last executing test programs: 1m58.741624967s ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) 1m58.020390231s ago: executing program 3 (id=695): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 1m57.882909604s ago: executing program 3 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810) 1m57.689608918s ago: executing program 3 (id=699): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) 1m57.376369894s ago: executing program 3 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001040)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x2000) 1m56.920354603s ago: executing program 3 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x44}, {0x8, 0x5}, {0x9}, {0x4, 0x6}, {0x1, 0x1}], "7ecd4163b8fccf09"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1m56.349903274s ago: executing program 32 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x44}, {0x8, 0x5}, {0x9}, {0x4, 0x6}, {0x1, 0x1}], "7ecd4163b8fccf09"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 3.208195428s ago: executing program 0 (id=1637): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./bus\x00', 0x4000000, &(0x7f0000000780), 0x2, 0x9837, &(0x7f0000012f80)="$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") ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xd, 0x4, 0x10000, 0x4000800, {}, {0x4, 0x0, 0x1, 0x62, 0x0, 0x64, "cb866192"}, 0x80000001, 0x4, {}, 0x40}) 2.304788276s ago: executing program 1 (id=1640): r0 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x145e, 0x800, 0x0, 0x32b}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x3e, 0x4, 0x8}, {0x6, 0x4, 0xe, 0x3}]}) 2.142903068s ago: executing program 1 (id=1643): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000271) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) 1.976328122s ago: executing program 2 (id=1644): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) 1.976070362s ago: executing program 4 (id=1645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) 1.946530172s ago: executing program 0 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r1, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x34}}, 0x4000800) 1.910130953s ago: executing program 1 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.743934986s ago: executing program 1 (id=1648): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) truncate(&(0x7f0000000080)='./file1\x00', 0x1c00) 1.613715988s ago: executing program 2 (id=1649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r2, @ANYBLOB="08000100"], 0x24}}, 0x0) 1.440418732s ago: executing program 1 (id=1650): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) 1.402158913s ago: executing program 4 (id=1651): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x2, {0x1, 0x0, 0x6}, 0x1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003300)=[{{&(0x7f0000000480)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x8011) 1.373171083s ago: executing program 0 (id=1652): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7ff}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x9, 0x1800}, {0x0, 0x0, 0x1000}], 0x2) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x7fff}], 0x1, 0x0) 1.354275104s ago: executing program 2 (id=1653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0xd, 0x1, 0x1, 0xe9d8, 0x0, 0x8, 0x8}]}) 1.292215665s ago: executing program 1 (id=1654): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1000000000000024) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) 1.274904965s ago: executing program 4 (id=1655): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2afc, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x1, 0x800002}, &(0x7f0000000400), &(0x7f00000005c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_uring_enter(r1, 0x4da3, 0xd93, 0x0, 0x0, 0x0) 1.084347489s ago: executing program 2 (id=1656): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1.05256375s ago: executing program 4 (id=1657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x348, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x240, 0x1, [@m_xt={0x130, 0xa, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4d, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab"}}, @TCA_IPT_TARG={0x55, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b385"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xdc, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xf4, 0x1, [@m_gact={0xf0, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x101, 0x3, 0x3, 0x10000}}]}, {0xa9, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a45472c40db288e9fd9c34c8ceed8fb34c3bb42b89f5d42e9ec5f7e781cf88ee98688cd4e3817aab179991acb608cb1c9d6602df0c66e9c85c04ed665949bc57820d143f2c35d2b11306076c500bca5dfe8a73bb5282cd3d23713e622e54ddf68775a8b65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 968.296221ms ago: executing program 2 (id=1658): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x12}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 876.287063ms ago: executing program 4 (id=1659): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) membarrier(0x2, 0x0) 873.327903ms ago: executing program 2 (id=1660): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 390.484202ms ago: executing program 0 (id=1661): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) 141.534347ms ago: executing program 0 (id=1662): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x4000, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 290.39µs ago: executing program 4 (id=1663): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x23e, &(0x7f00000007c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r0, &(0x7f0000004980)=""/177, 0xb1) 0s ago: executing program 0 (id=1664): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1}}], 0x1, 0x6bf68237da62a01, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) kernel console output (not intermixed with test programs): Product: syz [ 206.644811][ T5827] usb 3-1: Manufacturer: syz [ 206.656738][ T5827] hub 3-1:4.0: USB hub found [ 206.859301][ T5827] hub 3-1:4.0: 2 ports detected [ 206.866433][ T5827] hub 3-1:4.0: insufficient power available to use all downstream ports [ 206.962013][ T8456] loop1: detected capacity change from 0 to 131072 [ 206.975259][ T8456] F2FS-fs (loop1): invalid crc value [ 206.986310][ T8456] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.032386][ T8456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.068477][ T5827] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 207.081290][ T5827] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 207.137859][ T5827] usb 3-1: USB disconnect, device number 9 [ 207.185801][ T8475] loop0: detected capacity change from 0 to 512 [ 207.195286][ T8475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.212401][ T8475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002] [ 207.224640][ T8475] System zones: 1-12 [ 207.234778][ T8475] EXT4-fs (loop0): 1 truncate cleaned up [ 207.242223][ T8475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.312317][ T8475] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 207.394636][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.818105][ T8488] netlink: 'syz.0.945': attribute type 9 has an invalid length. [ 207.826269][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.945'. [ 208.273239][ T8485] loop1: detected capacity change from 0 to 32768 [ 208.285225][ T8485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.940 (8485) [ 208.323583][ T8485] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.334471][ T8485] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 208.354170][ T8485] BTRFS info (device loop1): setting nodatacow, compression disabled [ 208.372823][ T8485] BTRFS info (device loop1): max_inline at 0 [ 208.378915][ T8485] BTRFS info (device loop1): enabling disk space caching [ 208.389436][ T8485] BTRFS info (device loop1): turning off barriers [ 208.399263][ T8485] BTRFS info (device loop1): turning on flush-on-commit [ 208.411429][ T8485] BTRFS info (device loop1): doing ref verification [ 208.418102][ T8485] BTRFS info (device loop1): force clearing of disk cache [ 208.427736][ T8485] BTRFS info (device loop1): enabling ssd optimizations [ 208.437190][ T8485] BTRFS info (device loop1): max_inline at 4096 [ 208.444000][ T8485] BTRFS info (device loop1): disk space caching is enabled [ 208.497713][ T8485] BTRFS info (device loop1): auto enabling async discard [ 208.512031][ T8485] BTRFS info (device loop1): rebuilding free space tree [ 208.554808][ T8485] BTRFS info (device loop1): disabling free space tree [ 208.577709][ T8485] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.605086][ T8485] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.720065][ T28] audit: type=1800 audit(1892505986.833:146): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.940" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 208.801275][ T8495] loop0: detected capacity change from 0 to 32768 [ 208.873197][ T8495] loop0: p1 p2 p3 < p5 p6 p7 > [ 208.910067][ T8495] loop0: p2 size 16775168 extends beyond EOD, truncated [ 208.939451][ T8495] loop0: p5 start 4294970168 is beyond EOD, truncated [ 208.981826][ T8524] loop4: detected capacity change from 0 to 512 [ 208.994077][ T8524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.034632][ T8524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002] [ 209.044856][ T8524] System zones: 1-12 [ 209.055677][ T8524] EXT4-fs (loop4): 1 truncate cleaned up [ 209.063301][ T8524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.066095][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.173268][ T8524] EXT4-fs error (device loop4): mb_free_blocks:1938: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 209.317518][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.486993][ T8532] loop0: detected capacity change from 0 to 64 [ 209.488356][ T8531] loop4: detected capacity change from 0 to 512 [ 209.603793][ T8531] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.957: corrupted in-inode xattr: invalid ea_ino [ 209.626581][ T8531] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.957: couldn't read orphan inode 15 (err -117) [ 209.661574][ T8531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.686880][ T8531] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #2: block 3: comm syz.4.957: lblock 0 mapped to illegal pblock 3 (length 1) [ 209.708484][ T8531] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.957: error -117 reading directory block [ 209.722614][ T5784] Trying to free block not in datazone [ 209.743956][ T5784] Trying to free block not in datazone [ 209.757249][ T8537] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #2: block 3: comm syz.4.957: lblock 0 mapped to illegal pblock 3 (length 1) [ 209.811508][ T8537] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.957: error -117 reading directory block [ 209.994297][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.014035][ T8543] loop0: detected capacity change from 0 to 512 [ 210.049302][ T8543] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.088318][ T8543] EXT4-fs (loop0): 1 truncate cleaned up [ 210.095828][ T8543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.175884][ T8543] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #2: block 13: comm syz.0.960: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 210.248631][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.291431][ T8528] loop2: detected capacity change from 0 to 32768 [ 210.319831][ T8528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.966 (8528) [ 210.384254][ T8528] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.414647][ T8528] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 210.440104][ T8528] BTRFS info (device loop2): setting nodatacow, compression disabled [ 210.459860][ T8528] BTRFS info (device loop2): max_inline at 0 [ 210.465980][ T8528] BTRFS info (device loop2): enabling disk space caching [ 210.470049][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.479718][ T8528] BTRFS info (device loop2): turning off barriers [ 210.496634][ T8528] BTRFS info (device loop2): turning on flush-on-commit [ 210.511090][ T8528] BTRFS info (device loop2): doing ref verification [ 210.517917][ T8528] BTRFS info (device loop2): force clearing of disk cache [ 210.531896][ T8528] BTRFS info (device loop2): enabling ssd optimizations [ 210.539171][ T8528] BTRFS info (device loop2): max_inline at 4096 [ 210.554577][ T8528] BTRFS info (device loop2): disk space caching is enabled [ 210.623902][ T8528] BTRFS info (device loop2): auto enabling async discard [ 210.636943][ T8528] BTRFS info (device loop2): rebuilding free space tree [ 210.677653][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.691824][ T8528] BTRFS info (device loop2): disabling free space tree [ 210.699077][ T8528] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.716546][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.727901][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 210.742291][ T8528] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.754553][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.774133][ T27] usb 5-1: config 0 descriptor?? [ 210.833832][ T28] audit: type=1800 audit(1892505988.943:147): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.966" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 211.108213][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.290560][ T27] wacom 0003:056A:030C.0004: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.4-1/input0 [ 211.534336][ T5861] usb 5-1: USB disconnect, device number 2 [ 211.795675][ T8584] loop2: detected capacity change from 0 to 8192 [ 211.847543][ T8576] loop1: detected capacity change from 0 to 32768 [ 211.869596][ T8576] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 211.880459][ T8576] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.911863][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.927836][ T8576] XFS (loop1): Ending clean mount [ 211.936435][ T8576] XFS (loop1): Quotacheck needed: Please wait. [ 211.974294][ T8576] XFS (loop1): Quotacheck: Done. [ 212.065853][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.111611][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.140918][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.165845][ T788] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 212.178728][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.201472][ T788] usb 1-1: config 0 descriptor?? [ 212.516892][ T8594] loop2: detected capacity change from 0 to 32768 [ 212.535678][ T8594] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 212.545558][ T8594] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.587092][ T8594] XFS (loop2): Ending clean mount [ 212.602640][ T8594] XFS (loop2): Quotacheck needed: Please wait. [ 212.625701][ T788] playstation 0003:054C:0CE6.