last executing test programs: 39.70346944s ago: executing program 4 (id=1277): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x4003, 0xff, 0xc, 0x3, 0x11, 0x81, 0x1}, 0xc) listen(r0, 0xb) 39.66599126s ago: executing program 4 (id=1279): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000002680)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffdc9}}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xffffffffffffffff}}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff8}}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@fat=@tz_utc}, {@fat=@usefree}, {@fat=@errors_continue}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 38.492729558s ago: executing program 4 (id=1313): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@dioread_nolock}, {@resgid}, {@noload}, {@quota}, {@nouid32}]}, 0x1, 0x788, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 35.852335921s ago: executing program 4 (id=1340): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000409, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 35.520610709s ago: executing program 4 (id=1350): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 34.468627403s ago: executing program 4 (id=1386): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd(0xc) 34.423629855s ago: executing program 32 (id=1386): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd(0xc) 14.696270372s ago: executing program 2 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='3', 0x1) 13.724776795s ago: executing program 2 (id=1831): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000000200000008000300", @ANYBLOB="08009f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 13.634001987s ago: executing program 2 (id=1833): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x10}}, 0x0) 13.586250418s ago: executing program 2 (id=1836): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$eJzs3cFr024YwPFn7bZ2HV17GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZ2NLVSEbebeNvfMTx6UlD/gV12E6/ipQiClx3EytpkS7fKVl2Xab4fGHnzvu+TvMmblSeBps2ljYelgmMUzJpE4ioRkXXZEUnvllxD7jLSLo+K37pcHv/24dyt23euZ3O52XnVuezClYyqTpx/+/jpywvva+OLrybexGQrfbf5NfNpa2rrv+aPBW/rFRFTlyuVmrlsW7pSdEqG6k3bMh1Li2XHqtbU116wK6urDTXLK8nEatVyHDXLDS1ZDa1VtFZtqHnfLJbVMAxNJiRson1H5Dfn583sQAaDIIz1qqxWs2a0Z2N+8zQGBQAAzpbm0kY0iPz/QdHRoqPlSld+fzj/j0gf+b9IqPP//pH/h8Fu/p9w/3+7kf8DAAAAAAAAAAAAAAAAAAAAAPA32Gm1Uq1WK+Utvb+YiMRFxFsPepwYDOY/3Hxf3IuL2M/r+Xq+s+y0ZwtSFFssmR4R+d6+Hlyd8ty13Oy0tk3JO3vNjV+r56MS8+I96d7xM5149cevyYgk/PvPSEome8dnfPHerur5Ubl0sRVzVy0xJCXb96Qitqy0r+v9+Gczqldv5LR7/GPtfgAAAAAA/AsM3ZM+eP/ebjfUe23IgfZO5f7zAUkd8XzgwP31sPw/HNxxAwAAAAAQJk7jScm0basagoL3+wcnssHgT138uJ2HRcSteX06I4z00XlovTMrh5siInJkeLJ3U/TPZvmLiHTVTAY+3SdR+Pyoc673aj7+uvNiMrAPJQAAAAAD4SX9Q/Kiz8j89oCGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA6Bz35WFe/99595hvd9FgjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G34GAAD//2ulE4Q=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) 13.444745612s ago: executing program 2 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) fcntl$getown(r0, 0x9) 13.184718767s ago: executing program 2 (id=1848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, 0x0, 0x2e) 13.167079688s ago: executing program 33 (id=1848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, 0x0, 0x2e) 2.485939851s ago: executing program 6 (id=2125): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040880) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) 2.448574642s ago: executing program 6 (id=2127): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r1, &(0x7f0000000840), 0x0}, 0x20) 2.416044743s ago: executing program 6 (id=2128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0) 2.354017864s ago: executing program 6 (id=2130): r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) mmap(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x7000004, 0x12, r0, 0xa620a000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.320283125s ago: executing program 6 (id=2131): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@block_validity}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xc2480, 0xa5) 2.311013635s ago: executing program 3 (id=2132): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.963328404s ago: executing program 6 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x7, 0x2, 0x0, 0xec, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x27, 0xff, 0xe, {0x8, 0x25, 0x1, 0x81, 0xc, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x408, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x82, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1.70199625s ago: executing program 3 (id=2143): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x104, 0x1) getdents64(r0, 0x0, 0x4f) 1.634317331s ago: executing program 1 (id=2145): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.513949294s ago: executing program 1 (id=2149): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x90, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x18) 1.442656136s ago: executing program 1 (id=2151): unshare(0x8040480) socket(0x10, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000440)={0x2a, 0x17, 0x13, 0x6, 0x0, 0x80, 0x1, 0xef, 0xfffffffffffffffe}) 1.442339336s ago: executing program 1 (id=2153): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000003c0)={0x2e}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) 1.334072328s ago: executing program 1 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa88}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 1.286174119s ago: executing program 1 (id=2158): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x40, 0x31, 0x6, "83a0636704db"}, 0x0, 0x0, 0x0, 0x0}) 1.118597263s ago: executing program 3 (id=2161): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000004a80)=""/4110, 0x100e}, {&(0x7f0000000480)=""/62, 0x3e}], 0x4}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x120, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 994.216896ms ago: executing program 3 (id=2165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 917.885568ms ago: executing program 3 (id=2167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0xf, 0x100000000, 0x100, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x10000002, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x4090}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x2ff}, 0xfffd, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 829.700191ms ago: executing program 3 (id=2172): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101040, 0x0) 776.548211ms ago: executing program 5 (id=2174): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7, 0x4) 736.607812ms ago: executing program 0 (id=2175): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000005b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) write$P9_RWALK(r0, &(0x7f0000001000)={0x9, 0x6f, 0x1}, 0x9) truncate(&(0x7f0000000400)='./file1\x00', 0x5) 537.859787ms ago: executing program 5 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000000000), &(0x7f0000000bc0)=""/4096}, 0x20) 489.997948ms ago: executing program 5 (id=2177): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 440.635369ms ago: executing program 5 (id=2178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:k', 0xb) 439.95486ms ago: executing program 5 (id=2189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x1, 0x2c, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) 403.731561ms ago: executing program 0 (id=2179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='3', 0x1) 403.632061ms ago: executing program 5 (id=2180): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 174.927846ms ago: executing program 0 (id=2181): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000020000000000000000000000000000000e0000000000000001000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000906"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 3.85001ms ago: executing program 0 (id=2182): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000700)) 3.597319ms ago: executing program 0 (id=2184): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)=ANY=[], 0x0) 0s ago: executing program 0 (id=2185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='Y', 0x1) kernel console output (not intermixed with test programs): dit: type=1400 audit(1787201667.382:334): avc: denied { add_name } for pid=2050 comm="syz.3.775" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.306463][ T2047] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.316432][ T30] audit: type=1400 audit(1787201667.432:335): avc: denied { remove_name } for pid=285 comm="syz-executor" name=".index" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.346260][ T30] audit: type=1400 audit(1787201667.432:336): avc: denied { rmdir } for pid=285 comm="syz-executor" name=".index" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.368587][ T2047] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.369048][ T30] audit: type=1400 audit(1787201667.442:337): avc: denied { remove_name } for pid=285 comm="syz-executor" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.378510][ T2065] ext4_test_bit(bit=14, block=5) = 0 [ 48.429073][ T30] audit: type=1326 audit(1787201667.702:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.778" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 48.459413][ T2065] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 48.472659][ T30] audit: type=1326 audit(1787201667.712:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.778" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 48.521155][ T30] audit: type=1326 audit(1787201667.732:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.778" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 48.561425][ T2077] dyndbg: bad line-number: 2�88 [ 48.578597][ T2077] dyndbg: query parse failed [ 48.599423][ T2079] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 48.632479][ T2079] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.639810][ T2079] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.652497][ T2065] EXT4-fs (loop3): shut down requested (2) [ 48.712818][ T2079] syz.4.785 (2079) used greatest stack depth: 21328 bytes left [ 48.815171][ T2109] netlink: 71 bytes leftover after parsing attributes in process `syz.3.799'. [ 49.101144][ T2162] sd 0:0:1:0: PR command failed: 2 [ 49.128062][ T2162] sd 0:0:1:0: Sense Key : 0x5 [current] [ 49.148375][ T2162] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 49.228257][ T327] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.250795][ T2190] loop3: detected capacity change from 0 to 1024 [ 49.300779][ T2190] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.321707][ T2190] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 49.333467][ T2190] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.837: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 49.354074][ T2190] EXT4-fs (loop3): no journal found [ 49.370001][ T2190] EXT4-fs (loop3): can't get journal size [ 49.383572][ T2190] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 49.395324][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 49.470777][ T2224] netlink: 292 bytes leftover after parsing attributes in process `syz.0.854'. [ 49.478188][ T327] usb 3-1: Using ep0 maxpacket: 16 [ 49.480258][ T2224] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 49.495366][ T2226] netlink: 96 bytes leftover after parsing attributes in process `syz.1.855'. [ 49.500712][ T2224] netlink: 'syz.0.854': attribute type 2 has an invalid length. [ 49.512819][ T2224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.854'. [ 49.618989][ T285] syz-executor (285) used greatest stack depth: 21272 bytes left [ 49.641981][ T2235] SELinux: failed to load policy [ 49.739698][ T2255] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.746814][ T2255] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.754729][ T2255] device bridge_slave_0 entered promiscuous mode [ 49.761929][ T327] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 49.766947][ T2255] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.778819][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.780795][ T2255] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.790281][ T327] usb 3-1: Product: syz [ 49.794608][ T2255] device bridge_slave_1 entered promiscuous mode [ 49.805223][ T327] usb 3-1: Manufacturer: syz [ 49.812458][ T327] usb 3-1: SerialNumber: syz [ 49.830461][ T327] usb 3-1: config 0 descriptor?? [ 49.878696][ T327] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 49.887288][ T2268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.875'. [ 49.906273][ T2255] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.913486][ T2255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.920836][ T2255] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.928226][ T2255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.959999][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.967931][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.978077][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.990669][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.999536][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.006865][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.026899][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.035882][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.043003][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.071303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.088573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.097527][ T327] usb 3-1: USB disconnect, device number 4 [ 50.134701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.149466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.157766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.165695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.174480][ T2255] device veth0_vlan entered promiscuous mode [ 50.190583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.201472][ T2255] device veth1_macvtap entered promiscuous mode [ 50.213625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.232457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.309229][ T306] device bridge_slave_1 left promiscuous mode [ 50.319359][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.332504][ T306] device bridge_slave_0 left promiscuous mode [ 50.344052][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.358788][ T306] device batadv_slave_1 left promiscuous mode [ 50.369459][ T306] device veth1_macvtap left promiscuous mode [ 50.375864][ T306] device veth0_vlan left promiscuous mode [ 50.398307][ T293] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.648217][ T293] usb 1-1: Using ep0 maxpacket: 32 [ 50.749437][ T2328] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 50.769104][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.789504][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.826412][ T293] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 50.850817][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.874639][ T293] usb 1-1: config 0 descriptor?? [ 50.936099][ T2364] loop3: detected capacity change from 0 to 512 [ 51.018929][ T2356] loop2: detected capacity change from 0 to 40427 [ 51.027508][ T2364] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.035385][ T2364] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.915: corrupted inode contents [ 51.048081][ T2364] EXT4-fs (loop3): Remounting filesystem read-only [ 51.055313][ T2364] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 51.066356][ T2364] EXT4-fs (loop3): Remounting filesystem read-only [ 51.073499][ T2364] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.915: corrupted inode contents [ 51.087737][ T2364] EXT4-fs (loop3): Remounting filesystem read-only [ 51.094830][ T2364] EXT4-fs error (device loop3): ext4_evict_inode:333: inode #15: comm syz.3.915: mark_inode_dirty error [ 51.107135][ T2364] EXT4-fs (loop3): Remounting filesystem read-only [ 51.115363][ T2364] EXT4-fs (loop3): 1 orphan inode deleted [ 51.118337][ T2356] F2FS-fs (loop2): invalid crc value [ 51.122975][ T2364] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x0000000000010000,errors=remount-ro,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 51.154406][ T2356] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.190341][ T2356] F2FS-fs (loop2): Start checkpoint disabled! [ 51.197725][ T2356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 51.286204][ T8] attempt to access beyond end of device [ 51.286204][ T8] loop2: rw=2049, want=40976, limit=40427 [ 51.389280][ T293] savu 0003:1E7D:2D5A.0009: ignoring exceeding usage max [ 51.401712][ T306] tipc: Subscription rejected, illegal request [ 51.402255][ T293] savu 0003:1E7D:2D5A.0009: item fetching failed at offset 5/8 [ 51.420705][ T293] savu 0003:1E7D:2D5A.0009: parse failed [ 51.426545][ T293] savu: probe of 0003:1E7D:2D5A.0009 failed with error -22 [ 51.484871][ T2401] loop2: detected capacity change from 0 to 256 [ 51.496047][ T2401] exfat: Deprecated parameter 'utf8' [ 51.506094][ T2401] exfat: Deprecated parameter 'namecase' [ 51.512021][ T2401] exfat: Deprecated parameter 'utf8' [ 51.528136][ T2401] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 51.569172][ T2407] loop3: detected capacity change from 0 to 512 [ 51.604856][ T327] usb 1-1: USB disconnect, device number 4 [ 51.630171][ T2407] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 51.644085][ T2407] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.921649][ T2440] loop3: detected capacity change from 0 to 256 [ 51.996681][ T2442] loop2: detected capacity change from 0 to 512 [ 52.021785][ T2442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.034737][ T2442] EXT4-fs (loop2): 1 truncate cleaned up [ 52.040968][ T2442] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb3,debug_want_extra_isize=0x0000000000000068,lazytime,journal_dev=0x00000000000026a5,noload,noblock_validity,,errors=continue. Quota mode: none. [ 52.072091][ T2444] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.952: bad orphan inode 15 [ 52.083682][ T2444] ext4_test_bit(bit=14, block=5) = 0 [ 52.090645][ T2444] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000005,nolazytime,noload,,errors=continue. Quota mode: none. [ 52.225850][ T2466] netlink: 104 bytes leftover after parsing attributes in process `syz.0.971'. [ 52.347095][ T2467] SELinux: failed to load policy [ 52.423694][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 52.459269][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 52.478774][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 52.514961][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 52.537510][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 52.569504][ T2488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.627264][ T2488] EXT4-fs (loop2): 1 truncate cleaned up [ 52.636604][ T2488] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,nojournal_checksum,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 52.805157][ T2503] set_capacity_and_notify: 2 callbacks suppressed [ 52.805176][ T2503] loop3: detected capacity change from 0 to 512 [ 52.867304][ T2503] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 52.925218][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 52.976150][ T2520] loop3: detected capacity change from 0 to 256 [ 52.986111][ T2507] SELinux: failed to load policy [ 53.251229][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 53.251247][ T30] audit: type=1400 audit(1787201672.532:380): avc: denied { module_load } for pid=2519 comm="syz.3.984" path="/38/file0/bus" dev="loop3" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 53.376984][ T30] audit: type=1400 audit(1787201672.652:381): avc: denied { listen } for pid=2536 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.403598][ T2540] loop3: detected capacity change from 0 to 256 [ 53.470073][ T2540] netlink: 84 bytes leftover after parsing attributes in process `syz.3.995'. [ 53.479563][ T2540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.995'. [ 53.495408][ T2540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.995'. [ 53.505675][ T2540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.995'. [ 53.562350][ T2542] input: syz0 as /devices/virtual/input/input18 [ 53.588254][ T326] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 53.868243][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 53.978271][ T326] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.990945][ T326] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.188276][ T326] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.203369][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.212493][ T326] usb 2-1: Product: syz [ 54.216788][ T326] usb 2-1: Manufacturer: syz [ 54.222031][ T326] usb 2-1: SerialNumber: syz [ 54.268303][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.268708][ T326] cdc_mbim 2-1:1.0: skipping garbage [ 54.309662][ T2598] input: syz0 as /devices/virtual/input/input19 [ 54.358300][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.369154][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.468264][ T327] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 54.469729][ T2530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.538307][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 54.548780][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.557384][ T26] usb 1-1: Product: syz [ 54.562227][ T26] usb 1-1: Manufacturer: syz [ 54.566848][ T26] usb 1-1: SerialNumber: syz [ 54.838978][ T26] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.858360][ T26] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 54.867012][ T26] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 54.876951][ T26] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 54.885751][ T26] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 54.898787][ T327] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 54.906569][ T327] usb 4-1: can't read configurations, error -71 [ 54.948293][ T326] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 54.954719][ T326] cdc_mbim 2-1:1.0: bind() failure [ 54.955130][ T26] usb 1-1: USB disconnect, device number 5 [ 54.961536][ T326] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 54.974420][ T326] cdc_ncm 2-1:1.1: bind() failure [ 54.983208][ T326] usb 2-1: USB disconnect, device number 5 [ 55.365628][ T2608] loop2: detected capacity change from 0 to 256 [ 55.391770][ T30] audit: type=1400 audit(1787201674.672:382): avc: denied { getopt } for pid=2610 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.416268][ T2611] loop3: detected capacity change from 0 to 256 [ 55.456808][ T2611] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 55.521333][ T2625] smpboot: CPU 1 is now offline [ 55.728305][ T326] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.968249][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 56.088301][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.102701][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.113021][ T326] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 56.123608][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.134816][ T326] usb 2-1: config 0 descriptor?? [ 56.618917][ T326] savu 0003:1E7D:2D5A.000A: ignoring exceeding usage max [ 56.627802][ T326] savu 0003:1E7D:2D5A.000A: item fetching failed at offset 5/8 [ 56.636157][ T326] savu 0003:1E7D:2D5A.000A: parse failed [ 56.642668][ T326] savu: probe of 0003:1E7D:2D5A.000A failed with error -22 [ 56.836240][ T326] usb 2-1: USB disconnect, device number 6 [ 57.358690][ T2637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 57.448207][ T2647] loop2: detected capacity change from 0 to 256 [ 57.479060][ T2649] process 'syz.3.1047' launched '/dev/fd/4' with NULL argv: empty string added [ 57.520096][ T30] audit: type=1400 audit(1787201676.802:383): avc: denied { nosuid_transition } for pid=2648 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 57.547784][ T2647] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 57.599923][ T2642] SELinux: failed to load policy [ 57.640874][ T30] audit: type=1400 audit(1787201676.842:384): avc: denied { transition } for pid=2648 comm="syz.3.1047" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 57.671329][ T2661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'. [ 57.696407][ T2663] kvm [2662]: vcpu1, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 57.851437][ T30] audit: type=1400 audit(1787201676.842:385): avc: denied { entrypoint } for pid=2648 comm="syz.3.1047" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=85 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.881784][ T2680] tipc: New replicast peer: 255.255.255.255 [ 57.887957][ T2680] tipc: Enabled bearer , priority 10 [ 57.902989][ T2681] loop2: detected capacity change from 0 to 256 [ 57.913302][ T2684] loop3: detected capacity change from 0 to 128 [ 57.955556][ T2685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 58.014160][ T2692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1067'. [ 58.051965][ T2681] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 58.084728][ T30] audit: type=1400 audit(1787201676.842:386): avc: denied { noatsecure } for pid=2648 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 58.120714][ T2699] loop3: detected capacity change from 0 to 512 [ 58.145353][ T2703] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1072'. [ 58.203018][ T2699] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.218364][ T2681] FAT-fs (loop2): Filesystem has been set read-only [ 58.225517][ T30] audit: type=1400 audit(1787201677.412:387): avc: denied { read write } for pid=2700 comm="syz.0.1071" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.279663][ T2719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1078'. [ 58.293137][ T2699] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.306944][ T2681] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 58.394050][ T30] audit: type=1400 audit(1787201677.412:388): avc: denied { open } for pid=2700 comm="syz.0.1071" path="/207/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.553396][ T30] audit: type=1400 audit(1787201677.412:389): avc: denied { ioctl } for pid=2700 comm="syz.0.1071" path="/207/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.623686][ T2750] loop3: detected capacity change from 0 to 256 [ 58.654145][ T2727] SELinux: failed to load policy [ 58.698788][ T2750] exfat: Deprecated parameter 'utf8' [ 58.704213][ T2750] exfat: Deprecated parameter 'utf8' [ 58.721649][ T2759] tipc: Can't bind to reserved service type 0 [ 58.741785][ T30] audit: type=1400 audit(1787201677.442:390): avc: denied { read } for pid=2704 