last executing test programs: 19.056089609s ago: executing program 2 (id=1482): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x229, &(0x7f0000000000)="$eJzsmL9rFEEUx78zt7d3Z0S0SWFjYcCI5i6316QJGkGwEiHxV6WHWUO8S04uK5gDkWBjo52FYGPhP2ARMJWFnf+AoIUKgoJXWNikWXkzc3dzGc/dbNL5PsXwnXlvZt57N/uKA8Mw/y1fv/z+/OTczMJpAAcxgYJZ/54DhNBaWv6fnt879Wz2/IvXH1+9Wz30YGvnebQljocXiv+43wPwdi6Hh/2b+ru3SUyYyQIk6R+kL0PipFm/CoGy0TchccXoEALXjb5j6Rb5l8u3l5th+VaruUhimoYqDQENtZ3xdTcEFs08juNYWPa19U6j3myGbUt4xvYXUybRv6wx7tQvDx/dOZmHFR9V8drjRxs079VmWtdPUYVE1SRRg8C8WZ9BoVcbXRIr/6Pe4Pyck7+b7fYb5UuGpCSLWsz+2pdikfChxZGpbOdMUjpnXdNhZIkHw7vyGJiokvuT8sino4SX/BbPmB90d1eM0QO4mDaLpyUAe8qrkCrC3WYxJMa7W+9d07ek7bFIvkKkfz/FtDH3PsTsVS2h05B7qdiowD5s6v4RvxQ4YfUnz+oflWjlbmVtvTO1vFJfCpfC1SCoFca0TTWiihqdvjfozyXVnw5Y5+dH+PrSx/16FLWrevSFjxKiqB2oeWB9NvObrZ83zLYIFwAc1xNqm37/xJxzh/C1j1S+pCZdJ4ZhGIZhGIZhGIZhGIZhmEwcg1D/giYQXFLefwIAAP///cxfQA==") openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) 18.809619943s ago: executing program 2 (id=1486): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 16.289329072s ago: executing program 2 (id=1493): r0 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210802006e04000081000010000009007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 12.151990888s ago: executing program 3 (id=1504): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 11.835665133s ago: executing program 1 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x20148c6, 0x0, 0x84, 0x0, &(0x7f0000000000)) 11.089223754s ago: executing program 3 (id=1510): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) close_range(r0, r1, 0x0) 8.607933064s ago: executing program 3 (id=1523): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) sync() getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, &(0x7f00000000c0)) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000004d00), 0x0, 0x45833af92e4b39ff, 0x0) syz_clone(0x100000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0x3f, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x13, 0x0, 0x0) 8.446450786s ago: executing program 0 (id=1514): r0 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 8.446281187s ago: executing program 1 (id=1515): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) semctl$GETPID(0x0, 0x1, 0xb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000040)=""/61) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) 8.273953459s ago: executing program 2 (id=1516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.9144005s ago: executing program 2 (id=1517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b", 0xa8) 6.896976611s ago: executing program 4 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x0, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0xfffffff8, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd3, 0x9}}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r4 = dup2(r3, r3) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 6.272127421s ago: executing program 4 (id=1519): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 6.060359624s ago: executing program 4 (id=1520): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$eJzs3E1rE0EYwPGnadOXlDY5iKAgPuhFL0sbP0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq5ygevQnWL9CLN+/ipQiClx6kK90Xsy3Bvth20+b/g7CTnXl2Zje74dmFnY0H755Xy65VNk1JjaqkRFZkUyS3XQoNhMuUXx6WuBW5Pv7r66V7Dx/dLhSLM3Oqs4X5G3lVnbz86eXr91c+N8fvf5j8OCLruccbP/Pf1s+vX9jYmo+2Xm+q0YV6vWkWHFsXK27VUr3r2Ma1tVJz7caO+rJTX1pqq6ktTmSWGrbrqqm1tWq3tVnXZqOt5qmp1NSyLJ3ISL8ZPHBEaXVuzhSOZTBIwli3lY1GwQx2rSytnsSgAABAb0kq/39WcbXiam2v/D8lR5P/j57I0Txt/Px/q2vSiLMhvX0DUDCZ8PrdifwfAAAAAAAAAAAAAAAAAAAAAIDTYNPzsp7nZaNl9BkJ35mJvic9ThyPQ/z+AwkOF0cs9uLeqIjztlVqlYJlUF8oS0UcsWUqLfLbPx9CQXn2VnFmSn05WXOWw3j/JcGRKD6S6x4/HcRrLH65VUpLJt5/XrJyrnt8fld8WkRapWG5djUWb0lWvjyRujiy6J/Xnfg306o37xR39T/mtwMAAAAA4Cyw9K/czvvfYDZJy9Jo2pBd9cHKzvMBye7xfEBlbVg68UNycSi5/QYAAAAAoJ+47VdV4zh2g8LBCv146KxwFuV/NvY8b3m70f93mhKRhPb0h4j0wAGPFdJHccF+fxFsZD+Nk/pHAgAAAHBcOkl/0iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/7XfysKj9YeYei3U3mMxeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3hTwAAAP//Q1YX+Q==") read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$session_to_parent(0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r2, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 4.116171025s ago: executing program 4 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e0000002"], 0xb8}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.113522055s ago: executing program 1 (id=1522): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x524, &(0x7f0000000e00)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x444c, &(0x7f000000cd00)="$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") r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f000001fb40)=ANY=[@ANYBLOB="00e0ffffff1f000009"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) io_uring_setup(0x1778, &(0x7f0000000140)={0x0, 0x0, 0x2885, 0x1}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 3.461878825s ago: executing program 3 (id=1524): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3.461591995s ago: executing program 4 (id=1525): unshare(0x20400) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 3.16377013s ago: executing program 1 (id=1526): open(0x0, 0x14927e, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) 3.1634148s ago: executing program 4 (id=1527): r0 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210802006e04000081000010000009007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.769000036s ago: executing program 0 (id=1528): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_matches\x00') pread64(r0, &(0x7f0000002240)=""/4096, 0x1000, 0xff) 2.251716435s ago: executing program 2 (id=1529): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x201088a, &(0x7f0000000840)=ANY=[@ANYBLOB='nodiscard,iocharset=cp861,nodiscard,iocharset=macroman,nointegrity,errors=remount-ro,nointegrity\x00iocharset=ascii,nodiscard,umask=0xfffffffffffffffd,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="0087997eddfe262c258cc464583d629220511a3d1bc3d46d648abc90f6538788ab3497e3d01477fd8c4381b6ff4efe7bc916b9e232fd94a49a240af6c7f54c252f278f84e6b52a000a9f1acd00422a562996f100c25190549b261c197b5606bd50f05e38f22cb30aae0622bf93cbaa876455c9ba217409a9b21b7dac85bdfffc4e6bc72559fc9441c8b97483caf57066464dfc8d302d74a627a84ed3726fafd68f71d70baa59c7a4c50ee33db58e8785d4da74f21bfe423b996d78a3adf872da8b387d926f6d53195e1260c34cca00"/219, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda507871eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca263b"], 0x7, 0x6161, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mkdir(0x0, 0x92) 2.221753845s ago: executing program 3 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 2.196362455s ago: executing program 0 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x0, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0xfffffff8, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd3, 0x9}}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r4 = dup2(r3, r3) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 1.628409004s ago: executing program 0 (id=1532): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x1) 1.479029487s ago: executing program 3 (id=1533): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) lseek(r0, 0x3, 0x3) 1.388036948s ago: executing program 0 (id=1534): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x92) chdir(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x2, 0x0, 0x3ff) 1.30710988s ago: executing program 0 (id=1535): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x4571, 0x4) recvmmsg(r4, &(0x7f0000003540), 0x0, 0x400121e0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.216325171s ago: executing program 1 (id=1536): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x229, &(0x7f0000000000)="$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") r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) 0s ago: executing program 1 (id=1537): openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r1 = userfaultfd(0x1) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="17", 0x1, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffc000, 0x1) kernel console output (not intermixed with test programs): 170.536481][ T5395] loop4: detected capacity change from 0 to 256 [ 170.543571][ T5382] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.313: couldn't read orphan inode 15 (err -117) [ 170.557153][ T5382] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 170.600655][ T5389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c018, mo2=0002] [ 170.612670][ T5389] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,sysvgroups,debug,debug_want_extra_isize=0x0000000000000080,grpid,nogrpid,noauto_da_alloc,usrjquota=,,errors=continue. Quota mode: none. [ 170.664663][ T5395] FAT-fs (loop4): Directory bread(block 64) failed [ 170.681804][ T5395] FAT-fs (loop4): Directory bread(block 65) failed [ 170.688894][ T5395] FAT-fs (loop4): Directory bread(block 66) failed [ 170.735452][ T5395] FAT-fs (loop4): Directory bread(block 67) failed [ 170.781220][ T5395] FAT-fs (loop4): Directory bread(block 68) failed [ 170.828673][ T5395] FAT-fs (loop4): Directory bread(block 69) failed [ 170.861100][ T5395] FAT-fs (loop4): Directory bread(block 70) failed [ 170.867966][ T5395] FAT-fs (loop4): Directory bread(block 71) failed [ 170.874883][ T5395] FAT-fs (loop4): Directory bread(block 72) failed [ 170.887419][ T5395] FAT-fs (loop4): Directory bread(block 73) failed [ 174.267455][ T5419] loop0: detected capacity change from 0 to 4096 [ 174.424654][ T5425] xt_limit: Overflow, try lower: 2147483649/3300 [ 174.483352][ T5428] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.523517][ T26] audit: type=1800 audit(1743745021.131:7): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 174.942515][ T5425] loop1: detected capacity change from 0 to 256 [ 176.264151][ T5440] loop2: detected capacity change from 0 to 1024 [ 176.824231][ T5425] FAT-fs (loop1): Directory bread(block 64) failed [ 176.861419][ T5425] FAT-fs (loop1): Directory bread(block 65) failed [ 176.891944][ T5425] FAT-fs (loop1): Directory bread(block 66) failed [ 176.932129][ T5425] FAT-fs (loop1): Directory bread(block 67) failed [ 176.949495][ T5440] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c018, mo2=0002] [ 176.951675][ T5425] FAT-fs (loop1): Directory bread(block 68) failed [ 176.965114][ T5425] FAT-fs (loop1): Directory bread(block 69) failed [ 176.972226][ T5425] FAT-fs (loop1): Directory bread(block 70) failed [ 176.979946][ T5425] FAT-fs (loop1): Directory bread(block 71) failed [ 176.987523][ T5425] FAT-fs (loop1): Directory bread(block 72) failed [ 176.994629][ T5425] FAT-fs (loop1): Directory bread(block 73) failed [ 177.016446][ T5443] loop0: detected capacity change from 0 to 512 [ 177.020645][ T5440] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,sysvgroups,debug,debug_want_extra_isize=0x0000000000000080,grpid,nogrpid,noauto_da_alloc,usrjquota=,,errors=continue. Quota mode: none. [ 177.137207][ T5443] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.330: casefold flag without casefold feature [ 177.226252][ T5443] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.330: couldn't read orphan inode 15 (err -117) [ 177.303080][ T5443] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 177.751116][ T5450] loop3: detected capacity change from 0 to 4096 [ 178.537972][ T5443] overlayfs: failed to resolve './file0': -2 [ 182.109264][ T5485] loop4: detected capacity change from 0 to 4096 [ 182.260867][ T5490] loop3: detected capacity change from 0 to 1024 [ 182.313406][ T5491] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.348851][ T26] audit: type=1800 audit(1743745028.951:8): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 182.372970][ T5485] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 182.431148][ T5485] Remounting filesystem read-only [ 182.456851][ T5490] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c018, mo2=0002] [ 182.495367][ T5490] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,sysvgroups,debug,debug_want_extra_isize=0x0000000000000080,grpid,nogrpid,noauto_da_alloc,usrjquota=,,errors=continue. Quota mode: none. [ 182.547344][ T4180] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 182.715071][ T5498] device bond_slave_1 entered promiscuous mode [ 182.810803][ T5497] device bond_slave_1 left promiscuous mode [ 182.949145][ T5500] xt_limit: Overflow, try lower: 2147483649/3300 [ 182.982968][ T5502] loop4: detected capacity change from 0 to 512 [ 183.005302][ T5503] loop3: detected capacity change from 0 to 256 [ 183.127211][ T5502] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.346: casefold flag without casefold feature [ 183.150866][ T5503] FAT-fs (loop3): Directory bread(block 64) failed [ 183.213400][ T5502] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.346: couldn't read orphan inode 15 (err -117) [ 183.232583][ T5503] FAT-fs (loop3): Directory bread(block 65) failed [ 183.237639][ T5502] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 183.239250][ T5503] FAT-fs (loop3): Directory bread(block 66) failed [ 183.448687][ T5503] FAT-fs (loop3): Directory bread(block 67) failed [ 183.456396][ T5503] FAT-fs (loop3): Directory bread(block 68) failed [ 183.463274][ T5503] FAT-fs (loop3): Directory bread(block 69) failed [ 183.470324][ T5503] FAT-fs (loop3): Directory bread(block 70) failed [ 183.599510][ T5503] FAT-fs (loop3): Directory bread(block 71) failed [ 183.754335][ T5503] FAT-fs (loop3): Directory bread(block 72) failed [ 184.102937][ T5503] FAT-fs (loop3): Directory bread(block 73) failed [ 185.907371][ T5518] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 185.952783][ T5518] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 185.989612][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 186.011797][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 186.519671][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 186.525906][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 186.546957][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 188.671379][ T5537] loop4: detected capacity change from 0 to 4096 [ 188.679623][ T5546] loop0: detected capacity change from 0 to 16 [ 188.789642][ T5546] erofs: (device loop0): mounted with root inode @ nid 36. [ 188.810192][ T5548] loop1: detected capacity change from 0 to 512 [ 189.056335][ T5548] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.358: casefold flag without casefold feature [ 190.016701][ T5548] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.358: couldn't read orphan inode 15 (err -117) [ 190.372279][ T5548] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 191.316708][ T5564] loop3: detected capacity change from 0 to 32768 [ 191.456404][ T5564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.363 (5564) [ 191.886493][ T5564] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 191.895551][ T5564] BTRFS info (device loop3): using free space tree [ 191.903169][ T5564] BTRFS info (device loop3): has skinny extents [ 192.625243][ T5564] BTRFS info (device loop3): enabling ssd optimizations [ 193.590253][ T26] audit: type=1800 audit(1743745040.191:9): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 193.870937][ T5601] device bond_slave_1 entered promiscuous mode [ 195.502559][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.508952][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.444385][ T5614] loop4: detected capacity change from 0 to 256 [ 196.457792][ T5600] device bond_slave_1 left promiscuous mode [ 196.573254][ T5614] FAT-fs (loop4): Directory bread(block 64) failed [ 196.579900][ T5614] FAT-fs (loop4): Directory bread(block 65) failed [ 196.624576][ T5614] FAT-fs (loop4): Directory bread(block 