last executing test programs: 2.489788458s ago: executing program 1 (id=2780): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.686425532s ago: executing program 1 (id=2785): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x8a, &(0x7f00000000c0)=0x2000000, 0x4) 1.101798415s ago: executing program 2 (id=2790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 1.051707605s ago: executing program 2 (id=2792): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x30, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x30}}, 0x0) 1.051546305s ago: executing program 2 (id=2793): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r1, r2, 0x0) 1.051288325s ago: executing program 2 (id=2804): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x300) 889.850916ms ago: executing program 2 (id=2796): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 855.895616ms ago: executing program 2 (id=2799): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201fb00e066e040810705000500000000010902120001000000000904"], 0x0) 802.056396ms ago: executing program 1 (id=2802): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000000200)) 739.738367ms ago: executing program 0 (id=2809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 677.619087ms ago: executing program 0 (id=2812): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x6, 0x12) 677.006047ms ago: executing program 3 (id=2813): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x8d}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) 669.774107ms ago: executing program 0 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYRES16], 0x1c}}, 0x0) 630.555787ms ago: executing program 3 (id=2815): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x30, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x30}}, 0x0) 626.982017ms ago: executing program 0 (id=2816): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x127c, &(0x7f0000001080)) 566.269408ms ago: executing program 3 (id=2817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 505.617038ms ago: executing program 3 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 505.151538ms ago: executing program 3 (id=2821): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) write$P9_RLERROR(r0, &(0x7f00000002c0)={0xe, 0x7, 0x2, {0x5, 'f2fs\x00'}}, 0xe) 362.213919ms ago: executing program 1 (id=2824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 362.081098ms ago: executing program 0 (id=2825): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x300) 279.057729ms ago: executing program 4 (id=2831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='system_u:obvice_t:s0 unconfined 0'], 0x46) 252.369439ms ago: executing program 4 (id=2832): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 229.243549ms ago: executing program 4 (id=2833): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) 196.756889ms ago: executing program 1 (id=2834): r0 = io_uring_setup(0x253d, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000005280)={0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000003ec0)=""/89, 0x59}], 0x1}, 0x22) close_range(r0, 0xffffffffffffffff, 0x0) 196.606989ms ago: executing program 4 (id=2835): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = dup(r0) connect$netlink(r1, &(0x7f0000001080)=@unspec, 0xc) 181.222459ms ago: executing program 4 (id=2836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0xfffffd2f}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 140.95893ms ago: executing program 3 (id=2837): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 113.01449ms ago: executing program 0 (id=2838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)="a11a92"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 31.46599ms ago: executing program 4 (id=2839): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200003f00ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 1 (id=2840): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x6, 0x12) kernel console output (not intermixed with test programs): ce syz (17dc:0202) [ 105.032188][ T296] usb 4-1: No valid video chain found. [ 105.075907][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.096050][ T296] usb 4-1: USB disconnect, device number 15 [ 105.101811][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.112622][ T335] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 105.121510][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.129413][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.141145][ T335] usb 1-1: config 0 descriptor?? [ 105.146183][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.155746][ T39] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 105.164657][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.173104][ T39] usb 5-1: config 0 descriptor?? [ 105.261337][ T4909] loop2: detected capacity change from 0 to 40427 [ 105.268055][ T4909] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 105.274815][ T4909] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.283650][ T4909] F2FS-fs (loop2): invalid crc value [ 105.289996][ T4909] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.320998][ T4909] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.327889][ T4909] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.346294][ T28] audit: type=1400 audit(1731746329.969:633): avc: denied { rmdir } for pid=4908 comm="syz.2.1900" name="file6" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.354093][ T4910] f2fs_ckpt-7:2: attempt to access beyond end of device [ 105.354093][ T4910] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.550698][ T4915] loop1: detected capacity change from 0 to 40427 [ 105.558356][ T4915] F2FS-fs (loop1): invalid crc value [ 105.583444][ T4915] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.627599][ T335] lua 0003:1E7D:2C2E.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 105.647548][ T39] elecom 0003:056E:011C.001A: hidraw1: USB HID v0.06 Device [HID 056e:011c] on usb-dummy_hcd.4-1/input0 [ 105.685941][ T4915] F2FS-fs (loop1): Start checkpoint disabled! [ 105.706358][ T4915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 105.736651][ T4915] syz.1.1901: attempt to access beyond end of device [ 105.736651][ T4915] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.750365][ T28] audit: type=1400 audit(1731746330.359:634): avc: denied { ioctl } for pid=4914 comm="syz.1.1901" path="/394/bus/pids.current" dev="loop1" ino=10 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.785090][ T4915] syz.1.1901: attempt to access beyond end of device [ 105.785090][ T4915] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 105.829396][ T39] usb 1-1: USB disconnect, device number 16 [ 105.850261][ T554] usb 5-1: USB disconnect, device number 14 [ 105.857615][ T10] kworker/u4:1: attempt to access beyond end of device [ 105.857615][ T10] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 105.891745][ T10] kworker/u4:1: attempt to access beyond end of device [ 105.891745][ T10] loop1: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 106.067087][ T4932] loop2: detected capacity change from 0 to 40427 [ 106.079267][ T4932] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 106.087433][ T4932] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.125199][ T4932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.171111][ T4917] loop3: detected capacity change from 0 to 131072 [ 106.179085][ T4917] F2FS-fs (loop3): invalid crc value [ 106.194253][ T4944] netlink: 'syz.1.1912': attribute type 5 has an invalid length. [ 106.210961][ T4917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.228270][ T4932] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.235179][ T4932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.260855][ T4932] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 106.270122][ T4932] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 106.279256][ T4917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.311805][ T4917] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. bea6cb74 [ 106.499213][ T4968] loop2: detected capacity change from 0 to 256 [ 106.545164][ T4972] loop4: detected capacity change from 0 to 128 [ 106.554265][ T4974] loop1: detected capacity change from 0 to 128 [ 106.595620][ T4974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.611207][ T4974] ext4 filesystem being mounted at /402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 106.659305][ T28] audit: type=1400 audit(1731746331.279:635): avc: denied { compute_member } for pid=4982 comm="syz.4.1929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 106.705298][ T292] EXT4-fs (loop1): unmounting filesystem. [ 106.705455][ T28] audit: type=1400 audit(1731746331.319:636): avc: denied { sqpoll } for pid=4988 comm="syz.0.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.070831][ T4987] loop2: detected capacity change from 0 to 40427 [ 107.082387][ T4987] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 107.090193][ T4987] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.108193][ T5010] loop0: detected capacity change from 0 to 40427 [ 107.124926][ T4987] F2FS-fs (loop2): invalid crc value [ 107.126000][ T5010] F2FS-fs (loop0): invalid crc value [ 107.149384][ T5010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.161304][ T4987] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.196006][ T5010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 107.198884][ T5012] loop4: detected capacity change from 0 to 40427 [ 107.216833][ T5012] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 107.223247][ T5012] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.241507][ T4987] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.248706][ T4987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.253457][ T5012] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.263932][ T294] syz-executor: attempt to access beyond end of device [ 107.263932][ T294] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.290177][ T314] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 107.306178][ T314] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 107.326620][ T5012] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.333902][ T5012] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.402266][ T291] syz-executor: attempt to access beyond end of device [ 107.402266][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.420159][ T5037] loop1: detected capacity change from 0 to 512 [ 107.426325][ T334] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 107.445340][ T5037] EXT4-fs (loop1): 1 truncate cleaned up [ 107.451037][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.483382][ T292] EXT4-fs (loop1): unmounting filesystem. [ 107.548440][ T28] audit: type=1400 audit(1731746332.169:637): avc: denied { write } for pid=5046 comm="syz.1.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.610729][ T5053] SELinux: Context :yz1 is not valid (left unmapped). [ 107.624442][ T5057] loop1: detected capacity change from 0 to 512 [ 107.626099][ T28] audit: type=1400 audit(1731746332.239:638): avc: denied { relabelto } for pid=5049 comm="syz.0.1954" name="file0" dev="tmpfs" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 107.654644][ T5057] ext4: Bad value for 'max_batch_time' [ 107.664668][ T28] audit: type=1400 audit(1731746332.279:639): avc: denied { associate } for pid=5049 comm="syz.0.1954" name="file0" dev="tmpfs" ino=2066 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":yz1" [ 107.695894][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 107.701892][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 107.710958][ T5065] bridge_slave_0: default FDB implementation only supports local addresses [ 107.714485][ T28] audit: type=1400 audit(1731746332.279:640): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 107.741750][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 107.778400][ T5073] loop2: detected capacity change from 0 to 512 [ 107.785074][ T5073] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 107.799413][ T5073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 107.807250][ T5073] System zones: 1-12 [ 107.811469][ T5073] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.812412][ T28] audit: type=1400 audit(1731746332.429:641): avc: denied { wake_alarm } for pid=5078 comm="syz.4.1966" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.817792][ T5073] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.1965: Inode bitmap for bg 0 marked uninitialized [ 107.851058][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.852101][ T5073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.861745][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.879496][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.888325][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.896920][ T334] usb 4-1: config 0 descriptor?? [ 107.899967][ T5073] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 5: comm syz.2.1965: lblock 0 mapped to illegal pblock 5 (length 1) [ 107.916264][ T5073] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1965: error -117 reading directory block [ 107.929245][ T5073] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 5: comm syz.2.1965: lblock 0 mapped to illegal pblock 5 (length 1) [ 107.944197][ T334] hub 4-1:0.0: USB hub found [ 107.946505][ T335] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 107.949624][ T5073] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1965: error -117 reading directory block [ 107.975262][ T293] EXT4-fs (loop2): unmounting filesystem. [ 108.030280][ T5095] loop2: detected capacity change from 0 to 512 [ 108.038268][ T5095] EXT4-fs: Ignoring removed orlov option [ 108.044451][ T5095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.058190][ T5095] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1972: Attempting to read directory block (0) that is past i_size (256) [ 108.072412][ T5095] EXT4-fs (loop2): Remounting filesystem