comm="syz.0.1073" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.789066][ T2750] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 58.875594][ T30] audit: type=1400 audit(1787201677.962:391): avc: denied { write } for pid=2756 comm="syz.0.1096" name="packet" dev="proc" ino=4026532538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.998275][ T20] tipc: Node number set to 4278321153 [ 59.028280][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.035359][ T2785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.183337][ T2788] SELinux: failed to load policy [ 59.258581][ T2804] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 59.290721][ T2804] netlink: 8960 bytes leftover after parsing attributes in process `syz.3.1116'. [ 59.910555][ T2852] loop3: detected capacity change from 0 to 2048 [ 60.006007][ T2852] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none. [ 60.025716][ T30] audit: type=1400 audit(1787201679.302:392): avc: denied { ioctl } for pid=2860 comm="syz.1.1142" path="socket:[26192]" dev="sockfs" ino=26192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.086151][ T2866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 60.101721][ T2852] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.161713][ T2852] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.1139: path /91/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 60.389931][ T2887] netpci0: tun_chr_ioctl cmd 1074025676 [ 60.397306][ T30] audit: type=1400 audit(1787201679.672:393): avc: denied { setopt } for pid=2888 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.451118][ T2887] netpci0: owner set to 60928 [ 60.611652][ T30] audit: type=1400 audit(1787201679.892:394): avc: denied { bind } for pid=2903 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.699887][ T2912] loop4: detected capacity change from 0 to 2048 [ 60.798051][ T2912] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none. [ 60.837997][ T2922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1169'. [ 60.860491][ T2912] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.929829][ T2912] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.1164: path /176/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 61.096612][ T2935] loop4: detected capacity change from 0 to 256 [ 61.143134][ T2935] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 61.184210][ T2941] loop3: detected capacity change from 0 to 128 [ 61.229966][ T2941] FAT-fs (loop3): Directory bread(block 1048) failed [ 61.252976][ T2941] FAT-fs (loop3): Directory bread(block 1049) failed [ 61.302507][ T2941] FAT-fs (loop3): Directory bread(block 1050) failed [ 61.317087][ T2937] SELinux: failed to load policy [ 61.342534][ T2941] FAT-fs (loop3): Directory bread(block 1051) failed [ 61.371905][ T2941] FAT-fs (loop3): Directory bread(block 1052) failed [ 61.401608][ T2941] FAT-fs (loop3): Directory bread(block 1053) failed [ 61.414607][ T2960] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1188'. [ 61.435626][ T2941] FAT-fs (loop3): Directory bread(block 1054) failed [ 61.461375][ T2941] FAT-fs (loop3): Directory bread(block 1055) failed [ 61.538841][ T2972] x86: Booting SMP configuration: [ 61.544087][ T2972] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 61.550998][ T0] kvm-clock: cpu 1, msr 70c5041, secondary cpu clock [ 61.552288][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 61.560133][ T2941] FAT-fs (loop3): FAT read failed (blocknr 128) [ 61.616433][ T2979] loop4: detected capacity change from 0 to 512 [ 61.679445][ T2979] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.691732][ T2987] loop2: detected capacity change from 0 to 1024 [ 61.699765][ T2979] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 61.717217][ T2979] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 61.726193][ T2979] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.1196: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 61.746477][ T2979] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1196: couldn't read orphan inode 13 (err -117) [ 61.766961][ T2987] EXT4-fs (loop2): Ignoring removed oldalloc option [ 61.771701][ T2979] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.806110][ T30] audit: type=1400 audit(1787201681.082:395): avc: denied { mount } for pid=3002 comm="syz.1.1207" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.828584][ T2979] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1196: inode #15: comm syz.4.1196: iget: illegal inode # [ 61.849070][ T2987] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000001,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 61.879279][ T30] audit: type=1400 audit(1787201681.122:396): avc: denied { mounton } for pid=3002 comm="syz.1.1207" path="/325/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 61.927972][ T30] audit: type=1400 audit(1787201681.152:397): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 62.039402][ T3016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 62.047570][ T3016] System zones: 1-3, 19-19, 35-36 [ 62.082615][ T3016] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 62.108712][ T3016] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.160225][ T3024] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.178602][ T3024] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.218690][ T3024] fs-verity: sha512 using implementation "sha512-avx2" [ 62.291141][ T3034] SELinux: failed to load policy [ 62.302699][ T3036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 62.387197][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1225'. [ 62.439680][ T3024] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 932128 [ 62.449217][ T3024] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 62.489097][ T3050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1227'. [ 62.568199][ T20] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 62.784859][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 62.797660][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.808928][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.817075][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.828321][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.836433][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.847528][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.856855][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.868281][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.876527][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.887520][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 62.934475][ T3065] set_capacity_and_notify: 3 callbacks suppressed [ 62.934493][ T3065] loop3: detected capacity change from 0 to 128 [ 62.996006][ T3063] SELinux: failed to load policy [ 63.038432][ T20] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 63.046618][ T20] usb 1-1: can't read configurations, error -71 [ 63.408203][ T1246] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.452579][ T3114] netem: incorrect gi model size [ 63.457738][ T3114] netem: change failed [ 63.503570][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 63.503588][ T30] audit: type=1400 audit(1787201682.782:399): avc: denied { append } for pid=3125 comm="syz.0.1263" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.626545][ T30] audit: type=1400 audit(1787201682.902:400): avc: denied { search } for pid=3131 comm="syz.1.1265" name="/" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.649899][ T30] audit: type=1400 audit(1787201682.902:401): avc: denied { setattr } for pid=3131 comm="syz.1.1265" name="/" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.688218][ T1246] usb 4-1: Using ep0 maxpacket: 8 [ 63.716802][ T30] audit: type=1400 audit(1787201682.992:402): avc: denied { getopt } for pid=3137 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.838268][ T1246] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.849401][ T1246] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.862720][ T1246] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.869791][ T1246] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.08 [ 63.879533][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.891166][ T1246] usb 4-1: config 0 descriptor?? [ 64.029095][ T30] audit: type=1400 audit(1787201683.312:403): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 64.080238][ T3153] loop4: detected capacity change from 0 to 128 [ 64.137639][ T30] audit: type=1326 audit(1787201683.412:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.4.1276" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d54730d9 code=0x7ffc0000 [ 64.182959][ T30] audit: type=1326 audit(1787201683.412:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.4.1276" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d54730d9 code=0x7ffc0000 [ 64.195700][ T3164] loop4: detected capacity change from 0 to 256 [ 64.216040][ T30] audit: type=1326 audit(1787201683.412:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.4.1276" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d54730d9 code=0x7ffc0000 [ 64.236880][ T3168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 64.256718][ T30] audit: type=1326 audit(1787201683.412:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.4.1276" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d54730d9 code=0x7ffc0000 [ 64.271724][ T3170] loop2: detected capacity change from 0 to 256 [ 64.288673][ T30] audit: type=1326 audit(1787201683.412:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.4.1276" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d54730d9 code=0x7ffc0000 [ 64.300645][ T3170] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.370466][ T1246] input: HID 17ef:60a4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:60A4.000B/input/input20 [ 64.400323][ T1246] lenovo 0003:17EF:60A4.000B: input,hidraw0: USB HID v0.00 Joystick [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 64.571566][ T3180] SELinux: failed to load policy [ 64.591604][ T1246] usb 4-1: USB disconnect, device number 7 [ 64.653910][ T3194] loop2: detected capacity change from 0 to 512 [ 64.680756][ T3194] EXT4-fs error (device loop2): ext4_get_journal_inode:5178: comm syz.2.1292: inode #2147418112: comm syz.2.1292: iget: illegal inode # [ 64.707917][ T3194] EXT4-fs (loop2): no journal found [ 64.713530][ T3194] EXT4-fs (loop2): can't get journal size [ 64.720299][ T3194] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 64.730812][ T3194] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 64.739165][ T3194] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 64.780255][ T3194] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 66.258142][ C1] sched: RT throttling activated [ 66.267759][ T3237] loop4: detected capacity change from 0 to 2048 [ 67.365443][ T3237] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 67.498524][ T3237] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.775680][ T3230] loop2: detected capacity change from 0 to 131072 [ 67.808962][ T3290] netlink: 'syz.1.1335': attribute type 3 has an invalid length. [ 67.817962][ T3275] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1313: bg 0: block 345: padding at end of block bitmap is not set [ 67.832592][ T3290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 67.856653][ T3275] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 117 [ 67.871183][ T3275] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.871183][ T3275] [ 67.882255][ T3230] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 67.893672][ T3295] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 67.897143][ T3230] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 67.919764][ T3295] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 67.921033][ T3230] F2FS-fs (loop2): invalid crc value [ 67.950835][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 321 with error 28 [ 67.961867][ T3295] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1337'. [ 67.968777][ T3230] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 67.986675][ T8] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.986675][ T8] [ 67.996776][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.007757][ T8] EXT4-fs (loop4): Total free blocks count 0 [ 68.014155][ T8] EXT4-fs (loop4): Free/Dirty block details [ 68.028783][ T8] EXT4-fs (loop4): free_blocks=0 [ 68.040303][ T8] EXT4-fs (loop4): dirty_blocks=336 [ 68.056723][ T8] EXT4-fs (loop4): Block reservation details [ 68.063868][ T8] EXT4-fs (loop4): i_reserved_data_blocks=21 [ 68.152339][ T3314] loop4: detected capacity change from 0 to 1024 [ 68.211330][ T3314] EXT4-fs (loop4): Ignoring removed bh option [ 68.221359][ T3319] loop3: detected capacity change from 0 to 512 [ 68.240042][ T3314] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000004,bh,init_itable,. Quota mode: none. [ 68.300440][ T3319] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.311873][ T3319] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.342299][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.389861][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.397078][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.422123][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.432507][ T289] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 68.456723][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.464242][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 