66) failed [ 196.631171][ T5614] FAT-fs (loop4): Directory bread(block 67) failed [ 196.699439][ T5614] FAT-fs (loop4): Directory bread(block 68) failed [ 196.723315][ T5618] xt_limit: Overflow, try lower: 2147483649/3300 [ 196.734450][ T5618] loop1: detected capacity change from 0 to 256 [ 196.758421][ T5614] FAT-fs (loop4): Directory bread(block 69) failed [ 196.765759][ T5614] FAT-fs (loop4): Directory bread(block 70) failed [ 196.772803][ T5614] FAT-fs (loop4): Directory bread(block 71) failed [ 196.779646][ T5614] FAT-fs (loop4): Directory bread(block 72) failed [ 196.786730][ T5614] FAT-fs (loop4): Directory bread(block 73) failed [ 197.336431][ T5618] FAT-fs (loop1): Directory bread(block 64) failed [ 197.482021][ T5618] FAT-fs (loop1): Directory bread(block 65) failed [ 197.532767][ T5618] FAT-fs (loop1): Directory bread(block 66) failed [ 197.567244][ T5618] FAT-fs (loop1): Directory bread(block 67) failed [ 197.609945][ T5618] FAT-fs (loop1): Directory bread(block 68) failed [ 197.667180][ T5618] FAT-fs (loop1): Directory bread(block 69) failed [ 197.675091][ T5618] FAT-fs (loop1): Directory bread(block 70) failed [ 197.686807][ T5618] FAT-fs (loop1): Directory bread(block 71) failed [ 197.693556][ T5618] FAT-fs (loop1): Directory bread(block 72) failed [ 197.700109][ T5618] FAT-fs (loop1): Directory bread(block 73) failed [ 197.777184][ T5627] loop0: detected capacity change from 0 to 4096 [ 198.886119][ T5644] loop4: detected capacity change from 0 to 512 [ 199.040719][ T5644] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.375: casefold flag without casefold feature [ 199.162298][ T5644] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.375: couldn't read orphan inode 15 (err -117) [ 200.782146][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 201.341951][ T5663] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 201.508098][ T5668] device bond_slave_1 entered promiscuous mode [ 201.533739][ T5670] loop1: detected capacity change from 0 to 256 [ 201.796897][ T5667] device bond_slave_1 left promiscuous mode [ 202.503994][ T5670] FAT-fs (loop1): Directory bread(block 64) failed [ 202.522962][ T5670] FAT-fs (loop1): Directory bread(block 65) failed [ 202.550243][ T5670] FAT-fs (loop1): Directory bread(block 66) failed [ 202.611541][ T5670] FAT-fs (loop1): Directory bread(block 67) failed [ 202.662350][ T5670] FAT-fs (loop1): Directory bread(block 68) failed [ 202.671202][ T5670] FAT-fs (loop1): Directory bread(block 69) failed [ 202.686171][ T5670] FAT-fs (loop1): Directory bread(block 70) failed [ 202.696403][ T5670] FAT-fs (loop1): Directory bread(block 71) failed [ 202.711763][ T5670] FAT-fs (loop1): Directory bread(block 72) failed [ 202.722991][ T5670] FAT-fs (loop1): Directory bread(block 73) failed [ 202.773252][ T5683] xt_limit: Overflow, try lower: 2147483649/3300 [ 202.819933][ T5683] loop2: detected capacity change from 0 to 256 [ 203.889333][ T5683] FAT-fs (loop2): Directory bread(block 64) failed [ 203.959674][ T5683] FAT-fs (loop2): Directory bread(block 65) failed [ 204.018122][ T5681] sctp: failed to load transform for md5: -2 [ 204.052099][ T5683] FAT-fs (loop2): Directory bread(block 66) failed [ 204.186473][ T5683] FAT-fs (loop2): Directory bread(block 67) failed [ 204.232111][ T5683] FAT-fs (loop2): Directory bread(block 68) failed [ 204.262369][ T5683] FAT-fs (loop2): Directory bread(block 69) failed [ 204.269024][ T5683] FAT-fs (loop2): Directory bread(block 70) failed [ 204.282509][ T5683] FAT-fs (loop2): Directory bread(block 71) failed [ 204.289184][ T5683] FAT-fs (loop2): Directory bread(block 72) failed [ 204.296025][ T5683] FAT-fs (loop2): Directory bread(block 73) failed [ 204.503537][ T5701] hub 9-0:1.0: USB hub found [ 204.511192][ T5701] hub 9-0:1.0: 1 port detected [ 205.468365][ T5704] loop1: detected capacity change from 0 to 4096 [ 206.473459][ T5716] loop0: detected capacity change from 0 to 512 [ 206.602034][ T4217] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 206.610166][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 206.630602][ T5716] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.397: casefold flag without casefold feature [ 206.671027][ T5716] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.397: couldn't read orphan inode 15 (err -117) [ 206.767814][ T5716] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 206.912168][ T4217] usb 5-1: Using ep0 maxpacket: 16 [ 207.053332][ T1108] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 207.072189][ T4217] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.085459][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 207.736058][ T4217] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.745578][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.759308][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.768642][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.789703][ T1108] usb 4-1: config 0 descriptor?? [ 207.814083][ T5708] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.921794][ T1108] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 207.982091][ T4217] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.991183][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.031985][ T4217] usb 5-1: Product: syz [ 208.036207][ T4217] usb 5-1: Manufacturer: syz [ 208.047210][ T4217] usb 5-1: SerialNumber: syz [ 209.159070][ T7] usb 4-1: USB disconnect, device number 2 [ 209.182299][ T4217] usb 5-1: 0:2 : does not exist [ 209.317156][ T4217] usb 5-1: USB disconnect, device number 3 [ 209.961763][ T5750] hub 9-0:1.0: USB hub found [ 209.967130][ T5750] hub 9-0:1.0: 1 port detected [ 211.360988][ T5758] xt_limit: Overflow, try lower: 2147483649/3300 [ 211.419481][ T5758] loop4: detected capacity change from 0 to 256 [ 211.553125][ T5762] loop0: detected capacity change from 0 to 512 [ 211.655456][ T5758] FAT-fs (loop4): Directory bread(block 64) failed [ 211.662969][ T5758] FAT-fs (loop4): Directory bread(block 65) failed [ 211.669996][ T5758] FAT-fs (loop4): Directory bread(block 66) failed [ 211.682217][ T5758] FAT-fs (loop4): Directory bread(block 67) failed [ 211.688865][ T5758] FAT-fs (loop4): Directory bread(block 68) failed [ 211.703230][ T5762] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.410: casefold flag without casefold feature [ 211.762416][ T5758] FAT-fs (loop4): Directory bread(block 69) failed [ 211.769568][ T5762] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.410: couldn't read orphan inode 15 (err -117) [ 211.829848][ T5758] FAT-fs (loop4): Directory bread(block 70) failed [ 211.861556][ T5762] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 211.883150][ T5758] FAT-fs (loop4): Directory bread(block 71) failed [ 211.894158][ T5764] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 211.934685][ T5758] FAT-fs (loop4): Directory bread(block 72) failed [ 211.948121][ T5764] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 211.964804][ T5758] FAT-fs (loop4): Directory bread(block 73) failed [ 214.752696][ T5789] loop0: detected capacity change from 0 to 32768 [ 214.881584][ T5789] XFS (loop0): Mounting V5 Filesystem [ 214.952934][ T5789] XFS (loop0): Ending clean mount [ 215.044566][ T4178] XFS (loop0): Unmounting Filesystem [ 215.769820][ T5812] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 216.118085][ T5812] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 216.444215][ T5820] loop3: detected capacity change from 0 to 512 [ 216.730816][ T5820] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.425: casefold flag without casefold feature [ 216.799794][ T5820] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.425: couldn't read orphan inode 15 (err -117) [ 216.814800][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 216.846714][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 216.940074][ T5832] hub 9-0:1.0: USB hub found [ 216.945997][ T5832] hub 9-0:1.0: 1 port detected [ 217.656435][ T5822] device vlan2 entered promiscuous mode [ 217.807030][ T5822] device bond0 entered promiscuous mode [ 217.813576][ T5822] device bond_slave_0 entered promiscuous mode [ 217.819908][ T5822] device bond_slave_1 entered promiscuous mode [ 217.853320][ T5822] device bond0 left promiscuous mode [ 217.882266][ T5822] device bond_slave_0 left promiscuous mode [ 217.985850][ T5822] device bond_slave_1 left promiscuous mode [ 221.943978][ T5860] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 223.796115][ T5879] loop1: detected capacity change from 0 to 32768 [ 223.894381][ T5879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.441 (5879) [ 224.115220][ T5879] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 224.124242][ T5879] BTRFS info (device loop1): using free space tree [ 224.130783][ T5879] BTRFS info (device loop1): has skinny extents [ 224.139898][ T5884] loop4: detected capacity change from 0 to 512 [ 224.373788][ T5888] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.693894][ T5884] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.443: casefold flag without casefold feature [ 224.915082][ T5884] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.443: couldn't read orphan inode 15 (err -117) [ 224.988291][ T5884] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 225.141802][ T5879] BTRFS info (device loop1): enabling ssd optimizations [ 227.455566][ T5925] loop4: detected capacity change from 0 to 256 [ 227.538371][ T5927] hub 9-0:1.0: USB hub found [ 227.548551][ T5927] hub 9-0:1.0: 1 port detected [ 227.599052][ T5925] FAT-fs (loop4): Directory bread(block 64) failed [ 227.658045][ T5925] FAT-fs (loop4): Directory bread(block 65) failed [ 227.685420][ T26] audit: type=1800 audit(1743745074.291:10): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.441" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 227.685544][ T5925] FAT-fs (loop4): Directory bread(block 66) failed [ 227.797681][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 227.802671][ T5925] FAT-fs (loop4): Directory bread(block 67) failed [ 227.822469][ T5925] FAT-fs (loop4): Directory bread(block 68) failed [ 227.829198][ T5925] FAT-fs (loop4): Directory bread(block 69) failed [ 227.843471][ T5925] FAT-fs (loop4): Directory bread(block 70) failed [ 227.860472][ T5925] FAT-fs (loop4): Directory bread(block 71) failed [ 227.886313][ T5925] FAT-fs (loop4): Directory bread(block 72) failed [ 227.903279][ T5925] FAT-fs (loop4): Directory bread(block 73) failed [ 229.104113][ T5949] loop0: detected capacity change from 0 to 512 [ 229.391003][ T5949] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.457: casefold flag without casefold feature [ 229.543507][ T5949] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.457: couldn't read orphan inode 15 (err -117) [ 229.785779][ T5949] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 231.441175][ T5973] hub 9-0:1.0: USB hub found [ 231.502266][ T5973] hub 9-0:1.0: 1 port detected [ 231.736123][ T5979] loop2: detected capacity change from 0 to 256 [ 232.469747][ T5979] FAT-fs (loop2): Directory bread(block 64) failed [ 232.537478][ T5979] FAT-fs (loop2): Directory bread(block 65) failed [ 232.578194][ T5979] FAT-fs (loop2): Directory bread(block 66) failed [ 232.618652][ T5979] FAT-fs (loop2): Directory bread(block 67) failed [ 232.669458][ T5979] FAT-fs (loop2): Directory bread(block 68) failed [ 232.746222][ T5979] FAT-fs (loop2): Directory bread(block 69) failed [ 232.821587][ T5979] FAT-fs (loop2): Directory bread(block 70) failed [ 232.912238][ T5979] FAT-fs (loop2): Directory bread(block 71) failed [ 232.919240][ T5995] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 232.919858][ T5979] FAT-fs (loop2): Directory bread(block 72) failed [ 232.963337][ T5979] FAT-fs (loop2): Directory bread(block 73) failed [ 233.910562][ T6006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 234.868180][ T6010] loop0: detected capacity change from 0 to 512 [ 235.943203][ T6010] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.474: casefold flag without casefold feature [ 235.943907][ T6010] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.474: couldn't read orphan inode 15 (err -117) [ 235.944356][ T6010] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 237.473165][ T6028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.534335][ T6030] hub 9-0:1.0: USB hub found [ 237.564154][ T6030] hub 9-0:1.0: 1 port detected [ 237.708697][ T6038] loop2: detected capacity change from 0 to 256 [ 238.399808][ T6038] FAT-fs (loop2): Directory bread(block 64) failed [ 238.954152][ T6038] FAT-fs (loop2): Directory bread(block 65) failed [ 238.984468][ T6038] FAT-fs (loop2): Directory bread(block 66) failed [ 239.049550][ T6038] FAT-fs (loop2): Directory bread(block 67) failed [ 239.092877][ T6038] FAT-fs (loop2): Directory bread(block 68) failed [ 239.191716][ T6038] FAT-fs (loop2): Directory bread(block 69) failed [ 239.227189][ T6038] FAT-fs (loop2): Directory bread(block 70) failed [ 239.277745][ T6038] FAT-fs (loop2): Directory bread(block 71) failed [ 239.332466][ T6038] FAT-fs (loop2): Directory bread(block 72) failed [ 239.365399][ T6038] FAT-fs (loop2): Directory bread(block 73) failed [ 240.582775][ T6062] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.291738][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.491'. [ 241.398593][ T6068] device vlan2 entered promiscuous mode [ 241.421986][ T6068] device bond0 entered promiscuous mode [ 241.473194][ T6068] device bond_slave_0 entered promiscuous mode [ 241.479599][ T6068] device bond_slave_1 entered promiscuous mode [ 243.616443][ T6094] loop1: detected capacity change from 0 to 256 [ 245.045240][ T6094] FAT-fs (loop1): Directory bread(block 64) failed [ 245.231151][ T6094] FAT-fs (loop1): Directory bread(block 65) failed [ 245.262009][ T6094] FAT-fs (loop1): Directory bread(block 66) failed [ 245.310820][ T6094] FAT-fs (loop1): Directory bread(block 67) failed [ 245.515358][ T6094] FAT-fs (loop1): Directory bread(block 68) failed [ 245.651377][ T6094] FAT-fs (loop1): Directory bread(block 69) failed [ 245.768556][ T6094] FAT-fs (loop1): Directory bread(block 70) failed [ 245.816101][ T6094] FAT-fs (loop1): Directory bread(block 71) failed [ 245.851703][ T6094] FAT-fs (loop1): Directory bread(block 72) failed [ 245.883974][ T6094] FAT-fs (loop1): Directory bread(block 73) failed [ 251.666111][ T6153] loop2: detected capacity change from 0 to 256 [ 251.729637][ T6157] loop3: detected capacity change from 0 to 1024 [ 252.649772][ T6153] FAT-fs (loop2): Directory bread(block 64) failed [ 252.710475][ T6153] FAT-fs (loop2): Directory bread(block 65) failed [ 252.772974][ T6153] FAT-fs (loop2): Directory bread(block 66) failed [ 252.867643][ T6153] FAT-fs (loop2): Directory bread(block 67) failed [ 252.902532][ T6153] FAT-fs (loop2): Directory bread(block 68) failed [ 253.072425][ T6153] FAT-fs (loop2): Directory bread(block 69) failed [ 253.080116][ T6153] FAT-fs (loop2): Directory bread(block 70) failed [ 253.087637][ T6153] FAT-fs (loop2): Directory bread(block 71) failed [ 253.097775][ T6153] FAT-fs (loop2): Directory bread(block 72) failed [ 253.105101][ T6153] FAT-fs (loop2): Directory bread(block 73) failed [ 253.463216][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 253.539644][ T6169] loop4: detected capacity change from 0 to 512 [ 253.558332][ T475] hfsplus: b-tree write err: -5, ino 4 [ 253.614431][ T6169] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.521: casefold flag without casefold feature [ 253.647598][ T6169] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.521: couldn't read orphan inode 15 (err -117) [ 253.778812][ T6169] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 254.472629][ T6181] overlayfs: missing 'lowerdir' [ 255.795295][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.803642][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.221303][ T6201] loop1: detected capacity change from 0 to 256 [ 258.280323][ T6201] FAT-fs (loop1): Directory bread(block 64) failed [ 258.702037][ T6201] FAT-fs (loop1): Directory bread(block 65) failed [ 258.708770][ T6201] FAT-fs (loop1): Directory bread(block 66) failed [ 258.767662][ T6217] loop4: detected capacity change from 0 to 256 [ 258.779527][ T6214] loop0: detected capacity change from 0 to 736 [ 258.971510][ T6201] FAT-fs (loop1): Directory bread(block 67) failed [ 258.978291][ T6201] FAT-fs (loop1): Directory bread(block 68) failed [ 258.985152][ T6201] FAT-fs (loop1): Directory bread(block 69) failed [ 258.992079][ T6201] FAT-fs (loop1): Directory bread(block 70) failed [ 259.001915][ T6201] FAT-fs (loop1): Directory bread(block 71) failed [ 259.008828][ T6201] FAT-fs (loop1): Directory bread(block 72) failed [ 259.016935][ T6201] FAT-fs (loop1): Directory bread(block 73) failed [ 260.140758][ T6227] loop3: detected capacity change from 0 to 512 [ 262.055143][ T6227] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.538: casefold flag without casefold feature [ 262.097245][ T6227] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.538: couldn't read orphan inode 15 (err -117) [ 262.179553][ T6227] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 262.923310][ T5634] Bluetooth: hci3: command 0x2016 tx timeout [ 263.033473][ T6251] overlayfs: missing 'lowerdir' [ 265.185410][ T6268] hub 9-0:1.0: USB hub found [ 265.192174][ T6268] hub 9-0:1.0: 1 port detected [ 266.105651][ T6275] loop2: detected capacity change from 0 to 256 [ 266.502870][ T6275] FAT-fs (loop2): Directory bread(block 64) failed [ 266.509488][ T6275] FAT-fs (loop2): Directory bread(block 65) failed [ 266.550049][ T6275] FAT-fs (loop2): Directory bread(block 66) failed [ 266.558258][ T6275] FAT-fs (loop2): Directory bread(block 67) failed [ 266.579196][ T6275] FAT-fs (loop2): Directory bread(block 68) failed [ 266.636975][ T6275] FAT-fs (loop2): Directory bread(block 69) failed [ 266.675061][ T6275] FAT-fs (loop2): Directory bread(block 70) failed [ 266.722722][ T6275] FAT-fs (loop2): Directory bread(block 71) failed [ 266.752173][ T6275] FAT-fs (loop2): Directory bread(block 72) failed [ 266.758763][ T6275] FAT-fs (loop2): Directory bread(block 73) failed [ 266.928051][ T6278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.096890][ T6294] loop1: detected capacity change from 0 to 512 [ 268.351224][ T6294] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.557: casefold flag without casefold feature [ 268.402203][ T6294] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.557: couldn't read orphan inode 15 (err -117) [ 268.482649][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 268.839723][ T6304] overlayfs: missing 'lowerdir' [ 269.303813][ T6287] loop3: detected capacity change from 0 to 32768 [ 269.374244][ T6287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.554 (6287) [ 269.455786][ T6287] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 269.472243][ T6287] BTRFS info (device loop3): metadata ratio 4 [ 269.478808][ T6287] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 269.517759][ T6287] BTRFS info (device loop3): force lzo compression, level 0 [ 269.522359][ T4210] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 269.552859][ T6287] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 269.608759][ T6287] BTRFS info (device loop3): trying to use backup root at mount time [ 269.650608][ T6287] BTRFS info (device loop3): doing ref verification [ 269.666050][ T6287] BTRFS info (device loop3): enabling ssd optimizations [ 269.688334][ T6287] BTRFS info (device loop3): using spread ssd allocation scheme [ 269.732182][ T6287] BTRFS info (device loop3): using free space tree [ 269.768767][ T6287] BTRFS info (device loop3): has skinny extents [ 270.010345][ T9] BTRFS warning (device loop3): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 270.138478][ T6287] BTRFS warning (device loop3): couldn't read tree root [ 270.157349][ T4869] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 270.278513][ T6287] BTRFS warning (device loop3): couldn't read tree root [ 270.296808][ T6287] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 270.352427][ T6287] BTRFS warning (device loop3): couldn't read tree root [ 270.497103][ T6336] hub 9-0:1.0: USB hub found [ 270.502649][ T6336] hub 9-0:1.0: 1 port detected [ 270.820786][ T6338] loop0: detected capacity change from 0 to 256 [ 271.068482][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.079523][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.090052][ T4210] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 271.099182][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.125806][ T4210] usb 5-1: config 0 descriptor?? [ 271.251340][ T6338] FAT-fs (loop0): Directory bread(block 64) failed [ 271.280572][ T6338] FAT-fs (loop0): Directory bread(block 65) failed [ 271.292578][ T6338] FAT-fs (loop0): Directory bread(block 66) failed [ 271.299351][ T6338] FAT-fs (loop0): Directory bread(block 67) failed [ 271.326676][ T6287] BTRFS error (device loop3): open_ctree failed: -22 [ 271.343574][ T6338] FAT-fs (loop0): Directory bread(block 68) failed [ 271.350437][ T6338] FAT-fs (loop0): Directory bread(block 69) failed [ 271.467522][ T6338] FAT-fs (loop0): Directory bread(block 70) failed [ 271.484140][ T6338] FAT-fs (loop0): Directory bread(block 71) failed [ 271.491422][ T6338] FAT-fs (loop0): Directory bread(block 72) failed [ 271.528375][ T6338] FAT-fs (loop0): Directory bread(block 73) failed [ 271.843079][ T4210] hid-led: probe of 0003:0FC5:B080.0001 failed with error -71 [ 271.913458][ T4210] usb 5-1: USB disconnect, device number 4 [ 273.072066][ T4210] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 273.144650][ T6360] loop2: detected capacity change from 0 to 512 [ 273.299228][ T6360] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.571: casefold flag without casefold feature [ 273.342885][ T6360] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.571: couldn't read orphan inode 15 (err -117) [ 273.367756][ T6360] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 273.572117][ T4210] usb 5-1: config 0 has an invalid interface number: 57 but max is 0 [ 273.580356][ T4210] usb 5-1: config 0 has no interface number 0 [ 273.591565][ T4210] usb 5-1: config 0 interface 57 altsetting 253 endpoint 0x7 is Bulk; changing to Interrupt [ 273.601867][ T4210] usb 5-1: config 0 interface 57 has no altsetting 0 [ 273.608602][ T4210] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0169, bcdDevice=69.19 [ 273.618084][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.628713][ T4210] usb 5-1: config 0 descriptor?? [ 273.653676][ T6358] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.693492][ T6371] overlayfs: missing 'lowerdir' [ 274.312183][ T4210] usb 5-1: string descriptor 0 read error: -71 [ 274.333133][ T4210] ftdi_sio 5-1:0.57: FTDI USB Serial Device converter detected [ 274.483139][ T4210] usb 5-1: Detected FT-X [ 274.508142][ T4210] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 274.532136][ T4210] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 274.574907][ T4210] ftdi_sio 5-1:0.57: GPIO initialisation failed: -71 [ 274.637721][ T4210] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.347923][ T4210] usb 5-1: USB disconnect, device number 5 [ 275.524737][ T4210] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.555398][ T6387] loop1: detected capacity change from 0 to 256 [ 275.696420][ T4210] ftdi_sio 5-1:0.57: device disconnected [ 275.748286][ T6387] FAT-fs (loop1): Directory bread(block 64) failed [ 275.833440][ T6387] FAT-fs (loop1): Directory bread(block 65) failed [ 275.880335][ T6387] FAT-fs (loop1): Directory bread(block 66) failed [ 275.926224][ T6387] FAT-fs (loop1): Directory bread(block 67) failed [ 275.956136][ T6387] FAT-fs (loop1): Directory bread(block 68) failed [ 276.007686][ T6387] FAT-fs (loop1): Directory bread(block 69) failed [ 276.110368][ T6387] FAT-fs (loop1): Directory bread(block 70) failed [ 276.420034][ T6387] FAT-fs (loop1): Directory bread(block 71) failed [ 276.487005][ T6387] FAT-fs (loop1): Directory bread(block 72) failed [ 276.522024][ T6387] FAT-fs (loop1): Directory bread(block 73) failed [ 277.360919][ T6405] loop4: detected capacity change from 0 to 512 [ 277.668513][ T6405] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.586: casefold flag without casefold feature [ 277.735874][ T6405] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.586: couldn't read orphan inode 15 (err -117) [ 277.801511][ T6405] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 278.052439][ T4242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 278.109626][ T6421] loop2: detected capacity change from 0 to 4096 [ 278.215137][ T6421] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 278.294088][ T6426] overlayfs: missing 'lowerdir' [ 278.912038][ T4242] usb 2-1: Using ep0 maxpacket: 8 [ 281.175664][ T4242] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 281.183494][ T4242] usb 2-1: can't read configurations, error -71 [ 281.386441][ T6450] hub 9-0:1.0: USB hub found [ 281.400902][ T6450] hub 9-0:1.0: 1 port detected [ 282.154033][ T6451] loop1: detected capacity change from 0 to 8192 [ 282.919110][ T6467] loop3: detected capacity change from 0 to 512 [ 283.129477][ T6467] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.602: casefold flag without casefold feature [ 283.173738][ T6467] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.602: couldn't read orphan inode 15 (err -117) [ 283.242805][ T6467] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 283.639624][ T6474] overlayfs: missing 'lowerdir' [ 285.518465][ T6483] 9pnet: Insufficient options for proto=fd [ 288.007111][ T6503] hub 9-0:1.0: USB hub found [ 288.012458][ T6503] hub 9-0:1.0: 1 port detected [ 289.087327][ T6514] loop4: detected capacity change from 0 to 512 [ 289.731604][ T6514] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.616: casefold flag without casefold feature [ 289.905416][ T6514] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.616: couldn't read orphan inode 15 (err -117) [ 290.006392][ T6514] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 290.525240][ T6526] overlayfs: missing 'lowerdir' [ 293.753593][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 293.877734][ T6552] device vlan2 entered promiscuous mode [ 293.928490][ T6552] device bond0 entered promiscuous mode [ 294.031912][ T6552] device bond_slave_0 entered promiscuous mode [ 294.053440][ T6552] device bond_slave_1 entered promiscuous mode [ 295.236736][ T6567] loop2: detected capacity change from 0 to 512 [ 295.551229][ T6567] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.630: casefold flag without casefold feature [ 295.647168][ T6567] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.630: couldn't read orphan inode 15 (err -117) [ 295.722500][ T6567] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 296.083304][ T6581] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.092245][ T6581] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 296.100719][ T6581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.412457][ T6595] syz.3.636[6595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.412588][ T6595] syz.3.636[6595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.625700][ T6594] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 298.650162][ T6594] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 299.208475][ T6608] loop0: detected capacity change from 0 to 1024 [ 300.414988][ T6608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.519792][ T6621] loop4: detected capacity change from 0 to 512 [ 300.554187][ T6608] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.641: Allocating blocks 497-513 which overlap fs metadata [ 300.816922][ T6607] EXT4-fs (loop0): pa ffff8880734eed20: logic 16, phys. 145, len 23 [ 300.825705][ T6607] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 300.895396][ T6621] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.643: casefold flag without casefold feature [ 301.066450][ T6621] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.643: couldn't read orphan inode 15 (err -117) [ 301.163785][ T6621] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 301.578214][ T6631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.646'. [ 301.679637][ T6633] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.688591][ T6633] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 301.697162][ T6633] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.169201][ T6636] syz.0.649[6636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.169311][ T6636] syz.0.649[6636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.351170][ T6637] loop3: detected capacity change from 0 to 4096 [ 302.594456][ T6637] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 304.856366][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 304.886007][ T6668] device vlan2 entered promiscuous mode [ 304.891599][ T6668] device bond0 entered promiscuous mode [ 304.994269][ T6668] device bond_slave_0 entered promiscuous mode [ 305.000682][ T6668] device bond_slave_1 entered promiscuous mode [ 305.180864][ T6673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.659'. [ 305.363944][ T6677] loop4: detected capacity change from 0 to 512 [ 305.368880][ T6676] syz.3.661[6676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.372008][ T6676] syz.3.661[6676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.471540][ T6677] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.660: casefold flag without casefold feature [ 305.506761][ T6677] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.660: couldn't read orphan inode 15 (err -117) [ 305.531480][ T6677] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 305.948753][ T6684] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.957777][ T6684] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 305.966334][ T6684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 306.768363][ T6688] loop4: detected capacity change from 0 to 1024 [ 306.877438][ T6688] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.945944][ T6688] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.664: Allocating blocks 497-513 which overlap fs metadata [ 306.979894][ T6688] EXT4-fs (loop4): pa ffff888073470620: logic 16, phys. 145, len 23 [ 306.988438][ T6688] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 306.996862][ T6694] loop0: detected capacity change from 0 to 4096 [ 307.141062][ T6694] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 308.358682][ T6710] netlink: 908 bytes leftover after parsing attributes in process `syz.4.669'. [ 309.064747][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 309.126748][ T6713] device vlan2 entered promiscuous mode [ 309.154474][ T6713] device bond0 entered promiscuous mode [ 309.182180][ T6713] device bond_slave_0 entered promiscuous mode [ 309.209358][ T6713] device bond_slave_1 entered promiscuous mode [ 309.487807][ T6717] syz.4.672[6717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.487914][ T6717] syz.4.672[6717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.567441][ T6721] loop2: detected capacity change from 0 to 512 [ 309.823959][ T6721] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.674: casefold flag without casefold feature [ 309.837122][ T6721] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.674: couldn't read orphan inode 15 (err -117) [ 309.849426][ T6721] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 313.374714][ T6752] loop3: detected capacity change from 0 to 4096 [ 313.532277][ T6752] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 