read-only [ 108.078979][ T5095] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 108.087015][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.103192][ T293] EXT4-fs (loop2): unmounting filesystem. [ 108.144845][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 108.145915][ T334] hub 4-1:0.0: 1 port detected [ 108.165560][ T28] audit: type=1400 audit(1731746332.779:642): avc: denied { mount } for pid=5105 comm="syz.4.1977" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.192595][ T28] audit: type=1400 audit(1731746332.789:643): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.221558][ T28] audit: type=1400 audit(1731746332.839:644): avc: denied { write } for pid=5109 comm="syz.2.1979" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.247712][ T335] usb 1-1: Using ep0 maxpacket: 8 [ 108.403181][ T28] audit: type=1400 audit(1731746333.019:645): avc: denied { mount } for pid=5124 comm="syz.2.1985" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.567024][ T335] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 108.582824][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.598290][ T335] usb 1-1: Product: syz [ 108.605960][ T335] usb 1-1: Manufacturer: syz [ 108.611837][ T335] usb 1-1: SerialNumber: syz [ 108.614417][ T5144] loop1: detected capacity change from 0 to 128 [ 108.617161][ T335] r8152-cfgselector 1-1: config 0 descriptor?? [ 108.632061][ T5144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.640569][ T5144] ext4 filesystem being mounted at /417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 108.642301][ T334] usb 4-1: USB disconnect, device number 16 [ 108.686308][ T292] EXT4-fs (loop1): unmounting filesystem. [ 108.707630][ T28] audit: type=1326 audit(1731746333.329:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.1995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f77e719 code=0x0 [ 108.739643][ T5154] netlink: 'syz.4.1998': attribute type 34 has an invalid length. [ 108.775953][ T5160] loop1: detected capacity change from 0 to 256 [ 108.865871][ T554] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 108.958539][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 109.025883][ T296] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.105852][ T554] usb 3-1: Using ep0 maxpacket: 16 [ 109.125878][ T335] r8152-cfgselector 1-1: Unknown version 0x0000 [ 109.132021][ T335] r8152-cfgselector 1-1: bad CDC descriptors [ 109.156072][ T335] r8152-cfgselector 1-1: Unknown version 0x0000 [ 109.166668][ T335] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 109.217821][ T5181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2010'. [ 109.226698][ T554] usb 3-1: config 0 has no interfaces? [ 109.285904][ T296] usb 5-1: Using ep0 maxpacket: 16 [ 109.385885][ T554] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.394782][ T554] usb 3-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 109.403251][ T554] usb 3-1: Product: syz [ 109.407365][ T554] usb 3-1: Manufacturer: syz [ 109.411779][ T554] usb 3-1: SerialNumber: syz [ 109.418227][ T554] r8152-cfgselector 3-1: config 0 descriptor?? [ 109.425891][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.436696][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.446527][ T296] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 109.455448][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.464078][ T296] usb 5-1: config 0 descriptor?? [ 109.512318][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 109.693384][ T5225] loop1: detected capacity change from 0 to 512 [ 109.699723][ T5225] EXT4-fs: Ignoring removed orlov option [ 109.712267][ T5225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.725215][ T5225] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2039: Attempting to read directory block (0) that is past i_size (256) [ 109.739903][ T5225] EXT4-fs (loop1): Remounting filesystem read-only [ 109.746389][ T5225] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 109.754393][ T5225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.771647][ T292] EXT4-fs (loop1): unmounting filesystem. [ 109.797235][ T5233] loop1: detected capacity change from 0 to 512 [ 109.813965][ T5233] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 109.833270][ T5233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 109.841912][ T5233] System zones: 1-12 [ 109.845729][ T330] usb 3-1: config 0 descriptor?? [ 109.847102][ T5233] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.856797][ T5233] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.2032: Inode bitmap for bg 0 marked uninitialized [ 109.869635][ T5233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.878775][ T6] usb 3-1: USB disconnect, device number 16 [ 109.885958][ T330] usb 3-1: can't set config #0, error -71 [ 109.891139][ T5233] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 5: comm syz.1.2032: lblock 0 mapped to illegal pblock 5 (length 1) [ 109.907823][ T5233] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2032: error -117 reading directory block [ 109.920600][ T5233] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 5: comm syz.1.2032: lblock 0 mapped to illegal pblock 5 (length 1) [ 109.934695][ T5233] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2032: error -117 reading directory block [ 109.951174][ T292] EXT4-fs (loop1): unmounting filesystem. [ 109.966903][ T296] lua 0003:1E7D:2C2E.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 110.100103][ T5257] loop0: detected capacity change from 0 to 512 [ 110.106589][ T5257] ext4: Bad value for 'max_batch_time' [ 110.116445][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 110.178351][ T6] usb 5-1: USB disconnect, device number 15 [ 110.388343][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 110.685853][ T554] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 110.715900][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 110.724894][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.733080][ T24] usb 4-1: Product: syz [ 110.737086][ T24] usb 4-1: Manufacturer: syz [ 110.741467][ T24] usb 4-1: SerialNumber: syz [ 110.746693][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 110.949040][ T5276] loop0: detected capacity change from 0 to 512 [ 110.955429][ T5276] EXT4-fs: Ignoring removed orlov option [ 110.961583][ T5276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.974237][ T5276] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2051: Attempting to read directory block (0) that is past i_size (256) [ 110.988535][ T5276] EXT4-fs (loop0): Remounting filesystem read-only [ 110.994863][ T5276] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 111.002963][ T5276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.025350][ T294] EXT4-fs (loop0): unmounting filesystem. [ 111.045910][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.056809][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.066368][ T554] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 111.075175][ T554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.083758][ T554] usb 2-1: config 0 descriptor?? [ 111.175842][ T335] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 111.255873][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 111.262008][ T24] r8152-cfgselector 4-1: bad CDC descriptors [ 111.292050][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 111.298749][ T24] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 111.436708][ T5304] loop0: detected capacity change from 0 to 1024 [ 111.443834][ T5304] EXT4-fs: Ignoring removed orlov option [ 111.449923][ T5304] EXT4-fs (loop0): Test dummy encryption mode enabled [ 111.458086][ T5304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.549856][ T294] EXT4-fs (loop0): unmounting filesystem. [ 111.566469][ T554] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 111.575013][ T554] hid-thrustmaster 0003:044F:B65D.001C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 111.586922][ T554] hid-thrustmaster 0003:044F:B65D.001C: Wrong number of endpoints? [ 111.596010][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.606845][ T335] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.615698][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.624544][ T335] usb 5-1: config 0 descriptor?? [ 111.760670][ T5315] loop3: detected capacity change from 0 to 512 [ 111.767373][ T5312] loop2: detected capacity change from 0 to 512 [ 111.772482][ T5315] EXT4-fs: Ignoring removed orlov option [ 111.779674][ T5315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.794822][ T5312] ext4: Bad value for 'max_batch_time' [ 111.801231][ T5315] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2065: Attempting to read directory block (0) that is past i_size (256) [ 111.815540][ T5315] EXT4-fs (loop3): Remounting filesystem read-only [ 111.822028][ T5315] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 111.830198][ T5315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.842174][ T6] usb 2-1: USB disconnect, device number 21 [ 111.847916][ C0] hid-thrustmaster 0003:044F:B65D.001C: URB to get model id failed with error -71 [ 111.858452][ T295] EXT4-fs (loop3): unmounting filesystem. [ 111.976096][ T335] usbhid 5-1:0.0: can't add hid device: -71 [ 111.981960][ T335] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.990487][ T335] usb 5-1: USB disconnect, device number 16 [ 112.399114][ T5338] loop4: detected capacity change from 0 to 2048 [ 112.420709][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.429951][ T5338] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038 (0x7fffffff) [ 112.457195][ T291] EXT4-fs (loop4): unmounting filesystem. [ 112.649288][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 112.649303][ T28] audit: type=1326 audit(1731746337.269:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576017e719 code=0x7fc00000 [ 112.655896][ T335] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 112.755889][ T6] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 112.835895][ T296] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 112.935835][ T335] usb 2-1: Using ep0 maxpacket: 32 [ 112.995927][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 113.055936][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.065879][ T60] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 113.066715][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.083655][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.092561][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.100843][ T335] usb 2-1: config 0 descriptor?? [ 113.115856][ T6] usb 4-1: config 0 has no interfaces? [ 113.136400][ T335] hub 2-1:0.0: USB hub found [ 113.215888][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.226698][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.236224][ T296] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 113.245065][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.253494][ T296] usb 5-1: config 0 descriptor?? [ 113.275961][ T6] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.284821][ T6] usb 4-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 113.292905][ T6] usb 4-1: Product: syz [ 113.296931][ T6] usb 4-1: Manufacturer: syz [ 113.301299][ T6] usb 4-1: SerialNumber: syz [ 113.307244][ T6] r8152-cfgselector 4-1: config 0 descriptor?? [ 113.365854][ T335] hub 2-1:0.0: 1 port detected [ 113.435864][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.446678][ T60] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.455464][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.463960][ T60] usb 3-1: config 0 descriptor?? [ 113.737111][ T296] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 113.745424][ T296] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 113.757616][ T296] hid-thrustmaster 0003:044F:B65D.001D: Wrong number of endpoints? [ 113.765396][ T314] usb 4-1: config 0 descriptor?? [ 113.771327][ T296] usb 4-1: USB disconnect, device number 18 [ 113.785880][ T314] usb 4-1: can't set config #0, error -71 [ 113.805887][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 113.811857][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.818782][ T60] usb 3-1: USB disconnect, device number 17 [ 113.827559][ T335] usb 2-1: USB disconnect, device number 22 [ 114.006250][ T296] usb 5-1: USB disconnect, device number 17 [ 114.015828][ C1] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -2 [ 114.222467][ T28] audit: type=1400 audit(1731746338.839:680): avc: denied { mount } for pid=5371 comm="syz.0.2100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.247635][ T28] audit: type=1400 audit(1731746338.839:681): avc: denied { remount } for pid=5371 comm="syz.0.2100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.267531][ T28] audit: type=1400 audit(1731746338.869:682): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.361614][ T28] audit: type=1400 audit(1731746338.979:683): avc: denied { setopt } for pid=5387 comm="syz.1.