0xad/0x110
[  200.636820][  T292]  deactivate_super+0xbe/0xf0
[  200.641340][  T292]  cleanup_mnt+0x45c/0x510
[  200.645590][  T292]  __cleanup_mnt+0x19/0x20
[  200.650025][  T292]  task_work_run+0x129/0x190
[  200.654450][  T292]  exit_to_user_mode_loop+0xc4/0xe0
[  200.659486][  T292]  exit_to_user_mode_prepare+0x5a/0xa0
[  200.664781][  T292]  syscall_exit_to_user_mode+0x26/0x160
[  200.670165][  T292]  do_syscall_64+0x47/0xb0
[  200.674413][  T292]  ? clear_bhb_loop+0x35/0x90
[  200.678925][  T292]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.684656][  T292] RIP: 0033:0x7f443cf42057
[  200.688909][  T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  200.708353][  T292] RSP: 002b:00007fff7be15ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  200.716600][  T292] RAX: 0000000000000000 RBX: 00007f443cfbc8f4 RCX: 00007f443cf42057
[  200.724427][  T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7be15f90
[  200.732220][  T292] RBP: 00007fff7be15f90 R08: 0000000000000000 R09: 0000000000000000
[  200.740031][  T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7be17010
[  200.747844][  T292] R13: 00007f443cfbc8f4 R14: 00007fff7be17050 R15: 0000000000000584
[  200.755830][  T292]  </TASK>
[  200.758778][  T292] 
[  200.760945][  T292] Allocated by task 15793:
[  200.765201][  T292]  __kasan_slab_alloc+0xb1/0xe0
[  200.769886][  T292]  slab_post_alloc_hook+0x53/0x2c0
[  200.774845][  T292]  kmem_cache_alloc+0xf5/0x250
[  200.779435][  T292]  f2fs_alloc_inode+0x26/0x340
[  200.784032][  T292]  new_inode_pseudo+0x64/0x220
[  200.788634][  T292]  new_inode+0x28/0x1c0
[  200.792623][  T292]  f2fs_new_inode+0x10e/0x1410
[  200.797225][  T292]  f2fs_create+0x17b/0x15e0
[  200.801578][  T292]  path_openat+0x13a8/0x2f40
[  200.805994][  T292]  do_filp_open+0x21c/0x460
[  200.810333][  T292]  do_sys_openat2+0x13f/0x820
[  200.814853][  T292]  __x64_sys_openat+0x243/0x290
[  200.819535][  T292]  x64_sys_call+0x6bf/0x9a0
[  200.823874][  T292]  do_syscall_64+0x3b/0xb0
[  200.828192][  T292]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.833870][  T292] 
[  200.836040][  T292] Freed by task 293:
[  200.839755][  T292]  kasan_set_track+0x4b/0x70
[  200.844185][  T292]  kasan_set_free_info+0x23/0x40
[  200.848960][  T292]  ____kasan_slab_free+0x126/0x160
[  200.853901][  T292]  __kasan_slab_free+0x11/0x20
[  200.858503][  T292]  slab_free_freelist_hook+0xbd/0x190
[  200.863714][  T292]  kmem_cache_free+0x115/0x330
[  200.868314][  T292]  f2fs_free_inode+0x24/0x30
[  200.872739][  T292]  i_callback+0x4b/0x70
[  200.876727][  T292]  rcu_do_batch+0x57a/0xc10
[  200.881069][  T292]  rcu_core+0x517/0x1020
[  200.885150][  T292]  rcu_core_si+0x9/0x10
[  200.889140][  T292]  handle_softirqs+0x25e/0x5c0
[  200.893766][  T292]  __irq_exit_rcu+0x52/0xf0
[  200.898081][  T292]  irq_exit_rcu+0x9/0x10
[  200.902165][  T292]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  200.907805][  T292]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  200.913617][  T292] 
[  200.915788][  T292] Last potentially related work creation:
[  200.921343][  T292]  kasan_save_stack+0x3b/0x60
[  200.925856][  T292]  __kasan_record_aux_stack+0xd3/0xf0
[  200.931062][  T292]  kasan_record_aux_stack_noalloc+0xb/0x10