313.630589][ T6756] loop0: detected capacity change from 0 to 1024 [ 313.776378][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 313.868501][ T6756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.910633][ T6763] syz.2.686[6763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.910735][ T6763] syz.2.686[6763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.298312][ T6769] netlink: 'syz.4.688': attribute type 72 has an invalid length. [ 314.478043][ T6769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.688'. [ 315.216662][ T6775] loop3: detected capacity change from 0 to 512 [ 315.353144][ T6775] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.690: casefold flag without casefold feature [ 315.823063][ T6775] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.690: couldn't read orphan inode 15 (err -117) [ 316.016280][ T6775] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 317.032455][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.038789][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.247077][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 320.401640][ T6815] syz.2.699[6815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.401742][ T6815] syz.2.699[6815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.601063][ T6821] netlink: 'syz.1.701': attribute type 72 has an invalid length. [ 320.672291][ T6821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.701'. [ 321.756820][ T6829] loop1: detected capacity change from 0 to 512 [ 321.998226][ T6824] ODEBUG: Out of memory. ODEBUG disabled [ 323.380148][ T6824] syz.2.702 (6824): drop_caches: 2 [ 323.539904][ T6829] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.705: casefold flag without casefold feature [ 323.612274][ T6829] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.705: couldn't read orphan inode 15 (err -117) [ 323.665520][ T6829] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 323.763532][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 324.581400][ T6859] syz.0.713[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.581503][ T6859] syz.0.713[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.875870][ T6884] netlink: 76 bytes leftover after parsing attributes in process `syz.4.720'. [ 328.024667][ T6886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.722'. [ 328.347013][ T6892] syz.0.725[6892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.347117][ T6892] syz.0.725[6892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.405104][ T6897] loop2: detected capacity change from 0 to 512 [ 328.731381][ T6900] hub 9-0:1.0: USB hub found [ 328.737841][ T6900] hub 9-0:1.0: 1 port detected [ 329.407548][ T6897] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.726: casefold flag without casefold feature [ 329.457140][ T6897] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.726: couldn't read orphan inode 15 (err -117) [ 329.612184][ T6897] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 330.998493][ T6897] overlayfs: missing 'workdir' [ 331.760035][ T6920] loop0: detected capacity change from 0 to 4096 [ 331.991410][ T6920] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 332.475795][ T6933] netlink: 68 bytes leftover after parsing attributes in process `syz.4.735'. [ 333.630542][ T6948] loop4: detected capacity change from 0 to 512 [ 333.670185][ T6942] loop1: detected capacity change from 0 to 4096 [ 333.807455][ T6950] hub 9-0:1.0: USB hub found [ 333.813016][ T6950] hub 9-0:1.0: 1 port detected [ 333.979530][ T6942] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 334.462218][ T6948] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.741: casefold flag without casefold feature [ 334.603463][ T6948] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.741: couldn't read orphan inode 15 (err -117) [ 334.908602][ T6948] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 339.125226][ T6979] loop2: detected capacity change from 0 to 256 [ 339.402623][ T6979] FAT-fs (loop2): Directory bread(block 64) failed [ 339.518693][ T6979] FAT-fs (loop2): Directory bread(block 65) failed [ 339.548766][ T6979] FAT-fs (loop2): Directory bread(block 66) failed [ 339.601850][ T6979] FAT-fs (loop2): Directory bread(block 67) failed [ 339.691896][ T6979] FAT-fs (loop2): Directory bread(block 68) failed [ 339.698485][ T6979] FAT-fs (loop2): Directory bread(block 69) failed [ 339.821332][ T6979] FAT-fs (loop2): Directory bread(block 70) failed [ 339.909911][ T6979] FAT-fs (loop2): Directory bread(block 71) failed [ 339.961524][ T6985] netlink: 68 bytes leftover after parsing attributes in process `syz.3.751'. [ 339.968808][ T6979] FAT-fs (loop2): Directory bread(block 72) failed [ 340.013727][ T6977] loop0: detected capacity change from 0 to 32768 [ 340.015486][ T6979] FAT-fs (loop2): Directory bread(block 73) failed [ 340.077183][ T6977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.748 (6977) [ 340.177467][ T6977] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 340.186449][ T6977] BTRFS info (device loop0): using free space tree [ 340.238148][ T6977] BTRFS info (device loop0): has skinny extents [ 340.628043][ T6977] BTRFS info (device loop0): enabling ssd optimizations [ 342.002334][ T4531] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 342.090550][ T7024] loop2: detected capacity change from 0 to 512 [ 342.594748][ T7024] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.756: casefold flag without casefold feature [ 342.951144][ T7024] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.756: couldn't read orphan inode 15 (err -117) [ 343.087251][ T7024] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 343.474985][ T7043] overlayfs: missing 'workdir' [ 344.178771][ T7044] loop4: detected capacity change from 0 to 4096 [ 344.219222][ T7049] netlink: 68 bytes leftover after parsing attributes in process `syz.2.763'. [ 344.287562][ T7044] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 344.387718][ T7053] loop2: detected capacity change from 0 to 512 [ 344.474902][ T7051] loop0: detected capacity change from 0 to 4096 [ 344.658346][ T7051] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 344.676466][ T7053] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 344.792061][ T7053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 345.073499][ T7053] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 345.141592][ T7053] EXT4-fs (loop2): 1 truncate cleaned up [ 345.171631][ T7053] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 350.013783][ T7083] loop2: detected capacity change from 0 to 512 [ 350.210439][ T7090] netlink: 68 bytes leftover after parsing attributes in process `syz.4.774'. [ 350.262132][ T7083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 350.307648][ T7083] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 351.726309][ T7096] loop4: detected capacity change from 0 to 4096 [ 351.758376][ T7102] loop0: detected capacity change from 0 to 4096 [ 351.866121][ T7096] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 351.907887][ T7102] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 356.500241][ T7135] netlink: 68 bytes leftover after parsing attributes in process `syz.0.785'. [ 360.742261][ T7158] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 361.571610][ T7161] loop0: detected capacity change from 0 to 4096 [ 361.650649][ T7161] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 364.047972][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 367.556526][ T7212] loop1: detected capacity change from 0 to 256 [ 367.765318][ T7212] exfat: Unknown parameter '/dev/video36' [ 367.942851][ T7208] loop0: detected capacity change from 0 to 4096 [ 368.202362][ T7208] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 369.248267][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'. [ 369.976643][ T7230] loop1: detected capacity change from 0 to 4096 [ 370.099386][ T7230] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 371.481256][ T7252] hub 9-0:1.0: USB hub found [ 371.486720][ T7252] hub 9-0:1.0: 1 port detected [ 373.300724][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'. [ 373.655872][ T7267] loop0: detected capacity change from 0 to 4096 [ 373.735995][ T7267] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 375.203777][ T7280] loop0: detected capacity change from 0 to 256 [ 375.417947][ T7280] FAT-fs (loop0): Directory bread(block 64) failed [ 375.452681][ T7280] FAT-fs (loop0): Directory bread(block 65) failed [ 375.473962][ T7280] FAT-fs (loop0): Directory bread(block 66) failed [ 375.495936][ T7280] FAT-fs (loop0): Directory bread(block 67) failed [ 375.518051][ T7280] FAT-fs (loop0): Directory bread(block 68) failed [ 375.527519][ T7282] loop2: detected capacity change from 0 to 4096 [ 375.539783][ T7280] FAT-fs (loop0): Directory bread(block 69) failed [ 375.548437][ T7280] FAT-fs (loop0): Directory bread(block 70) failed [ 375.560308][ T7280] FAT-fs (loop0): Directory bread(block 71) failed [ 375.588739][ T7280] FAT-fs (loop0): Directory bread(block 72) failed [ 375.615581][ T7280] FAT-fs (loop0): Directory bread(block 73) failed [ 375.638588][ T7282] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 377.522762][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 377.562020][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 377.615242][ T7306] hub 9-0:1.0: USB hub found [ 377.620621][ T7306] hub 9-0:1.0: 1 port detected [ 378.446726][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.469794][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.239040][ T7312] loop2: detected capacity change from 0 to 4096 [ 380.421886][ T7312] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 382.847720][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 382.918037][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 382.970455][ T7343] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 382.984777][ T7350] loop1: detected capacity change from 0 to 256 [ 383.054699][ T7350] FAT-fs (loop1): Directory bread(block 64) failed [ 383.061450][ T7350] FAT-fs (loop1): Directory bread(block 65) failed [ 383.086809][ T7350] FAT-fs (loop1): Directory bread(block 66) failed [ 383.112741][ T7350] FAT-fs (loop1): Directory bread(block 67) failed [ 383.119420][ T7350] FAT-fs (loop1): Directory bread(block 68) failed [ 383.149834][ T7350] FAT-fs (loop1): Directory bread(block 69) failed [ 383.161936][ T7350] FAT-fs (loop1): Directory bread(block 70) failed [ 383.186824][ T7350] FAT-fs (loop1): Directory bread(block 71) failed [ 383.203301][ T7350] FAT-fs (loop1): Directory bread(block 72) failed [ 383.227424][ T7350] FAT-fs (loop1): Directory bread(block 73) failed [ 383.434696][ T7359] hub 9-0:1.0: USB hub found [ 383.440168][ T7359] hub 9-0:1.0: 1 port detected [ 385.383943][ T7368] loop2: detected capacity change from 0 to 512 [ 385.472482][ T7368] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 385.505870][ T7368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 385.579382][ T7368] EXT4-fs (loop2): 1 truncate cleaned up [ 385.587518][ T7368] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,dioread_nolock,. Quota mode: none. [ 386.308777][ T7379] loop2: detected capacity change from 0 to 4096 [ 386.392507][ T7379] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 387.544121][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'. [ 387.574684][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 390.461054][ T7413] loop2: detected capacity change from 0 to 256 [ 390.631241][ T7413] FAT-fs (loop2): Directory bread(block 64) failed [ 390.661876][ T7413] FAT-fs (loop2): Directory bread(block 65) failed [ 390.668947][ T7413] FAT-fs (loop2): Directory bread(block 66) failed [ 390.721955][ T7413] FAT-fs (loop2): Directory bread(block 67) failed [ 390.728632][ T7413] FAT-fs (loop2): Directory bread(block 68) failed [ 390.766311][ T7413] FAT-fs (loop2): Directory bread(block 69) failed [ 390.783261][ T7413] FAT-fs (loop2): Directory bread(block 70) failed [ 390.811871][ T7413] FAT-fs (loop2): Directory bread(block 71) failed [ 390.838952][ T7413] FAT-fs (loop2): Directory bread(block 72) failed [ 390.871896][ T7413] FAT-fs (loop2): Directory bread(block 73) failed [ 390.973166][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 391.046286][ T7405] loop4: detected capacity change from 0 to 40427 [ 391.391907][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 391.573402][ T7405] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 391.603052][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.826775][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.040048][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 392.079860][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.124066][ T1108] usb 4-1: config 0 descriptor?? [ 392.233458][ T1108] hub 4-1:0.0: USB hub found [ 392.667632][ T7434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.271990][ T1108] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 395.502844][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 395.515229][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 395.663097][ T1108] usb 4-1: USB disconnect, device number 3 [ 395.720324][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 396.674553][ T7462] loop0: detected capacity change from 0 to 4096 [ 396.773806][ T7462] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 397.075086][ T7472] loop2: detected capacity change from 0 to 256 [ 398.095661][ T7472] FAT-fs (loop2): Directory bread(block 64) failed [ 398.115962][ T7472] FAT-fs (loop2): Directory bread(block 65) failed [ 398.124059][ T7472] FAT-fs (loop2): Directory bread(block 66) failed [ 398.135516][ T7472] FAT-fs (loop2): Directory bread(block 67) failed [ 398.152543][ T7472] FAT-fs (loop2): Directory bread(block 68) failed [ 398.159371][ T7472] FAT-fs (loop2): Directory bread(block 69) failed [ 398.170739][ T7472] FAT-fs (loop2): Directory bread(block 70) failed [ 398.225327][ T7472] FAT-fs (loop2): Directory bread(block 71) failed [ 398.463906][ T7472] FAT-fs (loop2): Directory bread(block 72) failed [ 398.762051][ T7472] FAT-fs (loop2): Directory bread(block 73) failed [ 400.185829][ T7484] loop0: detected capacity change from 0 to 4096 [ 400.312230][ T7488] loop4: detected capacity change from 0 to 32768 [ 400.356205][ T7488] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.891 (7488) [ 400.379003][ T7484] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 400.437135][ T7488] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 400.446244][ T7488] BTRFS info (device loop4): enabling auto defrag [ 400.452797][ T7488] BTRFS info (device loop4): setting nodatacow, compression disabled [ 400.460897][ T7488] BTRFS info (device loop4): use no compression [ 400.467271][ T7488] BTRFS info (device loop4): force clearing of disk cache [ 400.474489][ T7488] BTRFS info (device loop4): turning on flush-on-commit [ 400.481487][ T7488] BTRFS info (device loop4): max_inline at 4096 [ 400.487849][ T7488] BTRFS info (device loop4): disabling free space tree [ 400.494860][ T7488] BTRFS info (device loop4): has skinny extents [ 401.461960][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 402.258171][ T7524] loop3: detected capacity change from 0 to 4096 [ 402.272314][ T7524] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 402.346707][ T7488] BTRFS info (device loop4): enabling ssd optimizations [ 402.355962][ T7488] BTRFS info (device loop4): clearing free space tree [ 402.364018][ T7488] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.374195][ T7488] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 407.823607][ T7565] loop4: detected capacity change from 0 to 256 [ 407.832139][ T7562] loop1: detected capacity change from 0 to 4096 [ 407.969614][ T7565] FAT-fs (loop4): Directory bread(block 64) failed [ 407.996971][ T7562] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 408.020506][ T7565] FAT-fs (loop4): Directory bread(block 65) failed [ 408.115682][ T7565] FAT-fs (loop4): Directory bread(block 66) failed [ 408.186676][ T7565] FAT-fs (loop4): Directory bread(block 67) failed [ 408.204205][ T7565] FAT-fs (loop4): Directory bread(block 68) failed [ 408.268423][ T7565] FAT-fs (loop4): Directory bread(block 69) failed [ 409.152452][ T7565] FAT-fs (loop4): Directory bread(block 70) failed [ 409.159071][ T7565] FAT-fs (loop4): Directory bread(block 71) failed [ 409.166262][ T7565] FAT-fs (loop4): Directory bread(block 72) failed [ 409.190039][ T7565] FAT-fs (loop4): Directory bread(block 73) failed [ 409.519693][ T7583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.531214][ T7583] UDF-fs: Scanning with blocksize 512 failed [ 409.612217][ T7583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.620009][ T7583] UDF-fs: Scanning with blocksize 1024 failed [ 409.712061][ T7583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.731949][ T7583] UDF-fs: Scanning with blocksize 2048 failed [ 409.806775][ T7583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 410.064707][ T7583] UDF-fs: Scanning with blocksize 4096 failed [ 411.619085][ T7590] loop4: detected capacity change from 0 to 4096 [ 411.746718][ T7590] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 411.881598][ T7593] hub 9-0:1.0: USB hub found [ 411.887227][ T7593] hub 9-0:1.0: 1 port detected [ 413.726336][ T7606] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 413.734547][ T7606] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 414.835975][ T7623] loop3: detected capacity change from 0 to 256 [ 416.476372][ T7623] FAT-fs (loop3): Directory bread(block 64) failed [ 416.476424][ T7623] FAT-fs (loop3): Directory bread(block 65) failed [ 416.476506][ T7623] FAT-fs (loop3): Directory bread(block 66) failed [ 416.476542][ T7623] FAT-fs (loop3): Directory bread(block 67) failed [ 416.476615][ T7623] FAT-fs (loop3): Directory bread(block 68) failed [ 416.476649][ T7623] FAT-fs (loop3): Directory bread(block 69) failed [ 416.476722][ T7623] FAT-fs (loop3): Directory bread(block 70) failed [ 416.476756][ T7623] FAT-fs (loop3): Directory bread(block 71) failed [ 416.476837][ T7623] FAT-fs (loop3): Directory bread(block 72) failed [ 416.476871][ T7623] FAT-fs (loop3): Directory bread(block 73) failed [ 417.042105][ T7631] loop0: detected capacity change from 0 to 32768 [ 417.244130][ T7631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.925 (7631) [ 417.365999][ T7639] loop4: detected capacity change from 0 to 4096 [ 417.384548][ T7631] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 417.393360][ T7631] BTRFS info (device loop0): enabling auto defrag [ 417.399809][ T7631] BTRFS info (device loop0): setting nodatacow, compression disabled [ 417.408003][ T7631] BTRFS info (device loop0): use no compression [ 417.414951][ T7631] BTRFS info (device loop0): force clearing of disk cache [ 417.422185][ T7631] BTRFS info (device loop0): turning on flush-on-commit [ 417.429225][ T7631] BTRFS info (device loop0): max_inline at 4096 [ 417.435805][ T7631] BTRFS info (device loop0): disabling free space tree [ 417.443041][ T7631] BTRFS info (device loop0): has skinny extents [ 417.744703][ T7639] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 419.115510][ T7631] BTRFS error (device loop0): open_ctree failed: -12 [ 419.123715][ T4246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4246) [ 421.429314][ T7700] loop2: detected capacity change from 0 to 256 [ 421.683302][ T7700] FAT-fs (loop2): Directory bread(block 64) failed [ 421.759864][ T7700] FAT-fs (loop2): Directory bread(block 65) failed [ 421.772057][ T7700] FAT-fs (loop2): Directory bread(block 66) failed [ 421.778639][ T7700] FAT-fs (loop2): Directory bread(block 67) failed [ 422.094856][ T7700] FAT-fs (loop2): Directory bread(block 68) failed [ 422.218065][ T7700] FAT-fs (loop2): Directory bread(block 69) failed [ 422.634193][ T7700] FAT-fs (loop2): Directory bread(block 70) failed [ 422.641369][ T7700] FAT-fs (loop2): Directory bread(block 71) failed [ 422.648839][ T7700] FAT-fs (loop2): Directory bread(block 72) failed [ 422.660548][ T7700] FAT-fs (loop2): Directory bread(block 73) failed [ 423.018776][ T7711] smc: net device bond0 applied user defined pnetid SYZ0 [ 423.040198][ T7711] smc: net device bond0 erased user defined pnetid SYZ0 [ 423.218049][ T7715] loop3: detected capacity change from 0 to 4096 [ 423.382662][ T7715] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 423.880748][ T7720] loop0: detected capacity change from 0 to 32768 [ 424.386708][ T7720] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.943 (7720) [ 424.558687][ T7720] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 424.651280][ T7720] BTRFS info (device loop0): use zlib compression, level 3 [ 424.719820][ T7720] BTRFS info (device loop0): enabling ssd optimizations [ 424.806231][ T7720] BTRFS info (device loop0): disabling tree log [ 424.923757][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.950'. [ 425.106778][ T7720] BTRFS info (device loop0): using spread ssd allocation scheme [ 425.784489][ T7720] BTRFS info (device loop0): using free space tree [ 425.791027][ T7720] BTRFS info (device loop0): has skinny extents [ 428.152204][ T7773] loop2: detected capacity change from 0 to 4096 [ 428.461898][ T7773] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 428.563301][ T7775] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 428.604481][ T7720] BTRFS error (device loop0): open_ctree failed: -12 [ 428.840507][ T7777] loop4: detected capacity change from 0 to 256 [ 428.935117][ T7777] FAT-fs (loop4): Directory bread(block 64) failed [ 428.949906][ T7777] FAT-fs (loop4): Directory bread(block 65) failed [ 428.985007][ T7777] FAT-fs (loop4): Directory bread(block 66) failed [ 428.991654][ T7777] FAT-fs (loop4): Directory bread(block 67) failed [ 429.042050][ T7777] FAT-fs (loop4): Directory bread(block 68) failed [ 429.048639][ T7777] FAT-fs (loop4): Directory bread(block 69) failed [ 429.092034][ T7777] FAT-fs (loop4): Directory bread(block 70) failed [ 429.098635][ T7777] FAT-fs (loop4): Directory bread(block 71) failed [ 429.121915][ T7777] FAT-fs (loop4): Directory bread(block 72) failed [ 429.128501][ T7777] FAT-fs (loop4): Directory bread(block 73) failed [ 429.183295][ T7783] loop2: detected capacity change from 0 to 4096 [ 429.346497][ T7783] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 430.975917][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.963'. [ 431.066483][ T7683] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 431.412576][ T7811] hub 9-0:1.0: USB hub found [ 431.419496][ T7811] hub 9-0:1.0: 1 port detected [ 432.294813][ T7816] loop3: detected capacity change from 0 to 4096 [ 432.340006][ T7815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.967'. [ 432.371551][ T7683] usb 1-1: Using ep0 maxpacket: 16 [ 432.385237][ T7816] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 432.407833][ T7816] ntfs3: loop3: failed to replay log file. Can't mount rw! [ 432.502069][ T7683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.541878][ T7683] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 432.551091][ T7683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.593548][ T7683] usb 1-1: config 0 descriptor?? [ 432.925134][ T7824] loop1: detected capacity change from 0 to 256 [ 433.020961][ T7820] loop2: detected capacity change from 0 to 32768 [ 433.051069][ T7824] FAT-fs (loop1): Directory bread(block 64) failed [ 433.060521][ T7683] apple 0003:05AC:024B.0002: item fetching failed at offset 2/69 [ 433.079797][ T7824] FAT-fs (loop1): Directory bread(block 65) failed [ 433.087890][ T7683] apple 0003:05AC:024B.0002: parse failed [ 433.095668][ T7683] apple: probe of 0003:05AC:024B.0002 failed with error -22 [ 433.103488][ T7824] FAT-fs (loop1): Directory bread(block 66) failed [ 433.116158][ T7824] FAT-fs (loop1): Directory bread(block 67) failed [ 433.140276][ T7826] loop3: detected capacity change from 0 to 4096 [ 433.150339][ T7824] FAT-fs (loop1): Directory bread(block 68) failed [ 433.157351][ T7824] FAT-fs (loop1): Directory bread(block 69) failed [ 433.187860][ T7824] FAT-fs (loop1): Directory bread(block 70) failed [ 433.198864][ T7820] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 433.205396][ T7826] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 433.222209][ T7824] FAT-fs (loop1): Directory bread(block 71) failed [ 433.232106][ T7820] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 433.240134][ T7824] FAT-fs (loop1): Directory bread(block 72) failed [ 433.261312][ T5637] usb 1-1: USB disconnect, device number 2 [ 433.315246][ T7820] XFS (loop2): DAX and reflink cannot be used together! [ 433.323381][ T7824] FAT-fs (loop1): Directory bread(block 73) failed [ 434.302159][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 436.022044][ T7864] hub 9-0:1.0: USB hub found [ 436.027181][ T7864] hub 9-0:1.0: 1 port detected [ 437.657610][ T7878] loop0: detected capacity change from 0 to 256 [ 437.802199][ T7878] FAT-fs (loop0): Directory bread(block 64) failed [ 437.810673][ T7878] FAT-fs (loop0): Directory bread(block 65) failed [ 437.831942][ T7878] FAT-fs (loop0): Directory bread(block 66) failed [ 437.858928][ T7878] FAT-fs (loop0): Directory bread(block 67) failed [ 437.882101][ T7878] FAT-fs (loop0): Directory bread(block 68) failed [ 437.888736][ T7878] FAT-fs (loop0): Directory bread(block 69) failed [ 437.927451][ T7878] FAT-fs (loop0): Directory bread(block 70) failed [ 437.961875][ T7878] FAT-fs (loop0): Directory bread(block 71) failed [ 437.972384][ T7878] FAT-fs (loop0): Directory bread(block 72) failed [ 437.995414][ T7878] FAT-fs (loop0): Directory bread(block 73) failed [ 438.370812][ T7881] loop3: detected capacity change from 0 to 4096 [ 438.453322][ T7881] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 438.603847][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 438.838640][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.988'. [ 439.750110][ T7896] loop0: detected capacity change from 0 to 4096 [ 439.884927][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.910435][ T7896] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 439.925303][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.203433][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 444.373444][ T7926] device veth1_macvtap left promiscuous mode [ 444.878174][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 444.999001][ T7931] hub 9-0:1.0: USB hub found [ 445.004070][ T7931] hub 9-0:1.0: 1 port detected [ 447.678889][ T7949] loop0: detected capacity change from 0 to 4096 [ 447.695450][ T7959] loop1: detected capacity change from 0 to 256 [ 447.948557][ T7949] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 448.033825][ T7959] FAT-fs (loop1): Directory bread(block 64) failed [ 448.050715][ T7959] FAT-fs (loop1): Directory bread(block 65) failed [ 448.065412][ T7959] FAT-fs (loop1): Directory bread(block 66) failed [ 448.074837][ T7959] FAT-fs (loop1): Directory bread(block 67) failed [ 448.081567][ T7959] FAT-fs (loop1): Directory bread(block 68) failed [ 448.092293][ T7959] FAT-fs (loop1): Directory bread(block 69) failed [ 448.099017][ T7959] FAT-fs (loop1): Directory bread(block 70) failed [ 448.166792][ T7959] FAT-fs (loop1): Directory bread(block 71) failed [ 448.173641][ T7959] FAT-fs (loop1): Directory bread(block 72) failed [ 448.180309][ T7959] FAT-fs (loop1): Directory bread(block 73) failed [ 448.898741][ T7969] loop1: detected capacity change from 0 to 256 [ 448.908545][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 449.120758][ T7969] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 449.155699][ T7978] hub 9-0:1.0: USB hub found [ 449.161220][ T7978] hub 9-0:1.0: 1 port detected [ 449.170758][ T7977] loop0: detected capacity change from 0 to 512 [ 449.268253][ T7977] EXT4-fs (loop0): Ignoring removed nobh option [ 449.852159][ T5637] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 449.889523][ T7977] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 450.030128][ T7977] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 450.161957][ T5637] usb 4-1: Using ep0 maxpacket: 8 [ 450.335930][ T7977] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.1014: casefold flag without casefold feature [ 450.352379][ T7977] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1014: couldn't read orphan inode 13 (err -117) [ 450.361883][ T5637] usb 4-1: unable to get BOS descriptor or descriptor too short [ 450.402712][ T7977] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 450.441951][ T5637] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 450.452522][ T5637] usb 4-1: can't read configurations, error -71 [ 450.460753][ T7990] loop2: detected capacity change from 0 to 512 [ 450.657649][ T7990] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 450.882777][ T7992] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 451.461825][ T7990] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 451.536478][ T7990] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.877572][ T8013] loop1: detected capacity change from 0 to 256 [ 454.084171][ T8014] loop0: detected capacity change from 0 to 4096 [ 454.150874][ T8013] FAT-fs (loop1): Directory bread(block 64) failed [ 454.168680][ T8013] FAT-fs (loop1): Directory bread(block 65) failed [ 454.188362][ T8013] FAT-fs (loop1): Directory bread(block 66) failed [ 454.224320][ T8014] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 454.252020][ T8013] FAT-fs (loop1): Directory bread(block 67) failed [ 454.273181][ T8013] FAT-fs (loop1): Directory bread(block 68) failed [ 454.303077][ T8013] FAT-fs (loop1): Directory bread(block 69) failed [ 454.333737][ T8013] FAT-fs (loop1): Directory bread(block 70) failed [ 454.359547][ T8013] FAT-fs (loop1): Directory bread(block 71) failed [ 454.386086][ T8013] FAT-fs (loop1): Directory bread(block 72) failed [ 454.415464][ T8013] FAT-fs (loop1): Directory bread(block 73) failed [ 454.711887][ T7557] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 456.182971][ T7557] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 456.191335][ T7557] usb 5-1: config 0 has no interface number 0 [ 456.208083][ T7557] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x6 has invalid maxpacket 1032, setting to 1024 [ 456.627635][ T8040] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 457.371950][ T7557] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ae.56 [ 457.452068][ T7557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.504718][ T7557] usb 5-1: Product: syz [ 458.501626][ T7557] usb 5-1: config 0 descriptor?? [ 458.762009][ T7557] usb 5-1: can't set config #0, error -71 [ 458.770137][ T7557] usb 5-1: USB disconnect, device number 6 [ 459.231220][ T8056] loop1: detected capacity change from 0 to 4096 [ 459.355800][ T8056] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 459.359974][ T8057] loop0: detected capacity change from 0 to 4096 [ 459.943516][ T8057] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 462.492220][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 464.967601][ T8106] loop4: detected capacity change from 0 to 512 [ 465.086634][ T8106] EXT4-fs (loop4): Ignoring removed nobh option [ 465.129432][ T8106] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 465.152626][ T8106] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 465.168308][ T8106] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.1051: casefold flag without casefold feature [ 465.183576][ T8106] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1051: couldn't read orphan inode 13 (err -117) [ 465.196436][ T8106] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 