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.369519][ T5386] loop0: detected capacity change from 0 to 1024 [ 114.422618][ T5396] loop1: detected capacity change from 0 to 256 [ 114.429116][ T5396] exfat: Deprecated parameter 'utf8' [ 114.432142][ T5386] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.447375][ T5396] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 114.455689][ T5386] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.469478][ T5386] jbd2_journal_init_inode: Cannot locate journal superblock [ 114.481365][ T5386] EXT4-fs (loop0): Could not load journal inode [ 114.513732][ T28] audit: type=1400 audit(1731746339.129:684): avc: denied { rename } for pid=5395 comm="syz.1.2102" name="file0" dev="loop1" ino=1048672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.645379][ T28] audit: type=1400 audit(1731746339.259:685): avc: denied { write } for pid=5420 comm="syz.4.2112" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 114.678624][ T28] audit: type=1326 audit(1731746339.299:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576017e719 code=0x7ffc0000 [ 114.702040][ T554] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 114.702772][ T28] audit: type=1326 audit(1731746339.299:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576017e719 code=0x7ffc0000 [ 114.732849][ T28] audit: type=1326 audit(1731746339.299:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f576017e719 code=0x7ffc0000 [ 114.775213][ T5429] device batadv_slave_0 entered promiscuous mode [ 114.845852][ T335] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 114.985828][ T554] usb 3-1: Using ep0 maxpacket: 16 [ 115.035897][ T296] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 115.085829][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 115.205863][ T335] usb 2-1: config 0 has no interfaces? [ 115.325955][ T554] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.334845][ T554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.342665][ T554] usb 3-1: Product: syz [ 115.346625][ T554] usb 3-1: Manufacturer: syz [ 115.351029][ T554] usb 3-1: SerialNumber: syz [ 115.356350][ T554] r8152-cfgselector 3-1: config 0 descriptor?? [ 115.365895][ T335] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.374795][ T335] usb 2-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 115.382824][ T335] usb 2-1: Product: syz [ 115.387291][ T335] usb 2-1: Manufacturer: syz [ 115.391666][ T335] usb 2-1: SerialNumber: syz [ 115.396199][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.407025][ T296] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.416070][ T335] r8152-cfgselector 2-1: config 0 descriptor?? [ 115.422057][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.430392][ T296] usb 4-1: config 0 descriptor?? [ 115.493893][ T5438] loop4: detected capacity change from 0 to 1024 [ 115.501575][ T5440] loop0: detected capacity change from 0 to 256 [ 115.507837][ T5438] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.518919][ T5440] exfat: Deprecated parameter 'utf8' [ 115.524103][ T5438] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.526617][ T5440] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 115.533805][ T5438] jbd2_journal_init_inode: Cannot locate journal superblock [ 115.554409][ T5438] EXT4-fs (loop4): Could not load journal inode [ 115.625921][ T554] r8152-cfgselector 3-1: Unknown version 0x0000 [ 115.631568][ T5448] loop0: detected capacity change from 0 to 2048 [ 115.647897][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.656387][ T5448] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038 (0x7fffffff) [ 115.685609][ T294] EXT4-fs (loop0): unmounting filesystem. [ 115.765873][ T296] usbhid 4-1:0.0: can't add hid device: -71 [ 115.771801][ T296] usbhid: probe of 4-1:0.0 failed with error -71 [ 115.778437][ T43] usb 2-1: config 0 descriptor?? [ 115.778828][ T296] usb 4-1: USB disconnect, device number 19 [ 115.877429][ T39] usb 2-1: USB disconnect, device number 23 [ 115.885960][ T554] r8152-cfgselector 3-1: Unknown version 0x0000 [ 115.886080][ T43] usb 2-1: can't set config #0, error -71 [ 115.892739][ T554] r8152-cfgselector 3-1: USB disconnect, device number 18 [ 116.191843][ T5477] loop4: detected capacity change from 0 to 256 [ 116.191851][ T5474] loop3: detected capacity change from 0 to 1024 [ 116.203682][ T5474] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.210718][ T5477] exfat: Deprecated parameter 'utf8' [ 116.223555][ T5477] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 116.223975][ T5474] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.245857][ T5474] jbd2_journal_init_inode: Cannot locate journal superblock [ 116.255452][ T5474] EXT4-fs (loop3): Could not load journal inode [ 116.280353][ T5481] device batadv_slave_0 entered promiscuous mode [ 116.385270][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 116.545608][ T5529] loop2: detected capacity change from 0 to 256 [ 116.567247][ T5529] exfat: Deprecated parameter 'utf8' [ 116.574741][ T5529] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 116.805847][ T296] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 116.825897][ T39] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 117.045838][ T296] usb 2-1: Using ep0 maxpacket: 16 [ 117.071357][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 117.194790][ T5574] loop2: detected capacity change from 0 to 512 [ 117.195877][ T39] usb 5-1: config 0 has no interfaces? [ 117.207291][ T5576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 117.207348][ T5574] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.230720][ T5574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.241301][ T5574] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.2183: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 117.258565][ T5574] EXT4-fs error (device loop2): ext4_quota_enable:6981: comm syz.2.2183: Bad quota inode: 3, type: 0 [ 117.269451][ T5574] EXT4-fs warning (device loop2): ext4_enable_quotas:7022: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.283937][ T5574] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 117.297493][ T5574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.329930][ T293] EXT4-fs (loop2): unmounting filesystem. [ 117.335933][ T296] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.346075][ T296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.353873][ T296] usb 2-1: Product: syz [ 117.366871][ T296] usb 2-1: Manufacturer: syz [ 117.371331][ T296] usb 2-1: SerialNumber: syz [ 117.380068][ T39] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.400681][ T296] r8152-cfgselector 2-1: config 0 descriptor?? [ 117.406877][ T39] usb 5-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 117.415138][ T39] usb 5-1: Product: syz [ 117.428769][ T39] usb 5-1: Manufacturer: syz [ 117.433181][ T39] usb 5-1: SerialNumber: syz [ 117.449986][ T39] r8152-cfgselector 5-1: config 0 descriptor?? [ 117.455041][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 117.466858][ T5602] input: syz0 as /devices/virtual/input/input28 [ 117.496323][ T5607] incfs: Backing dir is not set, filesystem can't be mounted. [ 117.503713][ T5607] incfs: mount failed -2 [ 117.523772][ T5612] loop3: detected capacity change from 0 to 512 [ 117.548977][ T5612] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.558839][ T5612] EXT4-fs (loop3): orphan cleanup on readonly fs [ 117.565055][ T5612] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.2203: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 117.582114][ T5612] EXT4-fs error (device loop3): ext4_quota_enable:6981: comm syz.3.2203: Bad quota inode: 3, type: 0 [ 117.593143][ T5612] EXT4-fs warning (device loop3): ext4_enable_quotas:7022: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.608264][ T5612] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 117.614757][ T5612] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.631679][ T295] EXT4-fs (loop3): unmounting filesystem. [ 117.675561][ T296] r8152-cfgselector 2-1: Unknown version 0x0000 [ 117.775614][ T5637] input: syz0 as /devices/virtual/input/input29 [ 117.787161][ T5639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2212'. [ 117.801430][ T5641] loop3: detected capacity change from 0 to 512 [ 117.816707][ T5644] loop0: detected capacity change from 0 to 256 [ 117.837293][ T5641] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2216: invalid indirect mapped block 256 (level 2) [ 117.851389][ T5641] EXT4-fs (loop3): 2 truncates cleaned up [ 117.857140][ T5641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.882675][ T295] EXT4-fs (loop3): unmounting filesystem. [ 117.910147][ T335] usb 5-1: USB disconnect, device number 18 [ 117.913293][ T5650] loop3: detected capacity change from 0 to 256 [ 117.935875][ T296] r8152-cfgselector 2-1: Unknown version 0x0000 [ 117.943805][ T296] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 117.951284][ T5650] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.033462][ T5650] FAT-fs (loop3): Directory bread(block 64) failed [ 118.043571][ T5650] FAT-fs (loop3): Directory bread(block 65) failed [ 118.050107][ T5650] FAT-fs (loop3): Directory bread(block 66) failed [ 118.056546][ T5650] FAT-fs (loop3): Directory bread(block 67) failed [ 118.062935][ T5650] FAT-fs (loop3): Directory bread(block 68) failed [ 118.069533][ T5650] FAT-fs (loop3): Directory bread(block 69) failed [ 118.076022][ T5650] FAT-fs (loop3): Directory bread(block 70) failed [ 118.082419][ T5650] FAT-fs (loop3): Directory bread(block 71) failed [ 118.088766][ T5650] FAT-fs (loop3): Directory bread(block 72) failed [ 118.095071][ T5650] FAT-fs (loop3): Directory bread(block 73) failed [ 118.210717][ T5672] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.218062][ T5672] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.295687][ T5685] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 118.331545][ T5689] loop0: detected capacity change from 0 to 512 [ 118.344384][ T5689] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.356798][ T5695] loop2: detected capacity change from 0 to 256 [ 118.368828][ T5695] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.386279][ T5689] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.387709][ T5695] FAT-fs (loop2): Directory bread(block 64) failed [ 118.392543][ T5689] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.2236: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 118.415722][ T5695] FAT-fs (loop2): Directory bread(block 65) failed [ 118.416025][ T5689] EXT4-fs error (device loop0): ext4_quota_enable:6981: comm syz.0.2236: Bad quota inode: 3, type: 0 [ 118.432953][ T5689] EXT4-fs warning (device loop0): ext4_enable_quotas:7022: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.447409][ T5689] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 118.455872][ T5689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.488922][ T5702] loop4: detected capacity change from 0 to 256 [ 118.498236][ T5695] FAT-fs (loop2): Directory bread(block 66) failed [ 118.504562][ T5695] FAT-fs (loop2): Directory bread(block 67) failed [ 118.511101][ T5695] FAT-fs (loop2): Directory bread(block 68) failed [ 118.517465][ T5695] FAT-fs (loop2): Directory bread(block 69) failed [ 118.523830][ T5695] FAT-fs (loop2): Directory bread(block 70) failed [ 118.530158][ T5695] FAT-fs (loop2): Directory bread(block 71) failed [ 118.536470][ T5695] FAT-fs (loop2): Directory bread(block 72) failed [ 118.542773][ T5695] FAT-fs (loop2): Directory bread(block 73) failed [ 118.551130][ T294] EXT4-fs (loop0): unmounting filesystem. [ 118.778479][ T5715] loop2: detected capacity change from 0 to 512 [ 118.793674][ T5715] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2249: invalid indirect mapped block 256 (level 2) [ 118.807061][ T5715] EXT4-fs (loop2): 2 truncates cleaned up [ 118.812584][ T5715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.841676][ T293] EXT4-fs (loop2): unmounting filesystem. [ 118.908197][ T5740] loop1: detected capacity change from 0 to 256 [ 118.916995][ T5740] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.941521][ T5740] FAT-fs (loop1): Directory bread(block 64) failed [ 118.950806][ T5740] FAT-fs (loop1): Directory bread(block 65) failed [ 118.960385][ T5740] FAT-fs (loop1): Directory bread(block 66) failed [ 118.967878][ T5740] FAT-fs (loop1): Directory bread(block 67) failed [ 118.974259][ T5740] FAT-fs (loop1): Directory bread(block 68) failed [ 118.981378][ T5740] FAT-fs (loop1): Directory bread(block 69) failed [ 118.989524][ T5740] FAT-fs (loop1): Directory bread(block 70) failed [ 119.001152][ T5740] FAT-fs (loop1): Directory bread(block 71) failed [ 119.007919][ T5740] FAT-fs (loop1): Directory bread(block 72) failed [ 119.014628][ T5740] FAT-fs (loop1): Directory bread(block 73) failed [ 119.021288][ T5754] loop2: detected capacity change from 0 to 256 [ 119.072345][ T5757] loop1: detected capacity change from 0 to 512 [ 119.080553][ T5757] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2267: invalid indirect mapped block 256 (level 2) [ 119.094120][ T5757] EXT4-fs (loop1): 2 truncates cleaned up [ 119.100144][ T5757] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.105371][ T5761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2269'. [ 119.119542][ T292] EXT4-fs (loop1): unmounting filesystem. [ 119.155855][ T60] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 119.185840][ T554] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 119.395883][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 119.425841][ T554] usb 1-1: Using ep0 maxpacket: 16 [ 119.585898][ T554] usb 1-1: config 0 has no interfaces? [ 119.725903][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.734854][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.742722][ T60] usb 4-1: Product: syz [ 119.746637][ T60] usb 4-1: Manufacturer: syz [ 119.751054][ T60] usb 4-1: SerialNumber: syz [ 119.756453][ T60] r8152-cfgselector 4-1: config 0 descriptor?? [ 119.775927][ T554] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.784876][ T554] usb 1-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 119.793021][ T554] usb 1-1: Product: syz [ 119.797290][ T554] usb 1-1: Manufacturer: syz [ 119.801689][ T554] usb 1-1: SerialNumber: syz [ 119.806685][ T554] r8152-cfgselector 1-1: config 0 descriptor?? [ 120.015886][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 120.275864][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 120.282147][ T10] usb 1-1: config 0 descriptor?? [ 120.284235][ T296] usb 1-1: USB disconnect, device number 18 [ 120.287474][ T60] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 120.772580][ T5822] syz.2.2308[5822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.772664][ T5822] syz.2.2308[5822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.825402][ T5822] SELinux: policydb version -1750478540 does not match my version range 15-33 [ 120.833902][ T5832] loop1: detected capacity change from 0 to 1024 [ 120.843458][ T5822] SELinux: failed to load policy [ 120.872884][ T5832] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.888946][ T5832] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.906633][ T5832] jbd2_journal_init_inode: Cannot locate journal superblock [ 120.913787][ T5832] EXT4-fs (loop1): Could not load journal inode [ 120.998374][ T5846] tun0: tun_chr_ioctl cmd 2147767511 [ 121.018905][ T5850] loop4: detected capacity change from 0 to 2048 [ 121.049291][ T5850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.063604][ T5850] EXT4-fs (loop4): shut down requested (2) [ 121.084267][ T291] EXT4-fs (loop4): unmounting filesystem. [ 121.109490][ T5865] netlink: 'syz.4.2315': attribute type 16 has an invalid length. [ 121.128897][ T5865] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2315'. [ 121.156867][ T5867] loop0: detected capacity change from 0 to 2048 [ 121.766980][ T5889] incfs: Options parsing error. -22 [ 121.774721][ T5889] incfs: mount failed -22 [ 121.790831][ T5894] tun0: tun_chr_ioctl cmd 2147767511 [ 121.826885][ T5905] loop4: detected capacity change from 0 to 128 [ 121.829456][ T5903] loop0: detected capacity change from 0 to 2048 [ 121.847385][ T5905] syz.4.2332: attempt to access beyond end of device [ 121.847385][ T5905] loop4: rw=2049, sector=153, nr_sectors = 89 limit=128 [ 121.861668][ T5908] loop1: detected capacity change from 0 to 16 [ 121.873048][ T5907] loop2: detected capacity change from 0 to 1024 [ 121.879560][ T5908] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.894539][ T5905] syz.4.2332: attempt to access beyond end of device [ 121.894539][ T5905] loop4: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 121.918697][ T5903] EXT4-fs (loop0): shut down requested (2) [ 122.041142][ T5932] incfs: Options parsing error. -22 [ 122.058657][ T5932] incfs: mount failed -22 [ 122.097347][ T5942] loop0: detected capacity change from 0 to 128 [ 122.116674][ T5942] ext4 filesystem being mounted at /479/mnt supports timestamps until 2038 (0x7fffffff) [ 122.240980][ T5959] netlink: 'syz.3.2354': attribute type 16 has an invalid length. [ 122.259270][ T5959] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2354'. [ 122.367966][ T5928] loop4: detected capacity change from 0 to 40427 [ 122.377791][ T5928] F2FS-fs (loop4): fault_injection options not supported [ 122.391604][ T5928] F2FS-fs (loop4): invalid crc value [ 122.400043][ T5964] overlayfs: missing 'lowerdir' [ 122.410179][ T5928] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.491098][ T5928] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.520270][ T291] syz-executor: attempt to access beyond end of device [ 122.520270][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.771788][ T5992] input: syz0 as /devices/virtual/input/input30 [ 122.836815][ T6006] loop1: detected capacity change from 0 to 128 [ 122.845898][ T296] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 122.848134][ T6006] syz.1.2377: attempt to access beyond end of device [ 122.848134][ T6006] loop1: rw=2049, sector=153, nr_sectors = 89 limit=128 [ 122.869664][ T6006] syz.1.2377: attempt to access beyond end of device [ 122.869664][ T6006] loop1: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 122.895332][ T6008] loop1: detected capacity change from 0 to 512 [ 122.901862][ T6008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.912397][ T6008] EXT4-fs (loop1): 1 truncate cleaned up [ 122.959091][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 122.994289][ T6025] loop1: detected capacity change from 0 to 512 [ 123.000937][ T6025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.022499][ T6025] EXT4-fs (loop1): 1 truncate cleaned up [ 123.085840][ T296] usb 1-1: Using ep0 maxpacket: 32 [ 123.206025][ T296] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 123.215000][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.223650][ T296] usb 1-1: config 0 descriptor?? [ 123.266262][ T296] rndis_host: probe of 1-1:0.0 failed with error -22 [ 123.275847][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 123.300409][ T6053] loop2: detected capacity change from 0 to 1024 [ 123.307587][ T6053] EXT4-fs: Ignoring removed orlov option [ 123.313262][ T6053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.468211][ T335] usb 1-1: USB disconnect, device number 19 [ 123.545876][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 123.595667][ T6075] loop3: detected capacity change from 0 to 40427 [ 123.602399][ T6075] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 123.609192][ T6075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.617799][ T6075] F2FS-fs (loop3): invalid crc value [ 123.624256][ T6075] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.655580][ T6075] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 123.662464][ T6075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.675850][ T6] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.681650][ T6076] f2fs_ckpt-7:3: attempt to access beyond end of device [ 123.681650][ T6076] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 123.683784][ T6] usb 5-1: config 0 has no interface number 0 [ 123.703482][ T6] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.714158][ T6] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.723787][ T6] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 123.732880][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.756056][ T6] usb 5-1: config 0 descriptor?? [ 123.793796][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2419'. [ 123.818418][ T6087] input: syz0 as /devices/virtual/input/input31 [ 124.206489][ T6106] loop1: detected capacity change from 0 to 1024 [ 124.212957][ T6106] EXT4-fs: Ignoring removed orlov option [ 124.232973][ T6106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.284125][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2421'. [ 124.350853][ T6116] loop1: detected capacity change from 0 to 2048 [ 124.376032][ T6116] EXT4-fs: Ignoring removed bh option [ 124.383798][ T6116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.404031][ T6116] EXT4-fs: Ignoring removed nobh option [ 124.419670][ T6102] loop0: detected capacity change from 0 to 40427 [ 124.435001][ T6102] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 124.441369][ T6116] EXT4-fs (loop1): shut down requested (2) [ 124.442872][ T6102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.475346][ T6102] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.481689][ T6] uclogic 0003:28BD:0094.001E: pen parameters not found [ 124.481706][ T6] uclogic 0003:28BD:0094.001E: interface is invalid, ignoring [ 124.509096][ T6108] loop2: detected capacity change from 0 to 40427 [ 124.534435][ T6102] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.540829][ T6108] F2FS-fs (loop2): invalid crc value [ 124.542617][ T6102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.548800][ T6108] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.587731][ T6102] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.609295][ T6102] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 124.632855][ T6108] F2FS-fs (loop2): Start checkpoint disabled! [ 124.658402][ T6108] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.700283][ T335] usb 5-1: USB disconnect, device number 19 [ 124.712678][ T6108] syz.2.2430: attempt to access beyond end of device [ 124.712678][ T6108] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.746099][ T6108] syz.2.2430: attempt to access beyond end of device [ 124.746099][ T6108] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 124.779722][ T6139] loop0: detected capacity change from 0 to 256 [ 124.826111][ T10] kworker/u4:1: attempt to access beyond end of device [ 124.826111][ T10] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 124.861310][ T6145] loop3: detected capacity change from 0 to 128 [ 124.865869][ T10] kworker/u4:1: attempt to access beyond end of device [ 124.865869][ T10] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 124.945411][ T6131] loop1: detected capacity change from 0 to 40427 [ 124.960755][ T6131] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 124.969765][ T6147] loop3: detected capacity change from 0 to 128 [ 124.976563][ T6131] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.986909][ T6147] ext4 filesystem being mounted at /435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 125.056603][ T6131] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.128390][ T6131] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.135391][ T6131] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.309301][ T6165] loop2: detected capacity change from 0 to 512 [ 125.341834][ T6165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.371499][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2451'. [ 125.386819][ T6165] EXT4-fs (loop2): 1 truncate cleaned up [ 125.390584][ T6171] bridge_slave_0: default FDB implementation only supports local addresses [ 125.537969][ T6161] loop3: detected capacity change from 0 to 40427 [ 125.576293][ T6161] F2FS-fs (loop3): invalid crc value [ 125.596930][ T6161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.694161][ T6161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 125.754651][ T6169] loop4: detected capacity change from 0 to 40427 [ 125.766390][ T6169] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 125.774084][ T6169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.807184][ T6169] F2FS-fs (loop4): invalid crc value [ 125.843569][ T6169] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.905850][ T296] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 125.926516][ T6141] loop0: detected capacity change from 0 to 131072 [ 125.953830][ T6169] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.962544][ T6141] F2FS-fs (loop0): invalid crc value [ 125.963713][ T6169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.006146][ T6141] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.030190][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 126.046162][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 126.069738][ T6200] loop2: detected capacity change from 0 to 40427 [ 126.089713][ T6200] F2FS-fs (loop2): invalid crc value [ 126.115869][ T6141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.135933][ T6200] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.145146][ T6141] F2FS-fs (loop0): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. bea6cb74 [ 126.155878][ T296] usb 2-1: Using ep0 maxpacket: 32 [ 126.240377][ T6200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 126.275885][ T296] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.291079][ T296] usb 2-1: config 0 has no interface number 0 [ 126.305987][ T296] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.336917][ T296] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.366257][ T296] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 126.385367][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.409606][ T6211] loop3: detected capacity change from 0 to 40427 [ 126.419470][ T296] usb 2-1: config 0 descriptor?? [ 126.449123][ T6211] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 126.465924][ T6211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.556565][ T6211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.660698][ T6211] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 126.676223][ T6211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.733560][ T6211] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 126.742827][ T6211] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 126.778493][ T6230] loop0: detected capacity change from 0 to 40427 [ 126.788356][ T6230] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 126.794781][ T6230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.804799][ T6230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.838107][ T6246] loop2: detected capacity change from 0 to 128 [ 126.888106][ T6230] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.895206][ T6230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.936828][ T294] bio_check_eod: 3 callbacks suppressed [ 126.936843][ T294] syz-executor: attempt to access beyond end of device [ 126.936843][ T294] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.115992][ T296] uclogic 0003:28BD:0094.001F: pen parameters not found [ 127.123900][ T296] uclogic 0003:28BD:0094.001F: interface is invalid, ignoring [ 127.235813][ T335] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 127.254603][ T6254] loop0: detected capacity change from 0 to 40427 [ 127.288035][ T6254] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 127.305689][ T6254] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.316522][ T6254] F2FS-fs (loop0): invalid crc value [ 127.320076][ T24] usb 2-1: USB disconnect, device number 25 [ 127.352159][ T6254] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.395863][ T6254] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.402754][ T6254] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.441480][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 127.450578][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 127.475524][ T6264] loop4: detected capacity change from 0 to 256 [ 127.475924][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 127.575693][ T6248] loop2: detected capacity change from 0 to 131072 [ 127.585680][ T6248] F2FS-fs (loop2): invalid crc value [ 127.616244][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.629952][ T6248] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.657340][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.670990][ T6281] netlink: 'syz.0.2483': attribute type 5 has an invalid length. [ 127.677254][ T335] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 127.697625][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.714321][ T335] usb 4-1: config 0 