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 212.692498][ T8594] XFS (loop2): Quotacheck: Done. [ 212.817624][ T8599] loop4: detected capacity change from 0 to 32768 [ 212.820091][ T788] playstation 0003:054C:0CE6.0005: Failed to retrieve feature with reportID 9: -71 [ 212.833974][ T788] playstation 0003:054C:0CE6.0005: Failed to retrieve DualSense pairing info: -71 [ 212.843423][ T788] playstation 0003:054C:0CE6.0005: Failed to get MAC address from DualSense [ 212.852754][ T788] playstation 0003:054C:0CE6.0005: Failed to create dualsense. [ 212.859068][ T8599] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 212.866218][ T788] playstation: probe of 0003:054C:0CE6.0005 failed with error -71 [ 212.882284][ T788] usb 1-1: USB disconnect, device number 7 [ 212.905144][ T8599] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.915827][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.015051][ T7807] ocfs2: Unmounting device (7,4) on (node local) [ 213.506183][ T8617] loop0: detected capacity change from 0 to 256 [ 213.577008][ T8617] FAT-fs (loop0): Directory bread(block 64) failed [ 213.594202][ T8617] FAT-fs (loop0): Directory bread(block 65) failed [ 213.611436][ T8617] FAT-fs (loop0): Directory bread(block 66) failed [ 213.618430][ T8617] FAT-fs (loop0): Directory bread(block 67) failed [ 213.639844][ T8617] FAT-fs (loop0): Directory bread(block 68) failed [ 213.660027][ T8617] FAT-fs (loop0): Directory bread(block 69) failed [ 213.684651][ T8617] FAT-fs (loop0): Directory bread(block 70) failed [ 213.705783][ T8611] loop4: detected capacity change from 0 to 32768 [ 213.712715][ T8617] FAT-fs (loop0): Directory bread(block 71) failed [ 213.719399][ T8617] FAT-fs (loop0): Directory bread(block 72) failed [ 213.729517][ T8611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.979 (8611) [ 213.743234][ T8617] FAT-fs (loop0): Directory bread(block 73) failed [ 213.764362][ T8611] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.789803][ T8611] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 213.798801][ T8611] BTRFS info (device loop4): setting nodatacow, compression disabled [ 213.820058][ T8611] BTRFS info (device loop4): max_inline at 0 [ 213.827356][ T8611] BTRFS info (device loop4): enabling disk space caching [ 213.849783][ T8611] BTRFS info (device loop4): turning off barriers [ 213.856474][ T8611] BTRFS info (device loop4): turning on flush-on-commit [ 213.880001][ T8611] BTRFS info (device loop4): doing ref verification [ 213.887695][ T8611] BTRFS info (device loop4): force clearing of disk cache [ 213.898854][ T8611] BTRFS info (device loop4): enabling ssd optimizations [ 213.906641][ T8611] BTRFS info (device loop4): max_inline at 4096 [ 213.913760][ T8611] BTRFS info (device loop4): disk space caching is enabled [ 214.043174][ T8615] loop1: detected capacity change from 0 to 40427 [ 214.070433][ T8615] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 214.089025][ T8615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 214.111672][ T8611] BTRFS info (device loop4): auto enabling async discard [ 214.134195][ T8615] F2FS-fs (loop1): invalid crc value [ 214.135020][ T8611] BTRFS info (device loop4): rebuilding free space tree [ 214.192288][ T8615] F2FS-fs (loop1): Found nat_bits in checkpoint [ 214.218127][ T8611] BTRFS info (device loop4): disabling free space tree [ 214.226427][ T8611] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.249597][ T8611] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.328904][ T8615] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 214.337136][ T8615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.364449][ T28] audit: type=1800 audit(1892505992.473:148): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.979" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 214.479801][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 214.628359][ T8646] loop2: detected capacity change from 0 to 64 [ 214.670191][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 214.679414][ T23] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.692338][ T23] usb 1-1: config 0 has no interface number 0 [ 214.721170][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.744004][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.766701][ T23] usb 1-1: Product: syz [ 214.771148][ T7807] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.772727][ T5788] Trying to free block not in datazone [ 214.787158][ T23] usb 1-1: Manufacturer: syz [ 214.798803][ T5788] Trying to free block not in datazone [ 214.804596][ T23] usb 1-1: SerialNumber: syz [ 214.823271][ T23] usb 1-1: config 0 descriptor?? [ 214.837245][ T23] smsc95xx v2.0.0 [ 214.844838][ T23] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 214.870860][ T23] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 214.994885][ T8648] loop2: detected capacity change from 0 to 256 [ 215.068860][ T8648] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 215.085871][ T8639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.112067][ T5827] usb 1-1: USB disconnect, device number 8 [ 215.560417][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 215.749799][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 215.766511][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.786231][ T23] usb 5-1: config 0 has no interface number 0 [ 215.795462][ T23] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 215.809717][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.828270][ T23] usb 5-1: Product: syz [ 215.838401][ T23] usb 5-1: Manufacturer: syz [ 215.848543][ T23] usb 5-1: SerialNumber: syz [ 215.859845][ T23] usb 5-1: config 0 descriptor?? [ 215.874455][ T23] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 216.130087][ T8669] loop2: detected capacity change from 0 to 32768 [ 216.138662][ T8669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.996 (8669) [ 216.166661][ T8669] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.190036][ T8669] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 216.199041][ T8669] BTRFS info (device loop2): setting nodatacow, compression disabled [ 216.218873][ T8669] BTRFS info (device loop2): max_inline at 0 [ 216.227367][ T8669] BTRFS info (device loop2): enabling disk space caching [ 216.234815][ T8669] BTRFS info (device loop2): turning off barriers [ 216.241652][ T8669] BTRFS info (device loop2): turning on flush-on-commit [ 216.248862][ T8669] BTRFS info (device loop2): doing ref verification [ 216.255599][ T8669] BTRFS info (device loop2): force clearing of disk cache [ 216.263344][ T8669] BTRFS info (device loop2): enabling ssd optimizations [ 216.270816][ T8669] BTRFS info (device loop2): max_inline at 4096 [ 216.284253][ T8669] BTRFS info (device loop2): disk space caching is enabled [ 216.359697][ T8669] BTRFS info (device loop2): auto enabling async discard [ 216.394750][ T8669] BTRFS info (device loop2): rebuilding free space tree [ 216.445109][ T8669] BTRFS info (device loop2): disabling free space tree [ 216.474339][ T8669] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.505658][ T8669] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.615955][ T8677] loop0: detected capacity change from 0 to 32768 [ 216.629848][ T28] audit: type=1800 audit(1892505994.723:149): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.996" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 216.686625][ T23] gspca_spca1528: reg_w err -71 [ 216.710876][ T8677] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.722283][ T8696] loop1: detected capacity change from 0 to 4096 [ 216.729870][ T23] spca1528: probe of 5-1:0.1 failed with error -71 [ 216.739328][ T23] usb 5-1: USB disconnect, device number 3 [ 216.856798][ T8677] XFS (loop0): Ending clean mount [ 216.865152][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.867992][ T8677] XFS (loop0): Quotacheck needed: Please wait. [ 216.992659][ T8677] XFS (loop0): Quotacheck: Done. [ 217.351905][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.396529][ T8715] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 217.695681][ T8724] loop1: detected capacity change from 0 to 16 [ 217.707504][ T8724] erofs: (device loop1): mounted with root inode @ nid 36. [ 217.992162][ T8718] loop4: detected capacity change from 0 to 32768 [ 218.011463][ T8718] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1009 (8718) [ 218.042898][ T8718] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 218.065577][ T8720] loop2: detected capacity change from 0 to 32768 [ 218.070260][ T8718] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 218.081102][ T8720] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 218.089849][ T8718] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 218.099290][ T8718] BTRFS info (device loop4): use zstd compression, level 3 [ 218.108391][ T8718] BTRFS info (device loop4): using free space tree [ 218.121501][ T8720] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.246150][ T8718] BTRFS info (device loop4): enabling ssd optimizations [ 218.258449][ T8718] BTRFS info (device loop4): auto enabling async discard [ 218.321189][ T8726] loop1: detected capacity change from 0 to 32768 [ 218.332773][ T8726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1012 (8726) [ 218.348714][ T8726] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.350520][ T28] audit: type=1800 audit(1892505996.453:150): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1009" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 218.361943][ T8726] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 218.395124][ T8726] BTRFS info (device loop1): setting nodatacow, compression disabled [ 218.406266][ T8726] BTRFS info (device loop1): max_inline at 0 [ 218.419496][ T8726] BTRFS info (device loop1): enabling disk space caching [ 218.427556][ T8726] BTRFS info (device loop1): turning off barriers [ 218.428338][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 218.456713][ T7807] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 218.468712][ T8726] BTRFS info (device loop1): turning on flush-on-commit [ 218.493341][ T8726] BTRFS info (device loop1): doing ref verification [ 218.520147][ T8726] BTRFS info (device loop1): force clearing of disk cache [ 218.527375][ T8726] BTRFS info (device loop1): enabling ssd optimizations [ 218.560144][ T8726] BTRFS info (device loop1): max_inline at 4096 [ 218.570094][ T8726] BTRFS info (device loop1): disk space caching is enabled [ 218.769857][ T8726] BTRFS info (device loop1): auto enabling async discard [ 218.819253][ T8726] BTRFS info (device loop1): rebuilding free space tree [ 218.900985][ T8726] BTRFS info (device loop1): disabling free space tree [ 218.908018][ T8726] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.954627][ T8726] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.106420][ T28] audit: type=1800 audit(1892505997.213:151): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1012" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 219.414973][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.598641][ T8762] loop4: detected capacity change from 0 to 32768 [ 219.677569][ T8762] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 219.688356][ T8762] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 219.804586][ T8762] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 219.875770][ T8762] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 220.309434][ T8772] loop1: detected capacity change from 0 to 32768 [ 220.787625][ T8783] loop2: detected capacity change from 0 to 32768 [ 220.812489][ T8783] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.846928][ T8783] XFS (loop2): Ending clean mount [ 220.874051][ T8783] XFS (loop2): Quotacheck needed: Please wait. [ 220.920221][ T8783] XFS (loop2): Quotacheck: Done. [ 220.934904][ T28] audit: type=1326 audit(1892505999.043:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eacd8ec29 code=0x7ffc0000 [ 220.965287][ T28] audit: type=1326 audit(1892505999.043:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eacd8ec29 code=0x7ffc0000 [ 220.989157][ T28] audit: type=1326 audit(1892505999.043:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3eacd8ec29 code=0x7ffc0000 [ 221.013375][ T28] audit: type=1326 audit(1892505999.043:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eacd8ec29 code=0x7ffc0000 [ 221.037563][ T28] audit: type=1326 audit(1892505999.043:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3eacd8ec29 code=0x7ffc0000 [ 221.086210][ T28] audit: type=1326 audit(1892505999.043:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eacd8ec29 code=0x7ffc0000 [ 221.337454][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.368374][ T8810] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 221.379501][ T8810] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 222.164590][ T8820] input: syz1 as /devices/virtual/input/input12 [ 222.792600][ T8813] loop4: detected capacity change from 0 to 131072 [ 222.805973][ T8813] F2FS-fs (loop4): invalid crc value [ 222.852175][ T8813] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.905428][ T8813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 222.949756][ T28] audit: type=1800 audit(1892506001.043:158): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1030" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 223.053043][ T8818] loop0: detected capacity change from 0 to 32768 [ 224.231781][ T8845] loop1: detected capacity change from 0 to 32768 [ 224.279036][ T8845] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 224.290800][ T8845] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.374972][ T8845] XFS (loop1): Ending clean mount [ 224.385354][ T8845] XFS (loop1): Quotacheck needed: Please wait. [ 224.402078][ T8850] loop0: detected capacity change from 0 to 40427 [ 224.423894][ T8850] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 224.436862][ T8850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 224.493197][ T8850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 224.542738][ T8845] XFS (loop1): Quotacheck: Done. [ 224.604520][ T8850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 224.632249][ T8850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.685966][ T8850] syz.0.1047: attempt to access beyond end of device [ 224.685966][ T8850] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 224.750414][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.842972][ T5784] syz-executor: attempt to access beyond end of device [ 224.842972][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.898688][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 225.273253][ T8874] loop1: detected capacity change from 0 to 1024 [ 225.325497][ T8874] hfsplus: found bad thread record in catalog [ 225.426430][ T12] hfsplus: b-tree write err: -5, ino 4 [ 225.665561][ T8871] loop4: detected capacity change from 0 to 32768 [ 225.723477][ T8871] ERROR: (device loop4): dtReadFirst: btstack overrun [ 225.723477][ T8871] [ 225.754988][ T8871] ERROR: (device loop4): remounting filesystem as read-only [ 225.758122][ T8878] loop0: detected capacity change from 0 to 512 [ 225.769074][ T8871] btstack dump: [ 225.776034][ T8871] bn = 0, index = 0 [ 225.787425][ T8871] bn = 0, index = 0 [ 225.795400][ T8878] EXT4-fs: Ignoring removed bh option [ 225.795462][ T8871] bn = 0, index = 0 [ 225.819824][ T8871] bn = 0, index = 0 [ 225.823720][ T8871] bn = 0, index = 0 [ 225.828098][ T8878] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.837336][ T8871] bn = 0, index = 0 [ 225.849777][ T8871] bn = 0, index = 0 [ 225.854656][ T8871] bn = 0, index = 0 [ 225.860338][ T8878] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 225.910459][ T8878] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 225.968909][ T8878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 