465.443170][ T8115] hub 9-0:1.0: USB hub found [ 465.448027][ T8115] hub 9-0:1.0: 1 port detected [ 465.866290][ T8121] loop0: detected capacity change from 0 to 4096 [ 465.984734][ T8121] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 467.047911][ T8125] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 467.273806][ T8130] loop3: detected capacity change from 0 to 512 [ 467.416279][ T8130] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 467.465216][ T8130] EXT4-fs (loop3): filesystem is read-only [ 467.484380][ T8130] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 467.506421][ T8130] EXT4-fs (loop3): filesystem is read-only [ 467.512464][ T8130] EXT4-fs (loop3): orphan cleanup on readonly fs [ 467.784375][ T8134] loop2: detected capacity change from 0 to 4096 [ 467.919760][ T8134] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 467.985444][ T8130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1057: bg 0: block 64: padding at end of block bitmap is not set [ 469.123639][ T8130] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 469.287976][ T8130] EXT4-fs (loop3): 1 orphan inode deleted [ 469.376432][ T8130] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,noblock_validity,nomblk_io_submit,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 469.403597][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.858850][ T8155] hub 9-0:1.0: USB hub found [ 471.871840][ T8155] hub 9-0:1.0: 1 port detected [ 473.805452][ T8169] loop3: detected capacity change from 0 to 4096 [ 473.863457][ T8173] loop1: detected capacity change from 0 to 2048 [ 473.885847][ T8169] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 473.961347][ T8173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.363324][ T8189] loop1: detected capacity change from 0 to 4096 [ 475.485575][ T8175] loop4: detected capacity change from 0 to 32768 [ 475.532730][ T8189] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 475.605353][ T8175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1073 (8175) [ 475.613108][ T8196] loop3: detected capacity change from 0 to 512 [ 475.692921][ T8196] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 475.731910][ T8196] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1077: invalid block [ 475.753816][ T8196] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1077: invalid indirect mapped block 4294967295 (level 1) [ 475.775838][ T8196] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1077: invalid indirect mapped block 4294967295 (level 1) [ 475.799767][ T8196] EXT4-fs (loop3): 2 truncates cleaned up [ 475.810582][ T8196] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 475.841880][ T8175] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 475.862622][ T8175] BTRFS info (device loop4): use no compression [ 475.886427][ T8175] BTRFS info (device loop4): turning on sync discard [ 475.930140][ T8201] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1077: bg 0: block 5: invalid block bitmap [ 475.933046][ T8175] BTRFS info (device loop4): force clearing of disk cache [ 475.961138][ T8175] BTRFS info (device loop4): turning on async discard [ 475.968401][ T8175] BTRFS info (device loop4): turning off async discard [ 475.976227][ T8175] BTRFS info (device loop4): using free space tree [ 475.983749][ T8175] BTRFS info (device loop4): has skinny extents [ 475.991052][ T8175] workqueue: max_active 65535 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 476.004180][ T8175] workqueue: max_active 65535 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 476.037404][ T8175] workqueue: max_active 65535 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 476.070973][ T8175] workqueue: max_active 65535 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 476.084393][ T8175] workqueue: max_active 65535 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 476.333207][ T8175] workqueue: max_active 65535 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 476.367545][ T8175] workqueue: max_active 65535 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 477.216952][ T8175] workqueue: max_active 65535 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 477.383859][ T8223] netlink: 'syz.0.1085': attribute type 4 has an invalid length. [ 477.394227][ T8223] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1085'. [ 477.468349][ T8175] workqueue: max_active 65535 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 477.508869][ T8175] workqueue: max_active 65535 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 478.914139][ T8231] loop2: detected capacity change from 0 to 4096 [ 478.919743][ T8240] loop3: detected capacity change from 0 to 1024 [ 479.024644][ T8231] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 479.074111][ T8243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1089'. [ 479.103344][ T8175] BTRFS error (device loop4): open_ctree failed: -12 [ 479.440925][ T8245] loop1: detected capacity change from 0 to 256 [ 479.521042][ T6026] hfsplus: b-tree write err: -5, ino 4 [ 480.787531][ T8257] loop4: detected capacity change from 0 to 4096 [ 481.055947][ T8257] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 482.073482][ T8269] loop2: detected capacity change from 0 to 512 [ 482.407394][ T8269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 483.479341][ T8279] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1100'. [ 483.897381][ T8281] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.1102'. [ 484.036473][ T8269] EXT4-fs (loop2): 1 truncate cleaned up [ 484.063667][ T8269] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 484.353116][ T8300] hub 9-0:1.0: USB hub found [ 484.362094][ T8300] hub 9-0:1.0: 1 port detected [ 487.432150][ T26] audit: type=1800 audit(1743745333.711:11): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1098" name="file2" dev="loop2" ino=19 res=0 errno=0 [ 491.333379][ T8332] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1116'. [ 491.720552][ T8342] loop3: detected capacity change from 0 to 2048 [ 491.788258][ T8342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.707861][ T8368] loop0: detected capacity change from 0 to 512 [ 493.770822][ T8373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1128'. [ 493.785926][ T8368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 493.841308][ T8368] EXT4-fs (loop0): 1 truncate cleaned up [ 493.876447][ T8368] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 496.097840][ T26] audit: type=1800 audit(1743745342.051:12): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1127" name="file2" dev="loop0" ino=19 res=0 errno=0 [ 496.165718][ T8387] loop4: detected capacity change from 0 to 256 [ 496.223349][ T8383] loop2: detected capacity change from 0 to 4096 [ 496.410633][ T8387] FAT-fs (loop4): Directory bread(block 64) failed [ 496.420173][ T8387] FAT-fs (loop4): Directory bread(block 65) failed [ 496.502118][ T8387] FAT-fs (loop4): Directory bread(block 66) failed [ 496.508708][ T8387] FAT-fs (loop4): Directory bread(block 67) failed [ 496.515566][ T8394] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.544314][ T8387] FAT-fs (loop4): Directory bread(block 68) failed [ 496.581976][ T8387] FAT-fs (loop4): Directory bread(block 69) failed [ 496.626621][ T8387] FAT-fs (loop4): Directory bread(block 70) failed [ 496.663763][ T8387] FAT-fs (loop4): Directory bread(block 71) failed [ 496.732448][ T8383] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 496.743876][ T8387] FAT-fs (loop4): Directory bread(block 72) failed [ 496.793035][ T8387] FAT-fs (loop4): Directory bread(block 73) failed [ 499.646286][ T8423] loop0: detected capacity change from 0 to 4096 [ 499.739058][ T8423] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 500.316610][ T8427] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1141'. [ 502.275640][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.577282][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.715294][ T8437] loop1: detected capacity change from 0 to 256 [ 502.828713][ T8437] FAT-fs (loop1): Directory bread(block 64) failed [ 502.856059][ T8437] FAT-fs (loop1): Directory bread(block 65) failed [ 502.878564][ T8437] FAT-fs (loop1): Directory bread(block 66) failed [ 502.889032][ T8437] FAT-fs (loop1): Directory bread(block 67) failed [ 502.901889][ T8437] FAT-fs (loop1): Directory bread(block 68) failed [ 502.908561][ T8437] FAT-fs (loop1): Directory bread(block 69) failed [ 502.920738][ T8437] FAT-fs (loop1): Directory bread(block 70) failed [ 502.982008][ T8437] FAT-fs (loop1): Directory bread(block 71) failed [ 502.988665][ T8437] FAT-fs (loop1): Directory bread(block 72) failed [ 503.086473][ T8437] FAT-fs (loop1): Directory bread(block 73) failed [ 503.365209][ T7679] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 503.435569][ T8458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1152'. [ 503.671955][ T7679] usb 5-1: Using ep0 maxpacket: 16 [ 503.792060][ T7679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.833542][ T7679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.893759][ T7679] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 503.936285][ T7679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.992308][ T7679] usb 5-1: config 0 descriptor?? [ 504.995981][ T8467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 505.362259][ T7679] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 505.601885][ T8448] udc-core: couldn't find an available UDC or it's busy [ 505.608876][ T8448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 505.632539][ T7679] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 505.947256][ T7679] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 506.045598][ T7679] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 506.211892][ T7679] konepure 0003:1E7D:2DB4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 506.317407][ T7679] usb 5-1: USB disconnect, device number 7 [ 506.331339][ T8480] loop3: detected capacity change from 0 to 4096 [ 506.539862][ T8483] loop1: detected capacity change from 0 to 4096 [ 506.577634][ T8483] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 506.607137][ T8480] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 507.733709][ T8497] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1163'. [ 507.753957][ T8498] loop1: detected capacity change from 0 to 1024 [ 507.818753][ T8498] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 507.818753][ T8498] [ 508.031859][ T8498] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 508.078059][ T8495] loop2: detected capacity change from 0 to 8192 [ 508.092805][ T8504] loop0: detected capacity change from 0 to 128 [ 508.926836][ T8495] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 508.942732][ T8495] loop2: partition table partially beyond EOD, truncated [ 509.117324][ T8495] loop2: p1 start 277760 is beyond EOD, truncated [ 509.164692][ T8495] loop2: p2 start 6684676 is beyond EOD, truncated [ 509.728282][ T8495] loop2: p5 start 6684676 is beyond EOD, truncated [ 509.822743][ T8498] loop1: detected capacity change from 0 to 8 [ 509.903769][ T8498] SQUASHFS error: zlib decompression failed, data probably corrupt [ 509.912227][ T8498] SQUASHFS error: Failed to read block 0x9b: -5 [ 509.918476][ T8498] SQUASHFS error: Unable to read metadata cache entry [99] [ 509.925795][ T8498] SQUASHFS error: Unable to read inode 0x127 [ 510.588023][ T8397] udevd[8397]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 510.600713][ T4240] udevd[4240]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 510.623431][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 510.852763][ T8527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 510.859647][ T8527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.868212][ T8527] vhci_hcd vhci_hcd.0: Device attached [ 511.241964][ T5631] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 511.254350][ T8522] loop0: detected capacity change from 0 to 4096 [ 511.379562][ T8522] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 511.669223][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 511.685315][ T8397] udevd[8397]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 511.707546][ T4240] udevd[4240]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 511.754602][ T8528] vhci_hcd: connection reset by peer [ 511.783416][ T8526] loop3: detected capacity change from 0 to 4096 [ 511.798048][ T1220] vhci_hcd: stop threads [ 511.824371][ T1220] vhci_hcd: release socket [ 511.881145][ T8526] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 512.316885][ T1220] vhci_hcd: disconnect device [ 512.968049][ T8534] loop1: detected capacity change from 0 to 4096 [ 513.221827][ T8534] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 513.738404][ T8549] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1176'. [ 513.996480][ T8551] loop0: detected capacity change from 0 to 256 [ 514.320815][ T8551] FAT-fs (loop0): Directory bread(block 64) failed [ 514.462168][ T8551] FAT-fs (loop0): Directory bread(block 65) failed [ 514.571221][ T8551] FAT-fs (loop0): Directory bread(block 66) failed [ 514.787107][ T8551] FAT-fs (loop0): Directory bread(block 67) failed [ 515.158023][ T8551] FAT-fs (loop0): Directory bread(block 68) failed [ 515.191863][ T8551] FAT-fs (loop0): Directory bread(block 69) failed [ 515.198569][ T8551] FAT-fs (loop0): Directory bread(block 70) failed [ 515.236836][ T8551] FAT-fs (loop0): Directory bread(block 71) failed [ 515.271999][ T8551] FAT-fs (loop0): Directory bread(block 72) failed [ 515.299169][ T8551] FAT-fs (loop0): Directory bread(block 73) failed [ 515.317401][ T8558] loop1: detected capacity change from 0 to 2048 [ 515.567949][ T8558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.821832][ T5631] vhci_hcd: vhci_device speed not set [ 517.128359][ T8570] loop0: detected capacity change from 0 to 4096 [ 517.211799][ T8570] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 517.448869][ T8576] loop4: detected capacity change from 0 to 4096 [ 517.473721][ T8580] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 517.473721][ T8580] program syz.3.1189 not setting count and/or reply_len properly [ 517.531907][ T8576] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 517.624680][ T8585] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1190'. [ 517.997640][ T8591] loop2: detected capacity change from 0 to 32768 [ 518.055562][ T8591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1193 (8591) [ 518.142445][ T8591] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 518.151172][ T8591] BTRFS info (device loop2): using free space tree [ 518.157806][ T8591] BTRFS info (device loop2): has skinny extents [ 518.252406][ T8590] loop0: detected capacity change from 0 to 4096 [ 518.286098][ T8603] loop3: detected capacity change from 0 to 256 [ 518.383853][ T8590] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 518.451542][ T8603] FAT-fs (loop3): Directory bread(block 64) failed [ 518.485581][ T8603] FAT-fs (loop3): Directory bread(block 65) failed [ 518.521903][ T8591] BTRFS info (device loop2): enabling ssd optimizations [ 518.571944][ T8603] FAT-fs (loop3): Directory bread(block 66) failed [ 518.578532][ T8603] FAT-fs (loop3): Directory bread(block 67) failed [ 518.601552][ T8603] FAT-fs (loop3): Directory bread(block 68) failed [ 518.624463][ T8603] FAT-fs (loop3): Directory bread(block 69) failed [ 518.631122][ T8603] FAT-fs (loop3): Directory bread(block 70) failed [ 518.642601][ T8603] FAT-fs (loop3): Directory bread(block 71) failed [ 518.765835][ T8603] FAT-fs (loop3): Directory bread(block 72) failed [ 518.780706][ T8603] FAT-fs (loop3): Directory bread(block 73) failed [ 519.102055][ T5630] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 519.343898][ T26] audit: type=1800 