descriptor?? [ 127.731433][ T6248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.749229][ T6248] F2FS-fs (loop2): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. bea6cb74 [ 127.777563][ T6288] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 127.918925][ T6279] loop4: detected capacity change from 0 to 40427 [ 127.946967][ T6279] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 127.954645][ T6279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 127.970124][ T6295] loop2: detected capacity change from 0 to 1024 [ 127.977073][ T6295] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.988277][ T6295] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 127.998446][ T6295] jbd2_journal_init_inode: Cannot locate journal superblock [ 128.003536][ T6279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.015961][ T6295] EXT4-fs (loop2): Could not load journal inode [ 128.039889][ T6279] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.046785][ T6279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.063729][ T6279] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 128.072975][ T6279] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 128.095822][ T6] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.198699][ T335] elecom 0003:056E:011C.0020: hidraw0: USB HID v0.06 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 128.210451][ T6310] loop4: detected capacity change from 0 to 256 [ 128.216987][ T6310] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.235646][ T6310] FAT-fs (loop4): Directory bread(block 64) failed [ 128.242424][ T6310] FAT-fs (loop4): Directory bread(block 65) failed [ 128.248888][ T6310] FAT-fs (loop4): Directory bread(block 66) failed [ 128.255233][ T6310] FAT-fs (loop4): Directory bread(block 67) failed [ 128.261747][ T6310] FAT-fs (loop4): Directory bread(block 68) failed [ 128.268281][ T6310] FAT-fs (loop4): Directory bread(block 69) failed [ 128.274614][ T6310] FAT-fs (loop4): Directory bread(block 70) failed [ 128.281645][ T6310] FAT-fs (loop4): Directory bread(block 71) failed [ 128.288795][ T6310] FAT-fs (loop4): Directory bread(block 72) failed [ 128.295148][ T6310] FAT-fs (loop4): Directory bread(block 73) failed [ 128.359184][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 128.395405][ T6315] loop4: detected capacity change from 0 to 512 [ 128.412983][ T554] usb 4-1: USB disconnect, device number 21 [ 128.428445][ T6315] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2494: invalid indirect mapped block 256 (level 2) [ 128.443239][ T6315] EXT4-fs (loop4): 2 truncates cleaned up [ 128.452374][ T6315] EXT4-fs mount: 22 callbacks suppressed [ 128.452389][ T6315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.477199][ T291] EXT4-fs (loop4): unmounting filesystem. [ 128.665858][ T6] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 128.674695][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.682708][ T6] usb 1-1: Product: syz [ 128.686692][ T6] usb 1-1: Manufacturer: syz [ 128.691096][ T6] usb 1-1: SerialNumber: syz [ 128.696031][ T6] r8152-cfgselector 1-1: config 0 descriptor?? [ 128.930591][ T6332] loop1: detected capacity change from 0 to 256 [ 128.945855][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 128.961443][ T6337] loop2: detected capacity change from 0 to 256 [ 128.971289][ T6337] exfat: Deprecated parameter 'utf8' [ 128.980634][ T6337] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 129.195987][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 129.202763][ T6] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 129.209741][ T554] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 129.455824][ T554] usb 4-1: Using ep0 maxpacket: 32 [ 129.575868][ T554] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.583693][ T554] usb 4-1: config 0 has no interface number 0 [ 129.589720][ T554] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.600375][ T554] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.609929][ T554] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 129.618850][ T554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.627089][ T554] usb 4-1: config 0 descriptor?? [ 129.709756][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2507'. [ 129.723867][ T6345] loop0: detected capacity change from 0 to 256 [ 129.745453][ T6345] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.763622][ T6345] FAT-fs (loop0): Directory bread(block 64) failed [ 129.770259][ T6345] FAT-fs (loop0): Directory bread(block 65) failed [ 129.776637][ T6345] FAT-fs (loop0): Directory bread(block 66) failed [ 129.782905][ T6345] FAT-fs (loop0): Directory bread(block 67) failed [ 129.789324][ T6345] FAT-fs (loop0): Directory bread(block 68) failed [ 129.795568][ T6345] FAT-fs (loop0): Directory bread(block 69) failed [ 129.801962][ T6345] FAT-fs (loop0): Directory bread(block 70) failed [ 129.808254][ T6345] FAT-fs (loop0): Directory bread(block 71) failed [ 129.814592][ T6345] FAT-fs (loop0): Directory bread(block 72) failed [ 129.820934][ T6345] FAT-fs (loop0): Directory bread(block 73) failed [ 129.853443][ T6354] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 129.869893][ T6357] loop0: detected capacity change from 0 to 512 [ 129.895189][ T6358] loop2: detected capacity change from 0 to 2048 [ 129.910071][ T6357] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2512: invalid indirect mapped block 256 (level 2) [ 129.936463][ T6357] EXT4-fs (loop0): 2 truncates cleaned up [ 129.942009][ T6357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.951370][ T6358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 129.974048][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 129.974061][ T28] audit: type=1400 audit(1731746354.589:713): avc: denied { ioctl } for pid=6372 comm="syz.4.2523" path="socket:[39995]" dev="sockfs" ino=39995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.974236][ T6373] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 130.006493][ T293] EXT4-fs (loop2): unmounting filesystem. [ 130.033449][ T294] EXT4-fs (loop0): unmounting filesystem. [ 130.040612][ T6375] loop4: detected capacity change from 0 to 128 [ 130.047036][ T6375] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.097672][ T28] audit: type=1400 audit(1731746354.719:714): avc: denied { mounton } for pid=6374 comm="syz.4.2525" path="/511/file0/file0" dev="loop4" ino=1048703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 130.203184][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'. [ 130.249717][ T6417] loop0: detected capacity change from 0 to 128 [ 130.256161][ T6417] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.335880][ T554] uclogic 0003:28BD:0094.0021: pen parameters not found [ 130.340210][ T6445] loop1: detected capacity change from 0 to 2048 [ 130.344304][ T554] uclogic 0003:28BD:0094.0021: interface is invalid, ignoring [ 130.359131][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2552'. [ 130.370592][ T6445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.379484][ T6445] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038 (0x7fffffff) [ 130.404011][ T6456] loop2: detected capacity change from 0 to 128 [ 130.412055][ T6445] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2557: bg 0: block 288: padding at end of block bitmap is not set [ 130.416804][ T6456] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.438440][ T292] EXT4-fs (loop1): unmounting filesystem. [ 130.449081][ T28] audit: type=1326 audit(1731746355.069:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.0.2573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f576017e719 code=0x0 [ 130.501346][ T6469] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 130.541535][ T335] usb 4-1: USB disconnect, device number 22 [ 130.611608][ T6484] Invalid ELF header magic: != ELF [ 131.079898][ T6491] loop2: detected capacity change from 0 to 2048 [ 131.107348][ T6491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.115634][ T6491] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038 (0x7fffffff) [ 131.129449][ T6491] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2574: bg 0: block 288: padding at end of block bitmap is not set [ 131.149603][ T293] EXT4-fs (loop2): unmounting filesystem. [ 131.177569][ T6504] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 131.229594][ T28] audit: type=1326 audit(1731746355.849:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342777e719 code=0x7fc00000 [ 131.264195][ T6520] loop4: detected capacity change from 0 to 128 [ 131.298454][ T28] audit: type=1326 audit(1731746355.919:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.4.2588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f342777e719 code=0x0 [ 131.329139][ T6531] loop1: detected capacity change from 0 to 256 [ 131.486099][ T6554] Invalid ELF header magic: != ELF [ 132.172883][ T6589] loop0: detected capacity change from 0 to 128 [ 132.223739][ T6600] loop4: detected capacity change from 0 to 16 [ 132.230280][ T6600] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.239283][ T6600] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.248805][ T6600] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[1851] [ 132.248866][ T28] audit: type=1326 audit(1731746356.869:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.0.2620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f576017e719 code=0x0 [ 132.259572][ T6600] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 132.291468][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.300738][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.310051][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 132.319051][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.328342][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 132.337472][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.353174][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 132.364403][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 132.373587][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 132.382704][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 132.391883][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.401368][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 132.410443][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 132.419596][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 132.428677][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 132.437717][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 132.446767][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 132.455556][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 132.464547][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 132.473829][ T6603] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 132.484665][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 132.497832][ T335] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 132.509294][ T6603] syz.4.2624: attempt to access beyond end of device [ 132.509294][ T6603] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 132.535964][ T6603] syz.4.2624: attempt to access beyond end of device [ 132.535964][ T6603] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 132.560047][ T6603] syz.4.2624: attempt to access beyond end of device [ 132.560047][ T6603] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 132.583628][ T6603] syz.4.2624: attempt to access beyond end of device [ 132.583628][ T6603] loop4: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 132.597356][ T6603] syz.4.2624: attempt to access beyond end of device [ 132.597356][ T6603] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 132.612228][ T6603] syz.4.2624: attempt to access beyond end of device [ 132.612228][ T6603] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 132.626651][ T6603] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[4055] [ 132.638180][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 132.647553][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 132.656606][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.665753][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 132.674737][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.684084][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 132.693087][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 132.702069][ T28] audit: type=1400 audit(1731746357.319:719): avc: denied { write } for pid=6605 comm="syz.3.2626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.702647][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 132.729990][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.739612][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 132.748550][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.757862][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 132.765810][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 132.766783][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 132.780946][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 132.789951][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 132.799087][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 132.808156][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 132.819209][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 132.832433][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.841796][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 132.851361][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.860890][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 132.869943][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 132.883238][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 132.892638][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 132.895886][ T335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.901771][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.920734][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 132.925800][ T335] usb 2-1: config 0 has