225.989413][ T8885] loop2: detected capacity change from 0 to 128 [ 226.026794][ T8878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.058965][ T8885] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 226.091541][ T8885] hpfs: filesystem error: improperly stopped [ 226.097707][ T8885] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 226.098770][ T8891] @: renamed from vlan0 (while UP) [ 226.111157][ T8885] hpfs: You really don't want any checks? You are crazy... [ 226.119147][ T8885] hpfs: hpfs_map_sector(): read error [ 226.159832][ T8885] hpfs: code page support is disabled [ 226.189755][ T8885] hpfs: hpfs_map_4sectors(): unaligned read [ 226.196262][ T8885] hpfs: hpfs_map_4sectors(): unaligned read [ 226.219713][ T8885] hpfs: filesystem error: unable to find root dir [ 226.245686][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.346163][ T8895] loop4: detected capacity change from 0 to 1024 [ 226.359573][ T8895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.369000][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 226.399250][ T8895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.488059][ T8905] loop1: detected capacity change from 0 to 128 [ 226.507028][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.725471][ T8911] loop1: detected capacity change from 0 to 4096 [ 226.734712][ T8911] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 226.766620][ T8911] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 226.778668][ T8911] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 226.827625][ T1136] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 226.839340][ T8911] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 226.847336][ T8911] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 226.858320][ T8911] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 226.865340][ T42] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 227.119053][ T8916] loop1: detected capacity change from 0 to 8192 [ 227.128128][ T8916] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.151797][ T8916] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 227.164745][ T8916] REISERFS (device loop1): using ordered data mode [ 227.174350][ T8916] reiserfs: using flush barriers [ 227.194202][ T8916] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.220503][ T8916] REISERFS (device loop1): checking transaction log (loop1) [ 227.230949][ T8916] REISERFS (device loop1): Using r5 hash to sort names [ 227.247301][ T8919] loop2: detected capacity change from 0 to 1024 [ 227.256005][ T8916] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 227.270769][ T8916] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 227.295002][ T8916] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 227.310454][ T8916] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 227.326772][ T8916] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 227.357508][ T8919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.383419][ T8919] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.409940][ T28] audit: type=1800 audit(1892506005.513:159): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1071" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 227.474524][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.840181][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'. [ 227.946883][ T8935] loop2: detected capacity change from 0 to 4096 [ 228.067949][ T8923] loop0: detected capacity change from 0 to 32768 [ 228.082099][ T8923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1072 (8923) [ 228.119994][ T8923] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.145764][ T8923] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 228.172586][ T8923] BTRFS info (device loop0): enabling ssd optimizations [ 228.195065][ T8923] BTRFS info (device loop0): using spread ssd allocation scheme [ 228.213101][ T8923] BTRFS info (device loop0): using free space tree [ 228.318801][ T8923] BTRFS info (device loop0): auto enabling async discard [ 228.397046][ T8930] loop4: detected capacity change from 0 to 40427 [ 228.406352][ T8930] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 228.415181][ T8930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.428048][ T8930] F2FS-fs (loop4): invalid crc value [ 228.440382][ T8930] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.500965][ T8930] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 228.521332][ T8930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.613105][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.819841][ T5878] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.932135][ T8983] sp0: Synchronizing with TNC [ 229.958409][ T8974] loop1: detected capacity change from 0 to 32768 [ 230.005366][ T8974] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.021852][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.038114][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.064844][ T5878] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 230.089877][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.100935][ T5878] usb 1-1: config 0 descriptor?? [ 230.192122][ T8974] XFS (loop1): Ending clean mount [ 230.205683][ T8974] XFS (loop1): Quotacheck needed: Please wait. [ 230.295662][ T8974] XFS (loop1): Quotacheck: Done. [ 230.478207][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.528213][ T5878] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 230.568205][ T5878] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 230.589135][ T5878] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 230.925437][ T5878] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71 [ 230.933092][ T8954] loop2: detected capacity change from 0 to 131072 [ 230.944287][ T8954] F2FS-fs (loop2): invalid crc value [ 230.967505][ T8954] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.969299][ T5878] usb 1-1: USB disconnect, device number 9 [ 231.059778][ T8954] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.131030][ T9013] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 231.360875][ T9019] wg0: entered promiscuous mode [ 231.365911][ T9019] wg0: entered allmulticast mode [ 231.820204][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 231.874298][ T9018] loop4: detected capacity change from 0 to 32768 [ 231.922709][ T9018] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.974864][ T9018] XFS (loop4): Ending clean mount [ 231.985763][ T9018] XFS (loop4): Quotacheck needed: Please wait. [ 232.037671][ T9018] XFS (loop4): Quotacheck: Done. [ 232.039783][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 232.060340][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.078362][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.088989][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 232.102807][ T5878] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 232.112231][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.126785][ T5878] usb 2-1: config 0 descriptor?? [ 232.231380][ T9044] loop2: detected capacity change from 0 to 64 [ 232.360910][ T7807] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.593830][ T5878] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0007/input/input16 [ 232.657768][ T9052] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1113'. [ 232.713890][ T5878] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0007/input/input17 [ 232.755820][ T5878] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 232.868772][ T5878] usb 2-1: USB disconnect, device number 9 [ 232.937424][ T9054] loop2: detected capacity change from 0 to 4096 [ 232.982909][ T9054] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 233.063551][ T9054] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 233.131450][ T9054] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 233.666539][ T9065] loop1: detected capacity change from 0 to 8192 [ 233.702700][ T9065] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.730165][ T9065] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 233.747932][ T9065] REISERFS (device loop1): using ordered data mode [ 233.769795][ T9065] reiserfs: using flush barriers [ 233.778634][ T9065] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.847209][ T9065] REISERFS (device loop1): checking transaction log (loop1) [ 234.046915][ T9065] REISERFS (device loop1): Using tea hash to sort names [ 234.060498][ T9065] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 234.078799][ T9065] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 234.183147][ T9074] loop0: detected capacity change from 0 to 512 [ 234.235637][ T9074] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1122: corrupted in-inode xattr: invalid ea_ino [ 234.257635][ T9074] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1122: couldn't read orphan inode 15 (err -117) [ 234.365538][ T9074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.593204][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.765039][ T9050] loop4: detected capacity change from 0 to 131072 [ 234.782550][ T9088] @: renamed from vlan0 (while UP) [ 234.802838][ T9050] F2FS-fs (loop4): invalid crc value [ 234.838382][ T9050] F2FS-fs (loop4): Found nat_bits in checkpoint [ 234.946797][ T9050] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 234.998799][ T9100] loop1: detected capacity change from 0 to 128 [ 235.027919][ T9100] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.041787][ T9100] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.071009][ T9100] EXT4-fs (loop1): shut down requested (1) [ 235.132353][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.598956][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 236.239839][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.429717][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 236.437276][ T5878] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.446787][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.490463][ T5878] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.512033][ T9131] loop4: detected capacity change from 0 to 40427 [ 236.517921][ T5878] pvrusb2: ********** [ 236.522986][ T5878] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.524345][ T9131] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 236.543433][ T5878] pvrusb2: Important functionality might not be entirely working. [ 236.559998][ T5878] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.568122][ T9131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.581613][ T5878] pvrusb2: ********** [ 236.607949][ T9131] F2FS-fs (loop4): invalid crc value [ 236.636426][ T9131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.707371][ T2319] pvrusb2: Invalid write control endpoint [ 236.759842][ T9131] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 236.787717][ T9131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.847221][ T2319] pvrusb2: Invalid write control endpoint [ 236.856112][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.880782][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.904614][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.925600][ T2319] pvrusb2: Device being rendered inoperable [ 236.949180][ T9132] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 236.954121][ T9135] loop2: detected capacity change from 0 to 40427 [ 236.967379][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 236.989809][ T5861] usb 2-1: USB disconnect, device number 10 [ 236.995758][ T9137] loop0: detected capacity change from 0 to 32768 [ 236.996026][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 237.028602][ T9135] F2FS-fs (loop2): invalid crc value [ 237.035531][ T2319] pvrusb2: Attached sub-driver cx25840 [ 237.036802][ T9137] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.041551][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 237.059246][ T9135] F2FS-fs (loop2): Found nat_bits in checkpoint [ 237.064024][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 237.152824][ T9135] F2FS-fs (loop2): Start checkpoint disabled! [ 237.176322][ T9135] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 237.187884][ T9137] XFS (loop0): Ending clean mount [ 237.205804][ T9137] XFS (loop0): Quotacheck needed: Please wait. [ 237.290546][ T9137] XFS (loop0): Quotacheck: Done. [ 237.409248][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.439945][ T12] kworker/u4:1: attempt to access beyond end of device [ 237.439945][ T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 237.456858][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.469563][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.477772][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.863696][ T9160] loop4: detected capacity change from 0 to 1024 [ 237.871637][ T9160] EXT4-fs: Ignoring removed bh option [ 237.880762][ T9160] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.933493][ T9160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.035464][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.359417][ T9158] loop1: detected capacity change from 0 to 32768 [ 238.377039][ T9158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1152 (9158) [ 238.429785][ T9158] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.449863][ T9158] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 238.458781][ T9158] BTRFS info (device loop1): using free space tree [ 238.693285][ T9158] BTRFS info (device loop1): enabling ssd optimizations [ 238.740011][ T9158] BTRFS info (device loop1): auto enabling async discard [ 238.850129][ T28] audit: type=1800 audit(1892506016.943:160): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1152" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 239.114298][ T5786] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 239.227592][ T9201] loop2: detected capacity change from 0 to 8192 [ 239.458306][ T9205] loop0: detected capacity change from 0 to 2048 [ 239.536850][ T9205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.636177][ T9209] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 239.645237][ T28] audit: type=1800 audit(1892506017.753:161): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1163" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 239.679993][ T9204] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 239.737769][ T9205] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 239.759812][ T28] audit: type=1800 audit(1892506017.753:162): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1163" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 239.764079][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 239.819942][ T9205] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.819942][ T9205] [ 239.841268][ T9205] EXT4-fs (loop0): Total free blocks count 0 [ 239.870976][ T9205] EXT4-fs (loop0): Free/Dirty block details [ 239.893101][ T9205] EXT4-fs (loop0): free_blocks=4096 [ 239.898553][ T9205] EXT4-fs (loop0): dirty_blocks=16 [ 239.911967][ T9205] EXT4-fs (loop0): Block reservation details [ 239.929876][ T9205] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 240.054246][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.199998][ T5793] Bluetooth: hci0: ISO packet too small [ 240.475244][ T9213] loop2: detected capacity change from 0 to 32768 [ 240.648270][ T9215] loop1: detected capacity change from 0 to 32768 [ 240.687069][ T9215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1166 (9215) [ 240.729802][ T9215] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.749773][ T9215] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 240.769050][ T9215] BTRFS info (device loop1): setting nodatasum [ 240.779150][ T9215] BTRFS info (device loop1): force zlib compression, level 3 [ 240.801774][ T9225] loop0: detected capacity change from 0 to 256 [ 240.809690][ T9215] BTRFS info (device loop1): enabling ssd optimizations [ 240.829996][ T9215] BTRFS info (device loop1): allowing degraded mounts [ 240.836849][ T9215] BTRFS info (device loop1): using free space tree [ 241.069093][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.200128][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.410087][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 241.427965][ T788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.459546][ T788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.499800][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.516915][ T788] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 241.536692][ T9256] loop2: detected capacity change from 0 to 64 [ 241.548158][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.563591][ T28] audit: type=1800 audit(1892506019.673:163): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1180" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 241.603148][ T788] usb 1-1: config 0 descriptor?? [ 241.612839][ T9258] loop4: detected capacity change from 0 to 512 [ 241.697907][ T28] audit: type=1800 audit(1892506019.803:164): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1179" name="file1" dev="loop4" ino=1048622 res=0 errno=0 [ 241.767160][ T1136] FAT-fs (loop4): error, invalid FAT chain (i_pos 2306, last_block 8) [ 241.780327][ T1136] FAT-fs (loop4): Filesystem has been set read-only [ 241.787079][ T1136] FAT-fs (loop4): error, corrupted file size (i_pos 2306, 2058) [ 241.925619][ T9267] binder: BINDER_SET_CONTEXT_MGR already set [ 241.939982][ T9267] binder: 9266:9267 ioctl 4018620d 200000004a80 returned -16 [ 242.040441][ T788] hid (null): invalid report_size 892956265 [ 242.046604][ T788] hid (null): invalid report_size 892956265 [ 242.056915][ T9274] loop2: detected capacity change from 0 to 512 [ 242.245462][ T788] usb 1-1: USB disconnect, device number 10 [ 242.316114][ T9284] loop1: detected capacity change from 0 to 256 [ 242.360841][ T9284] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 242.383744][ T9288] loop4: detected capacity change from 0 to 128 [ 242.415197][ T9284] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 242.427635][ T9284] exFAT-fs (loop1): Filesystem has been set read-only [ 242.647613][ T9293] loop2: detected capacity change from 0 to 4096 [ 242.937854][ T9307] netlink: 'syz.0.1201': attribute type 3 has an invalid length. [ 243.113211][ T9322] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 243.347873][ T9333] loop4: detected capacity change from 0 to 16 [ 243.366172][ T9333] erofs: (device loop4): mounted with root inode @ nid 36. [ 243.391938][ T9329] loop0: detected capacity change from 0 to 2048 [ 243.414317][ T9329] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.414681][ T9333] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 243.452937][ T5793] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192] [ 243.454606][ T9338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.491604][ T9333] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096] [ 243.555893][ T28] audit: type=1800 audit(1892506021.653:165): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1211" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 243.586772][ T9333] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096] [ 243.943471][ T9337] loop2: detected capacity change from 0 to 32768 [ 244.094894][ T9355] loop0: detected capacity change from 0 to 1024 [ 244.272822][ T1136] hfsplus: b-tree write err: -5, ino 8 [ 244.403385][ T9367] loop0: detected capacity change from 0 to 256 [ 244.562056][ T9370] loop4: detected capacity change from 0 to 512 [ 244.569306][ T9370] EXT4-fs: Ignoring removed i_version option [ 244.588758][ T9370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.611122][ T9370] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 244.644813][ T9370] EXT4-fs (loop4): 1 truncate cleaned up [ 244.653272][ T9370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.767111][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.259899][ T788] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 245.460250][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 245.476591][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.501315][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.520148][ T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.549969][ T788] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 245.559172][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.582425][ T788] usb 5-1: config 0 descriptor?? [ 245.764407][ T9385] loop2: detected capacity change from 0 to 65536 [ 245.784652][ T9385] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 245.839172][ T9385] XFS (loop2): Ending clean mount [ 245.848158][ T9385] XFS (loop2): Quotacheck needed: Please wait. [ 245.906812][ T9385] XFS (loop2): Quotacheck: Done. [ 245.985122][ T5788] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 246.033380][ T9412] loop1: detected capacity change from 0 to 8 [ 246.035276][ T788] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0009/input/input18 [ 246.057064][ T788] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0009/input/input19 [ 246.065708][ T9412] syz.1.1244: attempt to access beyond end of device [ 246.065708][ T9412] loop1: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 246.080755][ T788] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 246.101723][ T9412] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 246.109803][ T9412] unable to read xattr id index table [ 246.371930][ T788] usb 5-1: USB disconnect, device number 4 [ 246.656142][ T9431] loop1: detected capacity change from 0 to 128 [ 247.114298][ T9447] loop1: detected capacity change from 0 to 512 [ 247.146397][ T9447] EXT4-fs: Ignoring removed nobh option [ 247.222541][ T9447] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.1258: corrupted inode contents [ 247.268191][ T9447] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.1258: mark_inode_dirty error [ 247.314539][ T9447] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.1258: corrupted inode contents [ 247.339908][ T9447] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1258: mark_inode_dirty error [ 247.368716][ T9447] Quota error (device loop1): write_blk: dquota write failed [ 247.392284][ T9447] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 247.410523][ T9447] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1258: Failed to acquire dquot type 0 [ 247.427301][ T9447] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1258: corrupted inode contents [ 247.467513][ T9447] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.1258: mark_inode_dirty error [ 247.491472][ T9447] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1258: corrupted inode contents [ 247.508666][ T9447] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1258: mark_inode_dirty error [ 247.521379][ T9447] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1258: corrupted inode contents [ 247.533957][ T9447] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 247.543375][ T9447] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.1258: corrupted inode contents [ 247.568740][ T9447] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.1258: mark_inode_dirty error [ 247.589258][ T9453] loop4: detected capacity change from 0 to 128 [ 247.604044][ T9447] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 247.618566][ T9447] EXT4-fs (loop1): 1 truncate cleaned up [ 247.619315][ T9453] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.625837][ T9447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.642701][ T9453] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.670113][ T9447] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.752224][ T7807] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.812968][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.001735][ T9463] loop1: detected capacity change from 0 to 128 [ 248.029582][ T9463] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 248.131982][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 248.168332][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 248.579925][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.602297][ T5793] Bluetooth: hci3: ISO packet too small [ 248.679018][ T9486] loop1: detected capacity change from 0 to 128 [ 248.774131][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 248.787491][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.806580][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.851628][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.875270][ T788] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 248.904398][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.930944][ T788] usb 1-1: config 0 descriptor?? [ 249.066611][ T9497] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1276'. [ 249.089132][ T9497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1276'. [ 249.404528][ T788] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000A/input/input20 [ 249.433137][ T788] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000A/input/input21 [ 249.457366][ T788] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 249.501670][ T5827] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.710320][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 249.721172][ T5827] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.738718][ T5827] usb 3-1: config 0 has no interface number 0 [ 249.750418][ T5827] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.751609][ T27] usb 1-1: USB disconnect, device number 11 [ 249.762169][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.779543][ T5827] usb 3-1: Product: syz [ 249.785139][ T5827] usb 3-1: Manufacturer: syz [ 249.790108][ T5827] usb 3-1: SerialNumber: syz [ 249.797899][ T5827] usb 3-1: config 0 descriptor?? [ 249.806403][ T5827] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 250.020599][ T5827] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 250.035843][ T5827] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 250.077712][ T9508] loop1: detected capacity change from 0 to 40427 [ 250.088386][ T9508] F2FS-fs (loop1): invalid crc value [ 250.096205][ T9508] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.145159][ T9508] F2FS-fs (loop1): Start checkpoint disabled! [ 250.153631][ T9508] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 250.425309][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 250.433963][ T5827] usb 3-1: USB disconnect, device number 10 [ 250.449439][ T9518] loop0: detected capacity change from 0 to 128 [ 250.455831][ T5827] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.462194][ T5827] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.497370][ T9520] loop4: detected capacity change from 0 to 1024 [ 250.507052][ T5827] quatech2 3-1:0.51: device disconnected [ 250.555610][ T9520] hfsplus: xattr searching failed [ 250.563529][ T9520] hfsplus: catalog searching failed [ 250.602341][ T12] hfsplus: b-tree write err: -5, ino 4 [ 250.726412][ T9524] loop0: detected capacity change from 0 to 4096 [ 250.781137][ T9529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.350203][ T788] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.423790][ T9533] loop1: detected capacity change from 0 to 32768 [ 251.488048][ T9533] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.540082][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 251.547733][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.561009][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.571222][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 251.585400][ T788] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 251.593400][ T9533] XFS (loop1): Ending clean mount [ 251.594879][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.610305][ T788] usb 3-1: config 0 descriptor?? [ 251.649208][ T9556] loop0: detected capacity change from 0 to 128 [ 251.664550][ T9533] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 251.790253][ T5786] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 252.057107][ T788] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000B/input/input22 [ 252.166917][ T788] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000B/input/input23 [ 252.207910][ T788] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 252.288425][ T9564] loop0: detected capacity change from 0 to 32768 [ 252.335005][ T9564] JBD2: Ignoring recovery information on journal [ 252.427048][ T9564] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 252.475686][ T27] usb 3-1: USB disconnect, device number 11 [ 252.545464][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 252.920598][ T9576] loop4: detected capacity change from 0 to 32768 [ 252.928156][ T9576] XFS: ikeep mount option is deprecated. [ 252.934049][ T9576] XFS: noikeep mount option is deprecated. [ 252.984269][ T9576] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.154828][ T9594] loop1: detected capacity change from 0 to 512 [ 253.163495][ T9594] EXT4-fs: Ignoring removed i_version option [ 253.171532][ T9594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.177536][ T9576] XFS (loop4): Ending clean mount [ 253.221514][ T9576] XFS (loop4): Quotacheck needed: Please wait. [ 253.236143][ T9594] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 253.272564][ T9594] EXT4-fs (loop1): 1 truncate cleaned up [ 253.308762][ T9576] XFS (loop4): Quotacheck: Done. [ 253.321305][ T9594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.416512][ T7807] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.429994][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.693442][ T5827] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 253.803038][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 253.881958][ T5827] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 253.891792][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.902703][ T5827] usb 3-1: config 0 descriptor?? [ 253.910769][ T5827] cp210x 3-1:0.0: cp210x converter detected [ 253.993821][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 254.001437][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 254.010983][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.025285][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 254.032517][ T27] pvrusb2: ********** [ 254.036555][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 254.047071][ T27] pvrusb2: Important functionality might not be entirely working. [ 254.055154][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 254.068499][ T27] pvrusb2: ********** [ 254.234819][ T2319] pvrusb2: Invalid write control endpoint [ 254.288109][ T2319] pvrusb2: Invalid write control endpoint [ 254.294130][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 254.303776][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 