[  200.936705][  T292]  call_rcu+0x123/0x10b0
[  200.940798][  T292]  evict+0x87d/0x930
[  200.944517][  T292]  evict_inodes+0x642/0x6d0
[  200.948856][  T292]  generic_shutdown_super+0x97/0x330
[  200.953976][  T292]  kill_block_super+0x7e/0xe0
[  200.958487][  T292]  kill_f2fs_super+0x2f9/0x3c0
[  200.963087][  T292]  deactivate_locked_super+0xad/0x110
[  200.968303][  T292]  deactivate_super+0xbe/0xf0
[  200.972812][  T292]  cleanup_mnt+0x45c/0x510
[  200.977063][  T292]  __cleanup_mnt+0x19/0x20
[  200.981324][  T292]  task_work_run+0x129/0x190
[  200.985739][  T292]  exit_to_user_mode_loop+0xc4/0xe0
[  200.990775][  T292]  exit_to_user_mode_prepare+0x5a/0xa0
[  200.996070][  T292]  syscall_exit_to_user_mode+0x26/0x160
[  201.001453][  T292]  do_syscall_64+0x47/0xb0
[  201.005703][  T292]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  201.011441][  T292] 
[  201.013609][  T292] Second to last potentially related work creation:
[  201.020029][  T292]  kasan_save_stack+0x3b/0x60
[  201.024538][  T292]  __kasan_record_aux_stack+0xd3/0xf0
[  201.029745][  T292]  kasan_record_aux_stack_noalloc+0xb/0x10
[  201.035387][  T292]  call_rcu+0x123/0x10b0
[  201.039469][  T292]  evict+0x87d/0x930
[  201.043199][  T292]  evict_inodes+0x642/0x6d0
[  201.047540][  T292]  generic_shutdown_super+0x97/0x330
[  201.052663][  T292]  kill_block_super+0x7e/0xe0
[  201.057173][  T292]  kill_f2fs_super+0x2f9/0x3c0
[  201.061776][  T292]  deactivate_locked_super+0xad/0x110
[  201.066980][  T292]  deactivate_super+0xbe/0xf0
[  201.071505][  T292]  cleanup_mnt+0x45c/0x510
[  201.075746][  T292]  __cleanup_mnt+0x19/0x20
[  201.080009][  T292]  task_work_run+0x129/0x190
[  201.084433][  T292]  exit_to_user_mode_loop+0xc4/0xe0
[  201.089555][  T292]  exit_to_user_mode_prepare+0x5a/0xa0
[  201.094844][  T292]  syscall_exit_to_user_mode+0x26/0x160
[  201.100312][  T292]  do_syscall_64+0x47/0xb0
[  201.104583][  T292]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  201.110292][  T292] 
[  201.112466][  T292] The buggy address belongs to the object at ffff888138046100
[  201.112466][  T292]  which belongs to the cache f2fs_inode_cache of size 1424
[  201.126868][  T292] The buggy address is located 136 bytes inside of
[  201.126868][  T292]  1424-byte region [ffff888138046100, ffff888138046690)
[  201.140065][  T292] The buggy address belongs to the page:
[  201.145539][  T292] page:ffffea0004e01000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888138041230 pfn:0x138040
[  201.156901][  T292] head:ffffea0004e01000 order:3 compound_mapcount:0 compound_pincount:0
[  201.165057][  T292] flags: 0x4000000000010200(slab|head|zone=1)
[  201.170970][  T292] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888107fb2f00
[  201.179387][  T292] raw: ffff888138041230 0000000080150014 00000001ffffffff 0000000000000000
[  201.187805][  T292] page dumped because: kasan: bad access detected
[  201.194064][  T292] page_owner tracks the page as allocated
[  201.199603][  T292] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 14157, ts 170272557315, free_ts 169093384567
[  201.221132][  T292]  post_alloc_hook+0x1a3/0x1b0
[  201.225729][  T292]  prep_new_page+0x1b/0x110
[  201.230071][  T292]  get_page_from_freelist+0x3550/0x35d0
[  201.235448][  T292]  __alloc_pages+0x27e/0x8f0