no interfaces? [ 132.929625][ T6603] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 132.934864][ T335] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.934888][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.944382][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 132.969746][ T6603] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 133.964515][ T335] usb 2-1: config 0 descriptor?? [ 133.969813][ T6603] syz.4.2624: attempt to access beyond end of device [ 133.969813][ T6603] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 133.983291][ T6603] syz.4.2624: attempt to access beyond end of device [ 133.983291][ T6603] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 133.996660][ T6603] syz.4.2624: attempt to access beyond end of device [ 133.996660][ T6603] loop4: rw=524288, sector=6015904, nr_sectors = 8 limit=16 [ 134.011453][ T6603] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[5297] [ 134.096337][ T6638] loop3: detected capacity change from 0 to 128 [ 134.123855][ T6649] loop0: detected capacity change from 0 to 16 [ 134.130362][ T6649] erofs: (device loop0): mounted with root inode @ nid 36. [ 134.141933][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.147938][ T28] audit: type=1326 audit(1731746358.769:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.3.2641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acb17e719 code=0x0 [ 134.151639][ T6649] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[1851] [ 134.184540][ T6649] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 134.198808][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.207974][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.217040][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 134.226003][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.235193][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 134.240223][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.244188][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.261347][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 134.261364][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.270288][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 134.285140][ T296] usb 2-1: USB disconnect, device number 26 [ 134.290864][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 134.301279][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 134.310190][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.319305][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 134.328157][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 134.337062][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 134.346021][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 134.354943][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 134.363791][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 134.372590][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 134.381412][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 134.390214][ T6649] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 134.399471][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 134.408317][ T6649] syz.0.2645: attempt to access beyond end of device [ 134.408317][ T6649] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 134.421926][ T6649] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[4055] [ 134.433178][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 134.435853][ T335] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 134.449591][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 134.458762][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.468600][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 134.477499][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.486961][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 134.496124][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 134.507443][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 134.516470][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.525615][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 134.534626][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.543947][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 134.552898][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 134.561979][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 134.571096][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 134.580118][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 134.589192][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 134.598199][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 134.607233][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.616482][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 134.625374][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.634807][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 134.643850][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 134.652996][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 134.662106][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 134.671133][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.680394][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 134.689293][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 134.694281][ T6649] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.703619][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 134.712764][ T6649] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 134.723215][ T6649] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[5297] [ 134.767465][ T6658] syz.0.2650[6658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.767545][ T6658] syz.0.2650[6658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.778893][ T296] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 134.805967][ T335] usb 3-1: config 0 has no interfaces? [ 134.863651][ T6654] loop4: detected capacity change from 0 to 131072 [ 134.870457][ T6654] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 134.878403][ T6654] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.888317][ T6654] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.919330][ T6654] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 134.926212][ T6654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.995895][ T335] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.004780][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.012773][ T335] usb 3-1: Product: syz [ 135.016892][ T335] usb 3-1: Manufacturer: syz [ 135.021293][ T335] usb 3-1: SerialNumber: syz [ 135.033693][ T335] r8152-cfgselector 3-1: config 0 descriptor?? [ 135.185864][ T296] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.200003][ T296] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.215250][ T296] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 135.233728][ T6691] loop3: detected capacity change from 0 to 16 [ 135.243596][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.252265][ T6691] erofs: (device loop3): mounted with root inode @ nid 36. [ 135.260516][ T296] usb 2-1: config 0 descriptor?? [ 135.268886][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 135.291482][ T6691] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[1851] [ 136.956516][ T6691] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 136.991645][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.000807][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.012622][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 137.023921][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.025647][ T6699] loop1: detected capacity change from 0 to 128 [ 137.042128][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 137.051243][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.060504][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 137.069432][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 137.079687][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 137.090460][ T28] audit: type=1326 audit(1731746361.709:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f77e719 code=0x0 [ 137.095864][ T296] usbhid 2-1:0.0: can't add hid device: -71 [ 137.113212][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 137.127834][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.139560][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 137.149044][ T296] usbhid: probe of 2-1:0.0 failed with error -71 [ 137.152922][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 137.164225][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 137.165395][ T8] usb 3-1: config 0 descriptor?? [ 137.173281][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 137.183373][ T296] usb 2-1: USB disconnect, device number 27 [ 137.197831][ T6715] loop0: detected capacity change from 0 to 512 [ 137.203626][ T24] usb 3-1: USB disconnect, device number 19 [ 137.209864][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 137.219260][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 137.225908][ T8] usb 3-1: can't set config #0, error -71 [ 137.228607][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 137.242985][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 137.252615][ T6715] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.2682: invalid block [ 137.261204][ T6691] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 137.265521][ T6715] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2682: invalid indirect mapped block 10 (level 1) [ 137.273213][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 137.293363][ T6715] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2682: invalid indirect mapped block 8 (level 1) [ 137.300314][ T6691] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[4055] [ 137.319063][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 137.320247][ T6726] loop4: detected capacity change from 0 to 2048 [ 137.327939][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 137.327998][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.328014][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 137.328032][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.328048][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 137.335081][ T6715] EXT4-fs (loop0): 1 truncate cleaned up [ 137.343136][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 137.352807][ T6726] EXT4-fs: Ignoring removed nobh option [ 137.361219][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 137.370700][ T6715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.379296][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.411734][ T6726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.416212][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 137.425328][ T6726] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038 (0x7fffffff) [ 137.434069][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.443942][ T294] EXT4-fs (loop0): unmounting filesystem. [ 137.467207][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 137.476586][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 137.477032][ T291] EXT4-fs (loop4): unmounting filesystem. [ 137.485558][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 137.499902][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 137.508894][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 137.525561][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 137.534795][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 137.543978][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.554632][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 137.564222][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.573543][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 137.582432][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 137.591322][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 137.600546][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 137.613008][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.622307][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 137.636267][ T6691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.646529][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 137.655403][ T6691] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 137.668404][ T6691] bio_check_eod: 14 callbacks suppressed [ 137.668417][ T6691] syz.3.2660: attempt to access beyond end of device [ 137.668417][ T6691] loop3: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 137.687687][ T6738] SELinux: Context Ü is not valid (left unmapped). [ 137.687727][ T6691] syz.3.2660: attempt to access beyond end of device [ 137.687727][ T6691] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 137.708274][ T6691] syz.3.2660: attempt to access beyond end of device [ 137.708274][ T6691] loop3: rw=524288, sector=6015904, nr_sectors = 8 limit=16 [ 137.722618][ T6691] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[5297] [ 137.743945][ T6740] netlink: 'syz.4.2684': attribute type 1 has an invalid length. [ 137.791694][ T6750] loop4: detected capacity change from 0 to 1024 [ 137.843871][ T6750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.879484][ T6750] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 137.900373][ T291] EXT4-fs (loop4): unmounting filesystem. [ 137.956728][ T6772] loop2: detected capacity change from 0 to 16 [ 137.967085][ T6776] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 137.981058][ T6772] erofs: (device loop2): mounted with root inode @ nid 36. [ 138.009516][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.023430][ T6772] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[1851] [ 138.034451][ T6772] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 138.050083][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.059432][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.068587][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 138.077655][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.086907][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 