68.508803][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.533230][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.540912][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.541080][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 68.541093][ T30] audit: type=1400 audit(1787201687.822:433): avc: denied { map } for pid=3337 comm="syz.3.1355" path="/dev/usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.595468][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.602820][ T289] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 68.623288][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.645658][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 68.660951][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.690381][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.709068][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.735821][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.743676][ T289] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 68.764652][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.781818][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 68.801513][ T3353] loop3: detected capacity change from 0 to 512 [ 68.815512][ T289] EXT4-fs error (device loop4): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 68.819597][ T30] audit: type=1400 audit(1787201688.102:434): avc: denied { mounton } for pid=3348 comm="syz.2.1361" path="/225/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 68.838815][ T289] EXT4-fs (loop4): Remounting filesystem read-only [ 68.868389][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 68.895749][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 68.928855][ T3357] loop2: detected capacity change from 0 to 2048 [ 68.939085][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 68.974422][ T3353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.994168][ T3353] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.012210][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 69.039653][ T3357] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 69.051137][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 69.082077][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 69.092723][ T3357] EXT4-fs (loop2): shut down requested (2) [ 69.110950][ T289] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 69.125261][ T30] audit: type=1400 audit(1787201688.392:435): avc: denied { setattr } for pid=3376 comm="syz.1.1374" name="/" dev="incremental-fs" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.165951][ T30] audit: type=1400 audit(1787201688.442:436): avc: denied { write } for pid=3382 comm="syz.3.1372" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 69.194890][ T3383] ËåÍ"2 [ 69.237696][ T3387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1378'. [ 69.258062][ T3387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 69.287795][ T3387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1378'. [ 69.318045][ T3387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1378'. [ 69.508018][ T3415] syz.2.1392 (3415) used greatest stack depth: 21128 bytes left [ 69.584814][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.592104][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.600192][ T3418] device bridge_slave_0 entered promiscuous mode [ 69.610083][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.617492][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.625225][ T3418] device bridge_slave_1 entered promiscuous mode [ 69.699170][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.707106][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.714631][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.721700][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.778977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.790206][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.807691][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.841448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.860234][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.867503][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.898271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.910956][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.918049][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.938469][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.970824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.984238][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.002649][ T3430] netlink: 'syz.2.1397': attribute type 3 has an invalid length. [ 70.014865][ T3430] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1397'. [ 70.032164][ T8] device bridge_slave_1 left promiscuous mode [ 70.040559][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.055960][ T8] device bridge_slave_0 left promiscuous mode [ 70.068285][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.087208][ T8] device veth1_macvtap left promiscuous mode [ 70.097620][ T8] device veth0_vlan left promiscuous mode [ 70.199853][ T3448] loop2: detected capacity change from 0 to 128 [ 70.228681][ T3448] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 70.264464][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.276609][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.288051][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.297110][ T3440] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 70.305037][ T3440] netlink: 'syz.1.1402': attribute type 2 has an invalid length. [ 70.313267][ T3440] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1402'. [ 70.324295][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.334763][ T3418] device veth0_vlan entered promiscuous mode [ 70.348378][ T30] audit: type=1400 audit(1787201689.632:437): avc: denied { lock } for pid=3451 comm="syz.2.1407" path="socket:[27780]" dev="sockfs" ino=27780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 70.402306][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.417245][ T30] audit: type=1326 audit(1787201689.682:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3457 comm="syz.1.1418" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bba2f0d9 code=0x7ffc0000 [ 70.443560][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.457943][ T30] audit: type=1326 audit(1787201689.692:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3457 comm="syz.1.1418" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f55bba2f0d9 code=0x7ffc0000 [ 70.459271][ T3418] device veth1_macvtap entered promiscuous mode [ 70.484798][ T30] audit: type=1326 audit(1787201689.692:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3457 comm="syz.1.1418" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bba2f0d9 code=0x7ffc0000 [ 70.516802][ T30] audit: type=1326 audit(1787201689.692:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3457 comm="syz.1.1418" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f55bba2f0d9 code=0x7ffc0000 [ 70.550445][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.578555][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.587018][ T30] audit: type=1326 audit(1787201689.692:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3457 comm="syz.1.1418" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55bba2f0d9 code=0x7ffc0000 [ 70.613162][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.638830][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.647651][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.609201][ T3504] loop5: detected capacity change from 0 to 512 [ 71.634794][ T3504] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.649077][ T3484] loop2: detected capacity change from 0 to 131072 [ 71.669376][ T3484] F2FS-fs (loop2): Test dummy encryption mode enabled [ 71.688536][ T3484] F2FS-fs (loop2): invalid crc value [ 71.694491][ T3504] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1431: bad orphan inode 131083 [ 71.697883][ T3513] loop3: detected capacity change from 0 to 512 [ 71.712844][ T3504] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 71.751473][ T3513] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1434: inode has both inline data and extents flags [ 71.769920][ T3484] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.777259][ T3513] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1434: couldn't read orphan inode 15 (err -117) [ 71.807936][ T3513] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.818246][ T3484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.886150][ T3523] tap0: tun_chr_ioctl cmd 99999999 [ 71.961001][ T3525] loop3: detected capacity change from 0 to 512 [ 72.029275][ T3525] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.1438: missing EA_INODE flag [ 72.048482][ T3525] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1438: error while reading EA inode 2 err=-117 [ 72.068532][ T3525] EXT4-fs (loop3): 1 orphan inode deleted [ 72.080897][ T3525] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 72.168357][ T3537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 72.508295][ T3560] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1451'. [ 72.745320][ T3578] loop3: detected capacity change from 0 to 1024 [ 72.757844][ T3579] block device autoloading is deprecated and will be removed. [ 72.789846][ T3578] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,grpid,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 73.218546][ T3606] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.238263][ T20] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.252451][ T3606] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.336077][ T3620] set_capacity_and_notify: 1 callbacks suppressed [ 73.336095][ T3620] loop2: detected capacity change from 0 to 256 [ 73.365601][ T3620] exfat: Deprecated parameter 'utf8' [ 73.371835][ T3620] exfat: Deprecated parameter 'utf8' [ 73.377417][ T3620] exfat: Deprecated parameter 'namecase' [ 73.388204][ T1246] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 73.414203][ T3620] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 73.433411][ T3629] loop1: detected capacity change from 0 to 2048 [ 73.459703][ T3629] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,noload,quota,nouid32,,errors=continue. Quota mode: writeback. [ 73.479518][ T3629] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.608286][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.619815][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.629916][ T20] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 73.639523][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.648697][ T20] usb 1-1: config 0 descriptor?? [ 73.654815][ T3634] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1480: bg 0: block 345: padding at end of block bitmap is not set [ 73.669814][ T3634] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 117 [ 73.683580][ T3634] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.683580][ T3634] [ 73.708348][ T1246] usb 6-1: not running at top speed; connect to a high speed hub [ 73.730699][ T356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 2047 with error 28 [ 73.743768][ T356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.743768][ T356] [ 73.753626][ T356] EXT4-fs (loop1): Total free blocks count 0 [ 73.760720][ T356] EXT4-fs (loop1): Free/Dirty block details [ 73.766676][ T356] EXT4-fs (loop1): free_blocks=0 [ 73.772144][ T356] EXT4-fs (loop1): dirty_blocks=2048 [ 73.777712][ T356] EXT4-fs (loop1): Block reservation details [ 73.783871][ T356] EXT4-fs (loop1): i_reserved_data_blocks=128 [ 73.790181][ T1246] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.800886][ T1246] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 73.809994][ T1246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.859026][ T1246] usb 6-1: Found UVC 1.00 device (0000:0000) [ 74.098364][ T1246] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 74.118285][ T1246] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 74.127320][ T1246] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 74.135842][ T1246] usb 6-1: USB disconnect, device number 2 [ 74.139134][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.154604][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.164222][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.172966][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.181711][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.191399][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.200863][ T20] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 74.209820][ T20] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 74.222373][ T20] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 74.361820][ T327] usb 1-1: USB disconnect, device number 8 [ 74.368176][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -2 [ 74.734834][ T3665] loop1: detected capacity change from 0 to 512 [ 74.811344][ T3665] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1493: inode has both inline data and extents flags [ 74.907283][ T3665] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1493: couldn't read orphan inode 15 (err -117) [ 74.953721][ T3665] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.244419][ T3704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.326527][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 