last executing test programs: 2m39.821737297s ago: executing program 32 (id=197): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa1888000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 2m33.808278002s ago: executing program 3 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000010095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getpriority(0x0, 0x0) 2m32.195999358s ago: executing program 3 (id=359): unshare(0x24060400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) 2m31.766146504s ago: executing program 3 (id=363): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0, 0x12}, 0x20) 2m31.647753346s ago: executing program 3 (id=367): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000a00)={[{@fat=@fmask={'fmask', 0x3d, 0x10001}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}, {@fat=@check_strict}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@uni_xlate}]}, 0x80, 0x350, &(0x7f0000000580)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2m31.207735683s ago: executing program 3 (id=394): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendfile(r1, r0, 0x0, 0x1000) 2m31.027673326s ago: executing program 3 (id=403): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x2100000c, 0x0) 2m30.992896326s ago: executing program 33 (id=403): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x2100000c, 0x0) 1m50.625103504s ago: executing program 2 (id=1857): r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x804, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) 1m50.523343785s ago: executing program 2 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x27) 1m50.426652127s ago: executing program 2 (id=1864): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000040)={0x27, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) 1m50.419807537s ago: executing program 2 (id=1866): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m50.073189492s ago: executing program 2 (id=1873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7fffffff}}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x34}}, 0x0) 1m49.788515897s ago: executing program 2 (id=1881): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13092abd7000ffdbdf25210000000c000100000200000000000f09001f"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) 1m49.710856978s ago: executing program 34 (id=1881): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13092abd7000ffdbdf25210000000c000100000200000000000f09001f"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) 1m32.125689416s ago: executing program 4 (id=2380): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010820000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r0], 0x0) 1m30.768232357s ago: executing program 4 (id=2415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1000}]}}]}, 0x48}}, 0x0) 1m30.654747509s ago: executing program 4 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 1m30.60682672s ago: executing program 4 (id=2418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80)={[{@nomblk_io_submit}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x447, &(0x7f00000008c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540), 0x10000, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1m30.474197262s ago: executing program 4 (id=2421): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1m29.9917263s ago: executing program 4 (id=2437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 1m29.98462946s ago: executing program 35 (id=2437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 6.735805363s ago: executing program 1 (id=5248): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r2, r1, 0x0) 6.607673145s ago: executing program 1 (id=5249): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) 6.607468205s ago: executing program 1 (id=5250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300)="6df8af17", &(0x7f0000000200)=""/54}, 0x20) 6.597532265s ago: executing program 1 (id=5251): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xba, 0x8000000000000001, 0x6, 0x7, 0xb, 0xd}) 6.485072137s ago: executing program 1 (id=5255): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.2676454s ago: executing program 1 (id=5259): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) 6.181502832s ago: executing program 36 (id=5259): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) 4.545082568s ago: executing program 8 (id=5309): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0xd, 0x5, 0x10) r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r0, 0x2000000, 0x2, 0xf, 0x0, 0x0) 4.544888038s ago: executing program 8 (id=5310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff010d, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x5002, 0xeeef0000, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x10, 0x0, 0x0, 0x0, 0x84}, {0x100000, 0x80a0000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0xd000, 0x0, 0x0, 0x82, 0xb1, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) 4.155352574s ago: executing program 8 (id=5315): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x140, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x6}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x6}}, 0x24, 0x1) 3.578084973s ago: executing program 8 (id=5329): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xba, 0x8000000000000001, 0x6, 0x7, 0xb, 0xd}) 3.10910598s ago: executing program 8 (id=5345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.006156642s ago: executing program 8 (id=5347): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x11, 0x10, 0x0, &(0x7f00000000c0)) 2.940621243s ago: executing program 37 (id=5347): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x11, 0x10, 0x0, &(0x7f00000000c0)) 1.128689511s ago: executing program 0 (id=5423): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4103, 0x1007}], 0x1, 0x200, 0xfffffff9) 1.122182372s ago: executing program 0 (id=5425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.102061362s ago: executing program 0 (id=5427): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x73) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x7, 0x5, "00120df500001e200000f3c90a0080000500"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 1.074076253s ago: executing program 0 (id=5429): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0xf500}}, 0x30) 1.038602533s ago: executing program 5 (id=5432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@bridge_delneigh={0x24, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x10, 0x3, 0x5}, [@NDA_DST_IPV4={0x8, 0x1, @local}]}, 0x24}}, 0x0) 1.001726163s ago: executing program 5 (id=5436): r0 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 981.980964ms ago: executing program 5 (id=5439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1050c1, 0x1d6) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 936.326765ms ago: executing program 5 (id=5441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @link_local}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 911.927845ms ago: executing program 5 (id=5444): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000580), 0x4) 590.28268ms ago: executing program 9 (id=5461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000011c0), 0x0}, 0x20) 590.07168ms ago: executing program 9 (id=5462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, 0x0) 589.89648ms ago: executing program 9 (id=5463): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, 0x0, 0x0) 459.429992ms ago: executing program 6 (id=5471): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbbd, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 263.738305ms ago: executing program 7 (id=5474): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r0], 0x48}}, 0x0) 240.625605ms ago: executing program 7 (id=5475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 220.265506ms ago: executing program 0 (id=5476): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 167.822487ms ago: executing program 7 (id=5477): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xc9) 167.547687ms ago: executing program 0 (id=5478): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) exit(0x0) 167.398067ms ago: executing program 7 (id=5487): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x288}]}) 151.601397ms ago: executing program 9 (id=5479): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='hrtimer_start\x00', r0}, 0x18) alarm(0x9) 146.835107ms ago: executing program 6 (id=5480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x1000000000000010, 0x3, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843209100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8302d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 115.563907ms ago: executing program 9 (id=5481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0xe3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, 0x0) 92.901448ms ago: executing program 7 (id=5482): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) 40.664469ms ago: executing program 9 (id=5483): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) 40.456939ms ago: executing program 6 (id=5484): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) 40.287519ms ago: executing program 6 (id=5485): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)={0x1, 0x0, [{0x0, 0xfffffffffffffd84, &(0x7f0000000580)=""/115}, {0xeeef0000, 0x0, &(0x7f0000000600)=""/252}, {0x2000, 0x0, &(0x7f0000000700)=""/236}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 40.071769ms ago: executing program 5 (id=5486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$char_usb(r1, &(0x7f0000001300)="bba7", 0x2) 39.986629ms ago: executing program 7 (id=5488): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x3) 36.862309ms ago: executing program 6 (id=5489): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 0s ago: executing program 6 (id=5490): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000280)={0x0, 0x1, 0x8}) kernel console output (not intermixed with test programs): bad extended attribute block 1 [ 128.641323][ T2333] udevd[2333]: symlink '../../loop1' '/dev/disk/by-diskseq/838.tmp-b7:1' failed: Read-only file system [ 128.653028][ T346] udevd[346]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 128.670489][ T8390] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3556: couldn't read orphan inode 15 (err -117) [ 128.674848][ T8392] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3557: iget: bad extended attribute block 1 [ 128.699138][ T8392] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3557: couldn't read orphan inode 15 (err -117) [ 128.716797][ T8390] EXT4-fs mount: 30 callbacks suppressed [ 128.716812][ T8390] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 128.731244][ T8392] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 128.771616][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3561'. [ 128.786032][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 128.795406][ T8390] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 128.807551][ T8395] loop6: detected capacity change from 0 to 40427 [ 128.821962][ T8395] F2FS-fs (loop6): fault_type options not supported [ 128.838013][ T8395] F2FS-fs (loop6): invalid crc value [ 128.846303][ T8395] F2FS-fs (loop6): Found nat_bits in checkpoint [ 128.853637][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 128.856920][ T8406] loop5: detected capacity change from 0 to 512 [ 128.972657][ T8427] loop7: detected capacity change from 0 to 1024 [ 128.994994][ T8427] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 129.004156][ T8395] F2FS-fs (loop6): Start checkpoint disabled! [ 129.018302][ T8406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 129.037772][ T8395] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 129.037832][ T8406] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.075858][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 129.136778][ T8406] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.3559: invalid size [ 129.217778][ T8436] loop8: detected capacity change from 0 to 40427 [ 129.223923][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 129.274725][ T625] kworker/u4:5: attempt to access beyond end of device [ 129.274725][ T625] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 129.290169][ T8436] F2FS-fs (loop8): Found nat_bits in checkpoint [ 129.313215][ T8459] loop7: detected capacity change from 0 to 256 [ 129.355562][ T8459] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 129.431433][ T8436] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 129.530419][ T5919] syz-executor: attempt to access beyond end of device [ 129.530419][ T5919] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.592857][ T8497] syz.1.3602[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.592924][ T8497] syz.1.3602[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.596264][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 129.596278][ T28] audit: type=1326 audit(2000262473.949:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 129.772231][ T28] audit: type=1326 audit(2000262473.999:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 129.870630][ T8534] loop7: detected capacity change from 0 to 512 [ 129.894117][ T28] audit: type=1326 audit(2000262474.009:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc13f7c11e5 code=0x7ffc0000 [ 129.938043][ T8534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.940957][ T28] audit: type=1326 audit(2000262473.999:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 129.991594][ T8534] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 129.999683][ T8534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 130.008189][ T8534] System zones: 0-1, 15-15, 18-18, 34-34 [ 130.013031][ T28] audit: type=1326 audit(2000262474.019:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 130.030637][ T8534] EXT4-fs (loop7): orphan cleanup on readonly fs [ 130.037670][ T28] audit: type=1326 audit(2000262474.039:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 130.051318][ T8534] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 130.072120][ T28] audit: type=1326 audit(2000262474.039:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 130.093395][ T8534] EXT4-fs warning (device loop7): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 130.114543][ T28] audit: type=1326 audit(2000262474.039:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 130.137922][ T8534] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 130.143850][ T28] audit: type=1326 audit(2000262474.159:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc13f78e929 code=0x7ffc0000 [ 130.195155][ T8534] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3619: bg 0: block 40: padding at end of block bitmap is not set [ 130.214860][ T8534] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 130.225383][ T8534] EXT4-fs (loop7): 1 truncate cleaned up [ 130.239364][ T8534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 130.278412][ T8554] loop8: detected capacity change from 0 to 40427 [ 130.283541][ T8534] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.3619: bad symlink. [ 130.310462][ T8554] F2FS-fs (loop8): invalid crc value [ 130.312863][ T8534] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.3619: bad symlink. [ 130.334945][ T8554] F2FS-fs (loop8): Found nat_bits in checkpoint [ 130.342690][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 130.434412][ T8554] F2FS-fs (loop8): Start checkpoint disabled! [ 130.473619][ T8554] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 130.596978][ T3560] kworker/u4:6: attempt to access beyond end of device [ 130.596978][ T3560] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 130.751708][ T8628] loop7: detected capacity change from 0 to 512 [ 130.767025][ T8632] loop1: detected capacity change from 0 to 512 [ 130.791653][ T8632] EXT4-fs: Ignoring removed nobh option [ 130.809180][ T8628] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 130.814726][ T8632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.828000][ T8628] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.845171][ T8632] EXT4-fs (loop1): 1 orphan inode deleted [ 130.860059][ T8632] EXT4-fs (loop1): 1 truncate cleaned up [ 130.865750][ T8632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.918452][ T285] EXT4-fs (loop1): unmounting filesystem. [ 130.944129][ T8628] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.3663: corrupted xattr block 19 [ 130.997382][ T8659] loop1: detected capacity change from 0 to 512 [ 130.997662][ T8628] EXT4-fs (loop7): Remounting filesystem read-only [ 131.012443][ T8659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.026856][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3677'. [ 131.036538][ T8628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 131.045936][ T8628] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.3663: corrupted xattr block 19 [ 131.048557][ T8661] 8021q: VLANs not supported on lo [ 131.058365][ T8628] EXT4-fs (loop7): Remounting filesystem read-only [ 131.072043][ T8628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 131.075182][ T8659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.081920][ T8628] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 131.098250][ T8659] EXT4-fs error (device loop1): __ext4_iget:5078: inode #11: block 2: comm syz.1.3675: invalid block [ 131.113719][ T8628] EXT4-fs (loop7): Remounting filesystem read-only [ 131.130598][ T8628] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2934: inode #15: comm syz.7.3663: corrupted xattr block 19 [ 131.148839][ T8666] loop6: detected capacity change from 0 to 2048 [ 131.166292][ T346] udevd[346]: symlink '../../loop5' '/dev/disk/by-diskseq/850.tmp-b7:5' failed: Read-only file system [ 131.182186][ T8628] EXT4-fs (loop7): Remounting filesystem read-only [ 131.192147][ T8648] loop8: detected capacity change from 0 to 40427 [ 131.199207][ T8628] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 131.208356][ T8659] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3675: couldn't read orphan inode 11 (err -117) [ 131.220443][ T8659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.225604][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-diskseq/863.tmp-b7:6' failed: Read-only file system [ 131.247121][ T844] udevd[844]: symlink '../../loop1' '/dev/disk/by-diskseq/862.tmp-b7:1' failed: Read-only file system [ 131.259000][ T285] EXT4-fs (loop1): unmounting filesystem. [ 131.261282][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/864.tmp-b7:8' failed: Read-only file system [ 131.280576][ T8648] F2FS-fs (loop8): Found nat_bits in checkpoint [ 131.284113][ T844] udevd[844]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 131.301260][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 131.313851][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 131.330247][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 131.340246][ T8666] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 131.347046][ T346] udevd[346]: symlink '../../loop8' '/dev/disk/by-diskseq/864.tmp-b7:8' failed: Read-only file system [ 131.362131][ T347] udevd[347]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 131.368659][ T346] udevd[346]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 131.417330][ T8686] loop5: detected capacity change from 0 to 256 [ 131.419391][ T8648] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 131.435619][ T8666] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 131.462178][ T8686] FAT-fs (loop5): Directory bread(block 64) failed [ 131.492984][ T8686] FAT-fs (loop5): Directory bread(block 65) failed [ 131.509576][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 131.537273][ T8686] FAT-fs (loop5): Directory bread(block 66) failed [ 131.556492][ T5919] syz-executor: attempt to access beyond end of device [ 131.556492][ T5919] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.559654][ T8686] FAT-fs (loop5): Directory bread(block 67) failed [ 131.593596][ T8686] FAT-fs (loop5): Directory bread(block 68) failed [ 131.626922][ T8703] loop6: detected capacity change from 0 to 512 [ 131.635554][ T8686] FAT-fs (loop5): Directory bread(block 69) failed [ 131.644316][ T8703] EXT4-fs (loop6): unsupported inode size: 0 [ 131.657107][ T8686] FAT-fs (loop5): Directory bread(block 70) failed [ 131.664051][ T8703] EXT4-fs (loop6): blocksize: 4096 [ 131.669282][ T8686] FAT-fs (loop5): Directory bread(block 71) failed [ 131.676208][ T8686] FAT-fs (loop5): Directory bread(block 72) failed [ 131.684693][ T8686] FAT-fs (loop5): Directory bread(block 73) failed [ 131.728665][ T8689] loop7: detected capacity change from 0 to 40427 [ 131.760290][ T8689] F2FS-fs (loop7): invalid crc value [ 131.809204][ T8689] F2FS-fs (loop7): Found nat_bits in checkpoint [ 131.843238][ T8721] loop5: detected capacity change from 0 to 256 [ 131.895827][ T8689] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 131.899634][ T2135] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.933878][ T8689] syz.7.3686: attempt to access beyond end of device [ 131.933878][ T8689] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.954408][ T8711] f2fs_ckpt-7:7: attempt to access beyond end of device [ 131.954408][ T8711] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 131.979126][ T8728] loop6: detected capacity change from 0 to 1024 [ 131.990098][ T8728] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.006700][ T8728] EXT4-fs: Ignoring removed bh option [ 132.022811][ T8728] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.062053][ T8717] loop8: detected capacity change from 0 to 40427 [ 132.078829][ T8717] F2FS-fs (loop8): fault_injection options not supported [ 132.099214][ T8728] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 132.109290][ T2135] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 132.117830][ T8717] F2FS-fs (loop8): invalid crc value [ 132.133263][ T2135] usb 2-1: config 0 has no interface