138.096059][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.105182][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 138.114257][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 138.123239][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 138.132266][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 138.141277][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.150491][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 138.159835][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 138.168969][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 138.178092][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 138.187222][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 138.196399][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 138.205313][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 138.214324][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 138.223428][ T6772] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 138.232768][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 138.241575][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.241575][ T6772] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 138.255145][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.255145][ T6772] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 138.269066][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.269066][ T6772] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 138.282480][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.282480][ T6772] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 138.296145][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.296145][ T6772] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 138.310386][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.310386][ T6772] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 138.324754][ T6772] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[4055] [ 138.336113][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 138.344950][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 138.353944][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.363227][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 138.372177][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.381423][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 138.390527][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 138.399419][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 138.408303][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.417382][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 138.426241][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.435332][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 138.444224][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 138.453073][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 138.461909][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 138.470807][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 138.480050][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 138.489069][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 138.498310][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.507555][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 138.516483][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.525554][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 138.534703][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 138.543790][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 138.552929][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 138.561924][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.571135][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 138.580009][ T6772] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.589257][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 138.598120][ T6772] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 138.607196][ T6772] syz.2.2698: attempt to access beyond end of device [ 138.607196][ T6772] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 138.620948][ T6772] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[5297] [ 138.669762][ T6790] loop2: detected capacity change from 0 to 128 [ 138.760491][ T28] audit: type=1326 audit(1731746363.379:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.2.2703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c4ed7e719 code=0x0 [ 138.796339][ T6810] loop1: detected capacity change from 0 to 16 [ 138.807062][ T6810] erofs: (device loop1): mounted with root inode @ nid 36. [ 138.821828][ T6806] loop3: detected capacity change from 0 to 2048 [ 138.827128][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.837615][ T6810] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[1851] [ 138.848683][ T6810] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 138.856167][ T6806] EXT4-fs: Ignoring removed nobh option [ 138.858263][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.871769][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.880977][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 138.889911][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.899059][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 138.908186][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.917661][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 138.923796][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.935252][ T6806] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038 (0x7fffffff) [ 138.937954][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 138.971364][ T295] EXT4-fs (loop3): unmounting filesystem. [ 138.977201][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 138.991844][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 139.005977][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.015076][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 139.031223][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 139.042363][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 139.051399][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 139.060665][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 139.069879][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 139.078892][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 139.087863][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 139.096902][ T6810] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 139.106220][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 139.115341][ T6810] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[4055] [ 139.126679][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 139.135538][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 139.144439][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.153522][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 139.162382][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.171482][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 139.180477][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 139.189526][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 139.198533][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.207755][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 139.216636][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.225717][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 139.234602][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 139.243481][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 139.252547][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 139.261428][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 139.270345][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 139.279148][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 139.287979][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.297096][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 139.305953][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.315035][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 139.323923][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 139.332774][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 139.341825][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 139.350920][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.360554][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 139.369606][ T6810] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.378900][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 139.387839][ T6810] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 139.397425][ T6810] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[5297] [ 139.441708][ T6820] loop3: detected capacity change from 0 to 1024 [ 139.475027][ T6820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.499763][ T6820] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 139.525712][ T295] EXT4-fs (loop3): unmounting filesystem. [ 139.608386][ T6849] loop3: detected capacity change from 0 to 16 [ 139.615057][ T6849] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.644765][ T6849] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.666888][ T6849] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[1851] [ 139.685447][ T28] audit: type=1400 audit(1731746364.299:723): avc: denied { validate_trans } for pid=6857 comm="syz.2.2735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.713578][ T6849] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 139.723528][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.749084][ T6861] loop2: detected capacity change from 0 to 1024 [ 139.755348][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.764775][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 139.782757][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.793659][ T6861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.802286][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 139.809436][ T6861] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 139.811220][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.827980][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 139.836882][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 139.845717][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 139.854832][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 139.863919][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 139.864504][ T293] EXT4-fs (loop2): unmounting filesystem. [ 139.873379][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 139.887650][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 139.896709][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 139.905635][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 139.914760][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 139.923852][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 139.935309][ T6865] input: syz1 as /devices/virtual/input/input32 [ 139.941485][ T554] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 139.948997][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 139.958240][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 139.974199][ T6859] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 139.993721][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 140.009134][ T6859] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[4055] [ 140.031742][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 140.056033][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 140.075019][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.105751][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 140.124749][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.144339][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 140.147877][ T6884] loop2: detected capacity change from 0 to 256 [ 140.164520][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 140.184639][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 140.188255][ T6884] exfat: Deprecated parameter 'utf8' [ 140.204794][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.224931][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 140.226680][ T6884] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 140.245106][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.275050][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 140.287159][ T28] audit: type=1400 audit(1731746364.909:724): avc: denied { read } for pid=6883 comm="syz.2.2747" path="/603/file0/bus" dev="loop2" ino=1048731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.310384][ T554] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 140.319288][ T554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.327306][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 140.336634][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 140.345667][ T554] usb 2-1: config 0 descriptor?? [ 140.352870][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 140.361873][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 140.370991][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 140.380020][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 140.389342][ T554] ums-usbat 2-1:0.0: USB Mass Storage device detected [ 140.396477][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.407952][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 140.417957][ T554] ums-usbat 2-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 140.430727][ T6878] loop4: detected capacity change from 0 to 40427 [ 140.439702][ T6878] F2FS-fs (loop4): heap/no_heap options were deprecated [ 140.449756][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.462208][ T6878] F2FS-fs (loop4): invalid crc value [ 140.467494][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 140.477396][ T6878] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.493633][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 140.512732][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 140.531774][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 140.543736][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.548432][ T6894] loop0: detected capacity change from 0 to 1024 [ 140.556412][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 140.560214][ T6878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.575174][ T6859] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 140.584587][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 140.593635][ T554] usb 2-1: USB disconnect, device number 28 [ 140.606307][ T6894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.615600][ T6859] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 140.618215][ T6894] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 140.639926][ T6859] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -34 in[48, 4048] out[5297] [ 140.640473][ T294] EXT4-fs (loop0): unmounting filesystem. [ 140.676749][ T6902] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 141.119312][ T28] audit: type=1400 audit(1731746365.739:725): avc: denied { ioctl } for pid=6913 comm="syz.4.2756" path="socket:[41790]" dev="sockfs" ino=41790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.146068][ T28] audit: type=1400 audit(1731746365.759:726): avc: denied { setopt } for pid=6913 comm="syz.4.