254.311826][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 254.323590][ T5827] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 254.325959][ T2319] pvrusb2: Device being rendered inoperable [ 254.337454][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 254.341659][ T5827] usb 3-1: cp210x converter now attached to ttyUSB0 [ 254.344850][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 254.361485][ T2319] pvrusb2: Attached sub-driver cx25840 [ 254.367014][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 254.379454][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 254.445956][ T9608] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 254.456413][ T27] usb 1-1: USB disconnect, device number 12 [ 254.516679][ T9614] loop1: detected capacity change from 0 to 1024 [ 254.562404][ T788] usb 3-1: USB disconnect, device number 12 [ 254.586150][ T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 254.605674][ T788] cp210x 3-1:0.0: device disconnected [ 255.109990][ T5861] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 255.174921][ T9622] loop4: detected capacity change from 0 to 32768 [ 255.192023][ T9622] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1323 (9622) [ 255.208610][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 255.230239][ T9622] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.247825][ T9622] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 255.258360][ T9622] BTRFS info (device loop4): turning on sync discard [ 255.265500][ T9622] BTRFS info (device loop4): enabling auto defrag [ 255.278197][ T9622] BTRFS info (device loop4): doing ref verification [ 255.285818][ T9622] BTRFS info (device loop4): use no compression [ 255.292448][ T9622] BTRFS info (device loop4): force clearing of disk cache [ 255.300259][ T9622] BTRFS info (device loop4): disabling free space tree [ 255.319803][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 255.330697][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.350984][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.384526][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.429752][ T9622] BTRFS info (device loop4): enabling ssd optimizations [ 255.432354][ T5861] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 255.461725][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.464214][ T9622] BTRFS info (device loop4): rebuilding free space tree [ 255.488273][ T5861] usb 2-1: config 0 descriptor?? [ 255.523128][ T9622] BTRFS info (device loop4): disabling free space tree [ 255.538659][ T9622] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.548946][ T9622] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.638640][ T28] audit: type=1800 audit(1892506033.743:166): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1323" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 255.687708][ T28] audit: type=1804 audit(1892506033.793:167): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1323" name="/newroot/139/file1/file1" dev="loop4" ino=260 res=1 errno=0 [ 255.774240][ T7807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.869284][ T9634] loop2: detected capacity change from 0 to 32768 [ 255.895122][ T9634] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1328 (9634) [ 255.928793][ T9634] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 255.954970][ T9634] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 255.975644][ T9634] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 255.995819][ T9634] BTRFS info (device loop2): use zstd compression, level 3 [ 255.998854][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.019776][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.035304][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input24 [ 256.047121][ T9634] BTRFS info (device loop2): using free space tree [ 256.246038][ T9634] BTRFS info (device loop2): enabling ssd optimizations [ 256.254819][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input25 [ 256.266768][ T9634] BTRFS info (device loop2): auto enabling async discard [ 256.344723][ T5861] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 256.390098][ T5861] usb 2-1: USB disconnect, device number 11 [ 256.461671][ T5788] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 256.604773][ T9652] loop0: detected capacity change from 0 to 32768 [ 256.616561][ T9652] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1331 (9652) [ 256.644684][ T9652] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 256.658919][ T9652] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 256.676762][ T9652] BTRFS info (device loop0): enabling ssd optimizations [ 256.684192][ T9652] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 256.698389][ T9652] BTRFS info (device loop0): force zstd compression, level 3 [ 256.706003][ T9652] BTRFS info (device loop0): ignoring data csums [ 256.718554][ T9652] BTRFS info (device loop0): turning on async discard [ 256.725898][ T9652] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 256.745044][ T9652] BTRFS info (device loop0): metadata ratio 0 [ 256.752554][ T9652] BTRFS info (device loop0): using free space tree [ 257.044958][ T5784] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 257.059161][ T9695] loop2: detected capacity change from 0 to 512 [ 257.133864][ T9695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.167477][ T9702] loop4: detected capacity change from 0 to 256 [ 257.169868][ T9695] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.481403][ T9707] netem: invalid attributes len -24 [ 257.497022][ T9709] loop4: detected capacity change from 0 to 128 [ 257.507715][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.566281][ T9709] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 257.631702][ T9712] loop0: detected capacity change from 0 to 1024 [ 257.639104][ T9712] EXT4-fs: Ignoring removed oldalloc option [ 257.656579][ T9712] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 257.691738][ T9712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.838542][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.039554][ T9727] loop4: detected capacity change from 0 to 512 [ 258.083246][ T9727] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1348: iget: bad i_size value: 38620345925642 [ 258.122490][ T9727] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1348: couldn't read orphan inode 15 (err -117) [ 258.169221][ T9727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.216623][ T9734] loop0: detected capacity change from 0 to 512 [ 258.224863][ T9734] EXT4-fs: Ignoring removed nobh option [ 258.257580][ T9734] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.1352: corrupted inode contents [ 258.279782][ T9734] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #3: comm syz.0.1352: mark_inode_dirty error [ 258.304821][ T9737] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1348: bg 0: block 5: invalid block bitmap [ 258.326000][ T9734] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.1352: corrupted inode contents [ 258.335497][ T9737] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1088 with error 28 [ 258.355714][ T9734] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1352: mark_inode_dirty error [ 258.356430][ T9737] EXT4-fs (loop4): This should not happen!! Data will be lost [ 258.356430][ T9737] [ 258.388056][ T9737] EXT4-fs (loop4): Total free blocks count 0 [ 258.392977][ T9734] Quota error (device loop0): write_blk: dquota write failed [ 258.394458][ T9737] EXT4-fs (loop4): Free/Dirty block details [ 258.407910][ T9737] EXT4-fs (loop4): free_blocks=0 [ 258.409124][ T9734] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 258.413066][ T9737] EXT4-fs (loop4): dirty_blocks=1148 [ 258.429169][ T9737] EXT4-fs (loop4): Block reservation details [ 258.434676][ T9734] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.1352: Failed to acquire dquot type 0 [ 258.438927][ T9737] EXT4-fs (loop4): i_reserved_data_blocks=1148 [ 258.464274][ T9734] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1352: corrupted inode contents [ 258.477454][ T9734] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.1352: mark_inode_dirty error [ 258.490198][ T9734] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1352: corrupted inode contents [ 258.513401][ T9734] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1352: mark_inode_dirty error [ 258.546319][ T9734] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1352: corrupted inode contents [ 258.610922][ T42] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1088 with max blocks 60 with error 28 [ 258.614705][ T9734] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 258.648519][ T9734] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1352: corrupted inode contents [ 258.693296][ T9734] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.1352: mark_inode_dirty error [ 258.708376][ T9734] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 258.723599][ T9734] EXT4-fs (loop0): 1 truncate cleaned up [ 258.731058][ T9734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.743727][ T9734] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.828965][ T9747] loop2: detected capacity change from 0 to 128 [ 258.866777][ T9747] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 258.905259][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.032992][ T9753] loop1: detected capacity change from 0 to 16 [ 259.058452][ T9750] loop4: detected capacity change from 0 to 4096 [ 259.066959][ T9753] erofs: (device loop1): mounted with root inode @ nid 36. [ 259.120930][ T9757] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.452602][ T9770] PID 9770 killed due to inadequate hugepage pool [ 259.529915][ T9777] sp0: Synchronizing with TNC [ 259.563616][ T9776] [U] è [ 259.585579][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'. [ 259.870471][ T9791] loop2: detected capacity change from 0 to 4096 [ 259.882650][ T9793] loop1: detected capacity change from 0 to 1024 [ 259.916006][ T9793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.919998][ T9788] loop4: detected capacity change from 0 to 8192 [ 259.935011][ T9796] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.937396][ T9793] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.959563][ T9788] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.973855][ T9788] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 259.987926][ T9788] REISERFS (device loop4): using ordered data mode [ 259.995085][ T9788] reiserfs: using flush barriers [ 260.002212][ T9788] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.019761][ T9788] REISERFS (device loop4): checking transaction log (loop4) [ 260.034723][ T9788] REISERFS (device loop4): Using r5 hash to sort names [ 260.041907][ T28] audit: type=1800 audit(1892506038.143:168): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1375" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 260.074994][ T9788] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 260.114396][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.464734][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 260.889734][ T5861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.934032][ T9818] loop4: detected capacity change from 0 to 32768 [ 261.072001][ T5861] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 261.094994][ T5861] usb 3-1: config 0 has no interface number 0 [ 261.123358][ T5861] usb 3-1: too many endpoints for config 0 interface 47 altsetting 66: 71, using maximum allowed: 30 [ 261.159894][ T5861] usb 3-1: config 0 interface 47 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 261.184135][ T5861] usb 3-1: config 0 interface 47 has no altsetting 0 [ 261.199768][ T5861] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.219776][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.236236][ T5861] usb 3-1: config 0 descriptor?? [ 261.257359][ T5861] cp210x 3-1:0.47: cp210x converter detected [ 261.677471][ T5861] cp210x 3-1:0.47: failed to get vendor val 0x000e size 3: -71 [ 261.720132][ T5861] usb 3-1: cp210x converter now attached to ttyUSB0 [ 261.748309][ T5861] usb 3-1: USB disconnect, device number 13 [ 261.773804][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.795581][ T5861] cp210x 3-1:0.47: device disconnected [ 262.408872][ T9846] loop2: detected capacity change from 0 to 1024 [ 262.441661][ T9846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.497588][ T9846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.571337][ T9851] loop4: detected capacity change from 0 to 4096 [ 262.578952][ T9851] ntfs3: Unknown parameter 'measure' [ 262.728566][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.771845][ T9856] loop4: detected capacity change from 0 to 128 [ 262.787933][ T9856] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 262.807280][ T9856] hpfs: filesystem error: improperly stopped [ 262.816311][ T9856] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 262.830220][ T9856] hpfs: You really don't want any checks? You are crazy... [ 262.843814][ T9856] hpfs: hpfs_map_sector(): read error [ 262.849344][ T9856] hpfs: code page support is disabled [ 262.857424][ T9856] hpfs: hpfs_map_4sectors(): unaligned read [ 262.874149][ T9856] hpfs: hpfs_map_4sectors(): unaligned read [ 262.877057][ T9844] loop0: detected capacity change from 0 to 32768 [ 262.881900][ T9856] hpfs: filesystem error: unable to find root dir [ 262.929922][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 263.000799][ T9860] loop2: detected capacity change from 0 to 1024 [ 263.008286][ T9860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.033600][ T9860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.106973][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.132179][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 263.147519][ T23] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.162846][ T23] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.173633][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.181062][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 263.190510][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.212957][ T23] usb 2-1: config 0 descriptor?? [ 263.267969][ T9870] loop2: detected capacity change from 0 to 4096 [ 263.276836][ T9870] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 263.304633][ T9870] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 263.340020][ T9870] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 263.398161][ T3513] ntfs3: loop2: ino=1e, failed to parse mft record [ 263.650766][ T23] wacom 0003:056A:00B9.000D: unknown main item tag 0x0 [ 263.659163][ T23] wacom 0003:056A:00B9.000D: unknown main item tag 0x0 [ 263.668626][ T23] wacom 0003:056A:00B9.000D: unknown main item tag 0x0 [ 263.678530][ T23] wacom 0003:056A:00B9.000D: unknown main item tag 0x0 [ 263.688490][ T23] wacom 0003:056A:00B9.000D: unknown main item tag 0x0 [ 263.699172][ T23] wacom 0003:056A:00B9.000D: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 263.715484][ T23] wacom 0003:056A:00B9.000D: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.1-1/input0 [ 263.729133][ T23] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B9.000D/input/input26 [ 263.828992][ T9873] loop0: detected capacity change from 0 to 32768 [ 263.848729][ T5827] usb 2-1: USB disconnect, device number 12 [ 264.017488][ T9878] loop2: detected capacity change from 0 to 256 [ 264.076335][ T9878] FAT-fs (loop2): Directory bread(block 64) failed [ 264.089831][ T9878] FAT-fs (loop2): Directory bread(block 65) failed [ 264.106729][ T9878] FAT-fs (loop2): Directory bread(block 66) failed [ 264.120824][ T9878] FAT-fs (loop2): Directory bread(block 67) failed [ 264.134361][ T9878] FAT-fs (loop2): Directory bread(block 68) failed [ 264.151512][ T9878] FAT-fs (loop2): Directory bread(block 69) failed [ 264.161742][ T9878] FAT-fs (loop2): Directory bread(block 70) failed [ 264.178636][ T9878] FAT-fs (loop2): Directory bread(block 71) failed [ 264.185688][ T9878] FAT-fs (loop2): Directory bread(block 72) failed [ 264.195765][ T9878] FAT-fs (loop2): Directory bread(block 73) failed [ 264.984795][ T9885] loop2: detected capacity change from 0 to 32768 [ 265.004343][ T9885] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.043732][ T9885] XFS (loop2): Ending clean mount [ 265.086142][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.226669][ T9908] netlink: 'syz.1.1425': attribute type 11 has an invalid length. [ 265.240690][ T9908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 265.611729][ T9923] loop1: detected capacity change from 0 to 1024 [ 265.633606][ T9923] hfsplus: bad catalog entry type [ 265.673780][ T3513] hfsplus: b-tree write err: -5, ino 4 [ 265.679992][ T9926] loop0: detected capacity change from 0 to 2048 [ 265.706314][ T9927] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.735254][ T9926] NILFS (loop0): failed to count free inodes: err=-34 [ 265.742577][ T9926] NILFS (loop0): failed to count free inodes: err=-34 [ 265.757510][ T9929] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 265.778002][ T9929] ALSA: mixer_oss: invalid OSS volume 'Â' [ 265.787195][ T23] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 265.982201][ T23] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 265.991641][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.013512][ T23] usb 5-1: config 0 descriptor?? [ 266.086396][ T9939] loop1: detected capacity change from 0 to 4096 [ 266.275706][ T9944] loop1: detected capacity change from 0 to 1024 [ 266.484449][ T9948] loop1: detected capacity change from 0 to 2048 [ 266.498464][ T9948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.845927][ T23] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 266.874609][ T23] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 266.923183][ T23] asix: probe of 5-1:0.0 failed with error -71 [ 266.924777][ T9946] loop0: detected capacity change from 0 to 40427 [ 266.950123][ T9946] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 266.955447][ T23] usb 5-1: USB disconnect, device number 5 [ 266.963341][ T9946] F2FS-fs (loop0): Image doesn't support compression [ 266.980120][ T9946] F2FS-fs (loop0): Image doesn't support compression [ 266.994351][ T9946] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 267.013787][ T9946] F2FS-fs (loop0): invalid crc value [ 267.037073][ T9946] F2FS-fs (loop0): Found nat_bits in checkpoint [ 267.113542][ T9946] F2FS-fs (loop0): Start checkpoint disabled! [ 267.129913][ T9946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 267.163269][ T9946] syz.0.1433: attempt to access beyond end of device [ 267.163269][ T9946] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 267.384571][ T2934] kworker/u4:8: attempt to access beyond end of device [ 267.384571][ T2934] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 267.389163][ T9970] loop2: detected capacity change from 0 to 512 [ 267.409102][ T2934] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 267.427542][ T2934] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 267.462262][ T9970] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1451: iget: bad i_size value: 38620345925642 [ 267.506218][ T9970] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1451: couldn't read orphan inode 15 (err -117) [ 267.544455][ T9970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.704368][ T9977] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1451: bg 0: block 5: invalid block bitmap [ 267.740840][ T9977] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28 [ 267.781963][ T9977] EXT4-fs (loop2): This should not happen!! Data will be lost [ 267.781963][ T9977] [ 267.805389][ T9977] EXT4-fs (loop2): Total free blocks count 0 [ 267.824273][ T9977] EXT4-fs (loop2): Free/Dirty block details [ 267.839726][ T9977] EXT4-fs (loop2): free_blocks=0 [ 267.855518][ T9977] EXT4-fs (loop2): dirty_blocks=632 [ 267.865656][ T9977] EXT4-fs (loop2): Block reservation details [ 267.901626][ T9977] EXT4-fs (loop2): i_reserved_data_blocks=632 [ 268.132478][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.155025][ T9974] loop1: detected capacity change from 0 to 32768 [ 268.961541][ T9998] loop0: detected capacity change from 0 to 8192 [ 268.982802][ T9998] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.006551][ T9998] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 269.030532][ T9998] REISERFS (device loop0): using ordered data mode [ 269.059782][ T9998] reiserfs: using flush barriers [ 269.120457][ T9998] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.188304][ T9998] REISERFS (device loop0): checking transaction log (loop0) [ 269.210976][ T9998] REISERFS (device loop0): Using r5 hash to sort names [ 269.230259][ T9998] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 269.352213][ T9999] loop4: detected capacity change from 0 to 32768 [ 269.365777][ T9999] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1455 (9999) [ 269.383168][ T9995] loop2: detected capacity change from 0 to 32768 [ 269.418288][ T9999] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 269.440072][ T9995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1450 (9995) [ 269.450762][ T9999] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 269.470033][ T9995] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.495799][ T9999] BTRFS info (device loop4): enabling ssd optimizations [ 269.500331][ T9995] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 269.511626][ T9999] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 269.526530][ T9999] BTRFS info (device loop4): force zstd compression, level 3 [ 269.535825][ T9999] BTRFS info (device loop4): ignoring data csums [ 269.547213][ T9999] BTRFS info (device loop4): turning on async discard [ 269.550013][ T9995] BTRFS info (device loop2): force clearing of disk cache [ 269.554487][ T9999] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 269.569831][ T9995] BTRFS info (device loop2): enabling auto defrag [ 269.577607][ T9999] BTRFS info (device loop4): metadata ratio 0 [ 269.587647][ T9999] BTRFS info (device loop4): using free space tree [ 269.599968][ T9995] BTRFS info (device loop2): max_inline at 0 [ 269.606021][ T9995] BTRFS info (device loop2): enabling disk space caching [ 269.619714][ T9995] BTRFS info (device loop2): disk space caching is enabled [ 269.651896][T10008] loop1: detected capacity change from 0 to 512 [ 269.666436][T10008] EXT4-fs (loop1): Test dummy encryption mode enabled [ 269.677883][T10008] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 269.695134][T10008] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 269.705883][T10008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.902814][T10006] loop0: detected capacity change from 0 to 32768 [ 269.929013][T10008] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 269.942175][ T9995] BTRFS info (device loop2): enabling ssd optimizations [ 269.956301][ T9995] BTRFS info (device loop2): rebuilding free space tree [ 269.972196][T10006] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 270.009062][ T9995] BTRFS info (device loop2): disabling free space tree [ 270.021131][ T9995] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 270.034473][ T9995] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 270.037719][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.054745][T10006] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 270.080451][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.089441][T10006] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 270.099727][T10006] OCFS2: File system is now read-only. [ 270.105347][T10006] (syz.0.1456,10006,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 270.114507][T10006] (syz.0.1456,10006,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 270.125614][T10006] (syz.0.1456,10006,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 270.134446][T10006] (syz.0.1456,10006,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 270.143775][T10006] (syz.0.1456,10006,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 270.152120][T10006] (syz.0.1456,10006,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 270.160480][T10006] (syz.0.1456,10006,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 270.169405][T10006] (syz.0.1456,10006,0):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 270.178108][T10006] (syz.0.1456,10006,0):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 270.187308][T10006] (syz.0.1456,10006,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 270.199089][ T7807] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 270.199524][T10006] (syz.0.1456,10006,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 270.219162][T10006] (syz.0.1456,10006,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 270.228887][T10006] (syz.0.1456,10006,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 270.238857][T10006] (syz.0.1456,10006,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 270.247844][T10006] (syz.0.1456,10006,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 270.256443][T10006] (syz.0.1456,10006,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 270.265319][T10006] (syz.0.1456,10006,0):ocfs2_symlink:1867 ERROR: status = -30 [ 270.273158][T10006] (syz.0.1456,10006,0):ocfs2_symlink:2068 ERROR: status = -30 [ 270.308878][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.592050][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 271.568172][T10050] loop4: detected capacity change from 0 to 32768 [ 271.599291][T10048] loop1: detected capacity change from 0 to 32768 [ 271.675566][T10050] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 271.798037][T10050] XFS (loop4): Ending clean mount [ 271.950660][ T7807] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 272.428192][T10080] loop4: detected capacity change from 0 to 1024 [ 272.440178][T10080] EXT4-fs: Ignoring removed nobh option [ 272.446310][T10080] EXT4-fs: inline encryption not supported [ 272.474150][T10080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.527240][T10080] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1469: bad orphan inode 32767 [ 272.546936][T10080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.647004][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.842508][T10087] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1474'. [ 273.064978][T10092] loop4: detected capacity change from 0 to 2048 [ 273.116226][T10092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.200776][T10104] loop1: detected capacity change from 0 to 2048 [ 273.209598][T10104] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 273.238515][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.655337][T10115] loop1: detected capacity change from 0 to 8192 [ 273.677417][T10115] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 273.695121][T10115] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 273.706526][T10115] REISERFS (device loop1): using ordered data mode [ 273.718058][T10115] reiserfs: using flush barriers [ 273.724477][T10125] loop2: detected capacity change from 0 to 1024 [ 273.725438][T10115] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 273.750558][T10115] REISERFS (device loop1): checking transaction log (loop1) [ 273.762803][T10115] REISERFS (device loop1): Using r5 hash to sort names [ 273.771351][T10115] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 273.794242][T10125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 273.815909][T10125] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.867374][T10125] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.1489: lblock 3 mapped to illegal pblock 3 (length 3) [ 273.889944][T10125] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 273.909229][T10125] EXT4-fs (loop2): This should not happen!! Data will be lost [ 273.909229][T10125] [ 273.935138][T10128] loop4: detected capacity change from 0 to 8192 [ 273.949455][T10131] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.1489: lblock 3 mapped to illegal pblock 3 (length 1) [ 273.984800][T10131] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.1489: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 274.035863][T10131] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 274.141329][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 274.496340][T10141] loop2: detected capacity change from 0 to 8192 [ 274.545861][T10141] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 274.599874][T10141] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 274.645071][T10141] REISERFS (device loop2): using ordered data mode [ 274.669666][T10141] reiserfs: using flush barriers [ 274.708078][T10141] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.740298][T10141] REISERFS (device loop2): checking transaction log (loop2) [ 274.773908][T10141] REISERFS (device loop2): Using r5 hash to sort names [ 274.795314][T10141] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 274.895848][T10145] loop1: detected capacity change from 0 to 32768 [ 274.939316][T10135] loop0: detected capacity change from 0 to 32768 [ 275.023822][T10135] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.241083][T10135] XFS (loop0): Ending clean mount [ 275.340288][T10144] syz.4.1497 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 275.402918][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.566647][T10162] loop1: detected capacity change from 0 to 512 [ 275.621860][T10162] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.052152][T10174] loop4: detected capacity change from 0 to 4096 [ 276.059918][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 276.069328][T10174] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 276.239781][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 276.252198][ T27] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 276.271993][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.284843][T10168] loop2: detected capacity change from 0 to 32768 [ 276.294185][ T27] usb 1-1: config 0 descriptor?? [ 276.304208][ T27] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 276.316244][T10168] XFS: attr2 mount option is deprecated. [ 276.348872][T10168] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.404511][T10168] XFS (loop2): Ending clean mount [ 276.428939][T10168] XFS (loop2): Quotacheck needed: Please wait. [ 276.520975][ T27] usb 1-1: Detected FT232B [ 276.534817][T10168] XFS (loop2): Quotacheck: Done. [ 276.634990][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.737425][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 276.757520][ T27] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.971594][ T23] usb 1-1: USB disconnect, device number 13 [ 