number 0 [ 132.139357][ T2135] usb 2-1: config 0 interface 168 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.171820][ T8717] F2FS-fs (loop8): Found nat_bits in checkpoint [ 132.185471][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 132.215598][ T8742] loop7: detected capacity change from 0 to 512 [ 132.218794][ T2135] usb 2-1: config 0 interface 168 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.248309][ T2135] usb 2-1: config 0 interface 168 has no altsetting 0 [ 132.252247][ T8742] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.262481][ T2135] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 132.278580][ T8717] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 132.289561][ T2135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.309953][ T2135] usb 2-1: config 0 descriptor?? [ 132.328414][ T8742] EXT4-fs (loop7): orphan cleanup on readonly fs [ 132.348055][ T8742] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 2: comm syz.7.3707: invalid block [ 132.359756][ T8742] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3707: couldn't read orphan inode 11 (err -117) [ 132.386377][ T8742] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 132.461766][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 132.508509][ T8754] loop7: detected capacity change from 0 to 128 [ 132.530984][ T8751] loop6: detected capacity change from 0 to 40427 [ 132.545140][ T8751] F2FS-fs (loop6): fault_injection options not supported [ 132.556308][ T8751] F2FS-fs (loop6): Image doesn't support compression [ 132.571664][ T8754] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 132.582530][ T8751] F2FS-fs (loop6): Image doesn't support compression [ 132.600214][ T8751] F2FS-fs (loop6): invalid crc value [ 132.605906][ T8754] FAT-fs (loop7): Filesystem has been set read-only [ 132.629812][ T8754] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 132.640400][ T8751] F2FS-fs (loop6): Found nat_bits in checkpoint [ 132.668146][ T8754] syz.7.3713: attempt to access beyond end of device [ 132.668146][ T8754] loop7: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 132.721413][ T8751] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 132.736772][ T2135] logitech-djreceiver 0003:046D:C70E.003C: hidraw0: USB HID v0.00 Device [HID 046d:c70e] on usb-dummy_hcd.1-1/input168 [ 132.783157][ T8726] loop5: detected capacity change from 0 to 131072 [ 132.818510][ T8726] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 132.847036][ T8726] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 132.876290][ T8726] F2FS-fs (loop5): invalid crc value [ 132.897947][ T8726] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.912722][ T8758] loop8: detected capacity change from 0 to 40427 [ 132.922535][ T8758] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 132.931295][ T8758] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 132.946669][ T2135] usb 2-1: USB disconnect, device number 18 [ 132.953592][ T8726] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 132.960969][ T8758] F2FS-fs (loop8): invalid crc value [ 132.967811][ T8726] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 132.978594][ T8758] F2FS-fs (loop8): Found nat_bits in checkpoint [ 133.039298][ T8758] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 133.050620][ T8758] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 133.055363][ T8789] loop6: detected capacity change from 0 to 512 [ 133.100799][ T8789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.125860][ T8789] EXT4-fs (loop6): orphan cleanup on readonly fs [ 133.139289][ T8789] EXT4-fs error (device loop6): __ext4_iget:5078: inode #11: block 2: comm syz.6.3724: invalid block [ 133.169674][ T8789] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3724: couldn't read orphan inode 11 (err -117) [ 133.195657][ T8789] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 133.242377][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 133.282329][ T8807] loop6: detected capacity change from 0 to 512 [ 133.290963][ T8807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 133.298971][ T8807] System zones: 1-12 [ 133.303407][ T8807] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3731: Directory hole found for htree index block 0 [ 133.316372][ T8807] EXT4-fs (loop6): Remounting filesystem read-only [ 133.322911][ T8807] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 133.331293][ T8807] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3731: Directory hole found for htree index block 0 [ 133.344130][ T8807] EXT4-fs (loop6): Remounting filesystem read-only [ 133.350716][ T8807] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 133.358943][ T8807] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 133.370698][ T8807] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #2: comm syz.6.3731: Directory hole found for htree leaf block 0 [ 133.383871][ T8807] EXT4-fs (loop6): Remounting filesystem read-only [ 133.393999][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 133.489419][ T792] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 133.519433][ T2135] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 133.598838][ T8819] loop6: detected capacity change from 0 to 40427 [ 133.611268][ T8819] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 133.619499][ T8819] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 133.637462][ T8819] F2FS-fs (loop6): invalid crc value [ 133.644523][ T8819] F2FS-fs (loop6): Found nat_bits in checkpoint [ 133.669416][ T792] usb 9-1: Using ep0 maxpacket: 16 [ 133.675821][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.692390][ T792] usb 9-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 133.701733][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.709814][ T2135] usb 6-1: Using ep0 maxpacket: 32 [ 133.715399][ T792] usb 9-1: config 0 descriptor?? [ 133.719503][ T8819] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 133.727556][ T8819] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 133.738439][ T2135] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 133.739386][ T1023] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 133.747232][ T2135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.781062][ T2135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.796598][ T2135] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 133.805845][ T2135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.817713][ T2135] usb 6-1: config 0 descriptor?? [ 133.847760][ T8833] netlink: 'syz.7.3742': attribute type 2 has an invalid length. [ 133.932685][ T8839] loop6: detected capacity change from 0 to 256 [ 133.943288][ T8839] exfat: Deprecated parameter 'namecase' [ 133.951130][ T1023] usb 2-1: Using ep0 maxpacket: 8 [ 133.975816][ T8839] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 133.989258][ T1023] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 133.998550][ T1023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.007648][ T1023] usb 2-1: config 0 descriptor?? [ 134.054927][ T8855] netlink: 'syz.7.3750': attribute type 11 has an invalid length. [ 134.126671][ T792] wacom 0003:056A:00C5.003D: unknown main item tag 0x0 [ 134.133682][ T792] wacom 0003:056A:00C5.003D: unknown main item tag 0x0 [ 134.141305][ T792] wacom 0003:056A:00C5.003D: unknown main item tag 0x0 [ 134.148239][ T792] wacom 0003:056A:00C5.003D: unknown main item tag 0x0 [ 134.155346][ T792] wacom 0003:056A:00C5.003D: unknown main item tag 0x0 [ 134.163332][ T792] wacom 0003:056A:00C5.003D: hidraw0: USB HID v0.05 Device [HID 056a:00c5] on usb-dummy_hcd.8-1/input0 [ 134.223964][ T1023] usb 2-1: string descriptor 0 read error: -71 [ 134.231515][ T1023] usb 2-1: Found UVC 0.00 device (2833:0201) [ 134.238445][ T1023] usb 2-1: No valid video chain found. [ 134.238563][ T2135] logitech 0003:046D:C29C.003E: hidraw1: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 134.246842][ T1023] usb 2-1: USB disconnect, device number 19 [ 134.269913][ T8857] loop7: detected capacity change from 0 to 40427 [ 134.276861][ T8857] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 134.284807][ T8857] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 134.293790][ T8857] F2FS-fs (loop7): invalid crc value [ 134.300563][ T8857] F2FS-fs (loop7): Found nat_bits in checkpoint [ 134.322733][ T8857] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 134.329871][ T8857] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 134.338706][ T792] usb 9-1: USB disconnect, device number 7 [ 134.432059][ T2135] logitech 0003:046D:C29C.003E: no inputs found [ 134.440612][ T2135] usb 6-1: USB disconnect, device number 16 [ 134.480585][ T8882] fido_id[8882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 134.780497][ T8898] loop1: detected capacity change from 0 to 1024 [ 134.791482][ T8898] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.798835][ T8898] EXT4-fs: Ignoring removed bh option [ 134.814357][ T8898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.830904][ T8898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.831542][ T8908] loop6: detected capacity change from 0 to 256 [ 134.871245][ T285] EXT4-fs (loop1): unmounting filesystem. [ 134.907331][ T8916] loop8: detected capacity change from 0 to 256 [ 134.923745][ T8916] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 135.164578][ T8925] loop8: detected capacity change from 0 to 40427 [ 135.176561][ T8925] F2FS-fs (loop8): fault_type options not supported [ 135.193928][ T8925] F2FS-fs (loop8): invalid crc value [ 135.200577][ T8925] F2FS-fs (loop8): Found nat_bits in checkpoint [ 135.235340][ T8925] F2FS-fs (loop8): Start checkpoint disabled! [ 135.242087][ T8925] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 135.309906][ T8942] loop1: detected capacity change from 0 to 256 [ 135.315560][ T10] kworker/u4:1: attempt to access beyond end of device [ 135.315560][ T10] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.563472][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-diskseq/903.tmp-b7:6' failed: Read-only file system [ 137.546405][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-diskseq/903.tmp-b7:6' failed: Read-only file system [ 137.550398][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/909.tmp-b7:8' failed: Read-only file system [ 137.574465][ T8953] loop8: detected capacity change from 0 to 1024 [ 137.583012][ T8953] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.594118][ T844] udevd[844]: symlink '../../loop1' '/dev/disk/by-diskseq/908.tmp-b7:1' failed: Read-only file system [ 137.595927][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-diskseq/903.tmp-b7:6' failed: Read-only file system [ 137.624096][ T8953] EXT4-fs: Ignoring removed bh option [ 137.633420][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/910.tmp-b7:8' failed: Read-only file system [ 137.634952][ T8884] udevd[8884]: symlink '../../loop5' '/dev/disk/by-diskseq/889.tmp-b7:5' failed: Read-only file system [ 137.655928][ T8953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.669230][ T844] udevd[844]: symlink '../../loop1' '/dev/disk/by-diskseq/908.tmp-b7:1' failed: Read-only file system [ 137.671362][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 137.688905][ T346] udevd[346]: symlink '../../loop1' '/dev/disk/by-diskseq/911.tmp-b7:1' failed: Read-only file system [ 137.725403][ T8953] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 137.800068][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 137.851622][ T8982] loop6: detected capacity change from 0 to 512 [ 137.874127][ T8964] loop1: detected capacity change from 0 to 40427 [ 137.877430][ T8982] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.893296][ T8982] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.904240][ T8964] F2FS-fs (loop1): fault_type options not supported [ 137.920029][ T8982] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 137.938009][ T8964] F2FS-fs (loop1): invalid crc value [ 137.949892][ T8982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 137.957907][ T8982] System zones: 1-12 [ 137.965117][ T8982] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.3804: corrupted in-inode xattr [ 137.977674][ T8964] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.984378][ T8982] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3804: couldn't read orphan inode 15 (err -117) [ 138.009596][ T8982] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 138.048977][ T8964] F2FS-fs (loop1): Start checkpoint disabled! [ 138.069565][ T8964] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 138.073162][ T9003] loop5: detected capacity change from 0 to 1024 [ 138.084852][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 138.119536][ T9003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 138.150608][ T309] kworker/u4:3: attempt to access beyond end of device [ 138.150608][ T309] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 138.163904][ T9003] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.249569][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 138.280332][ T9025] loop6: detected capacity change from 0 to 256 [ 138.295139][ T9025] exfat: Deprecated parameter 'utf8' [ 138.308592][ T9025] exfat: Deprecated parameter 'namecase' [ 138.328318][ T9025] exfat: Deprecated parameter 'namecase' [ 138.347124][ T9025] exfat: Deprecated parameter 'utf8' [ 138.360139][ T9025] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 138.406941][ T9047] loop1: detected capacity change from 0 to 512 [ 138.416161][ T9047] EXT4-fs: Ignoring removed bh option [ 138.446394][ T9047] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.466939][ T9047] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.489166][ T9059] loop6: detected capacity change from 0 to 256 [ 138.495680][ T9057] incfs_lookup_dentry err:-13 [ 138.500549][ T9057] incfs: Can't find or create .index dir in ./bus [ 138.507369][ T9059] exfat: Deprecated parameter 'namecase' [ 138.513472][ T9057] incfs: mount failed -13 [ 138.520518][ T9059] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 138.571495][ T9047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.593508][ T9047] ext4 filesystem being mounted at /899/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.701641][ T285] EXT4-fs (loop1): unmounting filesystem. [ 138.765161][ T9093] syz.7.3856[9093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.765234][ T9093] syz.7.3856[9093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.784960][ T9096] loop5: detected capacity change from 0 to 512 [ 138.804407][ T9096] EXT4-fs: Ignoring removed orlov option [ 138.819430][ T9096] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 138.832696][ T9096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 138.936274][ T9096] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.3857: corrupted in-inode xattr [ 138.966364][ T9101] loop6: detected capacity change from 0 to 40427 [ 138.979031][ T9101] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 138.995476][ T9101] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 139.008876][ T9101] F2FS-fs (loop6): invalid crc value [ 139.015853][ T9096] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3857: couldn't read orphan inode 15 (err -117) [ 139.045404][ T9101] F2FS-fs (loop6): Found nat_bits in checkpoint [ 139.090557][ T9096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.107268][ T9101] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 139.124891][ T9101] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 139.163473][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 139.174876][ T9101] syz.6.3859: attempt to access beyond end of device [ 139.174876][ T9101] loop6: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 139.187713][ T9130] syz.5.3871[9130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.189015][ T9130] syz.5.3871[9130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.203250][ T9101] F2FS-fs (loop6): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 139.330326][ T304] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 139.370939][ T9153] loop6: detected capacity change from 0 to 512 [ 139.383261][ T9153] EXT4-fs: Ignoring removed orlov option [ 139.389934][ T9153] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 139.399922][ T9153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 139.413592][ T9153] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.3882: corrupted in-inode xattr [ 139.426062][ T9153] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3882: couldn't read orphan inode 15 (err -117) [ 139.439185][ T9153] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 139.488342][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 139.498600][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3893'. [ 139.539737][ T304] usb 2-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.552920][ T304] usb 2-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.577673][ T304] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.585579][ T304] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 139.613988][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.629393][ T304] usb 2-1: config 0 descriptor?? [ 139.648778][ T2135] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 139.715187][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 139.715212][ T28] audit: type=1400 audit(2000262484.071:827): avc: denied { execstack } for pid=9191 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 139.756278][ T9197] loop7: detected capacity change from 0 to 512 [ 139.763245][ T9197] EXT4-fs: Ignoring removed orlov option [ 139.769343][ T9197] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 139.780317][ T9199] netlink: 'syz.8.3904': attribute type 1 has an invalid length. [ 139.793313][ T9197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 139.808705][ T9197] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.3903: corrupted in-inode xattr [ 139.823468][ T9197] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3903: couldn't read orphan inode 15 (err -117) [ 139.835996][ T9197] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 139.848668][ T2135] usb 6-1: Using ep0 maxpacket: 32 [ 139.856643][ T2135] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.875098][ T2135] usb 6-1: config 0 has no interface number 0 [ 139.895499][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 139.901349][ T2135] usb 6-1: config 0 interface 184 has no altsetting 0 [ 139.932269][ T2135] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.945314][ T2135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.954161][ T2135] usb 6-1: Product: syz [ 139.958396][ T2135] usb 6-1: Manufacturer: syz [ 139.963245][ T2135] usb 6-1: SerialNumber: syz [ 139.972776][ T2135] usb 6-1: config 0 descriptor?? [ 139.988945][ T2135] smsc75xx v1.0.0 [ 140.048067][ T304] acrux 0003:1A34:F705.003F: item fetching failed at offset 2/7 [ 140.057211][ T304] acrux 0003:1A34:F705.003F: parse failed [ 140.063182][ T304] acrux: probe of 0003:1A34:F705.003F failed with error -22 [ 140.117442][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3910'. [ 140.154878][ T9217] loop7: detected capacity change from 0 to 1024 [ 140.158646][ T792] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 140.164512][ T9217] EXT4-fs: Ignoring removed i_version option [ 140.189283][ T9217] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 140.197798][ T9217] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.228020][ T9217] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 3: comm syz.7.3912: lblock 3 mapped to illegal pblock 3 (length 13) [ 140.242506][ T9217] EXT4-fs (loop7): Remounting filesystem read-only [ 140.251683][ T304] usb 2-1: USB disconnect, device number 20 [ 140.268582][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 140.307260][ T9202] loop6: detected capacity change from 0 to 131072 [ 140.316925][ T9202] F2FS-fs (loop6): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 140.325697][ T9202] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 140.334651][ T9202] F2FS-fs (loop6): invalid crc value [ 140.341337][ T9202] F2FS-fs (loop6): Found nat_bits in checkpoint [ 140.359690][ T792] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 140.368977][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.375083][ T9202] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 140.377601][ T792] usb 9-1: config 0 descriptor?? [ 140.388810][ T9202] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 140.513615][ T9229] loop7: detected capacity change from 0 to 512 [ 140.579069][ T9235] loop7: detected capacity change from 0 to 256 [ 140.589573][ T2135] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 140.604694][ T2135] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 140.614631][ T2135] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 140.625134][ T2135] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 140.637661][ T2135] usb 6-1: USB disconnect, device number 17 [ 140.717747][ T9246] loop7: detected capacity change from 0 to 512 [ 140.744198][ T9246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 140.752889][ T9246] System zones: 1-12 [ 140.757186][ T9246] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.3921: Directory hole found for htree index block 0 [ 140.770028][ T9246] EXT4-fs (loop7): Remounting filesystem read-only [ 140.783636][ T9246] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 140.792052][ T9246] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.3921: Directory hole found for htree index block 0 [ 140.807873][ T9246] EXT4-fs (loop7): Remounting filesystem read-only [ 140.809034][ T792] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 140.814745][ T9246] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 140.829723][ T9246] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 140.840276][ T792] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 140.847264][ T792] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 