[  201.239963][  T292]  new_slab+0x9a/0x4e0
[  201.243886][  T292]  ___slab_alloc+0x39e/0x830
[  201.248293][  T292]  __slab_alloc+0x4a/0x90
[  201.252547][  T292]  kmem_cache_alloc+0x139/0x250
[  201.257232][  T292]  f2fs_alloc_inode+0x26/0x340
[  201.261835][  T292]  iget_locked+0x174/0x860
[  201.266089][  T292]  f2fs_iget+0x55/0x4fe0
[  201.270166][  T292]  f2fs_fill_super+0x6783/0x8190
[  201.274940][  T292]  mount_bdev+0x282/0x3b0
[  201.279106][  T292]  f2fs_mount+0x34/0x40
[  201.283097][  T292]  legacy_get_tree+0xf1/0x190
[  201.287616][  T292]  vfs_get_tree+0x88/0x290
[  201.291865][  T292] page last free stack trace:
[  201.296380][  T292]  free_unref_page_prepare+0x7c8/0x7d0
[  201.301671][  T292]  free_unref_page+0xe8/0x750
[  201.306273][  T292]  __free_pages+0x61/0xf0
[  201.310446][  T292]  __free_slab+0xec/0x1d0
[  201.314603][  T292]  discard_slab+0x29/0x40
[  201.318769][  T292]  __slab_free+0x205/0x290
[  201.323023][  T292]  ___cache_free+0x109/0x120
[  201.327452][  T292]  qlink_free+0x4d/0x90
[  201.331442][  T292]  qlist_free_all+0x44/0xb0
[  201.335785][  T292]  kasan_quarantine_reduce+0x15a/0x180
[  201.341077][  T292]  __kasan_slab_alloc+0x2f/0xe0
[  201.345920][  T292]  slab_post_alloc_hook+0x53/0x2c0
[  201.350865][  T292]  kmem_cache_alloc+0xf5/0x250
[  201.355490][  T292]  __d_alloc+0x2d/0x6c0
[  201.359460][  T292]  d_alloc+0x4b/0x1d0
[  201.363278][  T292]  lookup_one_qstr_excl+0xe7/0x290
[  201.368229][  T292] 
[  201.370395][  T292] Memory state around the buggy address:
[  201.375864][  T292]  ffff888138046080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  201.383766][  T292]  ffff888138046100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.391664][  T292] >ffff888138046180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.399560][  T292]                       ^
[  201.403724][  T292]  ffff888138046200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.411624][  T292]  ffff888138046280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.419520][  T292] ==================================================================
[  201.427420][  T292] Disabling lock debugging due to kernel taint
[  201.507484][ T8016] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  201.897714][ T8016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.908635][ T8016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.918294][ T8016] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  201.927670][ T8016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.939662][ T8016] usb 3-1: config 0 descriptor??
[  202.464675][ T8016] kye 0003:0458:5013.003B: unknown main item tag 0x0
[  202.471261][ T8016] kye 0003:0458:5013.003B: unknown main item tag 0x0
[  202.478191][ T8016] kye 0003:0458:5013.003B: unknown main item tag 0x0
[  202.484901][ T8016] kye 0003:0458:5013.003B: unknown main item tag 0x0
[  202.491500][ T8016] kye 0003:0458:5013.003B: unknown main item tag 0x0
[  202.501942][ T8016] kye 0003:0458:5013.003B: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0
[  202.512955][ T8016] kye 0003:0458:5013.003B: tablet-enabling feature report not found
[  202.521069][ T8016] kye 0003:0458:5013.003B: tablet enabling failed
[  202.680973][   T59] usb 3-1: USB disconnect, device number 24