276.990318][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 277.014697][ T23] ftdi_sio 1-1:0.0: device disconnected [ 277.129307][T10192] loop4: detected capacity change from 0 to 32768 [ 277.143072][T10192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1510 (10192) [ 277.162906][T10192] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.177667][T10192] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 277.189179][T10192] BTRFS info (device loop4): metadata ratio 2 [ 277.202218][T10192] BTRFS info (device loop4): allowing degraded mounts [ 277.212811][T10192] BTRFS info (device loop4): force zlib compression, level 3 [ 277.222940][T10192] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 277.234741][T10192] BTRFS info (device loop4): use zstd compression, level 3 [ 277.242637][T10192] BTRFS info (device loop4): force clearing of disk cache [ 277.251389][T10192] BTRFS info (device loop4): max_inline at 0 [ 277.257452][T10192] BTRFS info (device loop4): using free space tree [ 277.286630][T10192] BTRFS info (device loop4): enabling ssd optimizations [ 277.296541][T10192] BTRFS info (device loop4): rebuilding free space tree [ 277.324857][ T28] audit: type=1800 audit(1892506055.433:169): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1510" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 277.466019][ T7807] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.700167][T10229] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 277.829341][T10233] ubi31: attaching mtd0 [ 277.869815][T10233] ubi31 error: ubi_attach_mtd_dev: bad VID header (536940548) or data offsets (536940612) [ 278.087623][T10241] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1527'. [ 278.694482][T10269] loop1: detected capacity change from 0 to 16 [ 278.707797][T10269] erofs: (device loop1): mounted with root inode @ nid 36. [ 278.731808][T10269] erofs: (device loop1): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 278.732209][T10269] erofs: (device loop1): z_erofs_readahead: readahead error at folio 9 @ nid 36 [ 278.732238][T10269] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 278.732326][T10269] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 278.732363][T10269] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 278.734022][T10269] syz.1.1539: attempt to access beyond end of device [ 278.734022][T10269] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 278.734242][T10269] syz.1.1539: attempt to access beyond end of device [ 278.734242][T10269] loop1: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 278.734440][T10269] syz.1.1539: attempt to access beyond end of device [ 278.734440][T10269] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 278.734555][T10269] syz.1.1539: attempt to access beyond end of device [ 278.734555][T10269] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 278.735580][T10269] syz.1.1539: attempt to access beyond end of device [ 278.735580][T10269] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 278.789829][T10269] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -32 in[46, 4050] out[4096] [ 278.995308][T10277] loop1: detected capacity change from 0 to 16 [ 278.997045][T10277] erofs: (device loop1): mounted with root inode @ nid 36. [ 279.031522][T10277] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 279.046818][ T5793] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192] [ 279.046981][T10277] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096] [ 279.055044][ T28] audit: type=1800 audit(1892506057.153:170): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1542" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 279.064844][T10277] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192] [ 279.065600][T10277] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096] [ 279.239835][T10265] loop0: detected capacity change from 0 to 32768 [ 279.289377][T10265] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 279.518643][T10285] loop4: detected capacity change from 0 to 4096 [ 279.580290][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 280.322298][T10304] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 280.416222][T10306] loop0: detected capacity change from 0 to 128 [ 280.687325][T10313] loop0: detected capacity change from 0 to 16 [ 280.696735][T10313] erofs: (device loop0): mounted with root inode @ nid 36. [ 282.166358][T10327] loop0: detected capacity change from 0 to 40427 [ 282.179547][T10327] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 282.203961][T10327] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 282.245599][T10327] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 282.269714][T10327] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 282.306718][T10327] F2FS-fs (loop0): invalid crc value [ 282.326118][T10327] F2FS-fs (loop0): Found nat_bits in checkpoint [ 282.342447][T10343] loop4: detected capacity change from 0 to 64 [ 282.402308][T10327] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 282.424083][T10327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 282.450015][T10333] loop2: detected capacity change from 0 to 32768 [ 282.462484][T10333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1568 (10333) [ 282.480278][T10321] loop1: detected capacity change from 0 to 65536 [ 282.487748][ T28] audit: type=1800 audit(1892506060.593:171): pid=10327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1565" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 282.508321][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.518820][T10333] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.530842][T10333] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 282.541174][T10333] BTRFS info (device loop2): using free space tree [ 282.548110][T10321] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 282.584083][ T5784] syz-executor: attempt to access beyond end of device [ 282.584083][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.602695][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 282.639375][T10333] BTRFS info (device loop2): enabling ssd optimizations [ 282.650548][T10333] BTRFS info (device loop2): auto enabling async discard [ 282.709269][T10321] XFS (loop1): Ending clean mount [ 282.716713][T10321] XFS (loop1): Quotacheck needed: Please wait. [ 282.788263][T10321] XFS (loop1): Quotacheck: Done. [ 282.797714][T10371] macvtap1: entered allmulticast mode [ 282.805696][T10371] veth0_macvtap: entered allmulticast mode [ 282.824570][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.959460][ T5786] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 283.050144][ T27] kernel write not supported for file /input/mouse0 (pid: 27 comm: kworker/1:1) [ 283.669994][T10384] loop0: detected capacity change from 0 to 4096 [ 283.726494][T10384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.909120][T10379] loop4: detected capacity change from 0 to 32768 [ 283.919815][T10379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1578 (10379) [ 283.967754][T10379] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.978529][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.988609][T10379] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 284.011619][T10379] BTRFS info (device loop4): using free space tree [ 284.158149][T10379] BTRFS info (device loop4): enabling ssd optimizations [ 284.179807][T10379] BTRFS info (device loop4): auto enabling async discard [ 284.263502][T10414] loop1: detected capacity change from 0 to 512 [ 284.308613][T10414] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.339433][T10414] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 284.358420][ T7807] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.383683][T10421] loop2: detected capacity change from 0 to 64 [ 284.404026][T10414] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 284.422799][T10414] System zones: 0-2, 18-18, 34-35 [ 284.454484][T10414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 284.619686][T10414] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 284.649928][T10414] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 284.658071][T10414] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 284.779784][ T28] audit: type=1800 audit(1892506062.873:172): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1586" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 284.892226][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.108592][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 286.087080][T10452] loop0: detected capacity change from 0 to 32768 [ 286.103513][T10452] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1602 (10452) [ 286.145651][T10452] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 286.167086][T10452] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 286.190058][T10452] BTRFS info (device loop0): use no compression [ 286.196571][T10452] BTRFS info (device loop0): using free space tree [ 286.305380][T10452] BTRFS info (device loop0): enabling ssd optimizations [ 286.326085][T10452] BTRFS info (device loop0): auto enabling async discard [ 286.414083][T10455] loop1: detected capacity change from 0 to 32768 [ 286.426763][T10455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1603 (10455) [ 286.462819][T10455] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.490381][T10455] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 286.499168][T10455] BTRFS info (device loop1): turning off barriers [ 286.506798][T10455] BTRFS info (device loop1): setting nodatasum [ 286.514494][T10455] BTRFS info (device loop1): use zlib compression, level 3 [ 286.523123][T10455] BTRFS info (device loop1): using free space tree [ 286.559121][ T5784] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 286.850989][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.195915][T10481] loop2: detected capacity change from 0 to 40427 [ 287.257223][T10481] F2FS-fs (loop2): invalid crc value [ 287.271707][T10481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 287.434219][T10481] F2FS-fs (loop2): Start checkpoint disabled! [ 287.469896][T10481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 287.550030][T10481] syz.2.1608: attempt to access beyond end of device [ 287.550030][T10481] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 287.587661][T10513] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1615'. [ 287.814302][ T992] kworker/u4:6: attempt to access beyond end of device [ 287.814302][ T992] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 287.835902][T10521] loop4: detected capacity change from 0 to 128 [ 287.850036][ T992] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 287.857113][ T992] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 287.874602][T10521] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 287.917945][T10521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.250488][T10524] loop1: detected capacity change from 0 to 4096 [ 288.270007][T10524] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 288.510427][T10519] loop0: detected capacity change from 0 to 32768 [ 288.546196][T10519] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 288.607022][T10534] loop2: detected capacity change from 0 to 2048 [ 288.616324][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 288.623852][T10537] loop1: detected capacity change from 0 to 1024 [ 288.636499][T10534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.678814][T10537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.701710][T10537] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.742481][T10537] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 4: comm syz.1.1625: lblock 4 mapped to illegal pblock 4 (length 1) [ 288.760472][T10537] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 288.796352][T10537] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.796352][T10537] [ 288.828262][T10541] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 288.849086][T10541] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 288.913289][T10541] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.913289][T10541] [ 289.006700][ T1136] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 289.036482][ T1136] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 289.069130][ T1136] EXT4-fs (loop1): This should not happen!! Data will be lost [ 289.069130][ T1136] [ 289.094142][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.376644][T10543] loop0: detected capacity change from 0 to 32768 [ 289.400682][T10543] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1626 (10543) [ 289.414676][ T28] audit: type=1800 audit(1892506067.513:173): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1624" name="file1" dev="loop2" ino=1335 res=0 errno=0 [ 289.445785][T10543] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 289.466986][T10543] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 289.490156][T10543] BTRFS info (device loop0): enabling disk space caching [ 289.497513][T10543] BTRFS info (device loop0): force clearing of disk cache [ 289.515083][T10543] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 289.534398][T10543] BTRFS info (device loop0): use zstd compression, level 3 [ 289.550060][T10543] BTRFS info (device loop0): disk space caching is enabled [ 289.671508][T10543] BTRFS info (device loop0): enabling ssd optimizations [ 289.678541][T10543] BTRFS info (device loop0): auto enabling async discard [ 289.712971][T10543] BTRFS info (device loop0): rebuilding free space tree [ 289.761557][T10543] BTRFS info (device loop0): disabling free space tree [ 289.778845][T10543] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 289.797309][T10543] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 289.943350][T10547] loop4: detected capacity change from 0 to 32768 [ 289.979049][T10571] loop1: detected capacity change from 0 to 512 [ 290.023178][ T5784] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 290.038281][ T28] audit: type=1800 audit(1892506068.143:174): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1631" name="file2" dev="loop1" ino=1048637 res=0 errno=0 [ 290.045389][T10547] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 290.197397][ T28] audit: type=1800 audit(1892506068.303:175): pid=10547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1628" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 290.228208][T10574] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216) [ 290.332774][ T7807] ocfs2: Unmounting device (7,4) on (node local) [ 290.645078][T10569] loop2: detected capacity change from 0 to 32768 [ 290.674756][T10569] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1630 (10569) [ 290.714652][T10569] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.736855][T10569] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 290.747994][T10569] BTRFS info (device loop2): using free space tree [ 290.814249][T10569] BTRFS info (device loop2): enabling ssd optimizations [ 290.846976][T10569] BTRFS info (device loop2): auto enabling async discard [ 290.967937][ T28] audit: type=1800 audit(1892506069.073:176): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1630" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 291.153829][ T5788] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 291.714233][T10605] loop2: detected capacity change from 0 to 512 [ 