140.890133][ T792] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 140.911683][ T792] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 140.919241][ T9246] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #2: comm syz.7.3921: Directory hole found for htree leaf block 0 [ 140.939182][ T792] elecom 0003:056E:00E6.0040: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.8-1/input0 [ 140.958146][ T9246] EXT4-fs (loop7): Remounting filesystem read-only [ 140.979092][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 141.028382][ T6] usb 9-1: USB disconnect, device number 8 [ 141.222551][ T9286] loop6: detected capacity change from 0 to 1024 [ 141.239187][ T792] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 141.258829][ T9286] EXT4-fs: Ignoring removed oldalloc option [ 141.265336][ T9289] incfs_lookup_dentry err:-13 [ 141.270372][ T9286] EXT4-fs: Ignoring removed bh option [ 141.275914][ T9289] incfs: Can't find or create .index dir in ./bus [ 141.282564][ T9289] incfs: mount failed -13 [ 141.286987][ T9286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.319849][ T9286] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 141.355015][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3945'. [ 141.359915][ T9286] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 141.396606][ T28] audit: type=1400 audit(2000262485.751:828): avc: denied { quotaon } for pid=9285 comm="syz.6.3950" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.420384][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 141.441838][ T9312] loop7: detected capacity change from 0 to 512 [ 141.448605][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 141.456067][ T9312] EXT4-fs: Ignoring removed orlov option [ 141.474127][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.494449][ T9312] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 141.515016][ T792] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 141.528446][ T792] usb 2-1: config 1 interface 0 has no altsetting 0 [ 141.536504][ T9312] EXT4-fs (loop7): 1 orphan inode deleted [ 141.544580][ T9312] EXT4-fs (loop7): 1 truncate cleaned up [ 141.545258][ T792] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.550251][ T9312] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 141.571950][ T346] udevd[346]: symlink '../../loop8' '/dev/disk/by-diskseq/912.tmp-b7:8' failed: Read-only file system [ 141.585453][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.599991][ T346] udevd[346]: symlink '../../loop8' '/dev/disk/by-diskseq/912.tmp-b7:8' failed: Read-only file system [ 141.615293][ T792] usb 2-1: Product: syz [ 141.619762][ T792] usb 2-1: Manufacturer: syz [ 141.622750][ T347] udevd[347]: symlink '../../loop7' '/dev/disk/by-diskseq/945.tmp-b7:7' failed: Read-only file system [ 141.624368][ T792] usb 2-1: SerialNumber: syz [ 141.649455][ T9264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.666505][ T347] udevd[347]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 141.700437][ T28] audit: type=1400 audit(2000262486.061:829): avc: denied { create } for pid=9310 comm="syz.7.3952" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.700496][ T9312] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.3952: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 141.765424][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/912.tmp-b7:8' failed: Read-only file system [ 141.779287][ T9333] netlink: 'syz.8.3962': attribute type 27 has an invalid length. [ 141.781303][ T844] udevd[844]: symlink '../../loop5' '/dev/disk/by-diskseq/927.tmp-b7:5' failed: Read-only file system [ 141.815661][ T9335] loop8: detected capacity change from 0 to 512 [ 141.816348][ T9312] EXT4-fs (loop7): Remounting filesystem read-only [ 141.843799][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/946.tmp-b7:8' failed: Read-only file system [ 141.858437][ T9335] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 141.860121][ T844] udevd[844]: symlink '../../loop5' '/dev/disk/by-diskseq/927.tmp-b7:5' failed: Read-only file system [ 141.880119][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 141.893004][ T9337] loop5: detected capacity change from 0 to 512 [ 141.901580][ T9335] EXT4-fs (loop8): 1 truncate cleaned up [ 141.916721][ T844] udevd[844]: symlink '../../loop5' '/dev/disk/by-diskseq/947.tmp-b7:5' failed: Read-only file system [ 141.927799][ T9335] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 141.937567][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 141.943769][ T9337] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 141.964494][ T9337] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.994423][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 142.002442][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 142.035062][ T9346] loop5: detected capacity change from 0 to 128 [ 142.062620][ T9346] FAT-fs (loop5): Directory bread(block 11554) failed [ 142.077063][ T9346] FAT-fs (loop5): Directory bread(block 11555) failed [ 142.093005][ T792] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 142.108403][ T9346] FAT-fs (loop5): Directory bread(block 11556) failed [ 142.127222][ T9346] FAT-fs (loop5): Directory bread(block 11557) failed [ 142.134244][ T9346] FAT-fs (loop5): Directory bread(block 11558) failed [ 142.148370][ T9346] FAT-fs (loop5): Directory bread(block 11559) failed [ 142.163965][ T9346] FAT-fs (loop5): Directory bread(block 11560) failed [ 142.178338][ T9346] FAT-fs (loop5): Directory bread(block 11561) failed [ 142.194991][ T9346] FAT-fs (loop5): Directory bread(block 11562) failed [ 142.211929][ T9346] FAT-fs (loop5): Directory bread(block 11563) failed [ 143.640415][ T2135] usb 2-1: USB disconnect, device number 21 [ 143.641455][ T9356] loop8: detected capacity change from 0 to 16 [ 143.652967][ T2135] usblp0: removed [ 143.668724][ T9356] erofs: (device loop8): mounted with root inode @ nid 36. [ 143.962364][ T9374] loop5: detected capacity change from 0 to 40427 [ 143.969218][ T9387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.976432][ T9387] IPv6: NLM_F_CREATE should be set when creating new route [ 143.983679][ T9387] IPv6: NLM_F_CREATE should be set when creating new route [ 143.996402][ T9374] F2FS-fs (loop5): heap/no_heap options were deprecated [ 144.040193][ T9374] F2FS-fs (loop5): invalid crc value [ 144.046435][ T9374] F2FS-fs (loop5): Found nat_bits in checkpoint [ 144.091207][ T9374] F2FS-fs (loop5): Start checkpoint disabled! [ 144.097895][ T9374] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 144.153658][ T10] kworker/u4:1: attempt to access beyond end of device [ 144.153658][ T10] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 144.226805][ T9318] loop6: detected capacity change from 0 to 262144 [ 144.263033][ T9318] F2FS-fs (loop6): invalid crc value [ 144.273584][ T9407] loop5: detected capacity change from 0 to 1024 [ 144.294650][ T9318] F2FS-fs (loop6): Found nat_bits in checkpoint [ 144.315256][ T9407] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 144.331547][ T9419] loop8: detected capacity change from 0 to 512 [ 144.347013][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 144.351572][ T9318] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 144.371969][ T9419] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 144.465859][ T9434] loop8: detected capacity change from 0 to 1024 [ 144.474150][ T9434] EXT4-fs: Ignoring removed i_version option [ 144.518265][ T9434] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 144.526768][ T9434] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.594251][ T9422] loop1: detected capacity change from 0 to 40427 [ 144.608128][ T9422] F2FS-fs (loop1): heap/no_heap options were deprecated [ 144.622059][ T9434] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 3: comm syz.8.4006: lblock 3 mapped to illegal pblock 3 (length 13) [ 144.636628][ T9422] F2FS-fs (loop1): invalid crc value [ 144.636658][ T9434] EXT4-fs (loop8): Remounting filesystem read-only [ 144.650960][ T9422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.691423][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 144.717907][ T9441] loop8: detected capacity change from 0 to 256 [ 144.725941][ T9422] F2FS-fs (loop1): Start checkpoint disabled! [ 144.739476][ T9441] exfat: Deprecated parameter 'namecase' [ 144.747445][ T9441] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 144.759712][ T9422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 144.769648][ T2135] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 144.866039][ T309] kworker/u4:3: attempt to access beyond end of device [ 144.866039][ T309] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 144.926725][ T9454] device vlan3 entered promiscuous mode [ 144.932385][ T9454] device bridge0 entered promiscuous mode [ 144.988073][ T2135] usb 6-1: Using ep0 maxpacket: 16 [ 144.994543][ T2135] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.013247][ T2135] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.030773][ T2135] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.040014][ T2135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.048423][ T2135] usb 6-1: Product: syz [ 145.052688][ T2135] usb 6-1: Manufacturer: syz [ 145.058141][ T2135] usb 6-1: SerialNumber: syz [ 145.098219][ T792] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 145.127238][ T9479] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4026'. [ 145.169327][ T9481] loop7: detected capacity change from 0 to 256 [ 145.202030][ T9483] loop1: detected capacity change from 0 to 256 [ 145.203434][ T9481] FAT-fs (loop7): Directory bread(block 64) failed [ 145.218190][ T9481] FAT-fs (loop7): Directory bread(block 65) failed [ 145.230406][ T9481] FAT-fs (loop7): Directory bread(block 66) failed [ 145.234516][ T9472] loop6: detected capacity change from 0 to 40427 [ 145.236985][ T9481] FAT-fs (loop7): Directory bread(block 67) failed [ 145.249997][ T9481] FAT-fs (loop7): Directory bread(block 68) failed [ 145.256552][ T9481] FAT-fs (loop7): Directory bread(block 69) failed [ 145.266318][ T9485] loop1: detected capacity change from 0 to 16 [ 145.268089][ T9472] F2FS-fs (loop6): heap/no_heap options were deprecated [ 145.274137][ T9481] FAT-fs (loop7): Directory bread(block 70) failed [ 145.287103][ T9481] FAT-fs (loop7): Directory bread(block 71) failed [ 145.293833][ T9485] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.307350][ T9481] FAT-fs (loop7): Directory bread(block 72) failed [ 145.307969][ T792] usb 9-1: Using ep0 maxpacket: 32 [ 145.314443][ T9481] FAT-fs (loop7): Directory bread(block 73) failed [ 145.324548][ T9472] F2FS-fs (loop6): invalid crc value [ 145.334829][ T792] usb 9-1: config index 0 descriptor too short (expected 164, got 36) [ 145.350021][ T9472] F2FS-fs (loop6): Found nat_bits in checkpoint [ 145.356359][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.377526][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.390478][ T792] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 145.407259][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.409636][ T9472] F2FS-fs (loop6): Start checkpoint disabled! [ 145.416649][ T792] usb 9-1: config 0 descriptor?? [ 145.426653][ T9492] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4032'. [ 145.428397][ T9472] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 145.454154][ T9495] futex_wake_op: syz.7.4033 tries to shift op by 36; fix this program [ 145.486609][ T2135] usb 6-1: cannot find UAC_HEADER [ 145.494254][ T2135] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 145.543353][ T3560] kworker/u4:6: attempt to access beyond end of device [ 145.543353][ T3560] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 145.606427][ T9513] loop7: detected capacity change from 0 to 256 [ 145.694176][ T2135] usb 6-1: USB disconnect, device number 18 [ 145.753529][ T28] audit: type=1400 audit(2000262490.111:830): avc: denied { mounton } for pid=9528 comm="syz.1.4050" path="/929/file0" dev="tmpfs" ino=4804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 145.830792][ T792] logitech 0003:046D:C29C.0041: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0 [ 145.998991][ T9565] loop6: detected capacity change from 0 to 512 [ 146.005558][ T9565] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.012992][ T9565] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 146.023675][ T9565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 146.030042][ T792] logitech 0003:046D:C29C.0041: no inputs found [ 146.033586][ T9565] System zones: 1-12 [ 146.040791][ T792] usb 9-1: USB disconnect, device number 9 [ 146.050612][ T9565] EXT4-fs (loop6): 1 truncate cleaned up [ 146.056265][ T9565] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 146.062552][ T9568] fido_id[9568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 146.069600][ T9565] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.4067: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 146.098673][ T9565] incfs: Can't find or create .index dir in ./file0 [ 146.105376][ T9565] incfs: mount failed -117 [ 146.113015][ T9565] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.4067: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 146.133503][ T9565] incfs: Can't find or create .index dir in ./file0 [ 146.140193][ T9565] incfs: mount failed -117 [ 146.151717][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 146.217890][ T6] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 146.296579][ T9581] overlayfs: conflicting options: nfs_export=on,index=off [ 146.399382][ T9603] loop5: detected capacity change from 0 to 512 [ 146.406013][ T9603] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 146.415916][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.426047][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.435556][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.444642][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 146.452935][ T6] usb 2-1: SerialNumber: syz [ 146.584125][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/967.tmp-b7:8' failed: Read-only file system [ 146.593960][ T844] udevd[844]: symlink '../../loop5' '/dev/disk/by-diskseq/982.tmp-b7:5' failed: Read-only file system [ 146.623734][ T844] udevd[844]: symlink '../../loop5' '/dev/disk/by-diskseq/982.tmp-b7:5' failed: Read-only file system [ 146.628295][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/967.tmp-b7:8' failed: Read-only file system [ 146.656238][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/967.tmp-b7:8' failed: Read-only file system [ 146.669843][ T844] udevd[844]: symlink '../../loop5' '/dev/disk/by-diskseq/982.tmp-b7:5' failed: Read-only file system [ 146.682305][ T6] usb 2-1: 0:2 : does not exist [ 146.693162][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/967.tmp-b7:8' failed: Read-only file system [ 146.707926][ T6] usb 2-1: USB disconnect, device number 22 [ 146.715545][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.744422][ T346] udevd[346]: symlink '../../loop5' '/dev/disk/by-diskseq/982.tmp-b7:5' failed: Read-only file system [ 147.007327][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-diskseq/980.tmp-b7:6' failed: Read-only file system [ 147.131728][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4115'. [ 147.288638][ T6] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 147.371832][ T9692] loop1: detected capacity change from 0 to 40427 [ 147.379994][ T9692] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 147.387800][ T9692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 147.397808][ T9692] F2FS-fs (loop1): invalid crc value [ 147.404481][ T9692] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.425451][ T9692] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 147.432761][ T9692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.477703][ T6] usb 7-1: Using ep0 maxpacket: 32 [ 147.483896][ T6] usb 7-1: config index 0 descriptor too short (expected 164, got 36) [ 147.493185][ T303] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 147.502782][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.513920][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.523930][ T6] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 147.526609][ T9698] loop1: detected capacity change from 0 to 16 [ 147.533362][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.539592][ T2135] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 147.549065][ T9698] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.562993][ T6] usb 7-1: config 0 descriptor?? [ 147.587132][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4129'. [ 147.633850][ T9708] loop1: detected capacity change from 0 to 256 [ 147.712245][ T303] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.733648][ T303] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 147.744900][ T9718] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 147.753520][ T303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.753516][ T2135] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 147.753546][ T2135] usb 6-1: config 0 interface 0 has no altsetting 0 [ 147.773933][ T303] usb 9-1: Product: syz [ 147.783603][ T303] usb 9-1: Manufacturer: syz [ 147.788412][ T303] usb 9-1: SerialNumber: syz [ 147.792277][ T2135] usb 6-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 147.802168][ T2135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.802385][ T303] usb 9-1: config 0 descriptor?? [ 147.819352][ T2135] usb 6-1: config 0 descriptor?? [ 147.827360][ T9688] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 147.842086][ T9724] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4141'. [ 147.985297][ T6] logitech 0003:046D:C29C.0042: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 148.023137][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4152'. [ 148.023929][ T303] snd-usb-audio: probe of 9-1:0.0 failed with error -2 [ 148.186455][ T6] logitech 0003:046D:C29C.0042: no inputs found [ 148.196144][ T6] usb 7-1: USB disconnect, device number 24 [ 148.215616][ T9759] fido_id[9759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 148.241983][ T304] usb 9-1: USB disconnect, device number 10 [ 148.250446][ T2135] waltop 0003:172F:0032.0043: unknown main item tag 0x1 [ 148.262433][ T2135] waltop 0003:172F:0032.0043: hidraw0: USB HID v0.04 Device [HID 172f:0032] on usb-dummy_hcd.5-1/input0 [ 148.469993][ T304] usb 6-1: USB disconnect, device number 19 [ 148.711914][ T9771] loop6: detected capacity change from 0 to 256 [ 148.750580][ T9775] loop6: detected capacity change from 0 to 2048 [ 148.758664][ T9777] loop8: detected capacity change from 0 to 256 [ 148.781932][ T9780] loop7: detected capacity change from 0 to 16 [ 148.788296][ T9777] FAT-fs (loop8): Directory bread(block 64) failed [ 148.795011][ T9780] erofs: (device loop7): mounted with root inode @ nid 36. [ 148.799983][ T9777] FAT-fs (loop8): Directory bread(block 65) failed [ 148.807702][ T9775] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 148.818708][ T9777] FAT-fs (loop8): Directory bread(block 66) failed [ 148.830444][ T9777] FAT-fs (loop8): Directory bread(block 67) failed [ 148.837142][ T9777] FAT-fs (loop8): Directory bread(block 68) failed [ 148.843839][ T9777] FAT-fs (loop8): Directory bread(block 69) failed [ 148.850628][ T9777] FAT-fs (loop8): Directory bread(block 70) failed [ 148.852804][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 148.857366][ T9777] FAT-fs (loop8): Directory bread(block 71) failed [ 148.870314][ T9777] FAT-fs (loop8): Directory bread(block 72) failed [ 148.874810][ T9784] loop7: detected capacity change from 0 to 128 [ 148.876981][ T9777] FAT-fs (loop8): Directory bread(block 73) failed [ 148.896299][ T9784] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 148.918747][ T9784] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.951777][ T9784] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.4177: No space for directory leaf checksum. Please run e2fsck -D. [ 148.975544][ T9784] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #2: comm syz.7.4177: Directory block failed checksum [ 149.020455][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 149.089089][ T9812] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4181'. [ 149.099573][ T9812] netlink: 'syz.5.4181': attribute type 6 has an invalid length. [ 149.107372][ T9812] netlink: 'syz.5.4181': attribute type 5 has an invalid length. [ 149.122592][ T9812] netlink: 'syz.5.4181': attribute type 4 has an invalid length. [ 149.222097][ T9838] loop5: detected capacity change from 0 to 512 [ 149.249101][ T9838] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.283850][ T9838] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.291229][ T9854] tmpfs: Bad value for 'gid' [ 149.318847][ T9838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 149.327798][ T9838] System zones: 1-12 [ 149.337505][ T9838] EXT4-fs (loop5): 1 truncate cleaned up [ 149.380656][ T9838] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.4192: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 149.400654][ T9838] incfs: Can't find or create .index dir in ./file0 [ 149.414211][ T9838] incfs: mount failed -117 [ 149.422484][ T9838] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.4192: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 149.451402][ T9838] incfs: Can't find or create .index dir in ./file0 [ 149.460959][ T9838] incfs: mount failed -117 [ 149.472122][ T9877] futex_wake_op: syz.6.4212 tries to shift op by 144; fix this program [ 149.554809][ T9898] loop7: detected capacity change from 0 to 256 [ 149.616011][ T9910] loop7: detected capacity change from 0 to 512 [ 149.622796][ T9910] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.634575][ T9910] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.663788][ T9910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 149.677633][ T9910] System zones: 1-12 [ 149.688739][ T9910] EXT4-fs (loop7): 1 truncate