last executing test programs: 1m29.752757849s ago: executing program 4 (id=931): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @global=@item_012={0x2, 0x1, 0x7, "f5f6"}]}}, 0x0}, 0x0) 1m27.979310343s ago: executing program 4 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m27.925067474s ago: executing program 4 (id=987): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m27.924592274s ago: executing program 4 (id=988): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@keep_last_dots}, {@namecase}, {@utf8}, {@gid}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@time_offset={'time_offset', 0x3d, 0x36d}}, {@errors_continue}, {@errors_remount}]}, 0x1, 0x152a, &(0x7f00000037c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2880002, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x80, 0x0) 1m27.839594475s ago: executing program 4 (id=989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000030"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m27.736438896s ago: executing program 4 (id=990): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8) 1m27.723609487s ago: executing program 32 (id=990): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8) 1m22.955466202s ago: executing program 2 (id=1179): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x23, 0x7, {0x7, 0x30, "3d91419d00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m21.293560914s ago: executing program 2 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m21.235443495s ago: executing program 2 (id=1223): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x8, 0x200, 0x0, 0x3}) 1m21.204741076s ago: executing program 2 (id=1225): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m20.89461654s ago: executing program 2 (id=1233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) get_robust_list(0x0, &(0x7f0000000500)=0x0, &(0x7f0000000580)) 1m20.700395142s ago: executing program 2 (id=1236): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, @multicast1, @empty}, "001863718e9bf703"}}}}}, 0x0) 1m20.653215133s ago: executing program 33 (id=1236): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, @multicast1, @empty}, "001863718e9bf703"}}}}}, 0x0) 1m19.206612033s ago: executing program 6 (id=1237): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 1m19.176498533s ago: executing program 6 (id=1290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000280)=0x6, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 1m19.147343713s ago: executing program 6 (id=1292): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m18.963183726s ago: executing program 6 (id=1298): r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000400)="8dc167dc2147d386", 0x8}, {&(0x7f00000019c0)='\t\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x2) 1m18.862883228s ago: executing program 6 (id=1302): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) inotify_add_watch(r0, 0x0, 0x46000046) 1m18.772378289s ago: executing program 34 (id=1302): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) inotify_add_watch(r0, 0x0, 0x46000046) 1m18.017476529s ago: executing program 5 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x11) 1m17.975728099s ago: executing program 5 (id=1328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1m17.9189736s ago: executing program 5 (id=1329): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3f, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0xfffffffdffffffff}}, 0x28) 1m17.028644642s ago: executing program 5 (id=1349): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x4a, 0x3, 0x70bd2a, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0xb71b46126d0b821b}, 0x0) 1m16.949292923s ago: executing program 5 (id=1351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x400) 1m16.887331444s ago: executing program 5 (id=1353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x4d, 0xff, 0x9, 0x1}]}) 1m1.863002289s ago: executing program 35 (id=1353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x4d, 0xff, 0x9, 0x1}]}) 5.214630999s ago: executing program 0 (id=3585): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.19102791s ago: executing program 0 (id=3576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 4.983464823s ago: executing program 0 (id=3583): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000d54d62fa1ff4c861893784", 0xe}], 0x1) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 4.960080033s ago: executing program 0 (id=3584): r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 4.948512203s ago: executing program 0 (id=3586): futex(0x0, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x1, 0x42, 0x0, 0xfffffffffff7fffd, 0x200003f}) 4.095919254s ago: executing program 0 (id=3632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) pause() 1.45986374s ago: executing program 8 (id=3721): r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 1.435381231s ago: executing program 8 (id=3723): r0 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x2011}) 1.400571311s ago: executing program 8 (id=3726): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2000000000000002) 1.378693181s ago: executing program 8 (id=3728): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.331711932s ago: executing program 8 (id=3731): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfd, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.310994062s ago: executing program 8 (id=3732): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x23, 0x41, {0x41, 0x3, "c1810784755fbdba5cdf7e178824ee69e36b9bcd0a1e31afe5382b87d414383cdc0c0e1005e1c97047ce37ec4ae44b3a6085581d4b10e4c941d465f7f2854c"}}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x6, 0x4d, 0x0, 0x8, 0x7}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.090065935s ago: executing program 3 (id=3742): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x10, 0x7, 0xfffffff9, 0x3, 0x9, 0x6, 0x8, 0xca02, 0x1ff, 0x3, 0x7, 0x6, 0xc, 0xffffff9f, 0x603, 0x1, 0x9, 0x4, 0x7368, 0xff, 0xffffff7f, 0x9}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.057923206s ago: executing program 3 (id=3744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd25, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x200000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.012812077s ago: executing program 1 (id=3747): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x5) 1.007467706s ago: executing program 3 (id=3749): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x18) getrlimit(0xf, &(0x7f00000002c0)) 967.149387ms ago: executing program 3 (id=3751): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 926.598218ms ago: executing program 3 (id=3752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 891.199558ms ago: executing program 3 (id=3753): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) 757.32645ms ago: executing program 1 (id=3755): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x5, 0x4) 603.327712ms ago: executing program 1 (id=3760): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 378.413015ms ago: executing program 1 (id=3765): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) 363.403905ms ago: executing program 1 (id=3766): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) recvmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40, 0x0) 341.531086ms ago: executing program 1 (id=3767): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000140)={0x20, 0x22, 0x7, {0x7, 0x23, "7d319e971b"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000bc0)={0x84, &(0x7f0000000680)={0x20, 0x11, 0x2, "47c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 109.117809ms ago: executing program 7 (id=3776): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20}}], 0x1, 0x895) 95.956059ms ago: executing program 7 (id=3777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 75.113719ms ago: executing program 7 (id=3778): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x1, 0xa3020000) 36.1558ms ago: executing program 7 (id=3779): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) 18.16458ms ago: executing program 7 (id=3780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/25) 0s ago: executing program 7 (id=3781): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@nodiscard}, {@disable_ext_identify}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@noflush_merge}, {@background_gc_on}, {@nogc_merge}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@noinline_dentry}, {@disable_ext_identify}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) kernel console output (not intermixed with test programs): ly file system [ 97.320847][ T5067] loop7: detected capacity change from 0 to 512 [ 97.337409][ T28] audit: type=1400 audit(1751698112.266:487): avc: denied { read } for pid=5068 comm="syz.3.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.360991][ T5067] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 97.375181][ T5067] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.391627][ T5028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.437920][ T284] syz-executor: attempt to access beyond end of device [ 97.437920][ T284] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.455443][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 97.495520][ T5087] syz.8.2096[5087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.495600][ T5087] syz.8.2096[5087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.741804][ T5116] loop7: detected capacity change from 0 to 128 [ 97.787133][ T5120] loop0: detected capacity change from 0 to 256 [ 97.823730][ T5120] exfat: Deprecated parameter 'utf8' [ 97.851260][ T5120] exfat: Deprecated parameter 'utf8' [ 97.870107][ T5120] exfat: Deprecated parameter 'utf8' [ 97.891170][ T5120] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 97.958733][ T28] audit: type=1400 audit(1751698112.886:488): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.994160][ T5095] loop1: detected capacity change from 0 to 40427 [ 97.998208][ T28] audit: type=1400 audit(1751698112.886:489): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.014930][ T5140] loop7: detected capacity change from 0 to 512 [ 98.026104][ T5141] loop0: detected capacity change from 0 to 2048 [ 98.042299][ T5140] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.049265][ T5095] F2FS-fs (loop1): fault_injection options not supported [ 98.056366][ T5095] F2FS-fs (loop1): fault_type options not supported [ 98.056555][ T28] audit: type=1400 audit(1751698112.886:490): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.063633][ T5095] F2FS-fs (loop1): Image doesn't support compression [ 98.095989][ T5143] loop8: detected capacity change from 0 to 512 [ 98.106677][ T28] audit: type=1400 audit(1751698112.976:491): avc: denied { mounton } for pid=5094 comm="syz.1.2101" path="/496/bus" dev="tmpfs" ino=2572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.109071][ T5140] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.2122: corrupted in-inode xattr [ 98.129844][ T5095] F2FS-fs (loop1): Image doesn't support compression [ 98.159877][ T5143] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.167628][ T5095] F2FS-fs (loop1): invalid crc value [ 98.172012][ T335] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 98.177716][ T5140] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2122: couldn't read orphan inode 15 (err -117) [ 98.188387][ T5143] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 98.196622][ T28] audit: type=1400 audit(1751698113.126:492): avc: denied { ioctl } for pid=5129 comm="syz.3.2117" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.207984][ T5141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.238030][ T5143] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2123: Corrupt directory, running e2fsck is recommended [ 98.255770][ T5143] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 98.264071][ T5095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.266132][ T5140] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 98.278749][ T5143] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.2123: corrupted in-inode xattr [ 98.292377][ T28] audit: type=1400 audit(1751698113.226:493): avc: denied { mount } for pid=5139 comm="syz.7.2122" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.345250][ T5141] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 98.349940][ T5143] EXT4-fs (loop8): Remounting filesystem read-only [ 98.353297][ T28] audit: type=1400 audit(1751698113.286:494): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.359670][ T5143] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2123: couldn't read orphan inode 15 (err -117) [ 98.386001][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 98.397885][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.414708][ T5095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.419960][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 98.455510][ T284] EXT4-fs (loop0): unmounting filesystem. [ 98.462050][ T5143] EXT4-fs (loop8): Remounting filesystem read-only [ 98.464092][ T335] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 98.472880][ T28] audit: type=1400 audit(1751698113.406:495): avc: denied { bpf } for pid=5155 comm="syz.7.2127" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.488741][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.512536][ T5143] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 98.525027][ T335] usb 4-1: config 0 descriptor?? [ 98.548966][ T5131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.586993][ T5143] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.599274][ T5143] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 98.612238][ T5143] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2123: Corrupt directory, running e2fsck is recommended [ 98.630943][ T5143] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.2123: path /85/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 98.651847][ T5143] EXT4-fs (loop8): Remounting filesystem read-only [ 98.660001][ T5143] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 6: comm syz.8.2123: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.661320][ T286] syz-executor: attempt to access beyond end of device [ 98.661320][ T286] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.681407][ T5143] EXT4-fs (loop8): Remounting filesystem read-only [ 98.709510][ T5143] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 8: comm syz.8.2123: path /85/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 98.732946][ T5166] loop7: detected capacity change from 0 to 2048 [ 98.736430][ T5143] EXT4-fs (loop8): Remounting filesystem read-only [ 98.770361][ T5166] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 98.801625][ T4101] EXT4-fs (loop8): unmounting filesystem. [ 98.827820][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 98.914728][ T5179] loop7: detected capacity change from 0 to 256 [ 98.983760][ T335] hid-rmi 0003:0461:4E72.0025: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 