291.740757][T10599] loop4: detected capacity change from 0 to 32768 [ 291.767102][T10601] loop0: detected capacity change from 0 to 32768 [ 291.802344][T10599] [ 291.802344][T10599] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.802344][T10599] [ 291.875571][ T28] audit: type=1326 audit(1892506069.983:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eacd8ec29 code=0x0 [ 291.911051][T10601] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.966042][T10599] [ 291.966042][T10599] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.966042][T10599] [ 291.997558][T10599] [ 291.997558][T10599] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.997558][T10599] [ 292.009312][T10599] [ 292.009312][T10599] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.009312][T10599] [ 292.027886][ T112] [ 292.027886][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.027886][ T112] [ 292.061304][T10601] XFS (loop0): Ending clean mount [ 292.111969][ T7807] [ 292.111969][ T7807] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.111969][ T7807] [ 292.128042][ T7807] [ 292.128042][ T7807] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.128042][ T7807] [ 292.175532][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.247306][T10624] loop2: detected capacity change from 0 to 2048 [ 292.279559][T10626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1647'. [ 292.294420][T10624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.457969][T10628] loop1: detected capacity change from 0 to 64 [ 293.311161][T10645] loop1: detected capacity change from 0 to 32768 [ 293.319287][T10645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1654 (10645) [ 293.353764][T10645] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.369920][T10645] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 293.389000][T10645] BTRFS info (device loop1): metadata ratio 2 [ 293.395383][T10645] BTRFS info (device loop1): allowing degraded mounts [ 293.409714][T10645] BTRFS info (device loop1): force zlib compression, level 3 [ 293.427348][T10645] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 293.447890][T10645] BTRFS info (device loop1): use zstd compression, level 3 [ 293.459816][T10645] BTRFS info (device loop1): force clearing of disk cache [ 293.477227][T10645] BTRFS info (device loop1): max_inline at 0 [ 293.483421][T10645] BTRFS info (device loop1): using free space tree [ 293.558172][T10645] BTRFS info (device loop1): enabling ssd optimizations [ 293.583245][T10645] BTRFS info (device loop1): rebuilding free space tree [ 293.723983][T10659] loop2: detected capacity change from 0 to 32768 [ 293.734167][T10659] (syz.2.1660,10659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 293.756879][T10659] (syz.2.1660,10659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 293.774091][ T28] audit: type=1800 audit(1892506071.883:178): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1654" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 293.784397][T10659] JBD2: Ignoring recovery information on journal [ 293.950871][T10659] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 294.108907][T10659] [ 294.111304][T10659] ====================================================== [ 294.118359][T10659] WARNING: possible circular locking dependency detected [ 294.125426][T10659] syzkaller #0 Not tainted [ 294.129871][T10659] ------------------------------------------------------ [ 294.136966][T10659] syz.2.1660/10659 is trying to acquire lock: [ 294.137696][T10685] loop4: detected capacity change from 0 to 16 [ 294.143035][T10659] ffff8880594206f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 294.143101][T10659] [ 294.143101][T10659] but task is already holding lock: [ 294.150982][T10685] erofs: (device loop4): mounted with root inode @ nid 36. [ 294.158538][T10659] ffff88805a940990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 294.158602][T10659] [ 294.158602][T10659] which lock already depends on the new lock. [ 294.158602][T10659] [ 294.158608][T10659] [ 294.158608][T10659] the existing dependency chain (in reverse order) is: [ 294.158615][T10659] [ 294.158615][T10659] -> #2 (jbd2_handle){++++}-{0:0}: [ 294.158642][T10659] jbd2_journal_lock_updates+0xab/0x380 [ 294.158662][T10659] __ocfs2_flush_truncate_log+0x2b8/0x10b0 [ 294.158684][T10659] ocfs2_flush_truncate_log+0x4f/0x60 [ 294.158706][T10659] ocfs2_sync_fs+0x117/0x310 [ 294.158723][T10659] sync_filesystem+0x1c2/0x220 [ 294.158749][T10659] generic_shutdown_super+0x6f/0x2b0 [ 294.158776][T10659] kill_block_super+0x44/0x90 [ 294.158791][T10659] deactivate_locked_super+0x97/0x100 [ 294.255151][T10659] cleanup_mnt+0x429/0x4c0 [ 294.260114][T10659] task_work_run+0x1ce/0x250 [ 294.265270][T10659] exit_to_user_mode_loop+0xe6/0x110 [ 294.271096][T10659] exit_to_user_mode_prepare+0xf6/0x180 [ 294.277200][T10659] syscall_exit_to_user_mode+0x1a/0x50 [ 294.283195][T10659] do_syscall_64+0x61/0xb0 [ 294.288152][T10659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.294601][T10659] [ 294.294601][T10659] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 294.305178][T10659] down_write+0x97/0x1f0 [ 294.310144][T10659] ocfs2_xattr_set+0xada/0x11f0 [ 294.315593][T10659] __vfs_setxattr+0x431/0x470 [ 294.320819][T10659] __vfs_setxattr_noperm+0x12d/0x5e0 [ 294.326643][T10659] vfs_setxattr+0x16c/0x2f0 [ 294.331705][T10659] path_setxattr+0x362/0x550 [ 294.336854][T10659] __x64_sys_setxattr+0xbb/0xd0 [ 294.342267][T10659] do_syscall_64+0x55/0xb0 [ 294.347333][T10659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.353801][T10659] [ 294.353801][T10659] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 294.361669][T10659] __lock_acquire+0x2ddb/0x7c80 [ 294.367082][T10659] lock_acquire+0x197/0x410 [ 294.372139][T10659] down_read+0x46/0x2e0 [ 294.376855][T10659] ocfs2_init_acl+0x2fa/0x720 [ 294.382092][T10659] ocfs2_mknod+0x12e5/0x20f0 [ 294.387236][T10659] ocfs2_create+0x196/0x410 [ 294.392290][T10659] path_openat+0x1277/0x3190 [ 294.397457][T10659] do_filp_open+0x1c5/0x3d0 [ 294.402527][T10659] do_sys_openat2+0x12c/0x1c0 [ 294.407769][T10659] __x64_sys_openat+0x139/0x160 [ 294.413180][T10659] do_syscall_64+0x55/0xb0 [ 294.418159][T10659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.424626][T10659] [ 294.424626][T10659] other info that might help us debug this: [ 294.424626][T10659] [ 294.434880][T10659] Chain exists of: [ 294.434880][T10659] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle [ 294.434880][T10659] [ 294.450855][T10659] Possible unsafe locking scenario: [ 294.450855][T10659] [ 294.458348][T10659] CPU0 CPU1 [ 294.463750][T10659] ---- ---- [ 294.469149][T10659] rlock(jbd2_handle); [ 294.473346][T10659] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 294.483203][T10659] lock(jbd2_handle); [ 294.489830][T10659] rlock(&oi->ip_xattr_sem); [ 294.494557][T10659] [ 294.494557][T10659] *** DEADLOCK *** [ 294.494557][T10659] [ 294.502721][T10659] 8 locks held by syz.2.1660/10659: [ 294.507924][T10659] #0: ffff88805e086418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 294.517296][T10659] #1: ffff8880594209d8 (&type->i_mutex_dir_key#10){++++}-{3:3}, at: path_openat+0x7c6/0x3190 [ 294.527613][T10659] #2: ffff88805b5b5118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 294.541312][T10659] #3: ffff88805b5b3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 294.554995][T10659] #4: ffff88805b5b1818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 294.568959][T10659] #5: ffff88805e086608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 294.578226][T10659] #6: ffff88805e0ca0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 294.588954][T10659] #7: ffff88805a940990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 294.598649][T10659] [ 294.598649][T10659] stack backtrace: [ 294.604569][T10659] CPU: 1 PID: 10659 Comm: syz.2.1660 Not tainted syzkaller #0 [ 294.612047][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.622175][T10659] Call Trace: [ 294.625492][T10659] [ 294.628463][T10659] dump_stack_lvl+0x16c/0x230 [ 294.633153][T10659] ? load_image+0x3b0/0x3b0 [ 294.637767][T10659] ? show_regs_print_info+0x20/0x20 [ 294.642977][T10659] ? print_circular_bug+0x12b/0x1a0 [ 294.648187][T10659] check_noncircular+0x2bd/0x3c0 [ 294.653246][T10659] ? print_deadlock_bug+0x5d0/0x5d0 [ 294.658477][T10659] ? lockdep_lock+0xe0/0x220 [ 294.663086][T10659] ? _find_first_zero_bit+0xd3/0x100 [ 294.668392][T10659] __lock_acquire+0x2ddb/0x7c80 [ 294.673266][T10659] ? verify_lock_unused+0x140/0x140 [ 294.678568][T10659] ? __ocfs2_mknod_locked+0xbd2/0x1440 [ 294.684115][T10659] ? __lock_acquire+0x7c80/0x7c80 [ 294.689160][T10659] ? do_raw_spin_lock+0x121/0x2c0 [ 294.694211][T10659] ? __rwlock_init+0x150/0x150 [ 294.698994][T10659] lock_acquire+0x197/0x410 [ 294.703528][T10659] ? ocfs2_init_acl+0x2fa/0x720 [ 294.708430][T10659] ? __might_sleep+0xe0/0xe0 [ 294.713049][T10659] ? read_lock_is_recursive+0x20/0x20 [ 294.718437][T10659] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 294.725048][T10659] ? dquot_alloc_inode+0x772/0xa40 [ 294.730270][T10659] down_read+0x46/0x2e0 [ 294.734461][T10659] ? ocfs2_init_acl+0x2fa/0x720 [ 294.739375][T10659] ocfs2_init_acl+0x2fa/0x720 [ 294.744083][T10659] ? ocfs2_mknod_locked+0x149/0x250 [ 294.749301][T10659] ? ocfs2_acl_chmod+0x320/0x320 [ 294.754355][T10659] ? dquot_alloc_inode+0x8ac/0xa40 [ 294.759479][T10659] ? dquot_alloc_inode+0x15e/0xa40 [ 294.764610][T10659] ? ocfs2_block_signals+0x95/0xd0 [ 294.769763][T10659] ? ocfs2_init_security_get+0x139/0x1a0 [ 294.775407][T10659] ocfs2_mknod+0x12e5/0x20f0 [ 294.780019][T10659] ? ocfs2_mkdir+0x410/0x410 [ 294.784636][T10659] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 294.790540][T10659] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 294.796453][T10659] ? ocfs2_inode_unlock+0xa5/0x140 [ 294.801588][T10659] ? __lock_acquire+0x7c80/0x7c80 [ 294.806623][T10659] ? __rwlock_init+0x150/0x150 [ 294.811409][T10659] ? do_raw_spin_unlock+0x121/0x230 [ 294.816666][T10659] ? rcu_is_watching+0x15/0xb0 [ 294.821445][T10659] ? ocfs2_lookup+0x495/0x940 [ 294.826136][T10659] ocfs2_create+0x196/0x410 [ 294.830655][T10659] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 294.836898][T10659] ? from_kgid+0x15d/0x680 [ 294.841335][T10659] ? ocfs2_lookup+0x940/0x940 [ 294.846032][T10659] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 294.850994][T10659] ? inode_permission+0xf3/0x480 [ 294.855961][T10659] ? bpf_lsm_inode_create+0x9/0x10 [ 294.861101][T10659] ? security_inode_create+0xb7/0x100 [ 294.866516][T10659] ? ocfs2_lookup+0x940/0x940 [ 294.871232][T10659] path_openat+0x1277/0x3190 [ 294.875883][T10659] ? do_filp_open+0x3d0/0x3d0 [ 294.880593][T10659] do_filp_open+0x1c5/0x3d0 [ 294.885117][T10659] ? vfs_tmpfile+0x490/0x490 [ 294.889744][T10659] ? _raw_spin_unlock+0x28/0x40 [ 294.894614][T10659] ? alloc_fd+0x58f/0x630 [ 294.898967][T10659] do_sys_openat2+0x12c/0x1c0 [ 294.903664][T10659] ? do_sys_open+0xe0/0xe0 [ 294.908096][T10659] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 294.914108][T10659] ? lock_chain_count+0x20/0x20 [ 294.919032][T10659] __x64_sys_openat+0x139/0x160 [ 294.923919][T10659] do_syscall_64+0x55/0xb0 [ 294.928595][T10659] ? clear_bhb_loop+0x40/0x90 [ 294.933346][T10659] ? clear_bhb_loop+0x40/0x90 [ 294.938146][T10659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.944063][T10659] RIP: 0033:0x7f8acad8ec29 [ 294.948669][T10659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.968294][T10659] RSP: 002b:00007f8ac8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.976731][T10659] RAX: ffffffffffffffda RBX: 00007f8acafd5fa0 RCX: 00007f8acad8ec29 [ 294.984720][T10659] RDX: 0000000000008042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 294.992709][T10659] RBP: 00007f8acae11e41 R08: 0000000000000000 R09: 0000000000000000 [ 295.000887][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 295.008973][T10659] R13: 00007f8acafd6038 R14: 00007f8acafd5fa0 R15: 00007ffff8b529e8 [ 295.016972][T10659] [ 295.079075][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 295.102288][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.963051][ T992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.055753][ T992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.127144][ T992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.230589][ T992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.959831][ T992] hsr_slave_0: left promiscuous mode [ 296.965644][ T992] hsr_slave_1: left promiscuous mode [ 296.973848][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.981645][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.989349][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.997461][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.005200][ T992] bridge_slave_1: left allmulticast mode [ 297.011120][ T992] bridge_slave_1: left promiscuous mode [ 297.016910][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.025750][ T992] bridge_slave_0: left allmulticast mode [ 297.031640][ T992] bridge_slave_0: left promiscuous mode [ 297.037369][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.049572][ T992] veth0_macvtap: left allmulticast mode [ 297.055533][ T992] veth1_macvtap: left promiscuous mode [ 297.061605][ T992] veth0_macvtap: left promiscuous mode [ 297.067215][ T992] veth1_vlan: left promiscuous mode [ 297.073110][ T992] veth0_vlan: left promiscuous mode [ 297.304269][ T992] team0 (unregistering): Port device team_slave_1 removed [ 297.340145][ T992] team0 (unregistering): Port device team_slave_0 removed [ 297.377357][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.414735][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.495303][ T992] bond0 (unregistering): Released all slaves [ 297.935597][ T992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.976160][ T992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.046010][ T992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.087891][ T992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.830733][ T992] hsr_slave_0: left promiscuous mode [ 298.836881][ T992] hsr_slave_1: left promiscuous mode [ 298.842714][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.850399][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.858181][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.866096][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.874214][ T992] bridge_slave_1: left allmulticast mode [ 298.879926][ T992] bridge_slave_1: left promiscuous mode [ 298.885654][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.894239][ T992] bridge_slave_0: left allmulticast mode [ 298.899977][ T992] bridge_slave_0: left promiscuous mode [ 298.905671][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.916504][ T992] veth1_to_batadv: left promiscuous mode [ 298.922797][ T992] veth1_macvtap: left promiscuous mode [ 298.928315][ T992] veth0_macvtap: left promiscuous mode [ 298.934513][ T992] veth1_vlan: left promiscuous mode [ 298.939945][ T992] veth0_vlan: left promiscuous mode [ 299.190805][ T992] team0 (unregistering): Port device team_slave_1 removed [ 299.223247][ T992] team0 (unregistering): Port device team_slave_0 removed [ 299.236243][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.254497][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.383731][ T992] bond0 (unregistering): Released all slaves