audit(1743745365.951:13): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1193" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 519.569811][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 519.572109][ T5630] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 519.638451][ T5630] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.649232][ T5630] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 519.665529][ T5630] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 519.678604][ T5630] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 519.812019][ T5630] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 519.852189][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.902363][ T5630] usb 1-1: Product: syz [ 519.920002][ T8624] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 519.930884][ T5630] usb 1-1: Manufacturer: syz [ 519.974418][ T8620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 520.015499][ T5630] cdc_wdm 1-1:1.0: skipping garbage [ 520.027010][ T5630] cdc_wdm 1-1:1.0: skipping garbage [ 520.165518][ T5630] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 520.171942][ T5630] cdc_wdm 1-1:1.0: Unknown control protocol [ 520.502438][ T4209] usb 1-1: USB disconnect, device number 3 [ 520.759640][ T8637] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1201'. [ 521.128912][ T8639] loop1: detected capacity change from 0 to 4096 [ 521.316835][ T8639] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 522.193920][ T8649] sg_write: data in/out 512/10 bytes for SCSI command 0xb7-- guessing data in; [ 522.193920][ T8649] program syz.0.1205 not setting count and/or reply_len properly [ 522.733305][ T8662] loop2: detected capacity change from 0 to 256 [ 523.577688][ T8661] loop1: detected capacity change from 0 to 4096 [ 523.659694][ T8662] FAT-fs (loop2): Directory bread(block 64) failed [ 523.691979][ T8662] FAT-fs (loop2): Directory bread(block 65) failed [ 523.699659][ T8662] FAT-fs (loop2): Directory bread(block 66) failed [ 523.702810][ T8661] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 523.729802][ T8662] FAT-fs (loop2): Directory bread(block 67) failed [ 523.770412][ T8662] FAT-fs (loop2): Directory bread(block 68) failed [ 523.789890][ T8662] FAT-fs (loop2): Directory bread(block 69) failed [ 523.833666][ T8662] FAT-fs (loop2): Directory bread(block 70) failed [ 523.884991][ T8662] FAT-fs (loop2): Directory bread(block 71) failed [ 523.931061][ T8662] FAT-fs (loop2): Directory bread(block 72) failed [ 523.958355][ T8662] FAT-fs (loop2): Directory bread(block 73) failed [ 525.282959][ T8676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1213'. [ 526.569031][ T8689] Error parsing options; rc = [-22] [ 526.809902][ T8679] loop1: detected capacity change from 0 to 40427 [ 526.886672][ T8679] F2FS-fs (loop1): invalid crc value [ 526.981499][ T8679] F2FS-fs (loop1): Found nat_bits in checkpoint [ 527.274321][ T8695] loop4: detected capacity change from 0 to 4096 [ 527.611859][ T8679] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 528.514858][ T8695] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 528.596408][ T8717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1225'. [ 530.931854][ T8788] loop0: detected capacity change from 0 to 1024 [ 532.315267][ T8788] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 532.315267][ T8788] [ 532.448802][ T8788] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 532.467204][ T8797] loop4: detected capacity change from 0 to 1024 [ 532.504408][ T8799] loop2: detected capacity change from 0 to 4096 [ 532.547258][ T8797] EXT4-fs (loop4): inline encryption not supported [ 532.555159][ T8797] EXT4-fs (loop4): Ignoring removed orlov option [ 532.572026][ T8799] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 532.884355][ T8797] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000001,,errors=continue. Quota mode: none. [ 532.892659][ T8806] loop0: detected capacity change from 0 to 8 [ 533.382188][ T8806] SQUASHFS error: zlib decompression failed, data probably corrupt [ 533.390927][ T8806] SQUASHFS error: Failed to read block 0x9b: -5 [ 533.423513][ T8806] SQUASHFS error: Unable to read metadata cache entry [99] [ 533.474121][ T8806] SQUASHFS error: Unable to read inode 0x127 [ 534.976981][ T8827] loop2: detected capacity change from 0 to 164 [ 536.232615][ T8843] loop2: detected capacity change from 0 to 4096 [ 536.607211][ T8843] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 539.484884][ T8868] loop4: detected capacity change from 0 to 2048 [ 539.724980][ T8868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.936613][ T6342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 541.181785][ T6342] usb 2-1: Using ep0 maxpacket: 16 [ 541.382674][ T6342] usb 2-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 541.520261][ T6342] usb 2-1: config 1 interface 0 has no altsetting 0 [ 541.782000][ T6342] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.811014][ T6342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 541.857110][ T6342] usb 2-1: SerialNumber: syz [ 541.942842][ T8882] loop4: detected capacity change from 0 to 2048 [ 541.968803][ T8881] loop3: detected capacity change from 0 to 4096 [ 542.019162][ T8882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.036447][ T8881] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 542.314912][ T6342] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 542.395402][ T6342] usb 2-1: USB disconnect, device number 4 [ 542.730809][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 542.760790][ T8887] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 547.667081][ T8920] loop1: detected capacity change from 0 to 4096 [ 548.321947][ T8923] loop0: detected capacity change from 0 to 2048 [ 548.502098][ T8920] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 548.514870][ T8923] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 548.576144][ T8927] loop2: detected capacity change from 0 to 1024 [ 548.646204][ T8927] EXT4-fs (loop2): inline encryption not supported [ 548.648639][ T8928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.662295][ T8927] EXT4-fs (loop2): Ignoring removed orlov option [ 548.831837][ T8927] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000001,,errors=continue. Quota mode: none. [ 548.854483][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.458760][ T8960] loop2: detected capacity change from 0 to 256 [ 553.395512][ T8974] loop2: detected capacity change from 0 to 4096 [ 553.648526][ T8982] loop0: detected capacity change from 0 to 736 [ 554.244310][ T8974] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 554.600602][ T8989] hub 9-0:1.0: USB hub found [ 554.606067][ T8989] hub 9-0:1.0: 1 port detected [ 554.690477][ T7538] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 554.700584][ T7538] CPU: 0 PID: 7538 Comm: kworker/u5:0 Not tainted 5.15.179-syzkaller #0 [ 554.708942][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.719016][ T7538] Workqueue: hci3 hci_rx_work [ 554.723732][ T7538] Call Trace: [ 554.727027][ T7538] [ 554.729978][ T7538] dump_stack_lvl+0x1e3/0x2d0 [ 554.734694][ T7538] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 554.740360][ T7538] ? panic+0x860/0x860 [ 554.744587][ T7538] ? sysfs_create_dir_ns+0x282/0x390 [ 554.749919][ T7538] sysfs_create_dir_ns+0x2c6/0x390 [ 554.755069][ T7538] ? sysfs_warn_dup+0xa0/0xa0 [ 554.759895][ T7538] ? do_raw_spin_unlock+0x137/0x8b0 [ 554.765122][ T7538] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 554.771126][ T7538] kobject_add_internal+0x6e0/0xe00 [ 554.776349][ T7538] kobject_add+0x14e/0x210 [ 554.780773][ T7538] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 554.786419][ T7538] ? dev_attr_store+0x80/0x80 [ 554.791106][ T7538] ? device_add+0x3c2/0xfd0 [ 554.795625][ T7538] ? kobject_init+0x1d0/0x1d0 [ 554.800316][ T7538] ? __raw_spin_lock_init+0x41/0x100 [ 554.805615][ T7538] ? get_device_parent+0x128/0x400 [ 554.810761][ T7538] device_add+0x476/0xfd0 [ 554.815115][ T7538] hci_conn_add_sysfs+0xe4/0x1f0 [ 554.820073][ T7538] le_conn_complete_evt+0xc15/0x1500 [ 554.825427][ T7538] ? cs_le_create_conn+0x5f0/0x5f0 [ 554.830569][ T7538] hci_le_meta_evt+0xd86/0x3f50 [ 554.835456][ T7538] ? __lock_acquire+0x1ff0/0x1ff0 [ 554.840501][ T7538] ? __mutex_lock_common+0x444/0x25a0 [ 554.845892][ T7538] ? mark_lock+0x98/0x340 [ 554.850239][ T7538] ? hci_remote_host_features_evt+0x280/0x280 [ 554.856319][ T7538] ? __mutex_unlock_slowpath+0x218/0x750 [ 554.861966][ T7538] ? hci_event_packet+0x3b4/0x1550 [ 554.867109][ T7538] ? mutex_unlock+0x10/0x10 [ 554.871664][ T7538] ? mark_lock+0x98/0x340 [ 554.876025][ T7538] hci_event_packet+0xc41/0x1550 [ 554.880995][ T7538] ? rcu_lock_release+0x20/0x20 [ 554.885866][ T7538] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 554.891608][ T7538] ? hci_rx_work+0x204/0xa10 [ 554.896210][ T7538] ? hci_rx_work+0x22a/0xa10 [ 554.900816][ T7538] hci_rx_work+0x237/0xa10 [ 554.905262][ T7538] process_one_work+0x8a1/0x10c0 [ 554.910236][ T7538] ? worker_detach_from_pool+0x260/0x260 [ 554.915886][ T7538] ? _raw_spin_lock_irqsave+0x120/0x120 [ 554.921619][ T7538] ? kthread_data+0x4e/0xc0 [ 554.926134][ T7538] ? wq_worker_running+0x97/0x170 [ 554.931183][ T7538] worker_thread+0xaca/0x1280 [ 554.935967][ T7538] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 554.941897][ T7538] kthread+0x3f6/0x4f0 [ 554.945986][ T7538] ? rcu_lock_release+0x20/0x20 [ 554.950846][ T7538] ? kthread_blkcg+0xd0/0xd0 [ 554.955448][ T7538] ret_from_fork+0x1f/0x30 [ 554.959894][ T7538] [ 555.100215][ T7538] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 555.114510][ T7538] Bluetooth: hci3: failed to register connection device [ 557.161837][ T4209] Bluetooth: hci3: command 0x2016 tx timeout [ 558.790279][ T9013] loop4: detected capacity change from 0 to 128 [ 560.552270][ T9033] lo speed is unknown, defaulting to 1000 [ 560.559987][ T9033] lo speed is unknown, defaulting to 1000 [ 560.581237][ T9033] lo speed is unknown, defaulting to 1000 [ 560.615981][ T9033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 560.661359][ T9033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 560.898082][ T9033] lo speed is unknown, defaulting to 1000 [ 560.905541][ T9033] lo speed is unknown, defaulting to 1000 [ 560.912829][ T9033] lo speed is unknown, defaulting to 1000 [ 560.919716][ T9033] lo speed is unknown, defaulting to 1000 [ 560.926578][ T9033] lo speed is unknown, defaulting to 1000 [ 561.033498][ T9032] loop0: detected capacity change from 0 to 4096 [ 561.113041][ T9032] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 562.764759][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.775935][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.650207][ T9061] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 563.799913][ T9052] loop2: detected capacity change from 0 to 32768 [ 563.942745][ T9052] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 564.222932][ T2313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 564.662574][ T2313] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 564.709724][ T2313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 565.053775][ T2313] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 565.121290][ T9074] loop4: detected capacity change from 0 to 1024 [ 565.129109][ T2313] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 565.152127][ T2313] usb 1-1: Product: syz [ 565.157260][ T2313] usb 1-1: Manufacturer: syz [ 565.180910][ T9074] EXT4-fs (loop4): Test dummy encryption mode enabled [ 565.181918][ T2313] usb 1-1: SerialNumber: syz [ 565.213215][ T9074] EXT4-fs (loop4): Ignoring removed orlov option [ 565.254736][ T2313] usb 1-1: config 0 descriptor?? [ 565.267810][ T4175] ocfs2: Unmounting device (7,2) on (node local) [ 565.306391][ T2313] usb 1-1: selecting invalid altsetting 0 [ 565.363839][ T9074] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 566.444139][ T2313] usb 1-1: USB disconnect, device number 4 [ 567.445908][ T9092] loop4: detected capacity change from 0 to 4096 [ 567.577567][ T9092] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 568.491822][ T6342] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 568.751995][ T6342] usb 1-1: Using ep0 maxpacket: 16 [ 569.112304][ T6342] usb 1-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 571.243099][ T6342] usb 1-1: config 1 interface 0 has no altsetting 0 [ 571.442920][ T6342] usb 1-1: string descriptor 0 read error: -71 [ 571.458777][ T6342] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.468866][ T6342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.612003][ T6342] usb 1-1: can't set config #1, error -71 [ 571.619713][ T6342] usb 1-1: USB disconnect, device number 5 [ 573.455512][ T9129] capability: warning: `syz.4.1333' uses deprecated v2 capabilities in a way that may be insecure [ 573.526847][ T9131] loop1: detected capacity change from 0 to 128 [ 576.712854][ T6342] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 576.734273][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 576.945313][ T9151] loop1: detected capacity change from 0 to 4096 [ 577.040455][ T9151] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 577.251983][ T6342] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 577.275688][ T6342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.644668][ T6342] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.814115][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 578.002929][ T6342] usb 3-1: Product: syz [ 578.101199][ T6342] usb 3-1: Manufacturer: syz [ 578.241743][ T6342] usb 3-1: SerialNumber: syz [ 578.249141][ T6342] usb 3-1: config 0 descriptor?? [ 578.291874][ T6342] usb 3-1: can't set config #0, error -71 [ 578.302157][ T6342] usb 3-1: USB disconnect, device number 2 [ 579.661889][ T6342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 579.951922][ T6342] usb 3-1: Using ep0 maxpacket: 16 [ 581.634270][ T6342] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 581.713904][ T9185] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 581.830354][ T6342] usb 3-1: can't read configurations, error -71 [ 586.528962][ T9215] loop2: detected capacity change from 0 to 256 [ 586.687317][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 586.774734][ T9215] FAT-fs (loop2): Directory bread(block 64) failed [ 586.805472][ T9215] FAT-fs (loop2): Directory bread(block 65) failed [ 586.821872][ T9215] FAT-fs (loop2): Directory bread(block 66) failed [ 586.864168][ T9215] FAT-fs (loop2): Directory bread(block 67) failed [ 586.870865][ T9215] FAT-fs (loop2): Directory bread(block 68) failed [ 587.433086][ T9215] FAT-fs (loop2): Directory bread(block 69) failed [ 587.592077][ T9215] FAT-fs (loop2): Directory bread(block 70) failed [ 587.641402][ T9215] FAT-fs (loop2): Directory bread(block 71) failed [ 587.684843][ T9215] FAT-fs (loop2): Directory bread(block 72) failed [ 587.691440][ T9215] FAT-fs (loop2): Directory bread(block 73) failed [ 589.343947][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 589.416276][ T9226] loop3: detected capacity change from 0 to 32768 [ 589.492619][ T9226] XFS: ikeep mount option is deprecated. [ 589.707674][ T9226] XFS (loop3): Mounting V5 Filesystem [ 590.376809][ T9226] XFS (loop3): Ending clean mount [ 590.638855][ T4167] XFS (loop3): Unmounting Filesystem [ 591.167187][ T9271] loop2: detected capacity change from 0 to 8 [ 591.523097][ T9271] SQUASHFS error: zlib decompression failed, data probably corrupt [ 591.564680][ T9271] SQUASHFS error: Failed to read block 0x4de: -5 [ 591.572130][ T9271] SQUASHFS error: Failed to read block 0x4e2: -5 [ 591.582115][ T9271] SQUASHFS error: Failed to read block 0x9ca: -5 [ 591.588925][ T9271] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 591.642689][ T9271] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 