99.220709][ T335] usb 4-1: USB disconnect, device number 16 [ 99.313474][ T5201] loop8: detected capacity change from 0 to 40427 [ 99.328300][ T5201] F2FS-fs (loop8): fault_injection options not supported [ 99.337052][ T5201] F2FS-fs (loop8): invalid crc value [ 99.354312][ T5201] F2FS-fs (loop8): Found nat_bits in checkpoint [ 99.394073][ T5201] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 99.432529][ T4101] syz-executor: attempt to access beyond end of device [ 99.432529][ T4101] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.651570][ T5240] loop8: detected capacity change from 0 to 1024 [ 99.662519][ T5240] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 99.673775][ T5240] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 99.690553][ T5240] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #3: comm syz.8.2161: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 99.714736][ T5240] EXT4-fs (loop8): no journal found [ 99.720299][ T5240] EXT4-fs (loop8): can't get journal size [ 99.726944][ T5240] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 99.752714][ T5240] EXT4-fs (loop8): unmounting filesystem. [ 99.907558][ T5270] loop7: detected capacity change from 0 to 256 [ 99.944769][ T5270] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.965090][ T5270] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 100.014150][ T5284] loop3: detected capacity change from 0 to 256 [ 100.120772][ T5296] loop3: detected capacity change from 0 to 512 [ 100.182362][ T5304] loop1: detected capacity change from 0 to 1024 [ 100.186150][ T5296] EXT4-fs (loop3): 1 orphan inode deleted [ 100.198955][ T305] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 100.200328][ T5296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.221646][ T5296] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.242525][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.263730][ T283] EXT4-fs (loop3): unmounting filesystem. [ 100.315385][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2194'. [ 100.325498][ T286] EXT4-fs (loop1): unmounting filesystem. [ 100.336332][ T5318] loop7: detected capacity change from 0 to 512 [ 100.419854][ T5318] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 100.429344][ T5318] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.456755][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 100.486107][ T5340] loop7: detected capacity change from 0 to 128 [ 100.495828][ T5340] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 100.510248][ T5340] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.528566][ T5340] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.2205: No space for directory leaf checksum. Please run e2fsck -D. [ 100.544630][ T5340] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #2: comm syz.7.2205: Directory block failed checksum [ 100.565553][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 100.628676][ T6] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 100.738317][ T5368] loop7: detected capacity change from 0 to 512 [ 100.754629][ T5368] EXT4-fs (loop7): Test dummy encryption mode enabled [ 100.761723][ T5368] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 100.774123][ T5368] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.2218: corrupted in-inode xattr [ 100.786896][ T5368] EXT4-fs (loop7): 1 orphan inode deleted [ 100.795123][ T5368] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 100.819758][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.838106][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 100.844803][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 100.856947][ T6] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 100.885134][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.902237][ T6] usb 4-1: config 0 descriptor?? [ 100.909702][ T5323] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.058008][ T5375] loop7: detected capacity change from 0 to 40427 [ 101.068454][ T5375] F2FS-fs (loop7): fault_type options not supported [ 101.076487][ T5375] F2FS-fs (loop7): invalid crc value [ 101.082968][ T5375] F2FS-fs (loop7): Found nat_bits in checkpoint [ 101.119748][ T5375] F2FS-fs (loop7): Start checkpoint disabled! [ 101.126993][ T5375] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 101.158257][ T5375] syz.7.2221: attempt to access beyond end of device [ 101.158257][ T5375] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.196369][ T305] kworker/u4:3: attempt to access beyond end of device [ 101.196369][ T305] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 101.337857][ T6] hid-rmi 0003:0461:4E72.0026: item fetching failed at offset 1/5 [ 101.340108][ T5393] loop7: detected capacity change from 0 to 512 [ 101.347993][ T6] hid-rmi 0003:0461:4E72.0026: parse failed [ 101.354520][ T5393] EXT4-fs: Ignoring removed oldalloc option [ 101.365000][ T6] hid-rmi: probe of 0003:0461:4E72.0026 failed with error -22 [ 101.375083][ T5393] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 101.400961][ T5393] EXT4-fs (loop7): 1 truncate cleaned up [ 101.406782][ T5393] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 101.430324][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 101.482691][ T5404] loop1: detected capacity change from 0 to 1024 [ 101.513749][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.562857][ T926] usb 4-1: USB disconnect, device number 17 [ 101.578334][ T286] EXT4-fs (loop1): unmounting filesystem. [ 101.606333][ T5424] loop8: detected capacity change from 0 to 1024 [ 101.644269][ T5424] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 101.724793][ T5424] EXT4-fs: Ignoring sb option on remount [ 101.753387][ T5424] EXT4-fs: Ignoring removed orlov option [ 101.760832][ T5424] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 101.773787][ T5424] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 101.797747][ T4101] EXT4-fs (loop8): unmounting filesystem. [ 101.847156][ T5458] loop0: detected capacity change from 0 to 512 [ 101.886921][ T5458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 101.898044][ T5458] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.904987][ T5458] EXT4-fs warning (device loop0): ext4_enable_quotas:7053: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 101.920072][ T5458] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 101.926926][ T5458] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.2259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.966605][ T5476] loop1: detected capacity change from 0 to 256 [ 101.976511][ T5458] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2259: couldn't read orphan inode 13 (err -117) [ 101.996235][ T5458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.006464][ T5476] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 102.056870][ T284] EXT4-fs (loop0): unmounting filesystem. [ 102.085508][ T491] udevd[491]: symlink '../../loop3' '/dev/disk/by-diskseq/559.tmp-b7:3' failed: Read-only file system [ 102.100960][ T306] udevd[306]: symlink '../../loop0' '/dev/disk/by-diskseq/575.tmp-b7:0' failed: Read-only file system [ 102.112113][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 102.112132][ T28] audit: type=1400 audit(1751698117.036:593): avc: denied { create } for pid=5485 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.141473][ T366] udevd[366]: symlink '../../loop1' '/dev/disk/by-diskseq/576.tmp-b7:1' failed: Read-only file system [ 102.174146][ T366] udevd[366]: symlink '../../loop7' '/dev/disk/by-diskseq/570.tmp-b7:7' failed: Read-only file system [ 102.177181][ T491] udevd[491]: symlink '../../loop8' '/dev/disk/by-diskseq/574.tmp-b7:8' failed: Read-only file system [ 102.185625][ T28] audit: type=1400 audit(1751698117.078:594): avc: denied { connect } for pid=5485 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.227274][ T28] audit: type=1400 audit(1751698117.088:595): avc: denied { write } for pid=5485 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.247965][ T366] udevd[366]: symlink '../../loop0' '/dev/disk/by-diskseq/575.tmp-b7:0' failed: Read-only file system [ 102.274722][ T306] udevd[306]: symlink '../../loop3' '/dev/disk/by-diskseq/559.tmp-b7:3' failed: Read-only file system [ 102.279897][ T4388] udevd[4388]: symlink '../../loop8' '/dev/disk/by-diskseq/574.tmp-b7:8' failed: Read-only file system [ 102.302188][ T491] udevd[491]: symlink '../../loop7' '/dev/disk/by-diskseq/570.tmp-b7:7' failed: Read-only file system [ 102.316425][ T5512] loop7: detected capacity change from 0 to 256 [ 102.335266][ T28] audit: type=1400 audit(1751698117.150:596): avc: denied { execute } for pid=5498 comm="syz.3.2278" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.345643][ T5511] udevd[5511]: symlink '../../loop1' '/dev/disk/by-diskseq/577.tmp-b7:1' failed: Read-only file system [ 102.396001][ T5512] FAT-fs (loop7): Directory bread(block 64) failed [ 102.417826][ T28] audit: type=1400 audit(1751698117.150:597): avc: denied { execute_no_trans } for pid=5498 comm="syz.3.2278" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.437536][ T5526] overlayfs: unrecognized mount option "\']*=°¢ÛÎæ[\" or missing value [ 102.448674][ T5512] FAT-fs (loop7): Directory bread(block 65) failed [ 102.464804][ T5512] FAT-fs (loop7): Directory bread(block 66) failed [ 102.472113][ T28] audit: type=1400 audit(1751698117.160:598): avc: denied { create } for pid=5503 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.493879][ T5512] FAT-fs (loop7): Directory bread(block 67) failed [ 102.502050][ T5512] FAT-fs (loop7): Directory bread(block 68) failed [ 102.507532][ T28] audit: type=1400 audit(1751698117.191:599): avc: denied { shutdown } for pid=5503 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.532815][ T28] audit: type=1400 audit(1751698117.191:600): avc: denied { read } for pid=5503 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.542501][ T5531] loop1: detected capacity change from 0 to 256 [ 102.560904][ T5512] FAT-fs (loop7): Directory bread(block 69) failed [ 102.583834][ T5512] FAT-fs (loop7): Directory bread(block 70) failed [ 102.590906][ T5512] FAT-fs (loop7): Directory bread(block 71) failed [ 102.606077][ T5512] FAT-fs (loop7): Directory bread(block 72) failed [ 102.616704][ T5531] FAT-fs (loop1): Directory bread(block 64) failed [ 102.619072][ T5536] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2295'. [ 102.624062][ T5512] FAT-fs (loop7): Directory bread(block 73) failed [ 102.638354][ T5537] loop0: detected capacity change from 0 to 2048 [ 102.640247][ T5531] FAT-fs (loop1): Directory bread(block 65) failed [ 102.678777][ T5531] FAT-fs (loop1): Directory bread(block 66) failed [ 102.691343][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 102.702158][ T5531] FAT-fs (loop1): Directory bread(block 67) failed [ 102.730271][ T5531] FAT-fs (loop1): Directory bread(block 68) failed [ 102.741822][ T5537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.756680][ T5531] FAT-fs (loop1): Directory bread(block 69) failed [ 102.764977][ T5531] FAT-fs (loop1): Directory bread(block 70) failed [ 102.771844][ T5531] FAT-fs (loop1): Directory bread(block 71) failed [ 102.773912][ T5537] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.779255][ T5531] FAT-fs (loop1): Directory bread(block 72) failed [ 102.796583][ T5531] FAT-fs (loop1): Directory bread(block 73) failed [ 102.850641][ T284] EXT4-fs (loop0): unmounting filesystem. [ 102.908252][ T28] audit: type=1400 audit(1751698117.872:601): avc: denied { connect } for pid=5551 comm="syz.1.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.950758][ T28] audit: type=1400 audit(1751698117.913:602): avc: denied { getopt } for pid=5551 comm="syz.1.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.089536][ T5574] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2312'. [ 103.266781][ T291] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 103.296878][ T926] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 103.468206][ T291] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.476913][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 103.487468][ T291] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 103.496838][ T291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.505535][ T926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.515508][ T291] usb 9-1: config 0 descriptor?? [ 103.520734][ T926] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.538403][ T926] usb 4-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.00 [ 103.547616][ T926] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 103.555880][ T926] usb 4-1: Product: syz [ 103.560376][ T926] usb 4-1: SerialNumber: syz [ 103.609133][ T5623] loop1: detected capacity change from 0 to 1024 [ 103.628317][ T5623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.650451][ T286] EXT4-fs (loop1): unmounting filesystem. [ 103.716139][ T5633] loop1: detected capacity change from 0 to 256 [ 103.733174][ T5633] FAT-fs (loop1): Directory bread(block 64) failed [ 103.740018][ T5633] FAT-fs (loop1): Directory bread(block 65) failed [ 103.746974][ T5633] FAT-fs (loop1): Directory bread(block 66) failed [ 103.753669][ T5633] FAT-fs (loop1): Directory bread(block 67) failed [ 103.761060][ T5633] FAT-fs (loop1): Directory bread(block 68) failed [ 103.767722][ T5633] FAT-fs (loop1): Directory bread(block 69) failed [ 103.774343][ T5633] FAT-fs (loop1): Directory bread(block 70) failed [ 103.781117][ T5633] FAT-fs (loop1): Directory bread(block 71) failed [ 103.787755][ T5633] FAT-fs (loop1): Directory bread(block 72) failed [ 103.794309][ T5633] FAT-fs (loop1): Directory bread(block 73) failed [ 103.925094][ T291] acrux 0003:1A34:0802.0027: unknown main item tag 0x3 [ 103.940049][ T291] acrux 0003:1A34:0802.0027: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.8-1/input0 [ 103.951251][ T291] acrux 0003:1A34:0802.0027: no inputs found [ 103.958313][ T291] acrux 0003:1A34:0802.0027: Failed to enable force feedback support, error: -19 [ 103.986623][ T5655] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 104.138612][ T926] usb 9-1: USB disconnect, device number 3 [ 104.321883][ T5695] netlink: 'syz.1.2369': attribute type 27 has an invalid length. [ 104.656484][ T5717] loop8: detected capacity change from 0 to 256 [ 104.686243][ T5717] FAT-fs (loop8): Directory bread(block 64) failed [ 104.692843][ T5717] FAT-fs (loop8): Directory bread(block 65) failed [ 104.699756][ T5717] FAT-fs (loop8): Directory bread(block 66) failed [ 104.706992][ T5717] FAT-fs (loop8): Directory bread(block 67) failed [ 104.713599][ T5717] FAT-fs (loop8): Directory bread(block 68) failed [ 104.720178][ T5717] FAT-fs (loop8): Directory bread(block 69) failed [ 104.726815][ T5717] FAT-fs (loop8): Directory bread(block 70) failed [ 104.733357][ T5717] FAT-fs (loop8): Directory bread(block 71) failed [ 104.740083][ T5717] FAT-fs (loop8): Directory bread(block 72) failed [ 104.746654][ T5717] FAT-fs (loop8): Directory bread(block 73) failed [ 104.763516][ T5722] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2380'. [ 104.926637][ T5730] loop1: detected capacity change from 0 to 40427 [ 104.933909][ T5730] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 104.940976][ T5730] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.949267][ T5730] F2FS-fs (loop1): fault_injection options not supported [ 104.956349][ T5730] F2FS-fs (loop1): fault_type options not supported [ 104.963847][ T5730] F2FS-fs (loop1): invalid crc value [ 104.970771][ T5730] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.001371][ T5730] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.008503][ T5730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.041215][ T286] syz-executor: attempt to access beyond end of device [ 105.041215][ T286] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.076763][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 105.257957][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.269059][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.278887][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.288229][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.296870][ T24] usb 9-1: config 0 descriptor?? [ 105.302672][ T24] hub 9-1:0.0: USB hub found [ 105.406850][ T291] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 105.503897][ T24] hub 9-1:0.0: 20 ports detected [ 105.509571][ T24] hub 9-1:0.0: insufficient power available to use all downstream ports [ 105.588192][ T291] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 105.597371][ T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.606196][ T291] usb 2-1: config 0 descriptor?? [ 105.704377][ T24] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 105.710832][ T24] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 105.719903][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 105.725896][ T24] usbhid: probe of 9-1:0.0 failed with error -71 [ 105.757187][ T24] usb 9-1: USB disconnect, device number 4 [ 106.047016][ T24] usb 4-1: USB disconnect, device number 18 [ 106.099961][ T5747] loop0: detected capacity change from 0 to 256 [ 106.125729][ T5747] FAT-fs (loop0): Directory bread(block 64) failed [ 106.132742][ T5747] FAT-fs (loop0): Directory bread(block 65) failed [ 106.139909][ T5747] FAT-fs (loop0): Directory bread(block 66) failed [ 106.147066][ T5747] FAT-fs (loop0): Directory bread(block 67) failed [ 106.153891][ T5747] FAT-fs (loop0): Directory bread(block 68) failed [ 106.160589][ T5747] FAT-fs (loop0): Directory bread(block 69) failed [ 106.168022][ T5747] FAT-fs (loop0): Directory bread(block 70) failed [ 106.181711][ T5747] FAT-fs (loop0): Directory bread(block 71) failed [ 106.188478][ T5747] FAT-fs (loop0): Directory bread(block 72) failed [ 106.200358][ T5747] FAT-fs (loop0): Directory bread(block 73) failed [ 106.216983][ T291] usb 2-1: Cannot set autoneg [ 106.237230][ T291] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 106.261813][ T291] usb 2-1: USB disconnect, device number 13 [ 106.449510][ T5782] tipc: Enabling of bearer rejected, failed to enable media [ 106.611715][ T5810] loop3: detected capacity change from 0 to 512 [ 106.631678][ T5810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.665666][ T5810] EXT4-fs (loop3): 1 truncate cleaned up [ 106.676894][ T5810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.698105][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 106.710990][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 106.718656][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2427'. [ 106.756164][ T5823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2427'. [ 106.756825][ T291] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 106.779466][ T283] EXT4-fs (loop3): unmounting filesystem. [ 106.801936][ T5829] loop3: detected capacity change from 0 to 256 [ 106.817050][ T5827] usb usb8: usbfs: process 5827 (syz.7.2429) did not claim interface 7 before use [ 106.887123][ T5837] syz.0.2434[5837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.887198][ T5837] syz.0.2434[5837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.976798][ T291] usb 9-1: Using ep0 maxpacket: 16 [ 107.005148][ T291] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.020142][ T5855] syztnl1: mtu less than device minimum [ 107.020341][ T291] usb 9-1: config 0 has no interface number 0 [ 107.034691][ T291] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.050374][ T5859] loop0: detected capacity change from 0 to 256 [ 107.059363][ T291] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.061577][ T366] udevd[366]: symlink '../../loop1' '/dev/disk/by-diskseq/592.tmp-b7:1' failed: Read-only file system [ 107.078327][ T291] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 107.089357][ T5510] udevd[5510]: symlink '../../loop0' '/dev/disk/by-diskseq/599.tmp-b7:0' failed: Read-only file system [ 107.105940][ T291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.111823][ T5859] FAT-fs (loop0): Directory bread(block 64) failed [ 107.120772][ T5859] FAT-fs (loop0): Directory bread(block 65) failed [ 107.129993][ T291] usb 9-1: config 0 descriptor?? [ 107.136474][ T5510] udevd[5510]: symlink '../../loop1' '/dev/disk/by-diskseq/592.tmp-b7:1' failed: Read-only file system [ 107.149628][ T5859] FAT-fs (loop0): Directory bread(block 66) failed [ 107.160756][ T5859] FAT-fs (loop0): Directory bread(block 67) failed [ 107.163322][ T5511] udevd[5511]: symlink '../../loop3' '/dev/disk/by-diskseq/598.tmp-b7:3' failed: Read-only file system [ 107.168485][ T5859] FAT-fs (loop0): Directory bread(block 68) failed [ 107.186462][ T5859] FAT-fs (loop0): Directory bread(block 69) failed [ 107.195762][ T5859] FAT-fs (loop0): Directory bread(block 70) failed [ 107.204880][ T5510] udevd[5510]: symlink '../../loop1' '/dev/disk/by-diskseq/592.tmp-b7:1' failed: Read-only file system [ 107.226936][ T5859] FAT-fs (loop0): Directory bread(block 71) failed [ 107.236567][ T5869] loop1: detected capacity change from 0 to 2048 [ 107.245161][ T5859] FAT-fs (loop0): Directory bread(block 72) failed [ 107.249483][ T5510] udevd[5510]: symlink '../../loop1' '/dev/disk/by-diskseq/600.tmp-b7:1' failed: Read-only file system [ 107.262901][ T5859] FAT-fs (loop0): Directory bread(block 73) failed [ 107.284604][ T5510] udevd[5510]: symlink '../../loop0' '/dev/disk/by-diskseq/599.tmp-b7:0' failed: Read-only file system [ 107.318450][ T5510] udevd[5510]: symlink '../../loop1' '/dev/disk/by-diskseq/600.tmp-b7:1' failed: Read-only file system [ 107.349868][ T5511] udevd[5511]: symlink '../../loop0' '/dev/disk/by-diskseq/599.tmp-b7:0' failed: Read-only file system [ 107.373627][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 107.373644][ T28] audit: type=1400 audit(1751698122.290:626): avc: denied { write } for pid=5872 comm="syz.0.2452" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.408232][ T5510] udevd[5510]: symlink '../../loop1' '/dev/disk/by-diskseq/600.tmp-b7:1' failed: Read-only file system [ 107.442145][ T28] audit: type=1400 audit(1751698122.290:627): avc: denied { open } for pid=5872 comm="syz.0.2452" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.501732][ T28] audit: type=1400 audit(1751698122.400:628): avc: denied { setopt } for pid=5878 comm="syz.1.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.554184][ T28] audit: type=1400 audit(1751698122.460:629): avc: denied { create } for pid=5884 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.557836][ T5887] loop1: detected capacity change from 0 to 512 [ 107.591020][ T5887] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.598913][ T5887] EXT4-fs error (device loop1): ext4_find_extent:936: inode #4: comm syz.1.2459: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 107.616908][ T28] audit: type=1400 audit(1751698122.470:630): avc: denied { bind } for pid=5884 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.631817][ T5868] loop3: detected capacity change from 0 to 40427 [ 107.640908][ T5887] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 107.657925][ T5868] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.664887][ T5887] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 107.686029][ T5887] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 107.688209][ T28] audit: type=1400 audit(1751698122.600:631): avc: denied { mount } for pid=5892 comm="syz.0.2461" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.693773][ T5887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.724259][ T5893] loop0: detected capacity change from 0 to 256 [ 107.741781][ T5868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.745610][ T291] uclogic 0003:28BD:0071.0028: failed retrieving string descriptor #100: -71 [ 107.774253][ T291] uclogic 0003:28BD:0071.0028: failed retrieving pen parameters: -71 [ 107.775215][ T5868] F2FS-fs (loop3): invalid crc value [ 107.784653][ T5887] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.2459: 'file0' linked to parent dir [ 107.796177][ T28] audit: type=1400 audit(1751698122.710:632): avc: denied { remount } for pid=5892 comm="syz.0.2461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.802458][ T291] uclogic 0003:28BD:0071.0028: pen probing failed: -71 [ 107.830814][ T291] uclogic 0003:28BD:0071.0028: failed probing parameters: -71 [ 107.839859][ T291] uclogic: probe of 0003:28BD:0071.0028 failed with error -71 [ 107.839859][ T286] EXT4-fs (loop1): unmounting filesystem. [ 107.849305][ T5868] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.858735][ T291] usb 9-1: USB disconnect, device number 5 [ 107.863219][ T5510] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.902222][ T5898] loop1: detected capacity change from 0 to 256 [ 107.910243][ T28] audit: type=1400 audit(1751698122.830:633): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.954382][ T5868] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.962591][ T5868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.057309][ T28] audit: type=1400 audit(1751698122.980:634): avc: denied { setattr } for pid=5866 comm="syz.3.2449" name=".pending_reads" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.303050][ T5929] loop3: detected capacity change from 0 to 128 [ 108.335721][ T5929] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.404705][ T5929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.435140][ T5929] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.519411][ T283] EXT4-fs (loop3): unmounting filesystem. [ 108.963366][ T5993] loop3: detected capacity change from 0 to 512 [ 108.994666][ T5993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.013841][ T5993] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.075144][ T283] EXT4-fs (loop3): unmounting filesystem. [ 109.206771][ T6] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 109.315539][ T6001] syz.0.2509[6001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.315625][ T6001] syz.0.2509[6001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.408025][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.433482][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.444093][ T6] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 109.453876][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.462892][ T6] usb 9-1: config 0 descriptor?? [ 109.646778][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 109.826742][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 109.833111][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.854387][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.874621][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.875389][ T6] hid-led 0003:27B8:01ED.0029: unbalanced collection at end of report description [ 109.903904][ T24] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 109.920974][ T6] hid-led: probe of 0003:27B8:01ED.0029 failed with error -22 [ 109.922344][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.947145][ T24] usb 4-1: config 0 descriptor?? [ 110.079095][ T926] usb 9-1: USB disconnect, device number 6 [ 110.179047][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'. [ 110.344313][ T5996] loop1: detected capacity change from 0 to 262144 [ 110.363193][ T24] hid-generic 0003:0457:07DA.002A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 110.363237][ T5996] F2FS-fs (loop1): invalid crc value [ 110.417897][ T5996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.502040][ T5996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.574373][ T6] usb 4-1: USB disconnect, device number 19 [ 110.679109][ T6083] loop8: detected capacity change from 0 to 256 [ 110.693497][ T6083] FAT-fs (loop8): Directory bread(block 64) failed [ 110.700647][ T6083] FAT-fs (loop8): Directory bread(block 65) failed [ 110.710459][ T6083] FAT-fs (loop8): Directory bread(block 66) failed [ 110.725157][ T6083] FAT-fs (loop8): Directory bread(block 67) failed [ 110.733444][ T6083] FAT-fs (loop8): Directory bread(block 68) failed [ 110.740945][ T6083] FAT-fs (loop8): Directory bread(block 69) failed [ 110.751796][ T6083] FAT-fs (loop8): Directory bread(block 70) failed [ 110.758633][ T6083] FAT-fs (loop8): Directory bread(block 71) failed [ 110.768379][ T6083] FAT-fs (loop8): Directory bread(block 72) failed [ 110.769780][ T6085] loop0: detected capacity change from 0 to 256 [ 110.775570][ T6083] FAT-fs (loop8): Directory bread(block 73) failed [ 110.839130][ T6085] FAT-fs (loop0): Directory bread(block 64) failed [ 110.855883][ T6085] FAT-fs (loop0): Directory bread(block 65) failed [ 110.876091][ T6085] FAT-fs (loop0): Directory bread(block 66) failed [ 110.882981][ T6085] FAT-fs (loop0): Directory bread(block 67) failed [ 110.898468][ T6085] FAT-fs (loop0): Directory bread(block 68) failed [ 110.912592][ T6085] FAT-fs (loop0): Directory bread(block 69) failed [ 110.925622][ T6085] FAT-fs (loop0): Directory bread(block 70) failed [ 110.935418][ T6085] FAT-fs (loop0): Directory bread(block 71) failed [ 110.944421][ T6085] FAT-fs (loop0): Directory bread(block 72) failed [ 110.951330][ T6085] FAT-fs (loop0): Directory bread(block 73) failed [ 111.044513][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.066569][ T6097] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 111.099816][ T6099] loop1: detected capacity change from 0 to 512 [ 111.116866][ T6099] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 111.180282][ T6107] loop3: detected capacity change from 0 to 4096 [ 111.219810][ T6107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.302937][ T283] EXT4-fs (loop3): unmounting filesystem. [ 111.305276][ T6123] xt_CT: No such helper "netbios-ns" [ 111.439437][ T6144] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2586'. [ 111.490471][ T6151] loop3: detected capacity change from 0 to 1024 [ 111.546801][ T926] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 111.554918][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.565570][ T6159] tipc: Can't bind to reserved service type 0 [ 111.593211][ T283] EXT4-fs (loop3): unmounting filesystem. [ 111.702198][ T6173] loop0: detected capacity change from 0 to 1024 [ 111.719656][ T6173] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 111.728787][ T6173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.735326][ T6173] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.2589: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.748949][ T6173] EXT4-fs (loop0): 1 orphan inode deleted [ 111.754764][ T6173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.787987][ T284] EXT4-fs (loop0): unmounting filesystem. [ 111.836575][ T6178] loop0: detected capacity change from 0 to 256 [ 111.939343][ T6186] loop8: detected capacity change from 0 to 256 [ 111.955122][ T6186] FAT-fs (loop8): Directory bread(block 64) failed [ 111.962782][ T6186] FAT-fs (loop8): Directory bread(block 65) failed [ 111.982928][ T6186] FAT-fs (loop8): Directory bread(block 66) failed [ 111.991530][ T6186] FAT-fs (loop8): Directory bread(block 67) failed [ 111.999087][ T6186] FAT-fs (loop8): Directory bread(block 68) failed [ 112.011732][ T6186] FAT-fs (loop8): Directory bread(block 69) failed [ 112.021982][ T6186] FAT-fs (loop8): Directory bread(block 70) failed [ 112.028694][ T6186] FAT-fs (loop8): Directory bread(block 71) failed [ 112.035348][ T6186] FAT-fs (loop8): Directory bread(block 72) failed [ 112.047846][ T6186] FAT-fs (loop8): Directory bread(block 73) failed [ 112.081230][ T5510] udevd[5510]: symlink '../../loop8' '/dev/disk/by-diskseq/631.tmp-b7:8' failed: Read-only file system [ 112.098556][ T366] udevd[366]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 112.121551][ T5511] udevd[5511]: symlink '../../loop8' '/dev/disk/by-diskseq/631.tmp-b7:8' failed: Read-only file system [ 112.135227][ T5510] udevd[5510]: symlink '../../loop0' '/dev/disk/by-diskseq/630.tmp-b7:0' failed: Read-only file system [ 112.157622][ T366] udevd[366]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 112.179166][ T5510] udevd[5510]: symlink '../../loop0' '/dev/disk/by-diskseq/630.tmp-b7:0' failed: Read-only file system [ 112.182141][ T5511] udevd[5511]: symlink '../../loop8' '/dev/disk/by-diskseq/631.tmp-b7:8' failed: Read-only file system [ 112.199725][ T6202] loop3: detected capacity change from 0 to 512 [ 112.209630][ T6202] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.214737][ T6204] loop0: detected capacity change from 0 to 1024 [ 112.232072][ T366] udevd[366]: symlink '../../loop3' '/dev/disk/by-diskseq/633.tmp-b7:3' failed: Read-only file system [ 112.234492][ T5510] udevd[5510]: symlink '../../loop0' '/dev/disk/by-diskseq/634.tmp-b7:0' failed: Read-only file system [ 112.257389][ T5511] udevd[5511]: symlink '../../loop8' '/dev/disk/by-diskseq/632.tmp-b7:8' failed: Read-only file system [ 112.271079][ T6202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.280370][ T6202] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.297184][ T6202] EXT4-fs (loop3): resizing filesystem from 128 to 1 blocks [ 112.297354][ T6204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.304717][ T6202] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 112.336402][ T283] EXT4-fs (loop3): unmounting filesystem. [ 112.345571][ T284] EXT4-fs (loop0): unmounting filesystem. [ 112.367122][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 112.499804][ T6231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=6231 comm=syz.3.2615 [ 112.535837][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 112.551357][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 112.551374][ T28] audit: type=1400 audit(1751698127.470:654): avc: denied { setopt } for pid=6236 comm="syz.1.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.642753][ T6251] loop3: detected capacity change from 0 to 256 [ 112.702371][ T28] audit: type=1400 audit(1751698127.620:655): avc: denied { map } for pid=6256 comm="syz.3.2628" path="socket:[36920]" dev="sockfs" ino=36920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 112.743780][ T28] audit: type=1326 audit(1751698127.660:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572438e929 code=0x7ffc0000 [ 112.789184][ T28] audit: type=1326 audit(1751698127.660:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f572438e929 code=0x7ffc0000 [ 112.813438][ T926] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 112.824305][ T28] audit: type=1326 audit(1751698127.660:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572438e929 code=0x7ffc0000 [ 112.854678][ T28] audit: type=1326 audit(1751698127.660:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f572438e929 code=0x7ffc0000 [ 112.883509][ T28] audit: type=1326 audit(1751698127.660:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572438e929 code=0x7ffc0000 [ 112.973840][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 113.001998][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'. [ 113.012544][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.026992][ T926] usb 9-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 113.036249][ T926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.054245][ T926] usb 9-1: config 0 descriptor?? [ 113.353359][ T6321] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 113.399523][ T28] audit: type=1400 audit(1751698128.320:661): avc: denied { ioctl } for pid=6328 comm="syz.0.2663" path="socket:[37064]" dev="sockfs" ino=37064 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.467801][ T926] nintendo 0003:057E:200E.002B: unbalanced collection at end of report description [ 113.485662][ T926] nintendo 0003:057E:200E.002B: HID parse failed [ 113.516785][ T926] nintendo 0003:057E:200E.002B: probe - fail = -22 [ 113.531509][ T926] nintendo: probe of 0003:057E:200E.002B failed with error -22 [ 113.547290][ T6345] loop1: detected capacity change from 0 to 256 [ 113.580216][ T6345] FAT-fs (loop1): Directory bread(block 64) failed [ 113.590618][ T6345] FAT-fs (loop1): Directory bread(block 65) failed [ 113.633713][ T6351] netem: change failed [ 113.637441][ T6345] FAT-fs (loop1): Directory bread(block 66) failed [ 113.651439][ T6345] FAT-fs (loop1): Directory bread(block 67) failed [ 113.658266][ T6345] FAT-fs (loop1): Directory bread(block 68) failed [ 113.672772][ T926] usb 9-1: USB disconnect, device number 8 [ 113.688294][ T6345] FAT-fs (loop1): Directory bread(block 69) failed [ 113.696847][ T6345] FAT-fs (loop1): Directory bread(block 70) failed [ 113.703420][ T6345] FAT-fs (loop1): Directory bread(block 71) failed [ 113.717959][ T6345] FAT-fs (loop1): Directory bread(block 72) failed [ 113.725199][ T6345] FAT-fs (loop1): Directory bread(block 73) failed [ 113.882098][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2688'. [ 113.895929][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2688'. [ 113.955237][ T6391] loop1: detected capacity change from 0 to 256 [ 113.980806][ T6391] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 113.990421][ T6391] FAT-fs (loop1): Filesystem has been set read-only [ 113.998353][ T6391] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 114.044588][ T28] audit: type=1400 audit(1751698128.960:662): avc: denied { audit_read } for pid=6401 comm="syz.1.2698" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.168214][ T6420] loop1: detected capacity change from 0 to 128 [ 114.189271][ T6420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.227033][ T6420] ext4 filesystem being mounted at /681/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.273605][ T286] EXT4-fs (loop1): unmounting filesystem. [ 114.368325][ T6439] devtmpfs: Cannot retroactively limit size [ 114.370204][ T6423] loop3: detected capacity change from 0 to 40427 [ 114.382025][ T28] audit: type=1400 audit(1751698129.290:663): avc: denied { mount } for pid=6438 comm="syz.1.2715" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 114.390806][ T6423] F2FS-fs (loop3): invalid crc value [ 114.436208][ T6423] F2FS-fs (loop3): invalid crc value [ 114.446535][ T6423] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 114.501968][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 114.568391][ T6455] loop1: detected capacity change from 0 to 256 [ 114.874132][ T6484] Invalid ELF header magic: != ELF [ 115.000367][ T6502] loop0: detected capacity change from 0 to 512 [ 115.018928][ T6502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.030022][ T6502] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.046121][ T6502] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.2745: corrupted xattr block 19 [ 115.058527][ T6502] EXT4-fs (loop0): Remounting filesystem read-only [ 115.065117][ T6502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 115.074761][ T6502] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.2745: corrupted xattr block 19 [ 115.087113][ T6502] EXT4-fs (loop0): Remounting filesystem read-only [ 115.093871][ T6502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 115.104171][ T6502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 115.119198][ T6502] EXT4-fs (loop0): Remounting filesystem read-only [ 115.125980][ T6502] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2934: inode #15: comm syz.0.2745: corrupted xattr block 19 [ 115.144436][ T6506] loop8: detected capacity change from 0 to 256 [ 115.145589][ T6502] EXT4-fs (loop0): Remounting filesystem read-only [ 115.158493][ T6502] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 115.189464][ T6506] FAT-fs (loop8): Directory bread(block 64) failed [ 115.196308][ T6506] FAT-fs (loop8): Directory bread(block 65) failed [ 115.203952][ T6506] FAT-fs (loop8): Directory bread(block 66) failed [ 115.204377][ T284] EXT4-fs (loop0): unmounting filesystem. [ 115.210729][ T6506] FAT-fs (loop8): Directory bread(block 67) failed [ 115.210780][ T6506] FAT-fs (loop8): Directory bread(block 68) failed [ 115.222288][ T6508] xt_hashlimit: size too large, truncated to 1048576 [ 115.224477][ T6506] FAT-fs (loop8): Directory bread(block 69) failed [ 115.246083][ T6506] FAT-fs (loop8): Directory bread(block 70) failed [ 115.253326][ T6506] FAT-fs (loop8): Directory bread(block 71) failed [ 115.261214][ T6506] FAT-fs (loop8): Directory bread(block 72) failed [ 115.267956][ T6506] FAT-fs (loop8): Directory bread(block 73) failed [ 115.428284][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 115.849135][ T6572] loop1: detected capacity change from 0 to 256 [ 115.917199][ T6576] loop1: detected capacity change from 0 to 128 [ 115.928934][ T6576] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.950321][ T6581] xt_hashlimit: size too large, truncated to 1048576 [ 115.957760][ T6576] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.333016][ T6586] loop1: detected capacity change from 0 to 40427 [ 116.349996][ T6586] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 116.357764][ T6586] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.366223][ T6586] F2FS-fs (loop1): fault_injection options not supported [ 116.375223][ T6586] F2FS-fs (loop1): invalid crc value [ 116.389076][ T6586] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.432996][ T6586] F2FS-fs (loop1): Start checkpoint disabled! [ 116.440258][ T6586] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 116.452980][ T6586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 116.453653][ T6605] loop8: detected capacity change from 0 to 256 [ 116.512956][ T6586] F2FS-fs (loop1): Skipping Checkpoint. Checkpoints currently disabled. [ 116.545801][ T4190] kworker/u4:6: attempt to access beyond end of device [ 116.545801][ T4190] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 116.658107][ T6607] loop8: detected capacity change from 0 to 40427 [ 116.683720][ T6607] F2FS-fs (loop8): Found nat_bits in checkpoint [ 116.724337][ T6607] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 116.773949][ T6610] f2fs_ckpt-7:8: attempt to access beyond end of device [ 116.773949][ T6610] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.849154][ T6663] loop7: detected capacity change from 0 to 256 [ 117.872393][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 117.872411][ T28] audit: type=1400 audit(1751698132.790:673): avc: denied { write } for pid=6666 comm="syz.1.2820" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 117.882671][ T6663] FAT-fs (loop7): Directory bread(block 64) failed [ 117.926095][ T6663] FAT-fs (loop7): Directory bread(block 65) failed [ 117.949676][ T6663] FAT-fs (loop7): Directory bread(block 66) failed [ 117.960326][ T6663] FAT-fs (loop7): Directory bread(block 67) failed [ 117.981240][ T6663] FAT-fs (loop7): Directory bread(block 68) failed [ 117.990677][ T6663] FAT-fs (loop7): Directory bread(block 69) failed [ 118.015778][ T6663] FAT-fs (loop7): Directory bread(block 70) failed [ 118.030495][ T6663] FAT-fs (loop7): Directory bread(block 71) failed [ 118.045358][ T6663] FAT-fs (loop7): Directory bread(block 72) failed [ 118.056679][ T28] audit: type=1400 audit(1751698132.960:674): avc: denied { mount } for pid=6687 comm="syz.1.2829" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.065705][ T6663] FAT-fs (loop7): Directory bread(block 73) failed [ 118.085699][ T28] audit: type=1400 audit(1751698132.960:675): avc: denied { remount } for pid=6687 comm="syz.1.2829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.085732][ T28] audit: type=1400 audit(1751698132.980:676): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.099701][ T28] audit: type=1400 audit(1751698133.010:677): avc: denied { setopt } for pid=6691 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.214388][ T28] audit: type=1400 audit(1751698133.120:678): avc: denied { ioctl } for pid=6697 comm="syz.7.2835" path="mnt:[4026532389]" dev="nsfs" ino=4026532389 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.231447][ T6696] loop3: detected capacity change from 0 to 4096 [ 118.248797][ T28] audit: type=1400 audit(1751698133.170:679): avc: denied { watch watch_reads } for pid=6701 comm="syz.7.2837" path="/226" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.301324][ T6696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.341491][ T6696] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 118.351168][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2843'. [ 118.368017][ T6719] netlink: 'syz.8.2845': attribute type 11 has an invalid length. [ 118.376432][ T6719] netlink: 'syz.8.2845': attribute type 1 has an invalid length. [ 118.384510][ T6719] netlink: 3593 bytes leftover after parsing attributes in process `syz.8.2845'. [ 118.401023][ T283] EXT4-fs (loop3): unmounting filesystem. [ 118.479469][ T28] audit: type=1400 audit(1751698133.400:680): avc: denied { sqpoll } for pid=6732 comm="syz.8.