cleaned up [ 149.706831][ T9910] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.4226: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 149.726568][ T9910] incfs: Can't find or create .index dir in ./file0 [ 149.733547][ T9910] incfs: mount failed -117 [ 149.739376][ T28] audit: type=1400 audit(2000262494.102:831): avc: denied { mount } for pid=9924 comm="syz.1.4234" name="/" dev="configfs" ino=13312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 149.766498][ T9927] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.4226: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 149.772652][ T28] audit: type=1400 audit(2000262494.122:832): avc: denied { setattr } for pid=9924 comm="syz.1.4234" name="/" dev="configfs" ino=13312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.791584][ T9927] incfs: Can't find or create .index dir in ./file0 [ 149.808031][ T28] audit: type=1400 audit(2000262494.132:833): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 149.814296][ T9927] incfs: mount failed -117 [ 149.947668][ T9950] futex_wake_op: syz.1.4245 tries to shift op by 36; fix this program [ 150.277460][ T2135] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 150.468439][ T2135] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 150.476662][ T2135] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 150.485363][ T2135] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 150.495451][ T2135] usb 2-1: config 8 has no interface number 0 [ 150.501548][ T2135] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 150.512838][ T2135] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.527156][ T2135] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 150.536361][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.544843][ T2135] usb 2-1: Product: syz [ 150.549149][ T2135] usb 2-1: Manufacturer: syz [ 150.553847][ T2135] usb 2-1: SerialNumber: syz [ 150.704094][ T9970] loop8: detected capacity change from 0 to 512 [ 150.714210][ T9970] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.723355][ T9970] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 150.735897][ T9970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 150.744626][ T9970] System zones: 1-12 [ 150.750398][ T9970] EXT4-fs (loop8): 1 truncate cleaned up [ 150.765012][ T2135] usb 2-1: USB disconnect, device number 23 [ 150.783727][ T9970] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.4253: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 150.817795][ T9970] incfs: Can't find or create .index dir in ./file0 [ 150.824460][ T9970] incfs: mount failed -117 [ 150.835875][ T9970] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.4253: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 150.867616][ T9970] incfs: Can't find or create .index dir in ./file0 [ 150.879276][ T9970] incfs: mount failed -117 [ 150.905395][ T9991] tipc: Enabled bearer , priority 0 [ 150.975928][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4272'. [ 151.027510][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 151.150950][T10033] loop8: detected capacity change from 0 to 256 [ 151.154687][T10035] loop6: detected capacity change from 0 to 512 [ 151.157734][T10033] exfat: Deprecated parameter 'utf8' [ 151.169144][T10033] exfat: Deprecated parameter 'utf8' [ 151.174555][T10033] exfat: Deprecated parameter 'utf8' [ 151.181868][T10033] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 151.201718][T10035] EXT4-fs (loop6): 1 orphan inode deleted [ 151.207867][T10035] ext4 filesystem being mounted at /776/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.219917][ T309] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 151.229961][ T309] EXT4-fs error (device loop6): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 151.262836][ T28] audit: type=1400 audit(2000262495.622:834): avc: denied { bind } for pid=10042 comm="syz.8.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.285178][ T625] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 151.295112][ T625] EXT4-fs error (device loop6): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 151.347247][ T303] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 151.540236][ T303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.552351][ T303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.564077][T10093] loop8: detected capacity change from 0 to 16 [ 151.584083][ T303] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 151.587676][ T346] udevd[346]: symlink '../../loop6' '/dev/disk/by-diskseq/1010.tmp-b7:6' failed: Read-only file system [ 151.603005][ T303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.605241][T10093] erofs: (device loop8): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 151.614823][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4316'. [ 151.625021][T10093] erofs: (device loop8): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 151.646168][ T303] usb 6-1: config 0 descriptor?? [ 151.656035][ T347] udevd[347]: symlink '../../loop6' '/dev/disk/by-diskseq/1010.tmp-b7:6' failed: Read-only file system [ 151.675750][ T844] udevd[844]: symlink '../../loop1' '/dev/disk/by-diskseq/988.tmp-b7:1' failed: Read-only file system [ 151.677328][T10093] erofs: (device loop8): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 151.698800][T10093] erofs: (device loop8): mounted with root inode @ nid 36. [ 151.704822][ T347] udevd[347]: symlink '../../loop1' '/dev/disk/by-diskseq/988.tmp-b7:1' failed: Read-only file system [ 151.720042][ T844] udevd[844]: symlink '../../loop6' '/dev/disk/by-diskseq/1010.tmp-b7:6' failed: Read-only file system [ 151.734986][ T844] udevd[844]: symlink '../../loop6' '/dev/disk/by-diskseq/1010.tmp-b7:6' failed: Read-only file system [ 151.766040][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-diskseq/1011.tmp-b7:8' failed: Read-only file system [ 151.786007][ T347] udevd[347]: symlink '../../loop8' '/dev/disk/by-uuid/72b14b28-1ccd-4731-be5e-c43bd7b347d4.tmp-b7:8' failed: Read-only file system [ 151.801896][ T844] udevd[844]: symlink '../../loop6' '/dev/disk/by-diskseq/1010.tmp-b7:6' failed: Read-only file system [ 151.822544][ T8884] udevd[8884]: symlink '../../loop1' '/dev/disk/by-diskseq/988.tmp-b7:1' failed: Read-only file system [ 152.011106][T10119] loop8: detected capacity change from 0 to 40427 [ 152.026436][T10119] F2FS-fs (loop8): fault_injection options not supported [ 152.039340][T10119] F2FS-fs (loop8): fault_type options not supported [ 152.047787][T10119] F2FS-fs (loop8): Image doesn't support compression [ 152.056838][ T303] zydacron 0003:13EC:0006.0044: item fetching failed at offset 1/5 [ 152.065517][T10119] F2FS-fs (loop8): Image doesn't support compression [ 152.073516][ T303] zydacron 0003:13EC:0006.0044: parse failed [ 152.080676][T10119] F2FS-fs (loop8): invalid crc value [ 152.086173][ T303] zydacron: probe of 0003:13EC:0006.0044 failed with error -22 [ 152.096167][T10119] F2FS-fs (loop8): Found nat_bits in checkpoint [ 152.117242][ T6] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 152.136707][T10119] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 152.157448][ T5919] syz-executor: attempt to access beyond end of device [ 152.157448][ T5919] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.259363][ T303] usb 6-1: USB disconnect, device number 20 [ 152.318288][ T6] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 152.327412][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.336154][ T6] usb 2-1: config 0 descriptor?? [ 152.744132][ T6] elecom 0003:056E:00E6.0045: unknown main item tag 0x0 [ 152.751168][ T6] elecom 0003:056E:00E6.0045: unknown main item tag 0x0 [ 152.758200][ T6] elecom 0003:056E:00E6.0045: unknown main item tag 0x0 [ 152.765256][ T6] elecom 0003:056E:00E6.0045: unknown main item tag 0x0 [ 152.773882][ T6] elecom 0003:056E:00E6.0045: unknown main item tag 0x0 [ 152.781506][ T6] elecom 0003:056E:00E6.0045: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 152.949835][ T2135] usb 2-1: USB disconnect, device number 24 [ 153.477672][T10157] loop1: detected capacity change from 0 to 512 [ 153.508101][T10157] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.533358][T10157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.565294][T10157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 153.574588][T10157] System zones: 1-12 [ 153.581284][T10157] EXT4-fs (loop1): 1 truncate cleaned up [ 153.595047][T10157] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.4337: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 153.616428][T10157] incfs: Can't find or create .index dir in ./file0 [ 153.623226][T10157] incfs: mount failed -117 [ 153.630691][T10157] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.4337: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 153.661138][T10157] incfs: Can't find or create .index dir in ./file0 [ 153.675679][T10157] incfs: mount failed -117 [ 153.744243][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4360'. [ 153.766974][ T2135] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 153.820025][T10209] loop5: detected capacity change from 0 to 16 [ 153.838205][T10209] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 153.850945][T10209] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 153.865465][T10209] erofs: (device loop5): mounted with root inode @ nid 36. [ 153.913330][T10221] netlink: 'syz.7.4373': attribute type 1 has an invalid length. [ 153.932037][T10225] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4374'. [ 153.968458][ T2135] usb 9-1: unable to get BOS descriptor or descriptor too short [ 153.987006][T10225] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 154.016514][ T28] audit: type=1326 audit(2000262498.372:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.4379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc13f78e929 code=0x0 [ 154.045213][ T2135] usb 9-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 154.065270][ T2135] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.075492][ T2135] usb 9-1: Product: syz [ 154.084112][ T2135] usb 9-1: Manufacturer: syz [ 154.093553][ T2135] usb 9-1: SerialNumber: syz [ 154.112095][ T2135] usb 9-1: config 0 descriptor?? [ 154.140508][T10254] loop7: detected capacity change from 0 to 256 [ 154.147575][T10254] exfat: Deprecated parameter 'namecase' [ 154.153540][T10254] exfat: Deprecated parameter 'utf8' [ 154.162263][T10254] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 154.196409][T10256] loop7: detected capacity change from 0 to 2048 [ 154.319345][ T2135] usb 9-1: USB disconnect, device number 11 [ 154.376893][ T60] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 154.376909][ T1023] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 154.557959][ T1023] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.566865][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 154.569770][ T1023] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 154.574473][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.582642][ T1023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.593669][ T60] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 154.600186][ T1023] usb 7-1: Product: syz [ 154.609502][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.613477][ T1023] usb 7-1: Manufacturer: syz [ 154.621660][ T60] usb 2-1: Product: syz [ 154.626105][ T1023] usb 7-1: SerialNumber: syz [ 154.630395][ T60] usb 2-1: Manufacturer: syz [ 154.635337][ T1023] usb 7-1: config 0 descriptor?? [ 154.644528][ T60] usb 2-1: SerialNumber: syz [ 154.649856][ T60] usb 2-1: config 0 descriptor?? [ 154.655743][ T60] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.850123][ T1023] snd-usb-audio: probe of 7-1:0.0 failed with error -2 [ 154.878564][ T28] audit: type=1400 audit(2000262499.242:836): avc: denied { read } for pid=10271 comm="syz.5.4397" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 154.903005][ T2135] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 154.911425][ T28] audit: type=1400 audit(2000262499.242:837): avc: denied { open } for pid=10271 comm="syz.5.4397" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 154.937503][ T60] usb 2-1: USB disconnect, device number 25 [ 155.070458][ T1023] usb 7-1: USB disconnect, device number 25 [ 155.109174][ T2135] usb 9-1: unable to get BOS descriptor or descriptor too short [ 155.117428][ T2135] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 155.124983][ T2135] usb 9-1: can't read configurations, error -71 [ 155.423580][T10283] loop7: detected capacity change from 0 to 40427 [ 155.432801][T10283] F2FS-fs (loop7): fault_injection options not supported [ 155.444552][T10283] F2FS-fs (loop7): fault_type options not supported [ 155.454105][T10283] F2FS-fs (loop7): Image doesn't support compression [ 155.461437][T10283] F2FS-fs (loop7): Image doesn't support compression [ 155.468996][T10283] F2FS-fs (loop7): invalid crc value [ 155.483080][T10283] F2FS-fs (loop7): Found nat_bits in checkpoint [ 155.504301][T10283] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 155.542430][ T4678] syz-executor: attempt to access beyond end of device [ 155.542430][ T4678] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.660661][ T28] audit: type=1326 audit(2000262500.023:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.1.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe78e929 code=0x7ffc0000 [ 155.715069][T10317] loop6: detected capacity change from 0 to 256 [ 155.718152][ T28] audit: type=1326 audit(2000262500.023:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.1.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe78e929 code=0x7ffc0000 [ 155.815184][ T28] audit: type=1326 audit(2000262500.053:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.1.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dfe78e929 code=0x7ffc0000 [ 155.869542][ T28] audit: type=1326 audit(2000262500.053:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.1.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe78e929 code=0x7ffc0000 [ 155.935213][T10359] devtmpfs: Cannot retroactively limit inodes [ 156.013910][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4445'. [ 156.303786][T10427] loop8: detected capacity change from 0 to 256 [ 156.315084][T10429] loop7: detected capacity change from 0 to 1024 [ 156.317879][T10425] loop1: detected capacity change from 0 to 512 [ 156.325289][T10427] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 156.335621][T10425] EXT4-fs: Ignoring removed bh option [ 156.346083][T10427] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 156.358716][T10425] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 156.373211][T10425] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.383052][T10425] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.389697][T10425] EXT4-fs error (device loop1): ext4_quota_enable:7005: comm syz.1.4467: Bad quota inum: 4294967291, type: 0 [ 156.402262][T10425] EXT4-fs (loop1): Remounting filesystem read-only [ 156.409347][T10425] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 156.429948][T10425] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 156.478488][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 156.478502][ T28] audit: type=1326 audit(2000262500.843:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.513092][ T28] audit: type=1326 audit(2000262500.843:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.536670][ T1023] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 156.539644][T10451] loop8: detected capacity change from 0 to 256 [ 156.550702][ T28] audit: type=1326 audit(2000262500.843:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.576811][ T28] audit: type=1326 audit(2000262500.843:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.600385][ T28] audit: type=1326 audit(2000262500.843:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.623177][T10451] FAT-fs (loop8): Directory bread(block 64) failed [ 156.626202][ T28] audit: type=1326 audit(2000262500.843:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.635496][T10451] FAT-fs (loop8): Directory bread(block 65) failed [ 156.655686][ T28] audit: type=1326 audit(2000262500.843:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.664911][T10451] FAT-fs (loop8): Directory bread(block 66) failed [ 156.684366][ T28] audit: type=1326 audit(2000262500.843:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.8.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12f8e929 code=0x7ffc0000 [ 156.692137][T10451] FAT-fs (loop8): Directory bread(block 67) failed [ 156.725417][T10451] FAT-fs (loop8): Directory bread(block 68) failed [ 156.745590][T10451] FAT-fs (loop8): Directory bread(block 69) failed [ 156.752267][T10451] FAT-fs (loop8): Directory bread(block 70) failed [ 156.758935][T10451] FAT-fs (loop8): Directory bread(block 71) failed [ 156.766370][ T1023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 156.786895][T10451] FAT-fs (loop8): Directory bread(block 72) failed [ 156.793584][ T1023] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 156.806739][T10451] FAT-fs (loop8): Directory bread(block 73) failed [ 156.816213][ T1023] usb 6-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 156.825544][ T1023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.834406][ T1023] usb 6-1: config 0 descriptor?? [ 156.843421][T10414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 156.966048][ T28] audit: type=1326 audit(2000262501.323:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10470 comm="syz.6.4489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b03d8e929 code=0x0 [ 157.066597][ T2135] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 157.261085][ T1023] wacom 0003:056A:005D.0046: unbalanced collection at end of report description [ 157.270320][ T1023] wacom 0003:056A:005D.0046: parse failed [ 157.276057][ T1023] wacom: probe of 0003:056A:005D.0046 failed with error -22 [ 157.276674][ T2135] usb 2-1: Using ep0 maxpacket: 16 [ 157.292727][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.303703][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.313455][ T2135] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.326384][ T2135] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.335448][ T2135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.344293][ T2135] usb 2-1: config 0 descriptor?? [ 157.468581][ T1023] usb 6-1: USB disconnect, device number 21 [ 157.752587][ T2135] microsoft 0003:045E:07DA.0047: No inputs registered, leaving [ 157.760603][ T2135] microsoft 0003:045E:07DA.0047: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 157.773492][ T2135] microsoft 0003:045E:07DA.0047: no inputs found [ 157.779846][ T2135] microsoft 0003:045E:07DA.0047: could not initialize ff, continuing anyway [ 157.826232][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4492'. [ 157.847008][T10483] loop8: detected capacity change from 0 to 256 [ 157.859658][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4495'. [ 157.875987][T10483] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 157.947800][T10497] loop8: detected capacity change from 0 to 4096 [ 157.974880][ T303] usb 2-1: USB disconnect, device number 26 [ 158.007656][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4505'. [ 158.032569][T10508] xt_hashlimit: size too large, truncated to 1048576 [ 158.037701][T10507] loop5: detected capacity change from 0 to 256 [ 158.431254][T10532] loop6: detected capacity change from 0 to 4096 [ 158.577698][T10546] loop1: detected capacity change from 0 to 256 [ 158.581728][T10549] loop6: detected capacity change from 0 to 16 [ 158.605697][T10546] FAT-fs (loop1): Directory bread(block 64) failed [ 158.611899][T10549] erofs: (device loop6): mounted with root inode @ nid 36. [ 158.617867][T10546] FAT-fs (loop1): Directory bread(block 65) failed [ 158.634903][T10546] FAT-fs (loop1): Directory bread(block 66) failed [ 158.642077][T10546] FAT-fs (loop1): Directory bread(block 67) failed [ 158.648813][T10546] FAT-fs (loop1): Directory bread(block 68) failed [ 158.655438][T10546] FAT-fs (loop1): Directory bread(block 69) failed [ 158.665047][T10546] FAT-fs (loop1): Directory bread(block 70) failed [ 158.671876][T10546] FAT-fs (loop1): Directory bread(block 71) failed [ 158.680606][T10546] FAT-fs (loop1): Directory bread(block 72) failed [ 158.688077][T10546] FAT-fs (loop1): Directory bread(block 73) failed [ 158.857380][T10568] loop1: detected capacity change from 0 to 256 [ 158.920048][T10572] loop8: detected capacity change from 0 to 128 [ 158.928908][T10572] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.949030][T10574] loop6: detected capacity change from 0 to 512 [ 158.987267][T10574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 159.004123][T10574] System zones: 0-2, 18-18, 34-34 [ 159.011076][T10574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4536: bg 0: block 248: padding at end of block bitmap is not set [ 159.036361][T10574] Quota error (device loop6): write_blk: dquota write failed [ 159.048917][T10574] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.4536: Failed to acquire dquot type 1 [ 159.075909][T10574] EXT4-fs (loop6): 1 truncate cleaned up [ 159.090986][T10574] EXT4-fs mount: 18 callbacks suppressed [ 159.091003][T10574] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 159.115871][T10574] ext4 filesystem being mounted at /851/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.156341][ T1023] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 159.176876][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 159.191535][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4545'. [ 159.200873][T10578] loop5: detected capacity change from 0 to 40427 [ 159.211557][T10578] F2FS-fs (loop5): fault_type options not supported [ 159.222812][T10578] F2FS-fs (loop5): invalid crc value [ 159.237059][T10578] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.289655][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4547'. [ 159.300470][T10578] F2FS-fs (loop5): Start