75.326544][ T30] audit: type=1400 audit(1787201694.602:450): avc: denied { bind } for pid=3707 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.418254][ T327] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 75.446248][ T3651] loop3: detected capacity change from 0 to 131072 [ 75.485412][ T3651] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 75.510291][ T30] audit: type=1400 audit(1787201694.792:451): avc: denied { connect } for pid=3720 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.514563][ T3651] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 75.576709][ T3651] F2FS-fs (loop3): invalid crc value [ 75.607361][ T3651] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.668172][ T327] usb 1-1: Using ep0 maxpacket: 16 [ 75.669705][ T3712] loop2: detected capacity change from 0 to 32768 [ 75.683894][ T3651] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 75.691367][ T3651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 75.729145][ T3712] loop2: p1 p2 p3 < p5 p6 p7 > [ 75.743701][ T3712] loop2: p2 size 16775168 extends beyond EOD, truncated [ 75.759830][ T3712] loop2: p5 start 4294970168 is beyond EOD, truncated [ 75.788232][ T327] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.803852][ T327] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.813682][ T327] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.820777][ T327] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 75.830627][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.858340][ T327] usb 1-1: config 0 descriptor?? [ 75.869474][ T352] udevd[352]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.869572][ T351] udevd[351]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 75.880470][ T309] udevd[309]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 75.890887][ T881] udevd[881]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 75.900174][ T1012] udevd[1012]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.304328][ T30] audit: type=1400 audit(1787201696.582:452): avc: denied { execute_no_trans } for pid=3742 comm="syz.1.1529" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.470955][ T3767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 77.490418][ T327] hid-generic 0003:1E71:2009.000D: item fetching failed at offset 0/5 [ 77.511530][ T327] hid-generic: probe of 0003:1E71:2009.000D failed with error -22 [ 77.566640][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.573850][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.595684][ T3785] loop5: detected capacity change from 0 to 128 [ 77.616537][ T30] audit: type=1400 audit(1787201696.892:453): avc: denied { setopt } for pid=3786 comm="syz.1.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.671247][ T30] audit: type=1400 audit(1787201696.952:454): avc: denied { accept } for pid=3788 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.694194][ T327] usb 1-1: USB disconnect, device number 9 [ 77.737539][ T3796] loop5: detected capacity change from 0 to 512 [ 77.757128][ T3800] ip_tables: iptables: counters copy to user failed while replacing table [ 77.786038][ T3802] netlink: 'syz.2.1554': attribute type 2 has an invalid length. [ 77.798217][ T3796] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.921014][ T3815] loop2: detected capacity change from 0 to 256 [ 78.088561][ T30] audit: type=1400 audit(1787201697.372:455): avc: denied { append } for pid=3830 comm="syz.2.1566" name="uprobe_events" dev="tracefs" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 78.158994][ T3838] loop3: detected capacity change from 0 to 512 [ 78.232691][ T3838] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 78.345094][ T30] audit: type=1400 audit(1787201697.622:456): avc: denied { watch watch_reads } for pid=3850 comm="syz.3.1573" path="/dev/sda1" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.480770][ T3859] loop1: detected capacity change from 0 to 256 [ 78.516100][ T3859] FAT-fs (loop1): Directory bread(block 64) failed [ 78.523213][ T3859] FAT-fs (loop1): Directory bread(block 65) failed [ 78.532959][ T3859] FAT-fs (loop1): Directory bread(block 66) failed [ 78.539928][ T3859] FAT-fs (loop1): Directory bread(block 67) failed [ 78.552013][ T3859] FAT-fs (loop1): Directory bread(block 68) failed [ 78.558889][ T3859] FAT-fs (loop1): Directory bread(block 69) failed [ 78.567599][ T3859] FAT-fs (loop1): Directory bread(block 70) failed [ 78.577039][ T3859] FAT-fs (loop1): Directory bread(block 71) failed [ 78.588360][ T3859] FAT-fs (loop1): Directory bread(block 72) failed [ 78.595945][ T3859] FAT-fs (loop1): Directory bread(block 73) failed [ 78.885984][ T3878] loop3: detected capacity change from 0 to 4096 [ 78.952662][ T3878] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 79.155535][ T3849] loop2: detected capacity change from 0 to 131072 [ 79.172918][ T3849] F2FS-fs (loop2): Test dummy encryption mode enabled [ 79.180716][ T3849] F2FS-fs (loop2): invalid crc value [ 79.187735][ T3849] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.225180][ T3849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.339756][ T1246] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 79.382873][ T3911] loop5: detected capacity change from 0 to 1024 [ 79.400218][ T3911] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 79.443080][ T30] audit: type=1400 audit(1787201698.722:457): avc: denied { lock } for pid=3910 comm="syz.5.1600" path="/26/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.546146][ T3920] xt_hashlimit: size too large, truncated to 1048576 [ 79.567611][ T3924] loop1: detected capacity change from 0 to 1024 [ 79.577978][ T3924] EXT4-fs (loop1): Ignoring removed bh option [ 79.589709][ T3924] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 79.748294][ T1246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.788231][ T1246] usb 1-1: not running at top speed; connect to a high speed hub [ 79.878249][ T1246] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.898421][ T1246] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.951015][ T30] audit: type=1400 audit(1787201699.232:458): avc: denied { setcheckreqprot } for pid=3956 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.966114][ T3959] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.1621'. [ 80.025227][ T30] audit: type=1400 audit(1787201699.302:459): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 80.028306][ T3959] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1621'. [ 80.124513][ T3977] smpboot: CPU 1 is now offline [ 80.160660][ T1246] usb 1-1: string descriptor 0 read error: -22 [ 80.176656][ T1246] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.230993][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.294942][ T3993] loop3: detected capacity change from 0 to 1024 [ 80.328756][ T1246] usb 1-1: 0:2 : does not exist [ 80.370849][ T3993] EXT4-fs (loop3): Ignoring removed orlov option [ 80.408230][ T3993] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 80.503656][ T3993] EXT4-fs (loop3): shut down requested (2) [ 80.532723][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 80.572892][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 80.620365][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 80.643481][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 80.666310][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 80.689580][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 80.716089][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 80.741363][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 80.765539][ T30] audit: type=1400 audit(1787201700.042:460): avc: denied { unlink } for pid=3992 comm="syz.3.1635" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.880144][ T60] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 81.083998][ T4024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1648'. [ 81.248351][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.285854][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.318567][ T60] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 81.369778][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.397454][ T60] usb 2-1: config 0 descriptor?? [ 81.505504][ T4051] loop2: detected capacity change from 0 to 512 [ 81.559390][ T4055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.608250][ T1246] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 81.634320][ T1246] usb 1-1: USB disconnect, device number 10 [ 81.666730][ T4057] loop2: detected capacity change from 0 to 8192 [ 81.678192][ T326] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 81.691227][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 81.725018][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 81.760860][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 81.801077][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 81.838415][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 81.873718][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1666'. [ 81.889462][ T60] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 81.939653][ T326] usb 4-1: Using ep0 maxpacket: 32 [ 82.033561][ T30] audit: type=1400 audit(1787201701.312:461): avc: denied { bind } for pid=4075 comm="syz.2.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.083564][ T4080] loop5: detected capacity change from 0 to 256 [ 82.090461][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.108252][ T60] isku 0003:1E7D:319C.000E: couldn't init struct isku_device [ 82.120180][ T60] isku 0003:1E7D:319C.000E: couldn't install keyboard [ 82.138377][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.168323][ T60] isku: probe of 0003:1E7D:319C.000E failed with error -71 [ 82.186077][ T326] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 82.203899][ T4080] FAT-fs (loop5): Directory bread(block 64) failed [ 82.223922][ T60] usb 2-1: USB disconnect, device number 7 [ 82.252225][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.276509][ T4080] FAT-fs (loop5): Directory bread(block 65) failed [ 82.294126][ T326] usb 4-1: config 0 descriptor?? [ 82.323389][ T4080] FAT-fs (loop5): Directory bread(block 66) failed [ 82.352193][ T4087] Line length is too long: Should be less than 4094 [ 82.360972][ T4080] FAT-fs (loop5): Directory bread(block 67) failed [ 82.401336][ T4080] FAT-fs (loop5): Directory bread(block 68) failed [ 82.420301][ T4089] loop2: detected capacity change from 0 to 4096 [ 82.427078][ T4080] FAT-fs (loop5): Directory bread(block 69) failed [ 82.449789][ T4089] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.460551][ T4080] FAT-fs (loop5): Directory bread(block 70) failed [ 82.477542][ T4089] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 82.488007][ T4080] FAT-fs (loop5): Directory bread(block 71) failed [ 82.498872][ T4089] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 82.515150][ T4080] FAT-fs (loop5): Directory bread(block 72) failed [ 82.528274][ T4089] System zones: 0-5 [ 82.532939][ T4089] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 82.568246][ T4080] FAT-fs (loop5): Directory bread(block 73) failed [ 82.664937][ T30] audit: type=1400 audit(1787201701.942:462): avc: denied { unlink } for pid=288 comm="syz-executor" name=66696C6507 dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 82.788991][ T326] hid-generic 0003:0403:6030.000F: item fetching failed at offset 0/2 [ 82.836593][ T326] hid-generic: probe of 0003:0403:6030.000F failed with error -22 [ 82.879555][ T4106] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.989866][ T326] usb 4-1: USB disconnect, device number 8 [ 83.250388][ T4110] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 83.280817][ T4110] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.307955][ T4110] F2FS-fs (loop2): invalid crc value [ 83.326222][ T4110] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 83.391786][ T4110] F2FS-fs (loop2): Start checkpoint disabled! [ 83.415674][ T4110] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.436361][ T4110] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 83.561082][ T306] attempt to access beyond end of device [ 83.561082][ T306] loop2: rw=2049, want=45104, limit=40427 [ 83.702463][ T4099] set_capacity_and_notify: 2 callbacks suppressed [ 83.702494][ T4099] loop1: detected capacity change from 0 to 131072 [ 83.760992][ T4099] F2FS-fs (loop1): Test dummy encryption mode enabled [ 83.782120][ T4099] F2FS-fs (loop1): invalid crc value [ 83.801866][ T4099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.838424][ T4099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.028209][ T326] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 84.184110][ T4146] __nla_validate_parse: 14 callbacks suppressed [ 84.184124][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 84.398319][ T326] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 84.421987][ T326] usb 3-1: config 127 has no interface number 0 [ 84.461961][ T326] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 84.678281][ T326] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 84.707917][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.726334][ T326] usb 3-1: Product: syz [ 84.742635][ T326] usb 3-1: Manufacturer: syz [ 84.759065][ T326] usb 3-1: SerialNumber: syz [ 84.804354][ T4126] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.885173][ T30] audit: type=1400 audit(1787201704.162:463): avc: denied { listen } for pid=4166 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.260626][ T4126] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.321595][ T4162] loop1: detected capacity change from 0 to 131072 [ 85.348355][ T4162] F2FS-fs (loop1): invalid crc value [ 85.368995][ T4162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.400966][ T4162] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 85.412843][ T4162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 85.469944][ T4162] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 85.627809][ T30] audit: type=1400 audit(1787201704.902:464): avc: denied { connect } for pid=4192 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.660469][ T4195] loop5: detected capacity change from 0 to 512 [ 85.728221][ T326] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 85.752858][ T326] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 85.794060][ T326] asix: probe of 3-1:127.57 failed with error -71 [ 85.827806][ T326] usb 3-1: USB disconnect, device number 5 [ 85.915666][ T4210] loop3: detected capacity change from 0 to 1024 [ 85.978319][ T4210] EXT4-fs (loop3): Ignoring removed orlov option [ 86.024420][ T4222] loop5: detected capacity change from 0 to 128 [ 86.043414][ T4210] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,user_xattr,bsddf,orlov,abort,errors=continue,discard,,errors=continue. Quota mode: none. [ 86.171981][ T4210] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.484929][ T4262] loop3: detected capacity change from 0 to 512 [ 86.555934][ T4262] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 86.634339][ T4262] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.723315][ T4252] loop2: detected capacity change from 0 to 40427 [ 86.735447][ T4271] loop1: detected capacity change from 0 to 512 [ 86.782394][ T4252] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 86.804735][ T4271] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.840076][ T4252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.883435][ T4252] F2FS-fs (loop2): invalid crc value [ 86.929059][ T4252] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 86.990211][ T30] audit: type=1400 audit(1787201706.272:465): avc: denied { map } for pid=4287 comm="syz.3.1762" path="socket:[31898]" dev="sockfs" ino=31898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.031547][ T4252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.091677][ T4252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.161575][ T4303] loop3: detected capacity change from 0 to 256 [ 87.171735][ T30] audit: type=1400 audit(1787201706.302:466): avc: denied { read } for pid=4287 comm="syz.3.1762" path="socket:[31898]" dev="sockfs" ino=31898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.264149][ T288] attempt to access beyond end of device [ 87.264149][ T288] loop2: rw=2049, want=45104, limit=40427 [ 87.317215][ T4310] netlink: 'syz.0.1773': attribute type 12 has an invalid length. [ 87.385927][ T4310] netlink: 'syz.0.1773': attribute type 29 has an invalid length. [ 87.447686][ T4310] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1773'. [ 87.565588][ T4306] loop1: detected capacity change from 0 to 40427 [ 87.632612][ T4306] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 87.686675][ T4306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 87.738345][ T4306] F2FS-fs (loop1): invalid crc value [ 87.752476][ T4333] xt_hashlimit: size too large, truncated to 1048576 [ 87.801514][ T4306] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 87.907417][ T30] audit: type=1400 audit(1787201707.182:467): avc: denied { remount } for pid=4346 comm="syz.2.1788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.935149][ T4342] tap0: tun_chr_ioctl cmd 1074025692 [ 87.964715][ T4306] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 88.001117][ T4351] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1789: inode has both inline data and extents flags [ 88.018504][ T4306] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.081097][ T4351] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1789: couldn't read orphan inode 15 (err -117) [ 88.123770][ T4351] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 88.140496][ T286] attempt to access beyond end of device [ 88.140496][ T286] loop1: rw=2049, want=45104, limit=40427 [ 88.378807][ T4371] exfat: Deprecated parameter 'utf8' [ 88.398256][ T4371] exfat: Deprecated parameter 'namecase' [ 88.421710][ T4371] exfat: Deprecated parameter 'namecase' [ 88.443883][ T4371] exfat: Deprecated parameter 'utf8' [ 88.470107][ T4371] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 88.719197][ T4386] set_capacity_and_notify: 3 callbacks suppressed [ 88.719210][ T4386] loop3: detected capacity change from 0 to 1024 [ 88.847975][ T4386] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 89.003781][ T4412] loop1: detected capacity change from 0 to 1024 [ 89.065262][ T4412] EXT4-fs (loop1): Ignoring removed bh option [ 89.115533][ T4412] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 89.210964][ T4412] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.279012][ T30] audit: type=1400 audit(1787201708.562:468): avc: denied { rename } for pid=4384 comm="syz.3.1805" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.303328][ T4386] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #11: comm syz.3.1805: directory missing '..' [ 89.398548][ T30] audit: type=1400 audit(1787201708.602:469): avc: denied { map } for pid=4411 comm="syz.1.1817" path="/481/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.832213][ T4438] loop1: detected capacity change from 0 to 512 [ 89.947273][ T4438] EXT4-fs (loop1): 1 truncate cleaned up [ 89.969468][ T4438] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000008001,,errors=continue. Quota mode: none. [ 90.033179][ T4427] syz.2.1823 (4427): drop_caches: 3 [ 90.053747][ T4438] EXT4-fs (loop1): shut down requested (1) [ 90.087571][ T83] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2001: comm syslogd: No space for directory leaf checksum. Please run e2fsck -D. [ 90.128347][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1831'. [ 90.169537][ T83] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #2001: comm syslogd: checksumming directory block 0 Aug 20 04:55:09 syzkaller kern.alert kernel: [ 90.053747][ T4438] EXT4-fs (loo[ 90.276543][ T4462] loop2: detected capacity change from 0 to 128 p1): shut down requested (1) [ 90.373257][ T30] audit: type=1400 audit(1787201709.652:470): avc: denied { mounton } for pid=4461 comm="syz.2.1836" path="/349/file0/file0" dev="loop2" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 90.410224][ T288] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.462615][ T288] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.523716][ T30] audit: type=1400 audit(1787201709.692:471): avc: denied { watch watch_reads } for pid=4467 comm="syz.1.1840" path="/487/file1" dev="tmpfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 90.599901][ T306] tipc: Disabling bearer [ 90.605357][ T306] tipc: Left network mode [ 90.703189][ T4486] loop5: detected capacity change from 0 to 512 [ 90.754540][ T4490] tipc: Enabling of bearer rejected, failed to enable media [ 90.817304][ T30] audit: type=1326 audit(1787201710.092:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.1854" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 90.909945][ T4500] xt_hashlimit: size too large, truncated to 1048576 [ 90.924149][ T4498] xt_hashlimit: size too large, truncated to 1048576 [ 90.965016][ T4504] loop3: detected capacity change from 0 to 512 [ 90.985376][ T30] audit: type=1326 audit(1787201710.122:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.1854" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 91.042840][ T306] device bridge_slave_1 left promiscuous mode [ 91.058508][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.067952][ T4504] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 91.086388][ T306] device bridge_slave_0 left promiscuous mode [ 91.095875][ T30] audit: type=1326 audit(1787201710.122:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.1854" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 91.128083][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.151996][ T306] device veth1_macvtap left promiscuous mode [ 91.162683][ T4504] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.178203][ T306] device veth0_vlan left promiscuous mode [ 91.436503][ T4522] loop1: detected capacity change from 0 to 512 [ 91.444497][ T4519] device gretap0 entered promiscuous mode [ 91.464773][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 91.476337][ T4522] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.488304][ T4520] device gretap0 left promiscuous mode [ 91.498561][ T4522] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 91.498561][ T4522] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 91.498561][ T4522] [ 91.570520][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.577574][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.595176][ T4529] loop3: detected capacity change from 0 to 512 [ 91.609783][ T4522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=88064018, mo2=0002] [ 91.634807][ T4506] device bridge_slave_0 entered promiscuous mode [ 91.642274][ T4522] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 91.676391][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.685942][ T4529] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 91.704246][ T4522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1865: invalid indirect mapped block 256 (level 1) [ 91.730900][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.751979][ T4506] device bridge_slave_1 entered promiscuous mode [ 91.758862][ T4522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1865: invalid indirect mapped block 2683928664 (level 1) [ 91.792338][ T4529] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,jqfmt=vfsold,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 91.848783][ T4522] EXT4-fs (loop1): 1 truncate cleaned up [ 91.854895][ T4522] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000008000,debug,mblk_io_submit,min_batch_time=0x0000000000000002,usrjquota=.jqfmt=vfsv1,noacl,jqfmt=vfsv1,resuid=0x0000000000000000,,,errors=continue. Quota mode: writeback. [ 91.942284][ T4529] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.993825][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.016957][ T4522] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.1865: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 92.048862][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.096836][ T4529] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 92.119168][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.135933][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.184793][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.192532][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.228629][ T4529] EXT4-fs (loop3): Remounting filesystem read-only [ 92.274570][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 92.274583][ T30] audit: type=1400 audit(1787201711.552:481): avc: denied { rename } for pid=4528 comm="syz.3.1867" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.304491][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.355515][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.401049][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.409463][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.473025][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.501423][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.544579][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.556296][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 92.585938][ T4583] loop1: detected capacity change from 0 to 256 [ 92.611846][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.635205][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #259: comm udevd: checksumming directory block 0 [ 92.657368][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.667228][ T4583] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 92.695129][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.718677][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.737548][ T4506] device veth0_vlan entered promiscuous mode [ 92.748176][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 92.767007][ T4591] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.780218][ T4593] loop3: detected capacity change from 0 to 7 [ 92.789634][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.800933][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 92.809174][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.820068][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 92.828048][ T4593] loop3: unable to read partition table [ 92.834226][ T4593] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 92.847367][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 92.868724][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.893577][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.902830][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.913752][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 92.923080][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.934371][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 