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.498517][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 118.638411][ T6758] loop7: detected capacity change from 0 to 1024 [ 118.645764][ T6758] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.657660][ T304] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 118.710747][ T6758] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 118.738427][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2867'. [ 118.748123][ T28] audit: type=1400 audit(1751698133.660:681): avc: denied { map } for pid=6756 comm="syz.7.2863" path="/234/file1/net_prio.prioidx" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.777774][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 118.849712][ T304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.850966][ T6784] loop7: detected capacity change from 0 to 512 [ 118.866751][ T304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.886858][ T6784] EXT4-fs (loop7): Test dummy encryption mode enabled [ 118.912947][ T5511] printk: udevd: 3761 output lines suppressed due to ratelimiting [ 118.913826][ T304] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.934488][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.943526][ T304] usb 2-1: Product: syz [ 118.947957][ T6784] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.2874: invalid block [ 118.947972][ T304] usb 2-1: Manufacturer: syz [ 118.956410][ T6789] loop8: detected capacity change from 0 to 1024 [ 118.959099][ T304] usb 2-1: SerialNumber: syz [ 118.964001][ T6784] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2874: couldn't read orphan inode 11 (err -117) [ 119.026550][ T6789] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.051031][ T28] audit: type=1400 audit(1751698133.970:682): avc: denied { nlmsg_read } for pid=6796 comm="syz.7.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.071797][ T6797] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2879'. [ 119.102538][ T6803] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2882'. [ 119.173546][ T304] usb 2-1: 0:2 : does not exist [ 119.188673][ T304] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 119.206370][ T304] usb 2-1: USB disconnect, device number 14 [ 119.217693][ T6786] loop0: detected capacity change from 0 to 40427 [ 119.226419][ T6786] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 119.234967][ T6786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.252019][ T6815] loop3: detected capacity change from 0 to 256 [ 119.260061][ T6815] exfat: Deprecated parameter 'namecase' [ 119.268200][ T6815] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 119.292961][ T6786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.350786][ T6786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.358528][ T6786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.482547][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2900'. [ 119.503059][ T6845] loop8: detected capacity change from 0 to 256 [ 119.512580][ T6845] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 119.527052][ T6845] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000008) [ 119.537091][ T6845] exFAT-fs (loop8): Filesystem has been set read-only [ 119.616804][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 119.806787][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 119.813678][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.813714][ T24] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.835835][ T335] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 119.835903][ T24] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.835929][ T24] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.835958][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.837739][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 119.882019][ T24] usb 4-1: New USB device strings: Mfr=240, Product=255, SerialNumber=0 [ 119.882047][ T24] usb 4-1: Product: syz [ 119.882065][ T24] usb 4-1: Manufacturer: syz [ 119.883321][ T24] usb 4-1: config 0 descriptor?? [ 119.955803][ T6900] loop1: detected capacity change from 0 to 1024 [ 120.008135][ T335] usb 9-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.018749][ T335] usb 9-1: config 0 interface 0 has no altsetting 0 [ 120.025620][ T335] usb 9-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 120.034871][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.043960][ T335] usb 9-1: config 0 descriptor?? [ 120.308285][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.315349][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.322641][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.326854][ T304] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.329657][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.344187][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.351203][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.358173][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.365126][ T24] wacom 0003:056A:0041.002C: unknown main item tag 0x0 [ 120.372444][ T24] wacom 0003:056A:0041.002C: Unknown device_type for 'syz syz'. Assuming pen. [ 120.381970][ T24] wacom 0003:056A:0041.002C: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 120.393131][ T24] input: Wacom Intuos2 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0041.002C/input/input24 [ 120.453077][ T335] apple 0003:05AC:027A.002D: hidraw1: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.8-1/input0 [ 120.516801][ T304] usb 2-1: Using ep0 maxpacket: 16 [ 120.523206][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.533382][ T304] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 120.533738][ T335] usb 4-1: USB disconnect, device number 20 [ 120.542815][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.561720][ T304] usb 2-1: config 0 descriptor?? [ 120.654255][ T6] usb 9-1: USB disconnect, device number 9 [ 120.970899][ T304] thrustmaster 0003:044F:B654.002E: hidraw0: USB HID v0.00 Device [HID 044f:b654] on usb-dummy_hcd.1-1/input0 [ 120.982763][ T304] thrustmaster 0003:044F:B654.002E: no inputs found [ 121.124636][ T6924] loop3: detected capacity change from 0 to 256 [ 121.131633][ T6924] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.142516][ T6924] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 121.153823][ T6924] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 121.172228][ T6924] exFAT-fs (loop3): hint_cluster is invalid (17) [ 121.193722][ T335] usb 2-1: USB disconnect, device number 15 [ 121.417922][ T6961] loop8: detected capacity change from 0 to 1024 [ 121.424645][ T6961] EXT4-fs: Ignoring removed orlov option [ 121.431757][ T6961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.514655][ T6973] mmap: syz.8.2962 (6973) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.616761][ T926] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 121.660514][ T6977] loop8: detected capacity change from 0 to 40427 [ 121.667526][ T6977] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 121.674500][ T6977] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 121.682985][ T6977] F2FS-fs (loop8): fault_injection options not supported [ 121.690085][ T6977] F2FS-fs (loop8): fault_type options not supported [ 121.697057][ T6977] F2FS-fs (loop8): fault_type options not supported [ 121.704671][ T6977] F2FS-fs (loop8): invalid crc value [ 121.711881][ T6977] F2FS-fs (loop8): Found nat_bits in checkpoint [ 121.732429][ T6984] loop1: detected capacity change from 0 to 256 [ 121.744295][ T6984] FAT-fs (loop1): Directory bread(block 64) failed [ 121.750964][ T6984] FAT-fs (loop1): Directory bread(block 65) failed [ 121.754862][ T6977] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 121.757762][ T6984] FAT-fs (loop1): Directory bread(block 66) failed [ 121.765176][ T6977] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 121.771554][ T6984] FAT-fs (loop1): Directory bread(block 67) failed [ 121.785608][ T6984] FAT-fs (loop1): Directory bread(block 68) failed [ 121.792411][ T6984] FAT-fs (loop1): Directory bread(block 69) failed [ 121.799246][ T6984] FAT-fs (loop1): Directory bread(block 70) failed [ 121.806029][ T6984] FAT-fs (loop1): Directory bread(block 71) failed [ 121.812910][ T6984] FAT-fs (loop1): Directory bread(block 72) failed [ 121.819589][ T6984] FAT-fs (loop1): Directory bread(block 73) failed [ 121.819684][ T926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 121.832253][ T388] kworker/u4:4: attempt to access beyond end of device [ 121.832253][ T388] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 121.851420][ T926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.864480][ T6977] VFS:Filesystem freeze failed [ 121.864495][ T926] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 121.878724][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.887768][ T926] usb 4-1: config 0 descriptor?? [ 121.893894][ T6951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.147364][ T7002] loop8: detected capacity change from 0 to 512 [ 122.156299][ T7002] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 122.173347][ T7002] EXT4-fs (loop8): 1 truncate cleaned up [ 122.252262][ T7020] loop7: detected capacity change from 0 to 128 [ 122.291834][ T7025] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2983'. [ 122.306978][ T926] wacom 0003:056A:032F.002F: hidraw0: USB HID v0.07 Device [HID 056a:032f] on usb-dummy_hcd.3-1/input0 [ 122.312249][ T7028] loop7: detected capacity change from 0 to 256 [ 122.330145][ T7028] FAT-fs (loop7): Directory bread(block 64) failed [ 122.337084][ T7028] FAT-fs (loop7): Directory bread(block 65) failed [ 122.343708][ T7028] FAT-fs (loop7): Directory bread(block 66) failed [ 122.350581][ T7028] FAT-fs (loop7): Directory bread(block 67) failed [ 122.357229][ T7028] FAT-fs (loop7): Directory bread(block 68) failed [ 122.363824][ T7028] FAT-fs (loop7): Directory bread(block 69) failed [ 122.370488][ T7028] FAT-fs (loop7): Directory bread(block 70) failed [ 122.377078][ T7028] FAT-fs (loop7): Directory bread(block 71) failed [ 122.383686][ T7028] FAT-fs (loop7): Directory bread(block 72) failed [ 122.390331][ T7028] FAT-fs (loop7): Directory bread(block 73) failed [ 122.471402][ T7038] can0: slcan on ptm0. [ 122.486750][ T335] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 122.513567][ T926] usb 4-1: USB disconnect, device number 21 [ 122.517661][ T7032] syz.8.2987 (7032) used greatest stack depth: 20944 bytes left [ 122.527604][ T7037] can0 (unregistered): slcan off ptm0. [ 122.543020][ T7042] loop7: detected capacity change from 0 to 128 [ 122.552244][ T7042] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 122.560171][ T7042] FAT-fs (loop7): Filesystem has been set read-only [ 122.567098][ T7042] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 122.575051][ T7042] syz.7.2992: attempt to access beyond end of device [ 122.575051][ T7042] loop7: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 122.622582][ T7048] futex_wake_op: syz.7.2995 tries to shift op by 144; fix this program [ 122.644792][ T7053] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 122.668176][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.679061][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 122.688392][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.697362][ T335] usb 2-1: config 0 descriptor?? [ 122.710965][ T7063] loop7: detected capacity change from 0 to 256 [ 122.722730][ T7063] FAT-fs (loop7): Directory bread(block 64) failed [ 122.729462][ T7063] FAT-fs (loop7): Directory bread(block 65) failed [ 122.736184][ T7063] FAT-fs (loop7): Directory bread(block 66) failed [ 122.743067][ T7063] FAT-fs (loop7): Directory bread(block 67) failed [ 122.749747][ T7063] FAT-fs (loop7): Directory bread(block 68) failed [ 122.756578][ T7063] FAT-fs (loop7): Directory bread(block 69) failed [ 122.763336][ T7063] FAT-fs (loop7): Directory bread(block 70) failed [ 122.770072][ T7063] FAT-fs (loop7): Directory bread(block 71) failed [ 122.776682][ T7063] FAT-fs (loop7): Directory bread(block 72) failed [ 122.787291][ T7063] FAT-fs (loop7): Directory bread(block 73) failed [ 123.066786][ T926] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 123.076089][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 123.076121][ T28] audit: type=1400 audit(1751698137.990:707): avc: denied { mount } for pid=7087 comm="syz.3.3014" name="/" dev="configfs" ino=10325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.108483][ T335] lg-g15 0003:046D:C222.0030: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 123.112054][ T28] audit: type=1400 audit(1751698137.990:708): avc: denied { setattr } for pid=7087 comm="syz.3.3014" name="/" dev="configfs" ino=10325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.144251][ T28] audit: type=1400 audit(1751698138.020:709): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.213633][ T7102] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3021'. [ 123.243543][ T7104] loop3: detected capacity change from 0 to 4096 [ 123.246794][ T926] usb 9-1: Using ep0 maxpacket: 16 [ 123.256552][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.267678][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.277782][ T926] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.290738][ T926] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.300067][ T926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.308775][ T926] usb 9-1: config 0 descriptor?? [ 123.314909][ T291] usb 2-1: USB disconnect, device number 16 [ 123.352706][ T7111] loop3: detected capacity change from 0 to 256 [ 123.359379][ T7111] exfat: Deprecated parameter 'namecase' [ 123.365130][ T7111] exfat: Deprecated parameter 'utf8' [ 123.370518][ T7111] exfat: Deprecated parameter 'namecase' [ 123.376184][ T7111] exfat: Deprecated parameter 'utf8' [ 123.385258][ T7111] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 123.461032][ T7119] loop3: detected capacity change from 0 to 512 [ 123.469690][ T7119] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3029: bad orphan inode 15 [ 123.480298][ T7119] ext4_test_bit(bit=14, block=18) = 1 [ 123.485740][ T7119] is_bad_inode(inode)=0 [ 123.489971][ T7119] NEXT_ORPHAN(inode)=1023 [ 123.494337][ T7119] max_ino=32 [ 123.497967][ T7119] i_nlink=0 [ 123.501282][ T7119] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #15: comm syz.3.3029: corrupted xattr block 19 [ 123.513707][ T7119] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 123.522983][ T7119] ext4 filesystem being mounted at /624/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 123.704991][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3036'. [ 123.721794][ T926] microsoft 0003:045E:07DA.0031: unknown main item tag 0xd [ 123.735684][ T926] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 123.743394][ T926] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 123.750836][ T926] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 123.768578][ T926] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 123.775868][ T926] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 123.785233][ T926] microsoft 0003:045E:07DA.0031: No inputs registered, leaving [ 123.794863][ T926] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 123.806510][ T926] microsoft 0003:045E:07DA.0031: no inputs found [ 123.812949][ T926] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 123.843532][ T7130] loop3: detected capacity change from 0 to 40427 [ 123.850672][ T7130] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 123.858789][ T7130] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.887194][ T7130] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.938302][ T926] usb 9-1: USB disconnect, device number 10 [ 123.947161][ T7130] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 123.954407][ T7130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.000278][ T28] audit: type=1400 audit(1751698138.920:710): avc: denied { write } for pid=7162 comm="syz.7.