checkpoint disabled! [ 159.309663][T10578] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 159.341157][T10578] syz.5.4538: attempt to access beyond end of device [ 159.341157][T10578] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.355108][ T1023] usb 2-1: Using ep0 maxpacket: 16 [ 159.361485][ T1023] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.376216][ T1023] usb 2-1: config 0 has no interface number 0 [ 159.382616][ T1023] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.411042][ T10] kworker/u4:1: attempt to access beyond end of device [ 159.411042][ T10] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 159.428906][ T1023] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.443054][ T1023] usb 2-1: config 0 interface 8 has no altsetting 0 [ 159.454265][ T1023] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 159.467802][ T1023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.477218][ T1023] usb 2-1: config 0 descriptor?? [ 159.701627][T10618] loop8: detected capacity change from 0 to 16 [ 159.725937][T10618] erofs: (device loop8): mounted with root inode @ nid 36. [ 159.746738][T10618] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 159.757138][T10618] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 159.762987][T10606] loop5: detected capacity change from 0 to 40427 [ 159.768155][T10618] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 159.786489][T10606] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 159.794261][T10606] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.812676][T10606] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.860684][T10606] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.867879][T10606] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.886859][ T1023] hid (null): global environment stack underflow [ 159.894331][ T1023] uclogic 0003:5543:0522.0048: global environment stack underflow [ 159.905118][ T1023] uclogic 0003:5543:0522.0048: item 0 0 1 11 parsing failed [ 159.912641][ T1023] uclogic 0003:5543:0522.0048: parse failed [ 159.918628][ T1023] uclogic: probe of 0003:5543:0522.0048 failed with error -22 [ 159.936294][ T792] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 160.036098][T10642] loop5: detected capacity change from 0 to 128 [ 160.044994][T10642] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.097058][ T60] usb 2-1: USB disconnect, device number 27 [ 160.127395][ T792] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 160.135614][ T792] usb 7-1: config 0 has no interface number 0 [ 160.141809][ T792] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.152913][ T792] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.162967][ T792] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 160.172016][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.180727][ T792] usb 7-1: config 0 descriptor?? [ 160.313886][T10670] loop5: detected capacity change from 0 to 512 [ 160.324913][T10670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.335446][T10670] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 160.343447][T10670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 160.351708][T10670] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 160.362174][T10670] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 160.370914][T10670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 160.385589][T10670] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.4580: dx entry: limit 65535 != root limit 120 [ 160.398090][T10670] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.4580: Corrupt directory, running e2fsck is recommended [ 160.415507][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 160.589720][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.609495][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.617238][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.624503][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.625711][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4592'. [ 160.631842][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.648347][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.655573][ T792] logitech 0003:046D:C293.0049: unknown main item tag 0x0 [ 160.663982][ T792] logitech 0003:046D:C293.0049: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.6-1/input128 [ 160.675025][T10701] loop1: detected capacity change from 0 to 256 [ 160.675734][ T792] logitech 0003:046D:C293.0049: no inputs found [ 160.691292][T10701] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.702070][T10701] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 160.717071][T10701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 160.808685][ T60] usb 7-1: USB disconnect, device number 26 [ 161.026303][ T792] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 161.206286][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 161.212561][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.223786][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.233555][ T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.246462][ T792] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 161.255478][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.264164][ T792] usb 2-1: config 0 descriptor?? [ 161.345890][T10715] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 161.460957][T10728] binder: 10727:10728 ioctl c0306201 200000000080 returned -22 [ 161.489592][T10730] loop8: detected capacity change from 0 to 4096 [ 161.500988][T10730] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 161.524265][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 161.551144][T10736] loop8: detected capacity change from 0 to 16 [ 161.560591][T10736] erofs: (device loop8): mounted with root inode @ nid 36. [ 161.570266][T10736] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-22] [ 161.578631][T10736] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 161.660311][T10747] loop8: detected capacity change from 0 to 16 [ 161.669489][T10747] erofs: (device loop8): mounted with root inode @ nid 36. [ 161.677181][ T1023] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 161.684581][T10747] erofs: (device loop8): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 161.686159][ T792] hid-generic 0003:0457:07DA.004A: unknown main item tag 0x0 [ 161.694479][T10747] erofs: (device loop8): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 161.701271][ T792] hid-generic 0003:0457:07DA.004A: unknown main item tag 0x0 [ 161.711188][T10747] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 161.717755][ T792] hid-generic 0003:0457:07DA.004A: unknown main item tag 0x0 [ 161.726735][T10747] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 161.734306][ T792] hid-generic 0003:0457:07DA.004A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 161.877319][ T1023] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.887664][ T1023] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.887709][ T60] usb 2-1: USB disconnect, device number 28 [ 161.904089][ T1023] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.916326][ T1023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.924296][ T1023] usb 7-1: SerialNumber: syz [ 161.930118][ T1023] usb 7-1: bad CDC descriptors [ 161.939696][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 161.939709][ T28] audit: type=1326 audit(2000262506.306:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 161.969978][ T28] audit: type=1326 audit(2000262506.306:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 161.993437][ T28] audit: type=1326 audit(2000262506.306:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.016963][ T28] audit: type=1326 audit(2000262506.306:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.040512][ T28] audit: type=1326 audit(2000262506.306:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.064136][ T28] audit: type=1326 audit(2000262506.306:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.089773][ T2135] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 162.097600][ T28] audit: type=1326 audit(2000262506.306:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.122468][ T28] audit: type=1326 audit(2000262506.306:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.157611][ T60] usb 7-1: USB disconnect, device number 27 [ 162.165562][ T28] audit: type=1326 audit(2000262506.306:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.189194][ T28] audit: type=1326 audit(2000262506.306:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13f78e929 code=0x7fc00000 [ 162.307415][ T2135] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 162.318322][ T2135] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 162.331133][ T2135] usb 9-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 162.340352][ T2135] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.348973][ T2135] usb 9-1: config 0 descriptor?? [ 162.354196][T10752] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 162.513767][T10775] loop7: detected capacity change from 0 to 256 [ 162.526314][ T1023] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 162.707971][ T1023] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 162.709449][T10797] loop6: detected capacity change from 0 to 256 [ 162.730683][ T1023] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.733563][T10797] exfat: Deprecated parameter 'utf8' [ 162.747276][T10797] exfat: Deprecated parameter 'namecase' [ 162.761866][ T1023] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 162.767413][ T2135] apple 0003:05AC:0264.004B: unbalanced delimiter at end of report description [ 162.785119][ T1023] usb 6-1: config 0 interface 0 has no altsetting 0 [ 162.785180][ T1023] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 162.785231][ T1023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.795973][ T1023] usb 6-1: config 0 descriptor?? [ 162.804341][ T2135] apple 0003:05AC:0264.004B: parse failed [ 162.833437][T10797] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 162.846338][ T2135] apple: probe of 0003:05AC:0264.004B failed with error -22 [ 162.901672][T10789] loop1: detected capacity change from 0 to 40427 [ 162.914505][T10789] F2FS-fs (loop1): heap/no_heap options were deprecated [ 162.932089][T10789] F2FS-fs (loop1): invalid crc value [ 162.946041][T10789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.994943][ T6] usb 9-1: USB disconnect, device number 14 [ 162.996084][T10813] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4646'. [ 163.012725][T10813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.017546][T10789] F2FS-fs (loop1): Start checkpoint disabled! [ 163.034662][T10789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 163.150507][T10823] loop1: detected capacity change from 0 to 256 [ 163.157248][T10823] exfat: Deprecated parameter 'utf8' [ 163.162683][T10823] exfat: Deprecated parameter 'namecase' [ 163.171555][T10823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 163.211956][T10827] mmap: syz.1.4651 (10827): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 163.336292][ T304] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 163.407752][ T1023] usb 6-1: string descriptor 0 read error: -71 [ 163.414823][ T1023] uclogic 0003:5543:004D.004C: failed retrieving string descriptor #200: -71 [ 163.423982][ T1023] uclogic 0003:5543:004D.004C: failed retrieving pen parameters: -71 [ 163.432389][ T1023] uclogic 0003:5543:004D.004C: failed probing pen v2 parameters: -71 [ 163.440991][ T1023] uclogic 0003:5543:004D.004C: failed probing parameters: -71 [ 163.447415][T10837] loop7: detected capacity change from 0 to 512 [ 163.448835][ T1023] uclogic: probe of 0003:5543:004D.004C failed with error -71 [ 163.467978][T10837] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 163.471708][ T1023] usb 6-1: USB disconnect, device number 22 [ 163.479471][T10837] EXT4-fs (loop7): 1 truncate cleaned up [ 163.490758][T10837] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 163.526293][ T304] usb 7-1: Using ep0 maxpacket: 16 [ 163.527280][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 163.537728][ T304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.559576][ T304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.571712][ T304] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.584794][ T304] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.594364][ T304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.603383][ T304] usb 7-1: config 0 descriptor?? [ 163.976293][ T60] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 164.011807][ T304] microsoft 0003:045E:07DA.004D: No inputs registered, leaving [ 164.019719][ T304] microsoft 0003:045E:07DA.004D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 164.031407][ T304] microsoft 0003:045E:07DA.004D: no inputs found [ 164.037764][ T304] microsoft 0003:045E:07DA.004D: could not initialize ff, continuing anyway [ 164.167433][ T60] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 164.175692][ T60] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 164.184612][ T60] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.194962][ T60] usb 9-1: config 220 has no interface number 2 [ 164.201256][ T60] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.214398][ T60] usb 9-1: config 220 interface 0 has no altsetting 0 [ 164.221213][ T60] usb 9-1: config 220 interface 76 has no altsetting 0 [ 164.222227][ T1023] usb 7-1: USB disconnect, device number 28 [ 164.228096][ T60] usb 9-1: config 220 interface 1 has no altsetting 0 [ 164.231978][ T60] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.250014][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.258014][ T60] usb 9-1: Product: syz [ 164.262167][ T60] usb 9-1: Manufacturer: syz [ 164.266785][ T60] usb 9-1: SerialNumber: syz [ 164.475431][ T60] usb 9-1: selecting invalid altsetting 0 [ 164.481228][ T60] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 164.487614][ T60] usb 9-1: No valid video chain found. [ 164.497985][ T60] usb 9-1: USB disconnect, device number 15 [ 164.747572][T10881] loop6: detected capacity change from 0 to 256 [ 164.757012][T10881] exfat: Deprecated parameter 'utf8' [ 164.762369][T10881] exfat: Deprecated parameter 'namecase' [ 164.773381][T10881] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 164.930279][T10915] loop1: detected capacity change from 0 to 1024 [ 164.960226][T10922] loop5: detected capacity change from 0 to 256 [ 164.970832][T10922] exfat: Deprecated parameter 'utf8' [ 164.973313][T10915] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.4700: Failed to acquire dquot type 0 [ 164.976470][T10922] exfat: Deprecated parameter 'namecase' [ 165.001400][T10915] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 165.010584][T10927] loop8: detected capacity change from 0 to 512 [ 165.017084][T10915] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.4700: corrupted inode contents [ 165.031732][T10922] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 165.060566][T10915] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #13: comm syz.1.4700: mark_inode_dirty error [ 165.073232][T10927] EXT4-fs (loop8): Test dummy encryption mode enabled [ 165.080084][T10927] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 165.106401][T10915] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.4700: corrupted inode contents [ 165.136038][T10927] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4695: bad orphan inode 131083 [ 165.147366][T10915] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.4700: mark_inode_dirty error [ 165.157508][T10925] loop6: detected capacity change from 0 to 40427 [ 165.171495][T10915] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.4700: corrupted inode contents [ 165.174548][T10927] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 165.194481][T10915] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 165.210878][T10925] F2FS-fs (loop6): invalid crc value [ 165.217171][T10915] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.4700: corrupted inode contents [ 165.219282][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 165.234437][T10931] device gretap0 entered promiscuous mode [ 165.240578][T10915] EXT4-fs error (device loop1): ext4_truncate:4314: inode #13: comm syz.1.4700: mark_inode_dirty error [ 165.240853][T10931] device vlan2 entered promiscuous mode [ 165.253480][T10925] F2FS-fs (loop6): Found nat_bits in checkpoint [ 165.259682][T10915] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 165.287103][T10915] EXT4-fs (loop1): 1 truncate cleaned up [ 165.292770][T10915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.317830][T10925] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 165.342079][T10915] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 165.350750][T10915] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 165.360689][T10915] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 165.393065][ T285] EXT4-fs (loop1): unmounting filesystem. [ 165.408649][T10937] loop5: detected capacity change from 0 to 16 [ 165.417397][T10937] erofs: (device loop5): mounted with root inode @ nid 36. [ 165.499468][T10944] loop8: detected capacity change from 0 to 128 [ 165.525725][T10944] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 165.544619][T10944] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.567285][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 165.636959][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 165.732256][T10925] F2FS-fs (loop6): fault_injection options not supported [ 165.747410][T10925] F2FS-fs (loop6): Image doesn't support compression [ 165.754634][T10925] F2FS-fs (loop6): LFS is not compatible with IPU [ 165.839810][T10974] loop5: detected capacity change from 0 to 16 [ 165.851569][T10974] erofs: (device loop5): mounted with root inode @ nid 36. [ 166.012043][T10976] loop6: detected capacity change from 0 to 40427 [ 166.018936][ T6] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 166.034611][T10976] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 166.046537][T10976] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 166.056953][T10976] F2FS-fs (loop6): invalid crc value [ 166.063918][T10976] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 166.104933][T10976] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 166.112400][T10976] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 166.145262][T10976] fscrypt (loop6, inode 3): Error -61 getting encryption context [ 166.227348][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.248512][ T6] usb 2-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 166.256974][T11010] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.272063][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.281253][ T6] usb 2-1: Product: syz [ 166.288673][ T6] usb 2-1: Manufacturer: syz [ 166.293604][ T6] usb 2-1: SerialNumber: syz [ 166.300019][ T6] usb 2-1: config 0 descriptor?? [ 166.498433][T11037] netlink: 'syz.5.4746': attribute type 1 has an invalid length. [ 166.513106][ T60] usb 2-1: USB disconnect, device number 29 [ 166.746302][ T304] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 166.806300][ T39] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 166.926294][ T304] usb 7-1: Using ep0 maxpacket: 32 [ 166.932468][ T304] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 166.945458][ T304] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 166.954518][ T304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.963106][ T304] usb 7-1: config 0 descriptor?? [ 166.986294][ T6] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 166.997353][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.008478][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.018317][ T39] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 167.027487][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.036077][ T39] usb 9-1: config 0 descriptor?? [ 167.169779][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.178033][ T6] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 167.185598][ T6] usb 2-1: can't read configurations, error -71 [ 167.370814][ T304] elecom 0003:056E:00FE.004E: item fetching failed at offset 2/5 [ 167.378874][ T304] elecom: probe of 0003:056E:00FE.004E failed with error -22 [ 167.443870][ T39] zydacron 0003:13EC:0006.004F: item fetching failed at offset 1/5 [ 167.452136][ T39] zydacron 0003:13EC:0006.004F: parse failed [ 167.458274][ T39] zydacron: probe of 0003:13EC:0006.004F failed with error -22 [ 167.572303][ T1023] usb 7-1: USB disconnect, device number 29 [ 167.638609][T11054] SELinux: Context system_u:object_r:kvm_device_t:s0 is not valid (left unmapped). [ 167.648270][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 167.648283][ T28] audit: type=1400 audit(2000262512.016:880): avc: denied { relabelto } for pid=11053 comm="syz.7.4752" name="488" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 167.652281][ T792] usb 9-1: USB disconnect, device number 16 [ 167.685120][ T28] audit: type=1400 audit(2000262512.016:881): avc: denied { associate } for pid=11053 comm="syz.7.4752" name="488" dev="tmpfs" ino=2529 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kvm_device_t:s0" [ 167.728844][ T28] audit: type=1400 audit(2000262512.096:882): avc: denied { write } for pid=4678 comm="syz-executor" name="488" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 167.762580][ T28] audit: type=1400 audit(2000262512.096:883): avc: denied { remove_name } for pid=4678 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 167.791907][ T28] audit: type=1400 audit(2000262512.096:884): avc: denied { rmdir } for pid=4678 comm="syz-executor" name="488" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 167.863327][T11067] netlink: 'syz.1.4769': attribute type 7 has an invalid length. [ 167.871204][T11067] netlink: 'syz.1.4769': attribute type 8 has an invalid length. [ 167.888527][T11071] syz.1.4760[11071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.888599][T11071] syz.1.4760[11071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.911717][T11073] loop1: detected capacity change from 0 to 256 [ 167.941512][T11073] FAT-fs (loop1): Directory bread(block 64) failed [ 167.948160][T11073] FAT-fs (loop1): Directory bread(block 65) failed [ 167.954719][T11073] FAT-fs (loop1): Directory bread(block 66) failed [ 167.961304][T11073] FAT-fs (loop1): Directory bread(block 67) failed [ 167.968344][T11073] FAT-fs (loop1): Directory bread(block 68) failed [ 167.975127][T11073] FAT-fs (loop1): Directory bread(block 69) failed [ 167.981732][T11073] FAT-fs (loop1): Directory bread(block 70) failed [ 167.988335][T11073] FAT-fs (loop1): Directory bread(block 71) failed [ 167.994886][T11073] FAT-fs (loop1): Directory bread(block 72) failed [ 168.001493][T11073] FAT-fs (loop1): Directory bread(block 73) failed [ 168.175714][T11085] loop1: detected capacity change from 0 to 512 [ 168.188552][T11085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.197747][T11085] ext4 filesystem being mounted at /1092/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.221537][ T285] EXT4-fs (loop1): unmounting filesystem. [ 168.238750][T11089] loop1: detected capacity change from 0 to 512 [ 168.265192][T11092] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.293124][T11089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.293704][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4771'. [ 168.302676][T11089] ext4 filesystem being mounted at /1093/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.319145][T11099] loop8: detected capacity change from 0 to 1024 [ 168.343203][T11099] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 168.353879][T11099] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 168.364576][T11099] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.4772: Failed to acquire dquot type 0 [ 168.379448][ T285] EXT4-fs (loop1): unmounting filesystem. [ 168.386454][T11099] EXT4-fs error (device loop8): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 168.391989][T11102] loop5: detected capacity change from 0 to 16 [ 168.401486][T11099] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #13: comm syz.8.4772: corrupted inode contents [ 168.407582][ T39] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 168.427100][T11099] EXT4-fs error (device loop8): ext4_dirty_inode:6120: inode #13: comm syz.8.4772: mark_inode_dirty error [ 168.441248][T11099] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #13: comm syz.8.4772: corrupted inode contents [ 168.446365][T11102] erofs: (device loop5): mounted with root inode @ nid 36. [ 168.466816][T11099] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #13: comm syz.8.4772: mark_inode_dirty error [ 168.479276][T11102] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 168.482795][T11099] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #13: comm syz.8.4772: corrupted inode contents [ 168.490250][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 168.501290][T11099] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 168.512151][T11102] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 168.520962][T11099] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #13: comm syz.8.4772: corrupted inode contents [ 168.543401][T11099] EXT4-fs error (device loop8): ext4_truncate:4314: inode #13: comm syz.8.4772: mark_inode_dirty error [ 168.554900][T11099] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 168.564497][T11099] EXT4-fs (loop8): 1 truncate cleaned up [ 168.570541][T11099] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 168.615698][T11099] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 168.624637][T11099] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 168.631137][ T28] audit: type=1400 audit(2000262512.996:885): avc: denied { read } for pid=11110 comm="syz.5.4778" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.638824][ T39] usb 7-1: unable to get BOS descriptor or descriptor too short [ 168.661564][T11099] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 168.676135][ T39] usb 7-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 168.747297][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 168.748170][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.780471][ T39] usb 7-1: Product: syz [ 168.785932][ T39] usb 7-1: Manufacturer: syz [ 168.795803][ T39] usb 7-1: SerialNumber: syz [ 168.812730][ T39] usb 7-1: config 0 descriptor?? [ 168.837143][T11124] loop8: detected capacity change from 0 to 512 [ 168.872581][T11124] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 168.885513][T11124] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.919503][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 169.022310][T11126] loop7: detected capacity change from 0 to 40427 [ 169.062329][T11126] F2FS-fs (loop7): fault_injection options not supported [ 169.069561][T11126] F2FS-fs (loop7): fault_type options not supported [ 169.076585][T11126] F2FS-fs (loop7): Image doesn't support compression [ 169.083472][T11126] F2FS-fs (loop7): Image doesn't support compression [ 169.096752][T11126] F2FS-fs (loop7): invalid crc value [ 169.105750][T11150] loop5: detected capacity change from 0 to 512 [ 169.119474][T11126] F2FS-fs (loop7): Found nat_bits in checkpoint [ 169.119565][ T6] usb 7-1: USB disconnect, device number 30 [ 169.170614][T11126] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 169.178339][T11150] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.196349][T11150] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.222701][ T4678] syz-executor: attempt to access beyond end of device [ 169.222701][ T4678] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.237798][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 169.362365][T11172] loop5: detected capacity change from 0 to 1024 [ 169.389654][T11172] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 169.400313][T11177] loop1: detected capacity change from 0 to 1024 [ 169.404237][T11172] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 169.423577][T11172] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #3: comm syz.5.4806: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 169.447260][T11172] EXT4-fs (loop5): no journal found [ 169.452485][T11172] EXT4-fs (loop5): can't get journal size [ 169.460531][T11177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.474473][T11172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.488516][T11177] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.4808: inode #12: comm syz.1.4808: iget: illegal inode # [ 169.510039][T11177] EXT4-fs (loop1): Remounting filesystem read-only [ 169.525471][T11177] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.4808: inode #12: comm syz.1.4808: iget: illegal inode # [ 169.538525][T11172] EXT4-fs (loop5): unmounting filesystem. [ 169.544788][T11177] EXT4-fs (loop1): Remounting filesystem read-only [ 169.563845][ T285] EXT4-fs (loop1): unmounting filesystem. [ 169.686267][ T6] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 169.794233][ T28] audit: type=1400 audit(2000262514.156:886): avc: denied { create } for pid=11228 comm="syz.5.4830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 169.853117][T11214] loop1: detected capacity change from 0 to 40427 [ 169.868299][T11214] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 169.878116][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 169.882531][T11214] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 169.894382][ T6] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 169.912436][ T6] usb 7-1: can't read configurations, error -71 [ 169.913441][T11214] F2FS-fs (loop1): invalid crc value [ 169.933519][T11238] loop7: detected capacity change from 0 to 512 [ 169.938318][T11214] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 169.948057][T11238] EXT4-fs: Ignoring removed i_version option [ 169.969643][T11238] EXT4-fs: Ignoring removed nobh option [ 169.980564][T11214] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 169.987822][T11238] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 169.996359][T11214] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 169.999210][T11238] EXT4-fs (loop7): 1 truncate cleaned up [ 170.011307][T11238] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 170.051599][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 170.059043][T11214] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 170.225619][T11270] loop8: detected capacity change from 0 to 256 [ 170.251875][T11270] exfat: Deprecated parameter 'namecase' [ 170.279002][T11270] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 170.312216][T11278] loop5: detected capacity change from 0 to 1024 [ 170.327521][T11258] loop7: detected capacity change from 0 to 40427 [ 170.334503][T11278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.367385][T11258] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 170.373953][T11258] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 170.381356][T11278] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.395717][T11258] F2FS-fs (loop7): invalid crc value [ 170.401263][T11278] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.439988][T11278] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 170.463510][T11278] EXT4-fs (loop5): Remounting filesystem read-only [ 170.475257][T11258] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 170.492439][ T7908] EXT4-fs (loop5): unmounting filesystem. [ 170.543225][T11258] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 170.556653][T11258] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 170.634306][ T4678] syz-executor: attempt to access beyond end of device [ 170.634306][ T4678] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.811147][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4874'. [ 170.836418][T11336] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 170.866306][ T792] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 170.972442][T11349] loop8: detected capacity change from 0 to 256 [ 170.980433][T11349] exfat: Deprecated parameter 'namecase' [ 170.998330][T11349] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xeb999a00, utbl_chksum : 0xe619d30d) [ 171.056333][ T792] usb 6-1: Using ep0 maxpacket: 16 [ 171.056896][T11354] loop8: detected capacity change from 0 to 4096 [ 171.063063][ T792] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.070602][T11354] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 171.108745][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 171.120749][ T792] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.159222][ T792] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.197730][T11363] loop7: detected capacity change from 0 to 1024 [ 171.211212][ T792] usb 6-1: config 0 interface 0 has no altsetting 0 [ 171.219427][ T792] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 171.232065][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.232456][T11328] loop6: detected capacity change from 0 to 131072 [ 171.243828][ T792] usb 6-1: config 0 descriptor?? [ 171.268208][T11363] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 171.281059][T11374] loop8: detected capacity change from 0 to 256 [ 171.294057][T11328] F2FS-fs (loop6): Found nat_bits in checkpoint [ 171.307029][T11363] EXT4-fs error (device loop7): ext4_lookup:1858: comm syz.7.4887: inode #12: comm syz.7.4887: iget: illegal inode # [ 171.330749][T11363] EXT4-fs (loop7): Remounting filesystem read-only [ 171.343783][T11374] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.351624][T11363] EXT4-fs error (device loop7): ext4_lookup:1858: comm syz.7.4887: inode #12: comm syz.7.4887: iget: illegal inode # [ 171.384323][T11363] EXT4-fs (loop7): Remounting filesystem read-only [ 171.405973][T11328] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 171.425071][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 171.662436][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4902'. [ 171.665185][ T792] hid (null): unknown global tag 0xd [ 171.687041][ T792] hid (null): global environment stack underflow [ 171.694564][ T792] hid (null): usage index exceeded [ 171.729554][T11403] loop8: detected capacity change from 0 to 256 [ 171.772265][T11405] loop6: detected capacity change from 0 to 256 [ 171.780012][T11407] loop8: detected capacity change from 0 to 256 [ 171.853732][ T28] audit: type=1400 audit(2000262516.216:887): avc: denied { write } for pid=11412 comm="syz.7.4908" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 171.884766][ T792] usb 6-1: USB disconnect, device number 23 [ 172.092756][T11452] netlink: 'syz.8.4928': attribute type 2 has an invalid length. [ 172.111747][T11452] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4928'. [ 172.126580][T11452] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 172.296473][T11464] loop8: detected capacity change from 0 to 256 [ 172.327491][T11464] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4933'. [ 172.398258][T11456] loop7: detected capacity change from 0 to 40427 [ 172.426615][T11456] F2FS-fs (loop7): fault_injection options not supported [ 172.434391][T11456] F2FS-fs (loop7): invalid crc value [ 172.457004][T11460] loop6: detected capacity change from 0 to 40427 [ 172.472909][T11456] F2FS-fs (loop7): Found nat_bits in checkpoint [ 172.479717][T11460] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 172.486059][T11460] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 172.521293][T11460] F2FS-fs (loop6): invalid crc value [ 172.532170][T11456] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 172.538401][T11460] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 172.569577][ T4678] syz-executor: attempt to access beyond end of device [ 172.569577][ T4678] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.603420][T11460] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 172.618785][T11460] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 172.656264][ T792] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 172.746027][ T1253] syz-executor: attempt to access beyond end of device [ 172.746027][ T1253] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.836284][ T792] usb 9-1: Using ep0 maxpacket: 16 [ 172.842345][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4960'. [ 172.853031][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.878473][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.889608][ T792] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.905799][ T792] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.917034][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4964'. [ 172.921035][T11538] loop6: detected capacity change from 0 to 256 [ 172.930713][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.949531][ T792] usb 9-1: config 0 descriptor?? [ 173.112503][T11564] loop7: detected capacity change from 0 to 1024 [ 173.129297][T11564] EXT4-fs: Ignoring removed bh option [ 173.143684][T11564] EXT4-fs error (device loop7): ext4_quota_enable:7009: comm syz.7.4976: inode #2304: comm syz.7.4976: iget: illegal inode # [ 173.158265][T11564] EXT4-fs (loop7): Remounting filesystem read-only [ 173.164841][T11564] EXT4-fs error (device loop7): ext4_quota_enable:7012: comm syz.7.4976: Bad quota inode: 2304, type: 2 [ 173.176916][T11564] EXT4-fs (loop7): Remounting filesystem read-only [ 173.183476][T11564] EXT4-fs warning (device loop7): ext4_enable_quotas:7053: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 173.199004][T11564] EXT4-fs (loop7): mount failed [ 173.271195][T11570] loop7: detected capacity change from 0 to 1024 [ 173.289898][T11570] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #3: block 1: comm syz.7.4978: lblock 1 mapped to illegal pblock 1 (length 1) [ 173.310616][T11570] __quota_error: 2 callbacks suppressed [ 173.310635][T11570] Quota error (device loop7): write_blk: dquota write failed [ 173.323660][T11570] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 173.333771][T11570] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.4978: Failed to acquire dquot type 0 [ 173.336304][ T313] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 173.345244][T11570] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.4978: Freeing blocks not in datazone - block = 0, count = 4096 [ 173.367658][ T792] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 173.368091][T11570] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.4978: Invalid inode bitmap blk 0 in block_group 0 [ 173.378292][ T792] microsoft 0003:045E:07DA.0051: unknown main item tag 0x1 [ 173.395322][ T792] microsoft 0003:045E:07DA.0051: No inputs registered, leaving [ 173.396638][T11570] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 173.403573][ T792] microsoft 0003:045E:07DA.0051: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 173.423030][ T792] microsoft 0003:045E:07DA.0051: no inputs found [ 173.426886][T11570] EXT4-fs (loop7): 1 orphan inode deleted [ 173.429515][ T792] microsoft 0003:045E:07DA.0051: could not initialize ff, continuing anyway [ 173.453798][T11570] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 173.462785][ T3560] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 173.477730][ T3560] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 173.506596][ T3560] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 0 [ 173.527409][ T313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.538855][ T313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.549168][ T313] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 173.562436][ T313] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 173.571548][ T313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.597224][ T313] usb 6-1: config 0 descriptor?? [ 173.602485][ T10] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 173.622911][ T792] usb 9-1: USB disconnect, device number 17 [ 173.629474][ T10] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 173.638949][ T10] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 0 [ 173.651022][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 173.694117][T11565] loop6: detected capacity change from 0 to 131072 [ 173.704342][T11565] F2FS-fs (loop6): invalid crc value [ 173.710996][T11565] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 173.741338][T11565] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 173.924652][T11592] netlink: 'syz.1.4986': attribute type 1 has an invalid length. [ 173.954754][ T28] audit: type=1400 audit(2000262518.316:890): avc: denied { bind } for pid=11593 comm="syz.7.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.004804][ T313] logitech 0003:046D:CA04.0052: unknown main item tag 0x4 [ 174.019224][ T313] logitech 0003:046D:CA04.0052: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0 [ 174.035792][ T313] logitech 0003:046D:CA04.0052: no inputs found [ 174.072409][T11612] loop7: detected capacity change from 0 to 16 [ 174.080382][T11612] erofs: (device loop7): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 174.212323][ T6] usb 6-1: USB disconnect, device number 24 [ 174.270142][T11648] loop6: detected capacity change from 0 to 256 [ 174.298904][T11644] loop8: detected capacity change from 0 to 4096 [ 174.321480][T11648] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 174.350536][T11644] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 174.363111][T11656] loop1: detected capacity change from 0 to 8192 [ 174.387871][T11656] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 174.426810][T11644] fs-verity (loop8, inode 16): Unknown hash algorithm number: 0 [ 174.461364][T11656] FAT-fs (loop1): Filesystem has been set read-only [ 174.487303][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 174.540274][T11661] loop7: detected capacity change from 0 to 40427 [ 174.555600][T11661] F2FS-fs (loop7): fault_injection options not supported [ 174.576074][T11661] F2FS-fs (loop7): invalid crc value [ 174.606579][T11661] F2FS-fs (loop7): Found nat_bits in checkpoint [ 174.653136][T11674] netlink: 79 bytes leftover after parsing attributes in process `syz.1.5023'. [ 174.666296][T11661] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 174.681009][T11664] loop6: detected capacity change from 0 to 40427 [ 174.698498][T11664] F2FS-fs (loop6): invalid crc value [ 174.717109][ T4678] syz-executor: attempt to access beyond end of device [ 174.717109][ T4678] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.739649][T11664] F2FS-fs (loop6): Found nat_bits in checkpoint [ 174.836323][T11664] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 174.845394][T11669] loop8: detected capacity change from 0 to 40427 [ 174.884850][T11669] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 174.898022][T11669] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 174.907479][T11669] F2FS-fs (loop8): invalid crc value [ 174.928836][T11669] F2FS-fs (loop8): Found nat_bits in checkpoint [ 174.975654][T11677] loop1: detected capacity change from 0 to 40427 [ 174.999356][T11677] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 175.007628][T11677] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.017031][T11677] F2FS-fs (loop1): invalid crc value [ 175.018472][ T6] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 175.023862][T11677] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.037594][T11669] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 175.044729][T11669] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 175.106071][T11677] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 175.115925][T11677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.179228][T11701] loop6: detected capacity change from 0 to 512 [ 175.218940][T11701] EXT4-fs (loop6): 1 orphan inode deleted [ 175.224702][T11701] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 175.236317][ T6] usb 6-1: Using ep0 maxpacket: 32 [ 175.241830][ T10] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 175.256873][T11705] loop8: detected capacity change from 0 to 512 [ 