92.943275][ T4596] loop3: unable to read partition table [ 92.951640][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 92.968095][ T4596] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 92.984881][ T4506] device veth1_macvtap entered promiscuous mode [ 93.000382][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.011229][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 93.025817][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.037896][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.050035][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 93.080952][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.104505][ T3450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.113789][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 93.148190][ T4612] /dev/loop5: Can't open blockdev [ 93.158422][ T60] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 93.166587][ T4614] exfat: Deprecated parameter 'utf8' [ 93.173042][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 93.194446][ T4614] exfat: Deprecated parameter 'utf8' [ 93.208584][ T4614] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 93.230435][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #1642: comm udevd: checksumming directory block 0 [ 93.271476][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 93.311583][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #1480: comm udevd: checksumming directory block 0 [ 93.548256][ T60] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.601372][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.641244][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 93.697940][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.719032][ T30] audit: type=1400 audit(1787201713.002:482): avc: denied { create } for pid=4655 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.756820][ T60] usb 1-1: config 0 descriptor?? [ 93.788266][ T4599] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.822517][ T30] audit: type=1400 audit(1787201713.022:483): avc: denied { setopt } for pid=4655 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.909968][ T30] audit: type=1400 audit(1787201713.022:484): avc: denied { write } for pid=4655 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.172234][ T4674] set_capacity_and_notify: 4 callbacks suppressed [ 94.172246][ T4674] loop5: detected capacity change from 0 to 40427 [ 94.189025][ T4683] netlink: 'syz.1.1934': attribute type 12 has an invalid length. [ 94.270060][ T60] wacom 0003:056A:032F.0010: unknown main item tag 0x2 [ 94.289471][ T60] wacom 0003:056A:032F.0010: unknown main item tag 0x1 [ 94.301883][ T60] wacom 0003:056A:032F.0010: ignoring exceeding usage max [ 94.322675][ T60] wacom 0003:056A:032F.0010: hidraw0: USB HID v0.81 Device [HID 056a:032f] on usb-dummy_hcd.0-1/input0 [ 94.336424][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 94.355805][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 94.369576][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 94.388671][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 94.405983][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 94.445572][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 94.494723][ T4697] udevd[4697]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 94.574851][ T6] usb 1-1: USB disconnect, device number 11 [ 94.640058][ T4703] SELinux: context truncated [ 94.666447][ T4703] SELinux: failed to load policy [ 94.709688][ T4707] loop5: detected capacity change from 0 to 256 [ 94.724142][ T4707] /dev/loop5: Can't open blockdev [ 94.804524][ T30] audit: type=1400 audit(1787201714.082:485): avc: denied { write } for pid=4710 comm="syz.5.1947" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 94.868312][ T60] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 95.061178][ T4718] xt_hashlimit: size too large, truncated to 1048576 [ 95.135127][ T30] audit: type=1400 audit(1787201714.412:486): avc: denied { remount } for pid=4723 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.248181][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.354860][ T4748] loop1: detected capacity change from 0 to 256 [ 95.388208][ T60] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 95.397599][ T4748] FAT-fs (loop1): Directory bread(block 64) failed [ 95.411145][ T60] usb 4-1: can't read configurations, error -71 [ 95.420280][ T4748] FAT-fs (loop1): Directory bread(block 65) failed [ 95.435019][ T4748] FAT-fs (loop1): Directory bread(block 66) failed [ 95.452893][ T4748] FAT-fs (loop1): Directory bread(block 67) failed [ 95.467416][ T4748] FAT-fs (loop1): Directory bread(block 68) failed [ 95.482448][ T4748] FAT-fs (loop1): Directory bread(block 69) failed [ 95.503576][ T4748] FAT-fs (loop1): Directory bread(block 70) failed [ 95.518026][ T4748] FAT-fs (loop1): Directory bread(block 71) failed [ 95.518063][ T4748] FAT-fs (loop1): Directory bread(block 72) failed [ 95.518074][ T4748] FAT-fs (loop1): Directory bread(block 73) failed [ 95.602481][ T4756] usbcore.quirks: string doesn't fit in 127 chars. [ 95.634192][ T30] audit: type=1400 audit(1787201714.912:487): avc: denied { getopt } for pid=4759 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.660025][ T4760] loop1: detected capacity change from 0 to 256 [ 95.684961][ T4760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 95.969864][ T4790] zero sized request [ 96.024782][ T4797] loop5: detected capacity change from 0 to 512 [ 96.129357][ T4797] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1987'. [ 96.240479][ T30] audit: type=1400 audit(1787201715.522:488): avc: denied { shutdown } for pid=4810 comm="syz.3.1995" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.264366][ T4797] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1987'. [ 96.368602][ T101] EXT4-fs warning: 6 callbacks suppressed [ 96.368615][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 96.481695][ T4829] netlink: 'syz.0.2003': attribute type 12 has an invalid length. [ 96.498181][ T101] EXT4-fs error: 6 callbacks suppressed [ 96.498196][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #259: comm udevd: checksumming directory block 0 [ 96.542026][ T4829] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 96.588301][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 96.604644][ T4829] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2003'. [ 96.629312][ T4829] netlink: 'syz.0.2003': attribute type 3 has an invalid length. [ 96.653599][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 96.672073][ T4829] netlink: 'syz.0.2003': attribute type 2 has an invalid length. [ 96.700083][ T4829] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2003'. [ 96.715237][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 96.798392][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 96.838533][ T4834] WARNING! power/level is deprecated; use power/control instead [ 96.868406][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 96.958645][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 97.022682][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.076636][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #1642: comm udevd: checksumming directory block 0 [ 97.126358][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.201793][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #1480: comm udevd: checksumming directory block 0 [ 97.218564][ T4787] loop1: detected capacity change from 0 to 131072 [ 97.237265][ T4860] input: syz1 as /devices/virtual/input/input24 [ 97.258545][ T4787] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 97.291639][ T4787] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.315097][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.374328][ T4787] F2FS-fs (loop1): invalid crc value [ 97.407983][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 97.422041][ T4787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.467317][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.506525][ T4787] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.521327][ T4874] loop6: detected capacity change from 0 to 512 [ 97.529115][ T4787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 97.537978][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 97.580180][ T4874] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x000000000000000e,,errors=continue. Quota mode: writeback. [ 97.602864][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.651313][ T4874] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 97.663409][ T4787] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=9000000, run fsck to fix. [ 97.675402][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 97.692645][ T4787] F2FS-fs (loop1): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 150994944, run fsck to fix. [ 97.723804][ T4787] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=9000000, run fsck to fix. [ 97.752099][ T4787] F2FS-fs (loop1): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 150994944, run fsck to fix. [ 97.793962][ T4787] overlayfs: failed to resolve './file1': -117 [ 98.004024][ T4893] loop5: detected capacity change from 0 to 256 [ 98.041241][ T4893] /dev/loop5: Can't open blockdev [ 98.453106][ T4929] tap0: tun_chr_ioctl cmd 35108 [ 98.497990][ T4818] loop3: detected capacity change from 0 to 131072 [ 98.544058][ T4933] loop1: detected capacity change from 0 to 256 [ 98.586930][ T4818] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 98.604855][ T4933] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 98.681541][ T4818] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.762901][ T4818] F2FS-fs (loop3): invalid crc value [ 98.867474][ T4818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.980267][ T4965] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.028867][ T4818] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.039691][ T4965] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 99.065962][ T4965] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2062: invalid indirect mapped block 2683928664 (level 1) [ 99.089302][ T4818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 99.108182][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.126322][ T4965] EXT4-fs (loop6): 1 truncate cleaned up [ 99.157518][ T4983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2069'. [ 99.169045][ T4965] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 99.207595][ T4818] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 99.233444][ T4985] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 99.267770][ T4965] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2062: invalid indirect mapped block 480848489 (level 1) [ 99.346004][ T4991] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2074'. [ 99.361858][ T4991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 99.386171][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 99.419800][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 99.468248][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.506770][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.538548][ T60] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 99.570155][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.599991][ T60] usb 6-1: config 0 descriptor?? [ 99.637520][ T5013] set_capacity_and_notify: 1 callbacks suppressed [ 99.637533][ T5013] loop1: detected capacity change from 0 to 512 [ 99.709079][ T5013] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.2084: bad orphan inode 11862016 [ 99.748362][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.800825][ T5013] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.945050][ T5033] loop3: detected capacity change from 0 to 8192 [ 99.978837][ T5033] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.014530][ T5042] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 100.022046][ T5042] SELinux: failed to load policy [ 100.089372][ T60] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 100.097134][ T60] playstation 0003:054C:0DF2.0011: collection stack underflow [ 100.105133][ T326] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 100.147397][ T60] playstation 0003:054C:0DF2.0011: item 0 2 0 12 parsing failed [ 100.179808][ T5054] loop3: detected capacity change from 0 to 512 [ 100.187221][ T60] playstation 0003:054C:0DF2.0011: Parse failed [ 100.203252][ T60] playstation: probe of 0003:054C:0DF2.0011 failed with error -22 [ 100.227453][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 100.252871][ T5054] EXT4-fs (loop3): Ignoring removed nobh option [ 100.279498][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 100.297601][ T5054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.316805][ T60] usb 6-1: USB disconnect, device number 3 [ 100.328313][ T5054] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 100.359863][ T5054] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2102: attempt to clear invalid blocks 2 len 1 [ 100.395776][ T5054] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 100.412609][ T5056] loop1: detected capacity change from 0 to 40427 [ 100.424082][ T5056] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 100.436121][ T5056] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.445465][ T5056] F2FS-fs (loop1): invalid crc value [ 100.451586][ T5054] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2102: invalid indirect mapped block 1819239214 (level 0) [ 100.467077][ T5056] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.484510][ T5054] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2102: invalid indirect mapped block 1819239214 (level 1) [ 100.500287][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.516837][ T5056] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 100.524344][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.534912][ T5056] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.567372][ T5054] EXT4-fs (loop3): 1 truncate cleaned up [ 100.575385][ T5056] attempt to access beyond end of device [ 100.575385][ T5056] loop1: rw=2049, want=45104, limit=40427 [ 100.588715][ T5054] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,nobh,barrier,sb=0x0000000000000001,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 100.617016][ T5056] attempt to access beyond end of device [ 100.617016][ T5056] loop1: rw=0, want=45104, limit=40427 [ 100.629103][ T326] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.647363][ T326] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 100.657389][ T286] attempt to access beyond end of device [ 100.657389][ T286] loop1: rw=2049, want=40968, limit=40427 [ 100.678621][ T326] usb 1-1: Manufacturer: syz [ 100.696717][ T326] usb 1-1: config 0 descriptor?? [ 100.703012][ T5054] EXT4-fs (loop3): shut down requested (0) Aug 20 04:55:20 syzkaller kern.alert kernel: [ 100.703012][ T5054] EXT4-fs (loop3): shut down requested (0) [ 100.742963][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2105'. [ 100.844996][ T5069] loop6: detected capacity change from 0 to 512 [ 100.901926][ T5076] loop1: detected capacity change from 0 to 1024 [ 100.910348][ T5069] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 100.949726][ T5069] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 100.996144][ T5069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 101.007275][ T5076] EXT4-fs (loop1): Ignoring removed oldalloc option [ 101.024334][ T5076] EXT4-fs (loop1): Ignoring removed bh option [ 101.041304][ T5069] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 101.059128][ T5069] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 101.081176][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 101.105301][ T5069] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 101.142708][ T5076] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.184808][ T5076] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.2104: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.259818][ T5076] EXT4-fs (loop1): Remounting filesystem read-only [ 101.281983][ T30] audit: type=1400 audit(1787201720.562:489): avc: denied { write } for pid=5102 comm="syz.3.2121" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 101.311232][ T5101] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.2104: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.378593][ T5101] EXT4-fs (loop1): Remounting filesystem read-only [ 101.411870][ T5101] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.2104: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.481882][ T5101] EXT4-fs (loop1): Remounting filesystem read-only [ 101.510371][ T5101] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.2104: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.564886][ T5101] EXT4-fs (loop1): Remounting filesystem read-only [ 101.572951][ T5125] loop6: detected capacity change from 0 to 4096 [ 101.588427][ T5101] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.2104: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.605964][ T5125] EXT4-fs (loop6): Test dummy encryption mode enabled [ 101.622210][ T5125] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 101.638240][ T326] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 101.647722][ T5101] EXT4-fs (loop1): Remounting filesystem read-only [ 101.657862][ T5125] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 101.667470][ T326] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 101.675848][ T5101] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.2104: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.693622][ T5125] System zones: 0-5 [ 101.698311][ T326] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 101.708711][ T5125] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,block_validity,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 101.740938][ T326] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 101.749020][ T5101] EXT4-fs (loop1): Remounting filesystem read-only [ 101.761249][ T326] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 101.781203][ T1012] EXT4-fs warning: 12 callbacks suppressed [ 101.781215][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 101.803836][ T326] usb 1-1: USB disconnect, device number 12 [ 101.866018][ T5133] loop1: detected capacity change from 0 to 128 [ 101.902797][ T1012] EXT4-fs error: 12 callbacks suppressed [ 101.902808][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 101.937911][ T5133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 101.963357][ T5133] System zones: 1-3, 19-19, 35-36 [ 101.978556][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 102.006518][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 102.029015][ T5133] ext4 filesystem being mounted at /565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.085366][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 102.112484][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 102.178174][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 102.201693][ T5155] loop3: detected capacity change from 0 to 512 [ 102.244607][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 102.310669][ T5155] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 102.342712][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 102.384054][ T5155] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.406964][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 102.437783][ T30] audit: type=1326 audit(1787201721.712:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 102.495192][ T5155] EXT4-fs (loop3): 1 truncate cleaned up [ 102.504517][ T5181] tipc: Enabling of bearer rejected, already enabled [ 102.517885][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 102.531927][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 102.575914][ T30] audit: type=1326 audit(1787201721.742:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 102.605674][ T1012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 102.639268][ T1012] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 102.668993][ T30] audit: type=1326 audit(1787201721.742:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 102.707823][ T5160] syz.5.2146 (5160): drop_caches: 3 [ 102.783155][ T30] audit: type=1326 audit(1787201721.742:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 102.878200][ T60] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.894835][ T30] audit: type=1326 audit(1787201721.742:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 102.921436][ T5204] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2166'. [ 102.945501][ T5206] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2167'. [ 102.972178][ T5210] device hsr0 entered promiscuous mode [ 102.987463][ T30] audit: type=1326 audit(1787201721.742:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 103.086117][ T30] audit: type=1326 audit(1787201721.742:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 103.178169][ T30] audit: type=1326 audit(1787201721.742:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 103.258246][ T30] audit: type=1326 audit(1787201721.742:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5172 comm="syz.0.2152" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546ad670d9 code=0x7ffc0000 [ 103.298279][ T60] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 103.328242][ T60] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 103.434370][ T5217] loop3: detected capacity change from 0 to 40427 [ 103.459294][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 103.498259][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #259: comm udevd: checksumming directory block 0 [ 103.516551][ T5237] syz.0.2179 (5237): drop_caches: 3 [ 103.522218][ T60] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 103.541773][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.551075][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 103.580049][ T60] usb 2-1: Product: syz [ 103.584426][ T60] usb 2-1: Manufacturer: syz [ 103.600472][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 103.612980][ T60] usb 2-1: SerialNumber: syz [ 103.629302][ T60] usb 2-1: config 0 descriptor?? [ 103.643674][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 103.659112][ T5187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.666186][ T5187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.789186][ T5217] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 103.811718][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 103.836431][ T5217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.856767][ T101] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 103.872976][ T326] divide error: 0000 [#1] PREEMPT SMP KASAN [ 103.878958][ T326] CPU: 0 PID: 326 Comm: kworker/0:3 Not tainted syzkaller #0 [ 103.886664][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.896801][ T326] Workqueue: events damon_reclaim_timer_fn [ 103.902618][ T326] RIP: 0010:damon_reclaim_timer_fn+0x33e/0x530 [ 103.908770][ T326] Code: 3a 05 48 89 44 24 78 48 8b 05 de 2f 3a 05 48 89 84 24 80 00 00 00 c7 84 24 90 00 00 00 01 00 00 00 48 8b 05 ac 2f 3a 05 31 d2 <48> f7 35 eb 2f 3a 05 bf 00 10 00 00 48 c7 c6 ff ff ff ff 31 d2 31 [ 103.928527][ T326] RSP: 0018:ffffc90007877800 EFLAGS: 00010246 [ 103.934606][ T326] RAX: 0000000007270e00 RBX: fffff52000f0ef00 RCX: 0000000000000000 [ 103.943556][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90007877bf8 [ 103.952180][ T326] RBP: ffffc90007877d08 R08: ffffc90007877bf7 R09: ffffc90007877888 [ 103.960651][ T326] R10: dffffc0000000000 R11: fffff52000f0ef7f R12: 0000000000000001 [ 103.969453][ T326] R13: dffffc0000000000 R14: ffff88811d66f080 R15: ffffc90007877870 [ 103.977931][ T326] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 103.987514][ T326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.994285][ T326] CR2: 000000110c29b2d6 CR3: 00000001255be000 CR4: 00000000003506b0 [ 104.002355][ T326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.010325][ T326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.018290][ T326] Call Trace: [ 104.021634][ T326] [ 104.024660][ T326] ? enabled_store+0xa0/0xa0 [ 104.029733][ T326] ? _raw_spin_unlock+0x4d/0x70 [ 104.034592][ T326] ? finish_task_switch+0x16b/0x790 [ 104.039787][ T326] ? switch_mm_irqs_off+0x32d/0x960 [ 104.044987][ T326] ? __schedule+0xbd7/0x14a0 [ 104.049585][ T326] process_one_work+0x6c8/0xbb0 [ 104.054489][ T326] worker_thread+0xaa0/0x1250 [ 104.059275][ T326] ? __kasan_check_read+0x11/0x20 [ 104.064299][ T326] kthread+0x3f5/0x4f0 [ 104.068460][ T326] ? worker_clr_flags+0x190/0x190 [ 104.073558][ T326] ? kthread_blkcg+0xd0/0xd0 [ 104.078151][ T326] ret_from_fork+0x1f/0x30 [ 104.082556][ T326] [ 104.085560][ T326] Modules linked in: [ 104.092501][ T5187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.107376][ T5187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.116295][ T5217] F2FS-fs (loop3): invalid crc value [ 104.127318][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #264: comm udevd: checksumming directory block 0 [ 104.141399][ T5217] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 104.182774][ T5217] F2FS-fs (loop3): Start checkpoint disabled! [ 104.193170][ T5217] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.201567][ T5217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 104.239094][ T8] attempt to access beyond end of device [ 104.239094][ T8] loop3: rw=2049, want=45104, limit=40427 [ 104.261617][ T326] ---[ end trace d39411dc551e8fad ]--- [ 104.267140][ T326] RIP: 0010:damon_reclaim_timer_fn+0x33e/0x530 [ 104.280907][ T326] Code: 3a 05 48 89 44 24 78 48 8b 05 de 2f 3a 05 48 89 84 24 80 00 00 00 c7 84 24 90 00 00 00 01 00 00 00 48 8b 05 ac 2f 3a 05 31 d2 <48> f7 35 eb 2f 3a 05 bf 00 10 00 00 48 c7 c6 ff ff ff ff 31 d2 31 [ 104.310576][ T326] RSP: 0018:ffffc90007877800 EFLAGS: 00010246 [ 104.320046][ T326] RAX: 0000000007270e00 RBX: fffff52000f0ef00 RCX: 0000000000000000 [ 104.332535][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90007877bf8 [ 104.344855][ T326] RBP: ffffc90007877d08 R08: ffffc90007877bf7 R09: ffffc90007877888 [ 104.360263][ T326] R10: dffffc0000000000 R11: fffff52000f0ef7f R12: 0000000000000001 [ 104.369049][ T326] R13: dffffc0000000000 R14: ffff88811d66f080 R15: ffffc90007877870 [ 104.377332][ T326] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 104.386864][ T326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.393907][ T326] CR2: 00007fd0dd8be2f8 CR3: 000000011e978000 CR4: 00000000003506b0 [ 104.402836][ T326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.411233][ T326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.419903][ T326] Kernel panic - not syncing: Fatal exception [ 104.426022][ T326] Kernel Offset: disabled [ 104.430411][ T326] Rebooting in 86400 seconds..