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.178613][ T28] audit: type=1400 audit(1751698139.100:711): avc: denied { mounton } for pid=7189 comm="syz.1.3060" path="/757/file1" dev="tmpfs" ino=3908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.204565][ T28] audit: type=1400 audit(1751698139.100:712): avc: denied { write } for pid=24 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40610 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.266381][ T28] audit: type=1400 audit(1751698139.180:713): avc: denied { append } for pid=7203 comm="syz.7.3067" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.302310][ T28] audit: type=1400 audit(1751698139.220:714): avc: denied { read } for pid=7211 comm="syz.7.3071" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.328811][ T28] audit: type=1400 audit(1751698139.220:715): avc: denied { open } for pid=7211 comm="syz.7.3071" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.342351][ T7217] loop7: detected capacity change from 0 to 128 [ 124.357901][ T28] audit: type=1400 audit(1751698139.220:716): avc: denied { ioctl } for pid=7211 comm="syz.7.3071" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.412270][ T7224] can0: slcan on ptm0. [ 124.487241][ T7223] can0 (unregistered): slcan off ptm0. [ 126.005884][ T7263] netlink: 'syz.7.3096': attribute type 2 has an invalid length. [ 126.006467][ T7265] overlayfs: unrecognized mount option "\" or missing value [ 126.015444][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3096'. [ 126.031258][ T7263] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 126.081284][ T7273] loop1: detected capacity change from 0 to 512 [ 126.125746][ T7273] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3100: inode #1: comm syz.1.3100: iget: illegal inode # [ 126.149137][ T7273] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3100: error while reading EA inode 1 err=-117 [ 126.172417][ T7273] EXT4-fs (loop1): 1 orphan inode deleted [ 126.183786][ T7273] EXT4-fs mount: 14 callbacks suppressed [ 126.183806][ T7273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.195835][ T7299] loop8: detected capacity change from 0 to 1024 [ 126.208640][ T7299] EXT4-fs: Ignoring removed bh option [ 126.214095][ T7299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.215117][ T286] EXT4-fs (loop1): unmounting filesystem. [ 126.223985][ T7299] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 126.287070][ T4101] EXT4-fs (loop8): unmounting filesystem. [ 126.355245][ T7322] tipc: Started in network mode [ 126.363307][ T7322] tipc: Node identity , cluster identity 4711 [ 126.371704][ T7322] tipc: Failed to obtain node identity [ 126.377279][ T7322] tipc: Enabling of bearer rejected, failed to enable media [ 126.487292][ T7341] loop1: detected capacity change from 0 to 256 [ 126.496631][ T7341] exfat: Deprecated parameter 'namecase' [ 126.502598][ T7341] exfat: Deprecated parameter 'namecase' [ 126.525566][ T7346] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3134'. [ 126.544968][ T7341] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 126.593315][ T7354] tipc: Started in network mode [ 126.598279][ T7354] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 126.607837][ T7354] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 126.618258][ T7354] tipc: Enabled bearer , priority 10 [ 126.662638][ T7366] loop1: detected capacity change from 0 to 256 [ 126.678693][ T7366] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.703514][ T7371] loop3: detected capacity change from 0 to 1024 [ 126.710397][ T7371] EXT4-fs: Ignoring removed i_version option [ 126.767536][ T7371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.785205][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 126.789984][ T7371] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.824007][ T7371] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.3147: lblock 3 mapped to illegal pblock 3 (length 13) [ 126.868988][ T7371] EXT4-fs (loop3): Remounting filesystem read-only [ 126.907524][ T283] EXT4-fs (loop3): unmounting filesystem. [ 126.911016][ T7373] loop0: detected capacity change from 0 to 40427 [ 126.953809][ T7373] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.002621][ T7373] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.039542][ T7422] tipc: Started in network mode [ 127.040479][ T7373] syz.0.3146: attempt to access beyond end of device [ 127.040479][ T7373] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.044596][ T7422] tipc: Node identity 40000000000040120000006e70000001, cluster identity 4711 [ 127.067302][ T7422] tipc: Enabling of bearer rejected, failed to enable media [ 127.076080][ T284] syz-executor: attempt to access beyond end of device [ 127.076080][ T284] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 127.311296][ T7452] loop0: detected capacity change from 0 to 1024 [ 127.362291][ T7452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.371404][ T7426] loop8: detected capacity change from 0 to 32768 [ 127.385836][ T7452] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3182: bg 0: block 280: padding at end of block bitmap is not set [ 127.401249][ T7452] EXT4-fs (loop0): Remounting filesystem read-only [ 127.416914][ T284] EXT4-fs (loop0): unmounting filesystem. [ 127.450645][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3186'. [ 127.464447][ T7465] loop3: detected capacity change from 0 to 512 [ 127.482237][ T7465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.512978][ T7465] EXT4-fs (loop3): 1 truncate cleaned up [ 127.513040][ T7472] netlink: 'syz.0.3191': attribute type 11 has an invalid length. [ 127.519114][ T7465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.545022][ T7465] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 1969368878 > max in inode 18 [ 127.579464][ T283] EXT4-fs (loop3): unmounting filesystem. [ 127.746780][ T304] tipc: Node number set to 1 [ 127.756793][ T926] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 127.943397][ T7540] loop3: detected capacity change from 0 to 128 [ 127.949810][ T926] usb 2-1: Using ep0 maxpacket: 32 [ 127.956172][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.975550][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.993522][ T926] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.008948][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.022408][ T926] usb 2-1: config 0 descriptor?? [ 128.030367][ T7556] loop3: detected capacity change from 0 to 512 [ 128.037178][ T926] hub 2-1:0.0: USB hub found [ 128.049388][ T7556] EXT4-fs (loop3): 1 orphan inode deleted [ 128.055248][ T7556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.065957][ T7556] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.077293][ T37] __quota_error: 16 callbacks suppressed [ 128.077312][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.098481][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 128.119561][ T283] EXT4-fs (loop3): unmounting filesystem. [ 128.213591][ T7558] loop0: detected capacity change from 0 to 40427 [ 128.221933][ T7558] F2FS-fs (loop0): invalid crc value [ 128.228764][ T7558] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.236837][ T304] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 128.282481][ T7558] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.391352][ T7572] loop3: detected capacity change from 0 to 40427 [ 128.398846][ T7572] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 128.407781][ T926] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 128.427535][ T304] usb 9-1: not running at top speed; connect to a high speed hub [ 128.445849][ T304] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 128.456913][ T304] usb 9-1: config 95 has no interface number 0 [ 128.463117][ T304] usb 9-1: config 95 interface 1 has no altsetting 0 [ 128.487848][ T304] usb 9-1: string descriptor 0 read error: -22 [ 128.506818][ T304] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 128.521927][ T304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.557259][ T7558] F2FS-fs (loop0): fault_injection options not supported [ 128.564458][ T7558] F2FS-fs (loop0): Image doesn't support compression [ 128.571560][ T7558] F2FS-fs (loop0): LFS is not compatible with IPU [ 128.609433][ T926] usbhid 2-1:0.0: can't add hid device: -71 [ 128.615433][ T926] usbhid: probe of 2-1:0.0 failed with error -71 [ 128.667110][ T926] usb 2-1: USB disconnect, device number 17 [ 128.712668][ T7575] loop3: detected capacity change from 0 to 40427 [ 128.720579][ T7575] F2FS-fs (loop3): invalid crc value [ 128.727363][ T7575] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.743279][ T304] usb 9-1: USB disconnect, device number 11 [ 128.781266][ T7575] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.797486][ T7575] F2FS-fs (loop3): Corrupted max_depth of 3: 1025 [ 128.804287][ T7575] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 128.814350][ T7575] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 129.036541][ T7580] loop3: detected capacity change from 0 to 40427 [ 129.043748][ T7580] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 117440513) [ 129.052015][ T7580] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 129.060632][ T7580] F2FS-fs (loop3): fault_injection options not supported [ 129.067796][ T7580] F2FS-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 129.144716][ T7577] loop0: detected capacity change from 0 to 131072 [ 129.146991][ T7582] loop1: detected capacity change from 0 to 1024 [ 129.158346][ T7582] EXT4-fs: Ignoring removed i_version option [ 129.166127][ T7577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.189482][ T7582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.198404][ T7582] ext4 filesystem being mounted at /794/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.218854][ T7582] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.3241: lblock 3 mapped to illegal pblock 3 (length 13) [ 129.244346][ T7582] EXT4-fs (loop1): Remounting filesystem read-only [ 129.269958][ T7577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.287456][ T286] EXT4-fs (loop1): unmounting filesystem. [ 129.586783][ T926] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 129.699105][ T7604] loop3: detected capacity change from 0 to 40427 [ 129.717673][ T7604] F2FS-fs (loop3): invalid crc value [ 129.747666][ T7604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.776745][ T926] usb 9-1: Using ep0 maxpacket: 32 [ 129.783105][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.803683][ T926] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.806782][ T7604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.823233][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.854097][ T926] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.874809][ T926] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.893400][ T7604] syz.3.3249: attempt to access beyond end of device [ 129.893400][ T7604] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.902708][ T926] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.926919][ T7605] f2fs_ckpt-7:3: attempt to access beyond end of device [ 129.926919][ T7605] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 129.930419][ T926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.952578][ T28] audit: type=1400 audit(1751698144.870:733): avc: denied { unlink } for pid=7603 comm="syz.3.3249" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 130.007431][ T926] usb 9-1: config 0 descriptor?? [ 130.100702][ T7589] loop7: detected capacity change from 0 to 131072 [ 130.108244][ T7589] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 130.116426][ T7589] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 130.125605][ T7589] F2FS-fs (loop7): invalid crc value [ 130.137250][ T7589] F2FS-fs (loop7): Found nat_bits in checkpoint [ 130.191261][ T7589] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 130.203296][ T7589] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 130.212506][ T7598] loop1: detected capacity change from 0 to 131072 [ 130.221102][ T926] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.232729][ T7598] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 130.242930][ T7598] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 130.260166][ T7598] F2FS-fs (loop1): invalid crc value [ 130.267249][ T7598] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.306302][ T7598] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 130.313513][ T7598] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 130.502610][ T28] audit: type=1400 audit(1751698145.420:734): avc: denied { read } for pid=7632 comm="syz.7.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.536811][ T6] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 130.697272][ T28] audit: type=1400 audit(1751698145.620:735): avc: denied { nlmsg_write } for pid=7667 comm="syz.0.