591.692475][ T9271] SQUASHFS error: Failed to read block 0x535f2: -5 [ 592.022246][ T26] audit: type=1800 audit(1743745438.631:14): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1372" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 592.041790][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.889198][ T5630] Bluetooth: hci2: command 0x201b tx timeout [ 594.017040][ T9301] loop3: detected capacity change from 0 to 256 [ 594.293247][ T9309] loop2: detected capacity change from 0 to 2048 [ 595.414007][ T9309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.460223][ T9301] FAT-fs (loop3): Directory bread(block 64) failed [ 595.515747][ T9301] FAT-fs (loop3): Directory bread(block 65) failed [ 595.522879][ T9301] FAT-fs (loop3): Directory bread(block 66) failed [ 595.534109][ T9301] FAT-fs (loop3): Directory bread(block 67) failed [ 595.540920][ T9301] FAT-fs (loop3): Directory bread(block 68) failed [ 595.547759][ T9301] FAT-fs (loop3): Directory bread(block 69) failed [ 595.554628][ T9301] FAT-fs (loop3): Directory bread(block 70) failed [ 595.561397][ T9301] FAT-fs (loop3): Directory bread(block 71) failed [ 595.568331][ T9301] FAT-fs (loop3): Directory bread(block 72) failed [ 595.575130][ T9301] FAT-fs (loop3): Directory bread(block 73) failed [ 596.253431][ T9320] loop0: detected capacity change from 0 to 512 [ 596.631419][ T9320] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 596.646632][ T9320] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.945379][ T9331] loop4: detected capacity change from 0 to 256 [ 596.980030][ T9331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 597.232359][ T4169] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 597.542276][ T4169] usb 3-1: Using ep0 maxpacket: 32 [ 597.691831][ T4169] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 597.720499][ T4169] usb 3-1: config 0 has no interface number 0 [ 597.751793][ T4169] usb 3-1: config 0 interface 12 has no altsetting 0 [ 598.222371][ T4169] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 598.272536][ T4169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.396044][ T4169] usb 3-1: Product: syz [ 598.878861][ T4169] usb 3-1: Manufacturer: syz [ 598.921907][ T4169] usb 3-1: SerialNumber: syz [ 598.960072][ T9352] loop1: detected capacity change from 0 to 2048 [ 599.112515][ T4169] usb 3-1: config 0 descriptor?? [ 599.159263][ T9352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 600.203033][ T9366] loop1: detected capacity change from 0 to 256 [ 601.041858][ T4169] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 601.261970][ T4169] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 601.269417][ T4169] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 601.277851][ T4169] f81534: probe of 3-1:0.12 failed with error -71 [ 601.297463][ T4169] usb 3-1: USB disconnect, device number 5 [ 601.752692][ T9384] loop4: detected capacity change from 0 to 256 [ 601.996877][ T9384] FAT-fs (loop4): Directory bread(block 64) failed [ 602.011156][ T9384] FAT-fs (loop4): Directory bread(block 65) failed [ 602.072076][ T9384] FAT-fs (loop4): Directory bread(block 66) failed [ 602.111528][ T9384] FAT-fs (loop4): Directory bread(block 67) failed [ 602.176287][ T9384] FAT-fs (loop4): Directory bread(block 68) failed [ 602.195832][ T9390] loop1: detected capacity change from 0 to 256 [ 602.228573][ T9384] FAT-fs (loop4): Directory bread(block 69) failed [ 602.266072][ T9384] FAT-fs (loop4): Directory bread(block 70) failed [ 602.300793][ T9384] FAT-fs (loop4): Directory bread(block 71) failed [ 602.338435][ T9384] FAT-fs (loop4): Directory bread(block 72) failed [ 602.358783][ T9384] FAT-fs (loop4): Directory bread(block 73) failed [ 603.548935][ T9409] loop4: detected capacity change from 0 to 256 [ 605.092688][ T9419] kernel profiling enabled (shift: 7) [ 606.289173][ T9428] loop0: detected capacity change from 0 to 16 [ 606.435810][ T9428] erofs: (device loop0): mounted with root inode @ nid 36. [ 608.268228][ T9443] loop3: detected capacity change from 0 to 40427 [ 608.331061][ T9443] F2FS-fs (loop3): Unrecognized mount option "memory=low" or missing value [ 608.404411][ T9448] loop0: detected capacity change from 0 to 256 [ 608.560301][ T9448] FAT-fs (loop0): Directory bread(block 64) failed [ 608.731177][ T9448] FAT-fs (loop0): Directory bread(block 65) failed [ 608.767646][ T9448] FAT-fs (loop0): Directory bread(block 66) failed [ 609.031838][ T9448] FAT-fs (loop0): Directory bread(block 67) failed [ 609.072140][ T9448] FAT-fs (loop0): Directory bread(block 68) failed [ 609.078730][ T9448] FAT-fs (loop0): Directory bread(block 69) failed [ 609.131891][ T9448] FAT-fs (loop0): Directory bread(block 70) failed [ 609.138817][ T9448] FAT-fs (loop0): Directory bread(block 71) failed [ 609.172036][ T9448] FAT-fs (loop0): Directory bread(block 72) failed [ 609.182171][ T9448] FAT-fs (loop0): Directory bread(block 73) failed [ 610.462774][ T7679] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 610.871827][ T7679] usb 4-1: Using ep0 maxpacket: 16 [ 611.891908][ T7679] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.910683][ T7679] usb 4-1: config 0 has no interface number 0 [ 612.107215][ T7679] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 612.123033][ T7679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.151527][ T7679] usb 4-1: Product: syz [ 612.167345][ T7679] usb 4-1: Manufacturer: syz [ 612.759042][ T7679] usb 4-1: SerialNumber: syz [ 612.803716][ T7679] usb 4-1: config 0 descriptor?? [ 612.822074][ T7679] usb 4-1: can't set config #0, error -71 [ 612.839122][ T7679] usb 4-1: USB disconnect, device number 6 [ 613.143886][ T9502] loop1: detected capacity change from 0 to 256 [ 613.473185][ T9502] FAT-fs (loop1): Directory bread(block 64) failed [ 613.501784][ T9502] FAT-fs (loop1): Directory bread(block 65) failed [ 613.590863][ T9502] FAT-fs (loop1): Directory bread(block 66) failed [ 613.607998][ T9502] FAT-fs (loop1): Directory bread(block 67) failed [ 613.641844][ T9502] FAT-fs (loop1): Directory bread(block 68) failed [ 613.697177][ T9502] FAT-fs (loop1): Directory bread(block 69) failed [ 613.705718][ T9502] FAT-fs (loop1): Directory bread(block 70) failed [ 613.713190][ T9502] FAT-fs (loop1): Directory bread(block 71) failed [ 613.725798][ T9502] FAT-fs (loop1): Directory bread(block 72) failed [ 613.735573][ T9502] FAT-fs (loop1): Directory bread(block 73) failed [ 614.744713][ T9525] loop3: detected capacity change from 0 to 64 [ 618.728670][ T9564] loop4: detected capacity change from 0 to 1024 [ 619.279814][ T9564] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 620.291404][ T9582] virtio-fs: tag <(null)> not found [ 621.032772][ T9578] dccp_close: ABORT with 88 bytes unread [ 621.158015][ T9591] loop4: detected capacity change from 0 to 16 [ 621.197186][ T9591] erofs: (device loop4): mounted with root inode @ nid 36. [ 622.433728][ T9615] block nbd2: shutting down sockets [ 622.593921][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 623.565685][ T9633] loop2: detected capacity change from 0 to 16 [ 623.617650][ T9633] erofs: (device loop2): mounted with root inode @ nid 36. [ 624.912153][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.918519][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.533555][ T9653] loop4: detected capacity change from 0 to 40427 [ 625.589411][ T9653] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 625.597246][ T9653] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 625.609042][ T9653] F2FS-fs (loop4): invalid crc value [ 625.640506][ T9653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 626.266960][ T9653] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 626.275291][ T9653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 627.397546][ T4269] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 627.419035][ T4269] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 627.438368][ T9675] loop0: detected capacity change from 0 to 512 [ 627.538722][ T9675] EXT4-fs (loop0): Unrecognized mount option "mask=^MAY_APPEND" or missing value [ 629.173227][ T9693] Zero length message leads to an empty skb [ 631.153023][ T9713] loop1: detected capacity change from 0 to 40427 [ 631.429369][ T9713] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 631.437337][ T9713] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 631.509148][ T9713] F2FS-fs (loop1): invalid crc value [ 631.617787][ T9713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 632.300874][ T9719] crypto_alloc_aead failed rc=-2 [ 632.354118][ T9713] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 632.361316][ T9713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 634.106057][ T8753] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 634.136552][ T8753] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 634.150480][ T9752] loop3: detected capacity change from 0 to 2048 [ 635.547221][ T9752] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 635.581845][ T9752] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 636.152004][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 636.531968][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.555154][ T9779] loop4: detected capacity change from 0 to 128 [ 636.565541][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.605931][ T7] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 636.647531][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.669574][ T7] usb 4-1: config 0 descriptor?? [ 638.509105][ T9789] loop1: detected capacity change from 0 to 512 [ 638.599572][ T9789] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 638.662249][ T9789] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 638.798162][ T9789] EXT4-fs (loop1): 1 truncate cleaned up [ 638.827900][ T9789] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 638.861907][ T7] hid-led: probe of 0003:0FC5:B080.0004 failed with error -71 [ 638.912762][ T7] usb 4-1: USB disconnect, device number 7 [ 641.242290][ T9810] dccp_close: ABORT with 32 bytes unread [ 641.375721][ T9829] loop1: detected capacity change from 0 to 16 [ 641.468729][ T9829] erofs: (device loop1): mounted with root inode @ nid 36. [ 641.608488][ T9809] loop2: detected capacity change from 0 to 32768 [ 642.560303][ T9823] loop3: detected capacity change from 0 to 32768 [ 642.779231][ T4243] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 642.790998][ T4243] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 642.799428][ T4243] CPU: 0 PID: 4243 Comm: kworker/u4:6 Not tainted 5.15.179-syzkaller #0 [ 642.807769][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 642.817842][ T4243] Workqueue: writeback wb_workfn (flush-7:2) [ 642.823859][ T4243] RIP: 0010:bio_associate_blkg_from_css+0x113/0x960 [ 642.830469][ T4243] Code: ef 03 41 80 3c 2f 00 74 08 4c 89 f7 e8 c6 de c8 fd bd d0 05 00 00 49 03 2e 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 9f de c8 fd bb 90 00 00 00 48 03 5d [ 642.850092][ T4243] RSP: 0018:ffffc9000321f200 EFLAGS: 00010202 [ 642.856184][ T4243] RAX: 00000000000000ba RBX: ffffffff96c3e0d0 RCX: dffffc0000000000 [ 642.864170][ T4243] RDX: 0000000000000000 RSI: ffffffff96c3dfc0 RDI: ffff88802b05a8c0 [ 642.872165][ T4243] RBP: 00000000000005d0 R08: ffffffff8401ba94 R09: fffffbfff2131e19 [ 642.880150][ T4243] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff96c3dfc0 [ 642.888140][ T4243] R13: ffff88802b05a8c0 R14: ffff88802b05a8c8 R15: 1ffff1100560b519 [ 642.896128][ T4243] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 642.905072][ T4243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.911671][ T4243] CR2: 00007fe28dc68f98 CR3: 000000002b25b000 CR4: 00000000003506f0 [ 642.919793][ T4243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 642.927783][ T4243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 642.935820][ T4243] Call Trace: [ 642.939111][ T4243] [ 642.942047][ T4243] ? __die_body+0x5e/0xa0 [ 642.946373][ T4243] ? die_addr+0x95/0xc0 [ 642.950521][ T4243] ? exc_general_protection+0x327/0x4f0 [ 642.956080][ T4243] ? asm_exc_general_protection+0x22/0x30 [ 642.961793][ T4243] ? bio_associate_blkg+0x1e4/0x330 [ 642.966983][ T4243] ? bio_associate_blkg_from_css+0x113/0x960 [ 642.972970][ T4243] bio_associate_blkg+0x220/0x330 [ 642.977999][ T4243] lbmStartIO+0x207/0x4b0 [ 642.982329][ T4243] lbmWrite+0x379/0x4a0 [ 642.986479][ T4243] jfs_flush_journal+0x533/0xec0 [ 642.991415][ T4243] ? lmLogShutdown+0x960/0x960 [ 642.996173][ T4243] ? __lock_acquire+0x1ff0/0x1ff0 [ 643.001206][ T4243] ? do_raw_spin_lock+0x14a/0x370 [ 643.006259][ T4243] ? do_raw_spin_unlock+0x137/0x8b0 [ 643.011485][ T4243] jfs_write_inode+0x129/0x210 [ 643.016248][ T4243] __writeback_single_inode+0x644/0xe30 [ 643.021802][ T4243] writeback_sb_inodes+0xbce/0x1a40 [ 643.027023][ T4243] ? queue_io+0x560/0x560 [ 643.031351][ T4243] ? __writeback_inodes_wb+0x400/0x400 [ 643.036808][ T4243] ? queue_io+0x3d3/0x560 [ 643.041137][ T4243] wb_writeback+0x451/0xc50 [ 643.045639][ T4243] ? rcu_lock_release+0x20/0x20 [ 643.050482][ T4243] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 643.056456][ T4243] ? do_raw_spin_unlock+0x137/0x8b0 [ 643.061651][ T4243] wb_workfn+0x46c/0x1130 [ 643.065987][ T4243] ? mark_lock+0x98/0x340 [ 643.070312][ T4243] ? inode_wait_for_writeback+0x280/0x280 [ 643.076031][ T4243] ? read_lock_is_recursive+0x10/0x10 [ 643.081399][ T4243] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 643.087370][ T4243] ? print_irqtrace_events+0x210/0x210 [ 643.092819][ T4243] ? do_raw_spin_unlock+0x137/0x8b0 [ 643.098008][ T4243] process_one_work+0x8a1/0x10c0 [ 643.102945][ T4243] ? worker_detach_from_pool+0x260/0x260 [ 643.108576][ T4243] ? _raw_spin_lock_irqsave+0x120/0x120 [ 643.114119][ T4243] ? kthread_data+0x4e/0xc0 [ 643.118699][ T4243] ? wq_worker_running+0x97/0x170 [ 643.123716][ T4243] worker_thread+0xaca/0x1280 [ 643.128398][ T4243] kthread+0x3f6/0x4f0 [ 643.132457][ T4243] ? rcu_lock_release+0x20/0x20 [ 643.137299][ T4243] ? kthread_blkcg+0xd0/0xd0 [ 643.141878][ T4243] ret_from_fork+0x1f/0x30 [ 643.146291][ T4243] [ 643.149300][ T4243] Modules linked in: [ 643.163840][ T4243] ---[ end trace 7174b20e30a0d6c1 ]--- [ 643.169384][ T4243] RIP: 0010:bio_associate_blkg_from_css+0x113/0x960 [ 643.170206][ T9823] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 643.176507][ T4243] Code: ef 03 41 80 3c 2f 00 74 08 4c 89 f7 e8 c6 de c8 fd bd d0 05 00 00 49 03 2e 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 9f de c8 fd bb 90 00 00 00 48 03 5d [ 643.207010][ T4243] RSP: 0018:ffffc9000321f200 EFLAGS: 00010202 [ 643.221696][ T4243] RAX: 00000000000000ba RBX: ffffffff96c3e0d0 RCX: dffffc0000000000 [ 643.233004][ T4243] RDX: 0000000000000000 RSI: ffffffff96c3dfc0 RDI: ffff88802b05a8c0 [ 643.246413][ T26] audit: type=1800 audit(1743745489.851:15): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1533" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 643.290943][ T4243] RBP: 00000000000005d0 R08: ffffffff8401ba94 R09: fffffbfff2131e19 [ 643.331877][ T4243] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff96c3dfc0 [ 643.340037][ T4243] R13: ffff88802b05a8c0 R14: ffff88802b05a8c8 R15: 1ffff1100560b519 [ 643.348267][ T4243] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 643.357352][ T4243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.359859][ T9823] syz.3.1533 (9823) used greatest stack depth: 18992 bytes left [ 643.364149][ T4243] CR2: 00007f5fbab81000 CR3: 0000000063e18000 CR4: 00000000003506e0 [ 643.380139][ T4243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 643.389379][ T4243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 643.397465][ T4243] Kernel panic - not syncing: Fatal exception [ 643.403868][ T4243] Kernel Offset: disabled [ 643.408219][ T4243] Rebooting in 86400 seconds..