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.165633][ T28] audit: type=1400 audit(1731746365.759:727): avc: denied { write } for pid=6913 comm="syz.4.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.173105][ T6921] netlink: 'syz.0.2759': attribute type 1 has an invalid length. [ 141.205332][ T6926] input: syz1 as /devices/virtual/input/input33 [ 141.249382][ T6932] loop1: detected capacity change from 0 to 512 [ 141.267000][ T6932] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.2764: invalid block [ 141.282716][ T6932] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2764: invalid indirect mapped block 10 (level 1) [ 141.296076][ T6932] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2764: invalid indirect mapped block 8 (level 1) [ 141.310289][ T6932] EXT4-fs (loop1): 1 truncate cleaned up [ 141.315966][ T6932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.333444][ T292] EXT4-fs (loop1): unmounting filesystem. [ 141.342626][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 141.395811][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 141.430746][ T6955] input: syz1 as /devices/virtual/input/input34 [ 141.434665][ T6957] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 141.488054][ T6965] loop2: detected capacity change from 0 to 512 [ 141.497449][ T6965] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.2779: invalid block [ 141.508661][ T6965] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2779: invalid indirect mapped block 10 (level 1) [ 141.522280][ T6965] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2779: invalid indirect mapped block 8 (level 1) [ 141.535597][ T6965] EXT4-fs (loop2): 1 truncate cleaned up [ 141.541134][ T6965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.555823][ T60] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 141.566129][ T293] EXT4-fs (loop2): unmounting filesystem. [ 141.567788][ T6968] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 141.603564][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'. [ 141.755871][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 141.764735][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.784553][ T24] usb 4-1: config 0 descriptor?? [ 141.965845][ T60] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 141.974703][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.983611][ T60] usb 1-1: config 0 descriptor?? [ 142.026141][ T60] ums-usbat 1-1:0.0: USB Mass Storage device detected [ 142.033404][ T60] ums-usbat 1-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 142.228193][ T6] usb 1-1: USB disconnect, device number 21 [ 142.267569][ T24] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 142.695854][ T24] playstation 0003:054C:0DF2.0022: Failed to retrieve feature with reportID 32: -71 [ 142.705086][ T24] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense firmware info: -71 [ 142.714196][ T24] playstation 0003:054C:0DF2.0022: Failed to get firmware info from DualSense [ 142.722862][ T24] playstation 0003:054C:0DF2.0022: Failed to create dualsense. [ 142.747319][ T24] playstation: probe of 0003:054C:0DF2.0022 failed with error -71 [ 142.758381][ T24] usb 4-1: USB disconnect, device number 23 [ 142.800693][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.807557][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.921895][ T6987] loop4: detected capacity change from 0 to 40427 [ 142.928512][ T6987] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 142.935995][ T6987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.944480][ T6987] F2FS-fs (loop4): invalid crc value [ 142.950881][ T6987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.982130][ T6987] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.989034][ T6987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 143.002328][ T291] bio_check_eod: 21 callbacks suppressed [ 143.002342][ T291] syz-executor: attempt to access beyond end of device [ 143.002342][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.092698][ T7021] loop0: detected capacity change from 0 to 256 [ 143.158421][ T28] audit: type=1400 audit(1731746367.779:728): avc: denied { relabelfrom } for pid=7032 comm="syz.0.2809" name="" dev="pipefs" ino=42561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.184414][ T7035] loop4: detected capacity change from 0 to 512 [ 143.210385][ T7035] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.2794: invalid block [ 143.225920][ T7035] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2794: invalid indirect mapped block 10 (level 1) [ 143.245970][ T7035] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2794: invalid indirect mapped block 8 (level 1) [ 143.270265][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.277134][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.286439][ T7035] EXT4-fs (loop4): 1 truncate cleaned up [ 143.291893][ T7035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.305829][ T60] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 143.331989][ T291] EXT4-fs (loop4): unmounting filesystem. [ 143.345064][ T7023] loop1: detected capacity change from 0 to 40427 [ 143.359393][ T7023] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 143.368470][ T7023] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 143.406576][ T7023] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 143.457993][ T7023] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 143.468117][ T7023] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.504522][ T7069] tipc: Enabling of bearer rejected, failed to enable media [ 143.512744][ T292] syz-executor: attempt to access beyond end of device [ 143.512744][ T292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.548564][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.555435][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.634425][ T7059] loop3: detected capacity change from 0 to 40427 [ 143.656415][ T7059] F2FS-fs (loop3): heap/no_heap options were deprecated [ 143.664151][ T7059] F2FS-fs (loop3): invalid crc value [ 143.678856][ T7059] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.723434][ T7059] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.727349][ T7098] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2836'. [ 143.739792][ T60] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 143.751713][ T295] syz-executor: attempt to access beyond end of device [ 143.751713][ T295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.757678][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.770637][ T7098] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 143.780070][ T28] audit: type=1400 audit(1731746368.399:729): avc: denied { read } for pid=7100 comm="syz.0.2838" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.806668][ T60] usb 3-1: config 0 descriptor?? [ 143.814998][ T28] audit: type=1400 audit(1731746368.419:730): avc: denied { open } for pid=7100 comm="syz.0.2838" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.838769][ T28] audit: type=1400 audit(1731746368.419:731): avc: denied { ioctl } for pid=7100 comm="syz.0.2838" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.867067][ T60] ums-usbat 3-1:0.0: USB Mass Storage device detected [ 143.874184][ T7103] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 143.885713][ T7103] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 143.893958][ T7103] CPU: 1 PID: 7103 Comm: syz.4.2839 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 143.903591][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.913485][ T7103] RIP: 0010:dev_map_enqueue+0x31/0x340 [ 143.918776][ T7103] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 55 c0 49 89 f7 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 e6 fb dd ff 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 90 65 25 00 4c 8b 33 48 83 c3 20 [ 143.938217][ T7103] RSP: 0018:ffffc900111e75f8 EFLAGS: 00010246 [ 143.944119][ T7103] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 143.951929][ T7103] RDX: ffffc90001aae000 RSI: 000000000003ffff RDI: 0000000000040000 [ 143.959741][ T7103] RBP: ffffc900111e7638 R08: ffffffff841451d2 R09: ffffffff841450f2 [ 143.967553][ T7103] R10: 0000000000000004 R11: ffff8881133b3cc0 R12: dffffc0000000000 [ 143.975363][ T7103] R13: 1ffff1103ede6e15 R14: 1ffff1103ede6e15 R15: ffff88810d9a1070 [ 143.983177][ T7103] FS: 00007f342865e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 143.991940][ T7103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.998363][ T7103] CR2: 00007f342863dd58 CR3: 0000000114a1a000 CR4: 00000000003506a0 [ 144.006176][ T7103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.013984][ T7103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.021814][ T7103] Call Trace: [ 144.024922][ T7103] [ 144.027702][ T7103] ? __die_body+0x62/0xb0 [ 144.031866][ T7103] ? die_addr+0x9f/0xd0 [ 144.035858][ T7103] ? exc_general_protection+0x317/0x4c0 [ 144.041246][ T7103] ? asm_exc_general_protection+0x27/0x30 [ 144.046794][ T7103] ? xdp_do_redirect_frame+0x1b2/0x800 [ 144.052086][ T7103] ? xdp_do_redirect_frame+0x292/0x800 [ 144.057385][ T7103] ? dev_map_enqueue+0x31/0x340 [ 144.062071][ T7103] ? dev_map_enqueue+0x2a/0x340 [ 144.066779][ T7103] xdp_do_redirect_frame+0x2b5/0x800 [ 144.071881][ T7103] bpf_test_run_xdp_live+0xc30/0x1f70 [ 144.077084][ T7103] ? __kasan_check_write+0x14/0x20 [ 144.082032][ T7103] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 144.087409][ T7103] ? xdp_convert_md_to_buff+0x360/0x360 [ 144.092795][ T7103] ? bpf_dispatcher_change_prog+0xd86/0xf10 [ 144.098522][ T7103] ? 0xffffffffa0003b40 [ 144.102614][ T7103] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 144.108678][ T7103] ? __kasan_check_write+0x14/0x20 [ 144.113623][ T7103] ? _copy_from_user+0x90/0xc0 [ 144.118226][ T7103] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 144.123438][ T7103] ? dev_put+0x80/0x80 [ 144.127338][ T7103] ? __kasan_check_write+0x14/0x20 [ 144.132281][ T7103] ? fput+0x15b/0x1b0 [ 144.136099][ T7103] ? dev_put+0x80/0x80 [ 144.140007][ T7103] bpf_prog_test_run+0x3b0/0x630 [ 144.144779][ T7103] ? bpf_prog_query+0x260/0x260 [ 144.149467][ T7103] ? selinux_bpf+0xd2/0x100 [ 144.153805][ T7103] ? security_bpf+0x82/0xb0 [ 144.158144][ T7103] __sys_bpf+0x59f/0x7f0 [ 144.162236][ T7103] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 144.167438][ T7103] ? fpregs_restore_userregs+0x130/0x290 [ 144.172903][ T7103] __x64_sys_bpf+0x7c/0x90 [ 144.177152][ T7103] x64_sys_call+0x87f/0x9a0 [ 144.181491][ T7103] do_syscall_64+0x3b/0xb0 [ 144.185743][ T7103] ? clear_bhb_loop+0x55/0xb0 [ 144.190262][ T7103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.195988][ T7103] RIP: 0033:0x7f342777e719 [ 144.200239][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.219680][ T7103] RSP: 002b:00007f342865e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.227924][ T7103] RAX: ffffffffffffffda RBX: 00007f3427935f80 RCX: 00007f342777e719 [ 144.235734][ T7103] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 144.243548][ T7103] RBP: 00007f34277f175e R08: 0000000000000000 R09: 0000000000000000 [ 144.251357][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.259169][ T7103] R13: 0000000000000000 R14: 00007f3427935f80 R15: 00007ffe4e95fa28 [ 144.266984][ T7103] [ 144.269843][ T7103] Modules linked in: [ 144.273639][ T7103] ---[ end trace 0000000000000000 ]--- [ 144.278897][ T7103] RIP: 0010:dev_map_enqueue+0x31/0x340 [ 144.284169][ T7103] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 55 c0 49 89 f7 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 e6 fb dd ff 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 90 65 25 00 4c 8b 33 48 83 c3 20 [ 144.303633][ T7103] RSP: 0018:ffffc900111e75f8 EFLAGS: 00010246 [ 144.309523][ T7103] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 144.317334][ T7103] RDX: ffffc90001aae000 RSI: 000000000003ffff RDI: 0000000000040000 [ 144.325133][ T7103] RBP: ffffc900111e7638 R08: ffffffff841451d2 R09: ffffffff841450f2 [ 144.332972][ T7103] R10: 0000000000000004 R11: ffff8881133b3cc0 R12: dffffc0000000000 [ 144.340768][ T7103] R13: 1ffff1103ede6e15 R14: 1ffff1103ede6e15 R15: ffff88810d9a1070 [ 144.348583][ T7103] FS: 00007f342865e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 144.357354][ T7103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.363759][ T7103] CR2: 00007f342863dd58 CR3: 0000000114a1a000 CR4: 00000000003506a0 [ 144.365479][ T60] ums-usbat 3-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 144.371611][ T7103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.371629][ T7103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.394225][ T7103] Kernel panic - not syncing: Fatal exception in interrupt [ 144.401536][ T7103] Kernel Offset: disabled [ 144.405661][ T7103] Rebooting in 86400 seconds..