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 130.715166][ T7670] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 130.720003][ T28] audit: type=1400 audit(1751698145.620:736): avc: denied { audit_write } for pid=7667 comm="syz.0.3273" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 130.758236][ T6] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.775292][ T6] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 35300, setting to 8 [ 130.786419][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.793468][ T6] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 130.802833][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.813334][ T6] usb 4-1: config 0 descriptor?? [ 130.820410][ T7623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.874395][ T28] audit: type=1400 audit(1751698145.790:737): avc: denied { ioctl } for pid=7692 comm="syz.1.3285" path="socket:[42366]" dev="sockfs" ino=42366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.925666][ T7699] netlink: 'syz.0.3287': attribute type 32 has an invalid length. [ 130.936474][ T7699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3287'. [ 131.014481][ T28] audit: type=1326 audit(1751698145.930:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770998e929 code=0x7ffc0000 [ 131.039276][ T28] audit: type=1326 audit(1751698145.930:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f770998e929 code=0x7ffc0000 [ 131.063424][ T28] audit: type=1326 audit(1751698145.930:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770998e929 code=0x7ffc0000 [ 131.090782][ T28] audit: type=1326 audit(1751698145.930:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f770998e929 code=0x7ffc0000 [ 131.115914][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3297'. [ 131.234139][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.246036][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.262827][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.275896][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.290030][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.304102][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.319216][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.334358][ T6] pantherlord 0003:0F30:0111.0032: unknown main item tag 0x0 [ 131.350915][ T6] pantherlord 0003:0F30:0111.0032: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.3-1/input0 [ 131.375688][ T6] pantherlord 0003:0F30:0111.0032: no output reports found [ 131.386629][ T7748] loop1: detected capacity change from 0 to 4096 [ 131.394278][ T7748] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.402729][ T7748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.416251][ T7748] fs-verity: sha512 using implementation "sha512-avx2" [ 131.435939][ T286] EXT4-fs (loop1): unmounting filesystem. [ 131.458802][ T926] usb 4-1: USB disconnect, device number 22 [ 131.478685][ T7757] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3314'. [ 131.502107][ T7760] loop7: detected capacity change from 0 to 128 [ 131.545772][ T24] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 131.554066][ T24] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 131.562769][ T24] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0 [ 131.570954][ T24] hid-generic 0003:0004:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 131.623715][ T7773] loop7: detected capacity change from 0 to 1024 [ 131.632585][ T7773] EXT4-fs warning (device loop7): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 131.647964][ T7773] EXT4-fs (loop7): mount failed [ 131.689829][ T7779] serio: Serial port ttynull [ 132.137219][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3333'. [ 132.170795][ T7807] bridge0: port 3(syz_tun) entered blocking state [ 132.178408][ T7807] bridge0: port 3(syz_tun) entered disabled state [ 132.186156][ T7807] device syz_tun entered promiscuous mode [ 132.193220][ T7807] bridge0: port 3(syz_tun) entered blocking state [ 132.200789][ T7807] bridge0: port 3(syz_tun) entered forwarding state [ 132.324081][ T335] usb 9-1: USB disconnect, device number 12 [ 132.332118][ T335] usblp0: removed [ 132.373351][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.677579][ T7864] loop3: detected capacity change from 0 to 512 [ 132.684470][ T7864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.695967][ T7864] EXT4-fs (loop3): 1 truncate cleaned up [ 132.701900][ T7864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.717799][ T283] EXT4-fs (loop3): unmounting filesystem. [ 132.777375][ T7875] loop7: detected capacity change from 0 to 1024 [ 132.784633][ T7875] EXT4-fs: Ignoring removed nobh option [ 132.786294][ T7877] serio: Serial port ttyS3 [ 132.792359][ T7875] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.3366: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 132.813727][ T7875] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3366: couldn't read orphan inode 11 (err -117) [ 132.825979][ T7875] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 132.838751][ T7875] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.3366: Invalid block bitmap block 0 in block_group 0 [ 132.852508][ T7875] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3366: Failed to acquire dquot type 0 [ 132.864815][ T7875] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.3366: Invalid inode bitmap blk 137438953472 in block_group 0 [ 132.885450][ T4190] EXT4-fs error (device loop7): __ext4_get_inode_loc:4509: comm kworker/u4:6: Invalid inode table block 8589934593 in block_group 0 [ 132.897843][ T7885] loop3: detected capacity change from 0 to 256 [ 132.900492][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 132.907118][ T304] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 132.913441][ T7885] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 133.096510][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 133.096528][ T28] audit: type=1400 audit(1751698154.007:750): avc: denied { connect } for pid=7895 comm="syz.7.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.123651][ T304] usb 2-1: config 127 has an invalid interface number: 210 but max is 0 [ 133.132236][ T304] usb 2-1: config 127 has no interface number 0 [ 133.139231][ T304] usb 2-1: config 127 interface 210 has no altsetting 0 [ 133.147554][ T304] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=4c.94 [ 133.156593][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.164739][ T304] usb 2-1: Product: syz [ 133.168943][ T304] usb 2-1: Manufacturer: syz [ 133.173550][ T304] usb 2-1: SerialNumber: syz [ 133.226808][ T6] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 133.381253][ T304] snd-usb-audio: probe of 2-1:127.210 failed with error -71 [ 133.389221][ T304] usb 2-1: USB disconnect, device number 18 [ 133.407873][ T6] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.415911][ T6] usb 4-1: config 0 has no interface number 0 [ 133.422082][ T6] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.433034][ T6] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.442887][ T6] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.455698][ T6] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 133.464764][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.473480][ T6] usb 4-1: config 0 descriptor?? [ 133.901263][ T7900] serio: Serial port ttyS3 [ 134.009508][ T28] audit: type=1400 audit(2000000000.029:751): avc: denied { ioctl } for pid=7910 comm="syz.1.3382" path="socket:[41864]" dev="sockfs" ino=41864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.036233][ T28] audit: type=1400 audit(2000000000.029:752): avc: denied { setopt } for pid=7910 comm="syz.1.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.050125][ T7913] loop1: detected capacity change from 0 to 1024 [ 134.062430][ T7913] EXT4-fs: Ignoring removed oldalloc option [ 134.068642][ T7913] EXT4-fs: Ignoring removed orlov option [ 134.079034][ T7913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.088313][ T6] uclogic 0003:28BD:0042.0034: failed retrieving string descriptor #100: -71 [ 134.097390][ T6] uclogic 0003:28BD:0042.0034: failed retrieving pen parameters: -71 [ 134.105777][ T6] uclogic 0003:28BD:0042.0034: pen probing failed: -71 [ 134.106452][ T286] EXT4-fs (loop1): unmounting filesystem. [ 134.112908][ T6] uclogic 0003:28BD:0042.0034: failed probing parameters: -71 [ 134.126744][ T6] uclogic: probe of 0003:28BD:0042.0034 failed with error -71 [ 134.135445][ T6] usb 4-1: USB disconnect, device number 23 [ 134.416767][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.416767][ T7825] Bluetooth: hci0: command 0x1003 tx timeout [ 134.534242][ T7935] syz.8.3392 (7935): /proc/7934/oom_adj is deprecated, please use /proc/7934/oom_score_adj instead. [ 134.679544][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3400'. [ 134.697322][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3400'. [ 134.774393][ T28] audit: type=1400 audit(2000000000.790:753): avc: denied { map } for pid=7964 comm="syz.3.3406" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.846542][ T7977] netlink: 'syz.8.3413': attribute type 11 has an invalid length. [ 134.876980][ T28] audit: type=1400 audit(2000000000.890:754): avc: denied { map } for pid=7982 comm="syz.3.3415" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.927079][ T28] audit: type=1400 audit(2000000000.920:755): avc: denied { execute } for pid=7982 comm="syz.3.3415" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.955436][ T28] audit: type=1400 audit(2000000000.940:756): avc: denied { relabelfrom } for pid=7984 comm="syz.0.3416" name="" dev="pipefs" ino=43012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 135.026087][ T7998] loop0: detected capacity change from 0 to 512 [ 135.037162][ T7998] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.047051][ T28] audit: type=1400 audit(2000000001.070:757): avc: denied { write } for pid=7999 comm="syz.3.3423" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.075317][ T7998] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3422: invalid indirect mapped block 256 (level 2) [ 135.089281][ T7998] EXT4-fs (loop0): 2 truncates cleaned up [ 135.095132][ T7998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.114564][ T284] EXT4-fs (loop0): unmounting filesystem. [ 135.170987][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'. [ 135.179971][ T8022] loop8: detected capacity change from 0 to 512 [ 135.201466][ T8022] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 135.210712][ T8022] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.234782][ T4101] EXT4-fs (loop8): unmounting filesystem. [ 135.406778][ T926] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 135.499258][ T8071] loop3: detected capacity change from 0 to 128 [ 135.510651][ T8073] futex_wake_op: syz.0.3455 tries to shift op by -1; fix this program [ 135.529717][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.588006][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 135.597921][ T926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 135.607769][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.617561][ T926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 135.629696][ T926] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 135.638855][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.646911][ T926] usb 2-1: Product: syz [ 135.651099][ T926] usb 2-1: Manufacturer: syz [ 135.655726][ T926] usb 2-1: SerialNumber: syz [ 135.666936][ T926] usb 2-1: config 0 descriptor?? [ 135.675391][ T926] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 135.736353][ T28] audit: type=1400 audit(2000000001.750:758): avc: denied { mounton } for pid=8104 comm="syz.8.3469" path="/341/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 135.868330][ T28] audit: type=1400 audit(2000000001.890:759): avc: denied { write } for pid=8117 comm="syz.8.3475" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.880932][ T926] scsi host1: usb-storage 2-1:0.0 [ 135.892591][ T8118] binder: BINDER_SET_CONTEXT_MGR already set [ 135.902495][ T8118] binder: 8117:8118 ioctl 40046207 0 returned -16 [ 135.939346][ T8125] incfs: Options parsing error. -22 [ 135.944678][ T8125] incfs: mount failed -22 [ 136.052382][ T8121] loop0: detected capacity change from 0 to 40427 [ 136.059694][ T8121] F2FS-fs (loop0): heap/no_heap options were deprecated [ 136.067472][ T8121] F2FS-fs (loop0): fault_injection options not supported [ 136.074656][ T8121] F2FS-fs (loop0): fault_type options not supported [ 136.093314][ T926] usb 2-1: USB disconnect, device number 19 [ 136.101114][ T8121] F2FS-fs (loop0): invalid crc value [ 136.124015][ T8121] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.180376][ T8121] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.220340][ T8147] futex_wake_op: syz.7.3486 tries to shift op by 32; fix this program [ 136.233543][ T8137] f2fs_ckpt-7:0: attempt to access beyond end of device [ 136.233543][ T8137] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.577361][ T8187] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.678372][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 136.730617][ T8175] loop8: detected capacity change from 0 to 40427 [ 136.734719][ T8197] loop3: detected capacity change from 0 to 256 [ 136.769235][ T8175] F2FS-fs (loop8): Found nat_bits in checkpoint [ 136.854861][ T8175] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 136.921615][ T8175] syz.8.3499: attempt to access beyond end of device [ 136.921615][ T8175] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.964341][ T4101] syz-executor: attempt to access beyond end of device [ 136.964341][ T4101] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 137.185547][ T8219] loop3: detected capacity change from 0 to 40427 [ 137.194798][ T8219] F2FS-fs (loop3): invalid crc value [ 137.211832][ T8219] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.275045][ T8219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.313034][ T283] syz-executor: attempt to access beyond end of device [ 137.313034][ T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.414092][ T8226] loop8: detected capacity change from 0 to 40427 [ 137.422025][ T8226] F2FS-fs (loop8): invalid crc value [ 137.447647][ T8226] F2FS-fs (loop8): Found nat_bits in checkpoint [ 137.475200][ T8234] loop3: detected capacity change from 0 to 512 [ 137.482363][ T8234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.497367][ T8234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.508868][ T8226] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 137.541589][ T8234] EXT4-fs (loop3): 1 truncate cleaned up [ 137.547858][ T8234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.557727][ T8226] syz.8.3519: attempt to access beyond end of device [ 137.557727][ T8226] loop8: rw=2049, sector=53248, nr_sectors = 24 limit=40427 [ 137.567518][ T8241] loop0: detected capacity change from 0 to 1024 [ 137.582904][ T4101] syz-executor: attempt to access beyond end of device [ 137.582904][ T4101] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.608491][ T8241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.619751][ T8241] EXT4-fs (loop0): shut down requested (1) [ 137.626019][ T8241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 137.636983][ T8241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 137.667725][ T283] EXT4-fs (loop3): unmounting filesystem. [ 137.675080][ T284] EXT4-fs (loop0): unmounting filesystem. [ 137.728407][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 137.766027][ T8255] loop8: detected capacity change from 0 to 128 [ 137.784361][ T8255] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 137.795128][ T8255] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.823254][ T4101] EXT4-fs (loop8): unmounting filesystem. [ 137.832380][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3532'. [ 137.852108][ T8266] loop0: detected capacity change from 0 to 512 [ 137.875620][ T8266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.891328][ T8266] EXT4-fs (loop0): 1 truncate cleaned up [ 137.898093][ T8266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.017186][ T284] EXT4-fs (loop0): unmounting filesystem. [ 138.259018][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 138.259039][ T28] audit: type=1400 audit(2000000004.280:773): avc: denied { setopt } for pid=8329 comm="syz.1.