175.266545][T11705] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.273369][T11705] EXT4-fs (loop8): Test dummy encryption mode enabled [ 175.275845][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.296286][ T10] EXT4-fs error (device loop6): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 175.313356][T11705] EXT4-fs (loop8): orphan cleanup on readonly fs [ 175.326292][T11705] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.5028: inode #13: comm syz.8.5028: iget: illegal inode # [ 175.339342][T11701] ext4 filesystem being mounted at /927/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.339388][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.360138][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.370654][T11705] EXT4-fs (loop8): Remounting filesystem read-only [ 175.370853][T11701] EXT4-fs (loop6): unmounting filesystem. [ 175.383469][T11705] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.5028: couldn't read orphan inode 13 (err -117) [ 175.387354][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.405791][T11705] EXT4-fs (loop8): Remounting filesystem read-only [ 175.412504][T11705] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 175.425338][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.434542][T11705] EXT4-fs error (device loop8): ext4_resize_begin:62: comm syz.8.5028: resize_inode disabled but reserved GDT blocks non-zero [ 175.446264][ T6] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.480740][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.491061][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 175.499529][ T6] usb 6-1: config 0 descriptor?? [ 175.706613][ T6] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.758096][T11740] loop6: detected capacity change from 0 to 512 [ 175.773009][T11740] EXT4-fs (loop6): Test dummy encryption mode enabled [ 175.781250][T11740] EXT4-fs error (device loop6): __ext4_iget:5078: inode #11: block 1: comm syz.6.5048: invalid block [ 175.792856][T11740] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5048: couldn't read orphan inode 11 (err -117) [ 175.805237][T11740] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 175.807584][T11688] loop7: detected capacity change from 0 to 131072 [ 175.826770][T11688] F2FS-fs (loop7): Test dummy encryption mode enabled [ 175.834222][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 175.854273][T11688] F2FS-fs (loop7): Found nat_bits in checkpoint [ 175.880968][T11688] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 175.895743][T11688] syz.7.5025 (pid 11688) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 176.016282][ T313] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 176.045785][T11758] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5062'. [ 176.046027][T11759] loop7: detected capacity change from 0 to 256 [ 176.071530][T11759] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 176.171725][T11768] loop6: detected capacity change from 0 to 512 [ 176.207673][ T313] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.208624][T11768] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 176.218865][ T313] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.228545][T11768] ext4 filesystem being mounted at /943/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.237848][ T313] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.265876][ T313] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 176.275023][ T313] usb 9-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 176.284158][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 176.284466][ T313] usb 9-1: Manufacturer: syz [ 176.295121][ T313] usb 9-1: config 0 descriptor?? [ 176.358136][T11784] netlink: 'syz.1.5063': attribute type 4 has an invalid length. [ 176.703878][ T313] kovaplus 0003:1E7D:2D50.0053: item fetching failed at offset 4/5 [ 176.712429][ T313] kovaplus 0003:1E7D:2D50.0053: parse failed [ 176.718534][ T313] kovaplus: probe of 0003:1E7D:2D50.0053 failed with error -22 [ 176.772563][T11791] loop1: detected capacity change from 0 to 131072 [ 176.782202][T11791] F2FS-fs (loop1): invalid crc value [ 176.789060][T11791] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 176.816146][T11791] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 176.949154][ T313] usb 9-1: USB disconnect, device number 18 [ 177.073914][T11831] loop7: detected capacity change from 0 to 512 [ 177.085381][T11833] device bridge_slave_1 left promiscuous mode [ 177.092152][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.094761][T11831] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.113943][T11831] EXT4-fs (loop7): Test dummy encryption mode enabled [ 177.122672][T11831] EXT4-fs (loop7): orphan cleanup on readonly fs [ 177.149538][T11831] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.5083: inode #13: comm syz.7.5083: iget: illegal inode # [ 177.170720][T11831] EXT4-fs (loop7): Remounting filesystem read-only [ 177.179078][T11831] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5083: couldn't read orphan inode 13 (err -117) [ 177.191531][T11831] EXT4-fs (loop7): Remounting filesystem read-only [ 177.198915][T11831] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 177.235895][T11831] EXT4-fs error (device loop7): ext4_resize_begin:62: comm syz.7.5083: resize_inode disabled but reserved GDT blocks non-zero [ 177.262818][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 177.505341][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5099'. [ 177.533549][T11868] incfs: Options parsing error. -22 [ 177.539605][T11868] incfs: mount failed -22 [ 177.604619][T11878] loop6: detected capacity change from 0 to 512 [ 177.616618][T11878] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.632716][T11878] EXT4-fs (loop6): Test dummy encryption mode enabled [ 177.651228][ T28] audit: type=1400 audit(2000262522.016:891): avc: denied { getopt } for pid=11885 comm="syz.1.5109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.672759][T11878] EXT4-fs (loop6): orphan cleanup on readonly fs [ 177.684314][T11878] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.5105: inode #13: comm syz.6.5105: iget: illegal inode # [ 177.689437][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5113'. [ 177.698955][T11878] EXT4-fs (loop6): Remounting filesystem read-only [ 177.712884][T11878] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5105: couldn't read orphan inode 13 (err -117) [ 177.725639][T11878] EXT4-fs (loop6): Remounting filesystem read-only [ 177.734410][T11878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 177.762263][ T304] usb 6-1: USB disconnect, device number 25 [ 177.774676][T11878] EXT4-fs error (device loop6): ext4_resize_begin:62: comm syz.6.5105: resize_inode disabled but reserved GDT blocks non-zero [ 177.788235][ T304] usblp0: removed [ 177.793192][T11902] loop8: detected capacity change from 0 to 512 [ 177.800428][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 177.807490][T11902] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 177.817284][T11902] EXT4-fs error (device loop8): ext4_get_journal_inode:5722: comm syz.8.5116: inode #1661: comm syz.8.5116: iget: illegal inode # [ 177.831337][T11902] EXT4-fs (loop8): no journal found [ 177.838911][T11902] EXT4-fs (loop8): can't get journal size [ 177.848868][T11902] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 177.875807][T11902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c118, mo2=0002] [ 177.883669][T11912] loop7: detected capacity change from 0 to 512 [ 177.892344][T11902] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 177.902283][T11902] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 177.922988][ T5919] EXT4-fs (loop8): unmounting filesystem. [ 177.941850][T11912] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 177.952349][T11912] ext4 filesystem being mounted at /569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.989991][T11927] loop8: detected capacity change from 0 to 512 [ 177.990485][T11912] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 18: comm syz.7.5122: lblock 23 mapped to illegal pblock 18 (length 1) [ 177.990730][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.991217][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.5122: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 177.991638][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.992049][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 12: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 177.992348][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.992372][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 177.992551][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.992571][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 14: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.992730][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.992749][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 15: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 177.992957][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.992977][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 177.993167][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.993187][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 17: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.993457][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.993472][T11912] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 18: comm syz.7.5122: lblock 23 mapped to illegal pblock 18 (length 1) [ 177.993614][T11912] EXT4-fs (loop7): Remounting filesystem read-only [ 177.993658][T11912] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 19: comm syz.7.5122: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 178.014737][T11927] EXT4-fs (loop8): 1 orphan inode deleted [ 178.014761][T11927] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 178.014878][T11927] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.015076][ T43] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 178.015114][ T43] EXT4-fs error (device loop8): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 178.015862][T11927] EXT4-fs (loop8): unmounting filesystem. [ 178.056341][ T39] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 178.065179][ T346] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.237269][ T39] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 178.402689][ T39] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.412995][ T39] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 178.423353][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5127'. [ 178.427466][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.442346][ T39] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 178.456096][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.471963][ T304] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 178.480059][ T39] usb 2-1: config 0 descriptor?? [ 178.667305][ T304] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 178.685412][ T304] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 178.705528][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.727746][ T304] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 178.742106][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.766357][ T60] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 178.794257][T11943] loop7: detected capacity change from 0 to 512 [ 178.806509][T11943] EXT4-fs (loop7): Test dummy encryption mode enabled [ 178.817374][T11943] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.5134: invalid block [ 178.828848][T11943] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5134: couldn't read orphan inode 11 (err -117) [ 178.841686][T11943] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 178.866732][ T4678] EXT4-fs (loop7): unmounting filesystem. [ 178.889994][T11946] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 178.895872][T11946] syzkaller0: linktype set to 778 [ 178.928639][ T313] usb 6-1: USB disconnect, device number 26 [ 178.956261][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 178.964824][ T60] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 178.978821][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.987349][ T60] usb 9-1: Product: syz [ 179.006296][ T60] usb 9-1: Manufacturer: syz [ 179.010942][ T60] usb 9-1: SerialNumber: syz [ 179.026503][ T60] r8152-cfgselector 9-1: config 0 descriptor?? [ 179.102097][ T39] usb 2-1: string descriptor 0 read error: -71 [ 179.114911][ T39] uclogic 0003:5543:004D.0054: failed retrieving string descriptor #200: -71 [ 179.125488][ T39] uclogic 0003:5543:004D.0054: failed retrieving pen parameters: -71 [ 179.133966][ T39] uclogic 0003:5543:004D.0054: failed probing pen v2 parameters: -71 [ 179.142329][ T39] uclogic 0003:5543:004D.0054: failed probing parameters: -71 [ 179.150067][ T39] uclogic: probe of 0003:5543:004D.0054 failed with error -71 [ 179.160760][ T39] usb 2-1: USB disconnect, device number 32 [ 179.303493][T11956] loop7: detected capacity change from 0 to 512 [ 179.328995][T11956] EXT4-fs (loop7): 1 orphan inode deleted [ 179.334818][T11956] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 179.345021][T11956] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.355721][ T3560] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 179.365703][ T3560] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 1 [ 179.387214][T11956] EXT4-fs (loop7): unmounting filesystem. [ 179.433910][ T60] r8152-cfgselector 9-1: Unknown version 0x0000 [ 179.451295][ T60] r8152-cfgselector 9-1: bad CDC descriptors [ 179.464218][ T60] r8152-cfgselector 9-1: Unknown version 0x0000 [ 179.477830][ T60] r8152-cfgselector 9-1: USB disconnect, device number 19 [ 179.486987][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5141'. [ 179.508803][T11968] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5144'. [ 179.703636][T11993] loop5: detected capacity change from 0 to 512 [ 179.724858][T11993] EXT4-fs (loop5): 1 orphan inode deleted [ 179.731031][T11993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 179.740272][T11993] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.744244][ T3560] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 179.763658][ T3560] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 1 [ 179.775998][T11993] EXT4-fs (loop5): unmounting filesystem. [ 179.838969][ T28] audit: type=1326 audit(2000262524.206:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 179.874241][ T28] audit: type=1326 audit(2000262524.206:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 179.909851][ T28] audit: type=1326 audit(2000262524.206:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 179.947867][ T28] audit: type=1400 audit(2000262524.316:895): avc: denied { validate_trans } for pid=12016 comm="syz.5.5176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.995047][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5170'. [ 180.047893][ T28] audit: type=1400 audit(2000262524.416:896): avc: denied { create } for pid=12032 comm="syz.1.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.069642][ T28] audit: type=1400 audit(2000262524.436:897): avc: denied { getopt } for pid=12032 comm="syz.1.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.072606][T12033] tmpfs: Bad value for 'uid' [ 180.125009][ T313] kernel write not supported for file /input/event2 (pid: 313 comm: kworker/0:3) [ 180.144182][ T28] audit: type=1400 audit(2000262524.506:898): avc: denied { listen } for pid=12044 comm="syz.1.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.170096][ T28] audit: type=1400 audit(2000262524.536:899): avc: denied { accept } for pid=12044 comm="syz.1.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.230644][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5183'. [ 180.271922][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5189'. [ 180.280216][T12056] loop1: detected capacity change from 0 to 4096 [ 180.289162][T12056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.298131][T12056] EXT4-fs (loop1): Test dummy encryption mode enabled [ 180.388957][T12069] Â: renamed from pim6reg1 [ 180.618199][T12077] loop5: detected capacity change from 0 to 40427 [ 180.630070][T12077] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 180.638395][T12077] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 180.689461][T12077] F2FS-fs (loop5): Found nat_bits in checkpoint [ 180.752021][T12077] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 180.770371][T12100] loop6: detected capacity change from 0 to 40427 [ 180.785829][T12077] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 180.795911][T12100] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 180.808099][T12077] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 180.816274][T12100] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 180.835294][T12100] F2FS-fs (loop6): invalid crc value [ 180.847672][T12107] loop1: detected capacity change from 0 to 40427 [ 180.850857][T12100] F2FS-fs (loop6): Found nat_bits in checkpoint [ 180.866531][T12107] F2FS-fs (loop1): invalid crc value [ 180.897586][T12107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.906463][T12100] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 180.919175][T12100] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 180.945522][T12107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.986380][ T285] syz-executor: attempt to access beyond end of device [ 180.986380][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.171596][T12126] random: crng reseeded on system resumption [ 181.596266][ T1023] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 181.768731][T12134] loop1: detected capacity change from 0 to 131072 [ 181.779640][ T1023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.786410][T12134] F2FS-fs (loop1): Test dummy encryption mode enabled [ 181.803858][ T1023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.824551][ T1023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 181.839271][T12134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 181.847501][ T1023] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 181.857554][ T1023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.869331][ T1023] usb 7-1: config 0 descriptor?? [ 181.884282][T12134] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 181.972679][T12151] loop5: detected capacity change from 0 to 1024 [ 181.982479][T12151] EXT4-fs: Ignoring removed i_version option [ 181.989553][T12151] EXT4-fs (loop5): Test dummy encryption mode enabled [ 182.041915][T12155] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.048482][T12155] syzkaller0: linktype set to 780 [ 182.139609][T12165] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 182.145118][T12163] loop5: detected capacity change from 0 to 4096 [ 182.160839][T12163] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.5228: corrupted inode contents [ 182.173127][T12163] EXT4-fs error (device loop5): ext4_dirty_inode:6120: inode #15: comm syz.5.5228: mark_inode_dirty error [ 182.184886][T12163] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.5228: corrupted inode contents [ 182.197837][T12163] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.5228: mark_inode_dirty error [ 182.209668][T12163] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.5228: corrupted inode contents [ 182.226279][T12163] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.5228: mark_inode_dirty error [ 182.246811][T12163] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.5228: corrupted inode contents [ 182.269744][T12163] EXT4-fs error (device loop5): ext4_truncate:4314: inode #15: comm syz.5.5228: mark_inode_dirty error [ 182.280487][ T1023] logitech 0003:046D:CA04.0055: unknown main item tag 0x4 [ 182.281857][T12163] EXT4-fs error (device loop5) in ext4_setattr:5659: Corrupt filesystem [ 182.298522][ T1023] logitech 0003:046D:CA04.0055: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.6-1/input0 [ 182.311125][T12169] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.5228: corrupted inode contents [ 182.333402][ T1023] logitech 0003:046D:CA04.0055: no inputs found [ 182.498995][ T1023] usb 7-1: USB disconnect, device number 33 [ 182.781700][T12218] loop1: detected capacity change from 0 to 512 [ 182.801138][T12218] EXT4-fs (loop1): Test dummy encryption mode enabled [ 182.813417][T12218] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.827904][T12218] EXT4-fs (loop1): 1 truncate cleaned up [ 182.849750][T12218] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 182.869653][T12180] loop8: detected capacity change from 0 to 131072 [ 182.877433][T12180] F2FS-fs (loop8): Test dummy encryption mode enabled [ 182.918746][T12180] F2FS-fs (loop8): Found nat_bits in checkpoint [ 182.957589][T12180] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 183.009720][T12235] loop5: detected capacity change from 0 to 512 [ 183.028696][T12235] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 183.044185][ T43] tipc: Disabling bearer [ 183.049357][ T43] tipc: Disabling bearer [ 183.067207][ T43] tipc: Left network mode [ 183.072743][T12235] EXT4-fs (loop5): invalid journal inode [ 183.096370][T12235] EXT4-fs (loop5): can't get journal size [ 183.128176][T12235] EXT4-fs (loop5): 1 truncate cleaned up [ 183.191669][T12233] loop7: detected capacity change from 0 to 40427 [ 183.231742][T12233] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 183.263166][T12233] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 183.288747][T12233] F2FS-fs (loop7): invalid crc value [ 183.344937][T12233] F2FS-fs (loop7): Found nat_bits in checkpoint [ 183.369026][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5272'. [ 183.406792][T12267] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 183.446474][T12233] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 183.453800][T12233] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 183.514039][T12283] loop8: detected capacity change from 0 to 256 [ 