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.440063][ T8357] loop3: detected capacity change from 0 to 512 [ 138.452995][ T8357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.465617][ T8357] EXT4-fs (loop3): 1 truncate cleaned up [ 138.471705][ T8357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.512997][ T8363] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3577'. [ 138.525142][ T283] EXT4-fs (loop3): unmounting filesystem. [ 138.596751][ T6] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 138.631624][ T8372] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 138.641198][ T8372] overlayfs: failed to resolve './file0': -2 [ 138.669130][ T8376] loop1: detected capacity change from 0 to 256 [ 138.675925][ T8376] exfat: Deprecated parameter 'utf8' [ 138.703404][ T8376] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 138.717546][ T28] audit: type=1400 audit(2000000004.740:774): avc: denied { setcurrent } for pid=8381 comm="syz.3.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 138.755579][ T8386] loop0: detected capacity change from 0 to 512 [ 138.779543][ T8386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.790357][ T8386] ext4 filesystem being mounted at /729/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.791624][ T6] usb 9-1: unable to get BOS descriptor or descriptor too short [ 138.833768][ T6] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 138.844791][ T6] usb 9-1: can't read configurations, error -71 [ 139.146406][ T8426] loop3: detected capacity change from 0 to 512 [ 139.153950][ T8426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.166279][ T8426] EXT4-fs (loop3): 1 truncate cleaned up [ 139.172160][ T8426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.189998][ T283] EXT4-fs (loop3): unmounting filesystem. [ 139.216349][ T8434] loop3: detected capacity change from 0 to 512 [ 139.224043][ T8434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.224588][ T8436] incfs_lookup_dentry err:-36 [ 139.236381][ T8434] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #17: comm syz.3.3610: inline data xattr refers to an external xattr inode [ 139.254329][ T8434] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3610: couldn't read orphan inode 17 (err -117) [ 139.266655][ T8434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.287894][ T283] EXT4-fs (loop3): unmounting filesystem. [ 139.292253][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 139.338254][ T28] audit: type=1400 audit(2000000005.360:775): avc: denied { read } for pid=8452 comm="syz.3.3619" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.362440][ T8455] loop8: detected capacity change from 0 to 512 [ 139.369275][ T28] audit: type=1400 audit(2000000005.380:776): avc: denied { open } for pid=8452 comm="syz.3.3619" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.398258][ T8455] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 139.410921][ T8455] EXT4-fs (loop8): 1 truncate cleaned up [ 139.416917][ T8455] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 139.445363][ T8463] device batadv_slave_1 entered promiscuous mode [ 139.454052][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3622'. [ 139.487961][ T4101] EXT4-fs (loop8): unmounting filesystem. [ 139.596574][ T28] audit: type=1326 audit(2000000005.610:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.8.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835b38e929 code=0x7ffc0000 [ 139.636775][ T335] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 139.644469][ T28] audit: type=1326 audit(2000000005.610:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.8.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835b38e929 code=0x7ffc0000 [ 139.686779][ T28] audit: type=1326 audit(2000000005.620:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.8.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f835b38e929 code=0x7ffc0000 [ 139.710601][ T8482] loop3: detected capacity change from 0 to 8192 [ 139.712917][ T8486] loop7: detected capacity change from 0 to 512 [ 139.724701][ T28] audit: type=1326 audit(2000000005.620:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.8.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835b38e929 code=0x7ffc0000 [ 139.753909][ T8486] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 139.764568][ T28] audit: type=1326 audit(2000000005.620:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.8.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835b38e929 code=0x7ffc0000 [ 139.788802][ T28] audit: type=1326 audit(2000000005.620:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.8.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f835b38e929 code=0x7ffc0000 [ 139.790040][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3637'. [ 139.822153][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3637'. [ 139.823180][ T8486] EXT4-fs (loop7): 1 truncate cleaned up [ 139.836924][ T8486] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 139.877827][ T335] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 139.886794][ T335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.910054][ T335] usb 2-1: config 0 has no interface number 0 [ 139.928100][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 139.946755][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.954817][ T335] usb 2-1: Product: syz [ 139.959194][ T335] usb 2-1: Manufacturer: syz [ 139.963807][ T335] usb 2-1: SerialNumber: syz [ 139.970566][ T335] usb 2-1: config 0 descriptor?? [ 139.976439][ T335] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 139.978586][ T8498] bridge: RTM_NEWNEIGH with invalid ether address [ 139.989385][ T335] usb 2-1: No valid video chain found. [ 139.992561][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 140.089775][ T8514] x_tables: unsorted entry at hook 2 [ 140.182256][ T335] usb 2-1: USB disconnect, device number 20 [ 140.225990][ T8523] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 140.313046][ T8516] loop8: detected capacity change from 0 to 40427 [ 140.327591][ T8516] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 140.342283][ T8516] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 140.350124][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 140.362651][ T8516] F2FS-fs (loop8): invalid crc value [ 140.375999][ T8516] F2FS-fs (loop8): Found nat_bits in checkpoint [ 140.427023][ T8516] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 140.438198][ T8516] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 140.472246][ T4101] syz-executor: attempt to access beyond end of device [ 140.472246][ T4101] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.675540][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 140.804163][ T8577] loop3: detected capacity change from 0 to 2048 [ 140.816541][ T8577] EXT4-fs: Ignoring removed nobh option [ 140.829887][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.838936][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.848095][ T8579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.865832][ T8577] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.907720][ T283] EXT4-fs (loop3): unmounting filesystem. [ 140.950534][ T8583] loop1: detected capacity change from 0 to 512 [ 140.991304][ T8583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 141.011137][ T8557] loop8: detected capacity change from 0 to 40427 [ 141.017812][ T8583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 141.026548][ T8557] F2FS-fs (loop8): heap/no_heap options were deprecated [ 141.033684][ T8583] System zones: 1-12 [ 141.038232][ T8583] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.042649][ T8557] F2FS-fs (loop8): invalid crc value [ 141.044593][ T8583] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.3678: Inode bitmap for bg 0 marked uninitialized [ 141.063085][ T8583] EXT4-fs (loop1): Remounting filesystem read-only [ 141.076760][ T8583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.085757][ T8583] EXT4-fs (loop1): unmounting filesystem. [ 141.092211][ T8557] F2FS-fs (loop8): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 141.113927][ T8557] F2FS-fs (loop8): Found nat_bits in checkpoint [ 141.204279][ T8557] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 141.337232][ T8585] loop3: detected capacity change from 0 to 40427 [ 141.357056][ T8585] F2FS-fs (loop3): fault_injection options not supported [ 141.376999][ T8585] F2FS-fs (loop3): invalid crc value [ 141.392668][ T8585] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.503461][ T8585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.570454][ T283] syz-executor: attempt to access beyond end of device [ 141.570454][ T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.929677][ T8646] device ip6gretap0 entered promiscuous mode [ 142.254438][ T8691] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 142.480653][ T8721] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 142.656796][ T335] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 142.695254][ T8743] loop7: detected capacity change from 0 to 1024 [ 142.732479][ T8743] EXT4-fs: Ignoring removed nobh option [ 142.760446][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.774375][ T8748] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 142.793838][ T8743] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 142.835114][ T3282] EXT4-fs (loop7): unmounting filesystem. [ 142.847867][ T335] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.864374][ T335] usb 9-1: config 0 interface 0 has no altsetting 0 [ 142.886762][ T335] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 142.906269][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.927407][ T335] usb 9-1: config 0 descriptor?? [ 143.339091][ T335] magicmouse 0003:05AC:0269.0035: unknown main item tag 0x4 [ 143.346597][ T335] magicmouse 0003:05AC:0269.0035: collection stack underflow [ 143.354058][ T335] magicmouse 0003:05AC:0269.0035: item 0 1 0 12 parsing failed [ 143.362066][ T335] magicmouse 0003:05AC:0269.0035: magicmouse hid parse failed [ 143.369637][ T335] magicmouse: probe of 0003:05AC:0269.0035 failed with error -22 [ 143.404997][ T8786] loop7: detected capacity change from 0 to 256 [ 143.413840][ T8786] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 143.426253][ T8786] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 143.553686][ T335] usb 9-1: USB disconnect, device number 15 [ 143.576847][ T304] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.592274][ T8802] futex_wake_op: syz.7.3778 tries to shift op by 32; fix this program [ 143.777916][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.796739][ T304] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.801749][ T8808] loop7: detected capacity change from 0 to 40427 [ 143.812530][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.822370][ T8808] F2FS-fs (loop7): heap/no_heap options were deprecated [ 143.822566][ T304] usb 2-1: config 0 descriptor?? [ 143.834745][ T8808] F2FS-fs (loop7): invalid crc value [ 143.841171][ T8808] F2FS-fs (loop7): Found nat_bits in checkpoint [ 143.856950][ T8390] ------------[ cut here ]------------ [ 143.862491][ T8390] kernel BUG at fs/buffer.c:2714! [ 143.878218][ T8390] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 143.884432][ T8390] CPU: 1 PID: 8390 Comm: kmmpd-loop0 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 143.895825][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.905897][ T8390] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 143.911305][ T8390] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 38 e8 ff e9 b0 fe ff ff e8 2e df a3 ff 0f 0b e8 27 df a3 ff <0f> 0b e8 20 df a3 ff 0f 0b e8 19 df a3 ff 0f 0b e8 12 df a3 ff 0f [ 143.931020][ T8390] RSP: 0018:ffffc90003cefca0 EFLAGS: 00010293 [ 143.937116][ T8390] RAX: ffffffff81cc1849 RBX: 0000000000000000 RCX: ffff88811ec30000 [ 143.945117][ T8390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.953203][ T8390] RBP: ffffc90003cefcf0 R08: dffffc0000000000 R09: ffffed1027c29efd [ 143.961214][ T8390] R10: ffffed1027c29efd R11: 1ffff11027c29efc R12: 0000000000000000 [ 143.969505][ T8390] R13: 1ffff11027c29efc R14: ffff88813e14f7e0 R15: 0000000000003801 [ 143.977507][ T8390] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 143.986469][ T8390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.993081][ T8390] CR2: 00007f936e5900c0 CR3: 000000013cfaa000 CR4: 00000000003506a0 [ 144.001170][ T8390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.009175][ T8390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.011954][ T8808] F2FS-fs (loop7): Start checkpoint disabled! [ 144.017178][ T8390] Call Trace: [ 144.017187][ T8390] [ 144.017196][ T8390] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 144.017235][ T8390] submit_bh+0x1f/0x30 [ 144.039426][ T8390] write_mmp_block_thawed+0x34a/0x4c0 [ 144.044837][ T8390] ? read_mmp_block+0x6d0/0x6d0 [ 144.049705][ T8390] ? __cfi_process_timeout+0x10/0x10 [ 144.055016][ T8390] write_mmp_block+0x138/0x2b0 [ 144.059802][ T8390] kmmpd+0x3ce/0x950 [ 144.063728][ T8390] kthread+0x281/0x320 [ 144.067820][ T8390] ? __cfi_kmmpd+0x10/0x10 [ 144.072348][ T8390] ? __cfi_kthread+0x10/0x10 [ 144.077009][ T8390] ret_from_fork+0x1f/0x30 [ 144.081472][ T8390] [ 144.084588][ T8390] Modules linked in: [ 144.089328][ T8390] ---[ end trace 0000000000000000 ]--- [ 144.089453][ T8808] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 144.094820][ T8390] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 144.107824][ T8390] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 38 e8 ff e9 b0 fe ff ff e8 2e df a3 ff 0f 0b e8 27 df a3 ff <0f> 0b e8 20 df a3 ff 0f 0b e8 19 df a3 ff 0f 0b e8 12 df a3 ff 0f [ 144.127602][ T8390] RSP: 0018:ffffc90003cefca0 EFLAGS: 00010293 [ 144.133805][ T8390] RAX: ffffffff81cc1849 RBX: 0000000000000000 RCX: ffff88811ec30000 [ 144.142076][ T8390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.151268][ T8390] RBP: ffffc90003cefcf0 R08: dffffc0000000000 R09: ffffed1027c29efd [ 144.163527][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 144.163563][ T28] audit: type=1400 audit(2000000010.180:793): avc: denied { rename } for pid=8807 comm="syz.7.3781" name="bus" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.169568][ T8390] R10: ffffed1027c29efd R11: 1ffff11027c29efc R12: 0000000000000000 [ 144.224582][ T8390] R13: 1ffff11027c29efc R14: ffff88813e14f7e0 R15: 0000000000003801 [ 144.228353][ T4190] kworker/u4:6: attempt to access beyond end of device [ 144.228353][ T4190] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 144.232943][ T8390] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 144.255843][ T8390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.264029][ T8390] CR2: 00007f835b582178 CR3: 000000012f9d1000 CR4: 00000000003506a0 [ 144.272182][ T8390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.273292][ T304] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor [ 144.280543][ T8390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.297043][ T8390] Kernel panic - not syncing: Fatal exception [ 144.303396][ T8390] Kernel Offset: disabled [ 144.307731][ T8390] Rebooting in 86400 seconds..