183.521148][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.542196][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.550732][T12266] device bridge_slave_0 entered promiscuous mode [ 183.559680][T12283] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 183.587881][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.595247][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.602999][T12266] device bridge_slave_1 entered promiscuous mode [ 183.615637][T12283] exFAT-fs (loop8): hint_cluster is invalid (17) [ 183.658881][T12283] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff) [ 183.668081][ T43] device bridge_slave_0 left promiscuous mode [ 183.674236][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.688144][T12283] exFAT-fs (loop8): Filesystem has been set read-only [ 183.710566][ T43] device veth1_macvtap left promiscuous mode [ 183.716932][ T43] device veth0_vlan left promiscuous mode [ 183.826025][T12294] loop7: detected capacity change from 0 to 40427 [ 183.834975][T12294] F2FS-fs (loop7): heap/no_heap options were deprecated [ 183.848781][T12294] F2FS-fs (loop7): invalid crc value [ 183.862882][T12294] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 183.899124][T12294] F2FS-fs (loop7): Found nat_bits in checkpoint [ 183.920498][T12312] loop5: detected capacity change from 0 to 512 [ 183.944977][T12312] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.972539][T12294] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 183.987392][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.994445][T12266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.994930][T12312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 184.001745][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.009906][T12312] System zones: [ 184.016596][T12266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.027576][T12312] 1-12 [ 184.030833][T12312] EXT4-fs (loop5): orphan cleanup on readonly fs [ 184.044270][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.051652][T12312] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 184.052606][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.065051][T12312] EXT4-fs (loop5): 1 truncate cleaned up [ 184.091513][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.116793][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.133767][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.145331][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.152861][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.170872][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.179225][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.187270][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.195390][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.226154][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.242652][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.254284][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.254582][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.255404][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.255675][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.289162][T12266] device veth0_vlan entered promiscuous mode [ 184.302555][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.302795][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.304442][T12266] device veth1_macvtap entered promiscuous mode [ 184.308462][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.336969][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.345428][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.364058][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.372776][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.423180][T12336] syz.7.5299[12336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.423252][T12336] syz.7.5299[12336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.572285][T12354] loop5: detected capacity change from 0 to 512 [ 184.608202][T12354] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.644277][T12344] loop7: detected capacity change from 0 to 40427 [ 184.653952][T12344] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 184.661924][T12344] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 184.670392][ T792] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 184.670555][T12354] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 18: comm syz.5.5308: lblock 23 mapped to illegal pblock 18 (length 1) [ 184.692479][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.693276][T12344] F2FS-fs (loop7): Found nat_bits in checkpoint [ 184.712645][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.5308: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 184.729451][T12344] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 184.732641][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.748322][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 184.772301][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.778976][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 184.781537][T12344] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 184.800761][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.816493][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.836981][T12344] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 184.837684][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.856549][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 184.856747][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.856771][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 184.856902][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.856921][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.857053][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.857066][T12354] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 18: comm syz.5.5308: lblock 23 mapped to illegal pblock 18 (length 1) [ 184.857175][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.857207][T12354] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.5308: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 184.857328][T12354] EXT4-fs (loop5): Remounting filesystem read-only [ 184.867489][ T792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.867523][ T792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.867545][ T792] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 184.867579][ T792] usb 10-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 184.867603][ T792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.868243][ T792] usb 10-1: config 0 descriptor?? [ 185.296407][T12387] loop7: detected capacity change from 0 to 512 [ 185.335000][T12387] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 185.381859][T12393] loop6: detected capacity change from 0 to 512 [ 185.389077][T12387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 185.416951][T12387] System zones: 1-12 [ 185.422260][T12387] EXT4-fs (loop7): orphan cleanup on readonly fs [ 185.437508][T12393] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.5322: iget: bad extended attribute block 1 [ 185.450377][T12387] EXT4-fs (loop7): 1 truncate cleaned up [ 185.466958][T12393] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5322: couldn't read orphan inode 15 (err -117) [ 185.467946][ T792] logitech 0003:046D:CA04.0056: unknown main item tag 0x4 [ 185.487184][ T792] logitech 0003:046D:CA04.0056: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.9-1/input0 [ 185.498795][ T792] logitech 0003:046D:CA04.0056: no inputs found [ 185.531621][T12398] loop7: detected capacity change from 0 to 512 [ 185.556409][T12379] loop8: detected capacity change from 0 to 40427 [ 185.566807][T12398] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 185.583856][T12379] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 185.591849][T12398] EXT4-fs (loop7): invalid journal inode [ 185.597682][T12379] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 185.616068][T12398] EXT4-fs (loop7): can't get journal size [ 185.624992][T12379] F2FS-fs (loop8): invalid crc value [ 185.634275][T12398] EXT4-fs (loop7): 1 truncate cleaned up [ 185.661363][T12379] F2FS-fs (loop8): Found nat_bits in checkpoint [ 185.665944][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 185.665959][ T28] audit: type=1400 audit(2000262530.026:906): avc: denied { lock } for pid=12405 comm="syz.6.5326" path="socket:[59806]" dev="sockfs" ino=59806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 185.719430][ T792] usb 10-1: USB disconnect, device number 2 [ 185.745088][T12379] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 185.752571][T12379] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 185.786580][ T43] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 185.800504][ T43] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 185.831041][T12419] loop7: detected capacity change from 0 to 4096 [ 185.888789][T12419] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #15: comm syz.7.5332: corrupted inode contents [ 185.907589][T12419] EXT4-fs error (device loop7): ext4_dirty_inode:6120: inode #15: comm syz.7.5332: mark_inode_dirty error [ 185.920451][T12419] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #15: comm syz.7.5332: corrupted inode contents [ 185.950307][T12419] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.5332: mark_inode_dirty error [ 185.967077][T12419] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #15: comm syz.7.5332: corrupted inode contents [ 185.983161][T12437] loop6: detected capacity change from 0 to 256 [ 185.995483][T12419] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.5332: mark_inode_dirty error [ 186.002239][T12439] loop8: detected capacity change from 0 to 512 [ 186.021384][T12439] EXT4-fs (loop8): Test dummy encryption mode enabled [ 186.025968][T12419] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #15: comm syz.7.5332: corrupted inode contents [ 186.042479][T12437] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 186.044150][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5341'. [ 186.055000][T12439] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 186.064774][T12419] EXT4-fs error (device loop7): ext4_truncate:4314: inode #15: comm syz.7.5332: mark_inode_dirty error [ 186.080188][T12437] exFAT-fs (loop6): hint_cluster is invalid (17) [ 186.091859][T12419] EXT4-fs error (device loop7) in ext4_setattr:5659: Corrupt filesystem [ 186.092132][T12437] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 186.109229][T12435] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #15: comm syz.7.5332: corrupted inode contents [ 186.109698][T12439] EXT4-fs (loop8): 1 truncate cleaned up [ 186.126930][T12437] exFAT-fs (loop6): Filesystem has been set read-only [ 186.198681][ T28] audit: type=1326 audit(2000262530.566:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.229025][T12439] EXT4-fs (loop8): Online resizing not supported with sparse_super2 [ 186.248156][ T28] audit: type=1326 audit(2000262530.566:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.321809][ T28] audit: type=1326 audit(2000262530.566:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.379702][ T28] audit: type=1326 audit(2000262530.566:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.449494][T12462] loop9: detected capacity change from 0 to 1024 [ 186.466760][ T28] audit: type=1326 audit(2000262530.566:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.500431][T12462] EXT4-fs: Ignoring removed nobh option [ 186.541520][ T28] audit: type=1326 audit(2000262530.566:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.644638][T12472] kvm [12471]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffffffffffffff [ 186.664443][ T28] audit: type=1326 audit(2000262530.566:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.716511][ T28] audit: type=1326 audit(2000262530.566:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe438e929 code=0x7ffc0000 [ 186.749345][ T28] audit: type=1326 audit(2000262530.586:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.7.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfe432ab19 code=0x7ffc0000 [ 186.802959][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.812414][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.823880][T12476] device bridge_slave_0 entered promiscuous mode [ 186.836100][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.845170][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.847842][T12482] kvm [12480]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000002a [ 186.853032][T12476] device bridge_slave_1 entered promiscuous mode [ 186.861453][T12486] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5357'. [ 186.930862][ T625] device bridge_slave_1 left promiscuous mode [ 186.938721][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.972811][ T625] device bridge_slave_0 left promiscuous mode [ 186.999852][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.023095][T12484] loop7: detected capacity change from 0 to 40427 [ 187.023993][ T625] device veth1_macvtap left promiscuous mode [ 187.038266][T12484] F2FS-fs (loop7): Invalid log sectors per block(0) log sectorsize(9) [ 187.046777][T12484] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 187.046930][ T625] device veth0_vlan left promiscuous mode [ 187.061306][T12484] F2FS-fs (loop7): Unrecognized mount option "noinline_dent06xÑ" or missing value [ 187.365339][T12531] loop5: detected capacity change from 0 to 512 [ 187.394753][T12531] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.414527][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.422502][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.430340][T12531] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 187.456717][T12531] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 187.469225][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.488668][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.490665][T12531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 187.505897][T12531] System zones: 0-2, 18-18, 34-34 [ 187.511846][T12531] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 187.526770][T12531] EXT4-fs (loop5): 1 truncate cleaned up [ 187.532199][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.539461][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.566386][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.574891][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.583218][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.590287][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.598095][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.610806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.618926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.633687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.642221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.650398][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5385'. [ 187.692997][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.726070][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.753424][T12562] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 187.773780][T12569] loop6: detected capacity change from 0 to 256 [ 187.782539][T12569] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.786182][T12562] syzkaller0: persist disabled [ 187.804952][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.818218][T12569] FAT-fs (loop6): Directory bread(block 64) failed [ 187.824305][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.824907][T12569] FAT-fs (loop6): Directory bread(block 65) failed [ 187.834647][T12476] device veth0_vlan entered promiscuous mode [ 187.852487][T12569] FAT-fs (loop6): Directory bread(block 66) failed [ 187.859389][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.875793][T12569] FAT-fs (loop6): Directory bread(block 67) failed [ 187.882803][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.926352][T12569] FAT-fs (loop6): Directory bread(block 68) failed [ 187.929220][T12476] device veth1_macvtap entered promiscuous mode [ 187.940947][T12569] FAT-fs (loop6): Directory bread(block 69) failed [ 187.949630][T12569] FAT-fs (loop6): Directory bread(block 70) failed [ 187.956159][T12569] FAT-fs (loop6): Directory bread(block 71) failed [ 187.965053][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.977780][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5406'. [ 187.977791][T12569] FAT-fs (loop6): Directory bread(block 72) failed [ 187.993955][T12569] FAT-fs (loop6): Directory bread(block 73) failed [ 188.008697][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.019859][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.030274][T12598] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5410'. [ 188.075423][T12598] device vlan2 entered promiscuous mode [ 188.086046][T12598] device bridge0 entered promiscuous mode [ 188.098175][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5414'. [ 188.120427][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.131934][T12612] loop6: detected capacity change from 0 to 1024 [ 188.133430][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.326141][T12650] loop9: detected capacity change from 0 to 128 [ 188.375168][T12659] syz.5.5439[12659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.375241][T12659] syz.5.5439[12659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.387854][T12656] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5437'. [ 188.458039][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5443'. [ 188.493406][T12678] tap0: tun_chr_ioctl cmd 1074025677 [ 188.498825][T12678] tap0: linktype set to 768 [ 188.654518][T12701] kvm [12700]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000002a [ 188.706710][T12704] syz.9.5459[12704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.706783][T12704] syz.9.5459[12704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.910286][T12731] loop6: detected capacity change from 0 to 4096 [ 188.957459][T12731] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #15: comm syz.6.5471: corrupted inode contents [ 188.971123][T12731] EXT4-fs error (device loop6): ext4_dirty_inode:6120: inode #15: comm syz.6.5471: mark_inode_dirty error [ 188.996381][T12731] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #15: comm syz.6.5471: corrupted inode contents [ 189.027483][T12731] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.5471: mark_inode_dirty error [ 189.056677][T12731] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #15: comm syz.6.5471: corrupted inode contents [ 189.069565][T12731] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.5471: mark_inode_dirty error [ 189.082245][T12740] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5474'. [ 189.096638][T12731] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #15: comm syz.6.5471: corrupted inode contents [ 189.117599][T12731] EXT4-fs error (device loop6): ext4_truncate:4314: inode #15: comm syz.6.5471: mark_inode_dirty error [ 189.140740][T12731] EXT4-fs error (device loop6) in ext4_setattr:5659: Corrupt filesystem [ 189.166374][T12737] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #15: comm syz.6.5471: corrupted inode contents [ 189.207380][ T1253] EXT4-fs unmount: 31 callbacks suppressed [ 189.207396][ T1253] EXT4-fs (loop6): unmounting filesystem. [ 189.244080][T12755] netlink: 'syz.6.5480': attribute type 15 has an invalid length. [ 189.319869][T12768] loop7: detected capacity change from 0 to 128 [ 189.328971][T12771] SELinux: Context »§ is not valid (left unmapped). [ 189.343662][ T103] udevd[103]: worker [346] terminated by signal 33 (Unknown signal 33) [ 189.350872][T12774] binder: 12773:12774 ioctl 400c620e 200000000280 returned -22 [ 189.393857][ T347] printk: udevd: 5085 output lines suppressed due to ratelimiting [ 190.116732][ T43] device bridge_slave_1 left promiscuous mode [ 190.122859][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.130352][ T43] device bridge_slave_0 left promiscuous mode [ 190.137326][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.145720][ T43] device veth1_macvtap left promiscuous mode [ 190.151892][ T43] device veth0_vlan left promiscuous mode [ 190.448629][ T43] tipc: Disabling bearer [ 190.453845][ T43] tipc: Left network mode [ 190.458512][ T43] tipc: Disabling bearer [ 190.463879][ T43] tipc: Disabling bearer [ 190.469325][ T43] tipc: Disabling bearer [ 190.474592][ T43] tipc: Left network mode [ 190.956962][ T43] device bridge_slave_1 left promiscuous mode [ 190.963064][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.970508][ T43] device bridge_slave_0 left promiscuous mode [ 190.976679][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.984607][ T43] device bridge_slave_1 left promiscuous mode [ 190.990762][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.998106][ T43] device bridge_slave_0 left promiscuous mode [ 191.004181][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.011827][ T43] device bridge_slave_1 left promiscuous mode [ 191.017946][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.025244][ T43] device bridge_slave_0 left promiscuous mode [ 191.031375][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.041382][ T43] device veth1_macvtap left promiscuous mode [ 191.047430][ T43] device veth0_vlan left promiscuous mode [ 191.053290][ T43] device veth1_macvtap left promiscuous mode [ 191.059310][ T43] device veth0_vlan left promiscuous mode [ 191.065139][ T43] device veth1_macvtap left promiscuous mode [ 191.071125][ T43] device veth0_vlan left promiscuous mode [ 191.346322][ T6734] Bluetooth: hci0: command 0x1003 tx timeout [ 191.346812][ T4702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.266819][ T43] device bridge_slave_1 left promiscuous mode [ 192.272920][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.280303][ T43] device bridge_slave_0 left promiscuous mode [ 192.286422][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.293981][ T43] device veth1_macvtap left promiscuous mode [ 192.300012][ T43] device veth0_vlan left promiscuous mode