last executing test programs: 2.427217152s ago: executing program 2 (id=6403): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x17a) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.20439159s ago: executing program 2 (id=6414): socket$unix(0x1, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000900)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000600)="f6f1079a161cfb77024df900000000000000000000000000020000a7030a6b9bb5c6ba226f", 0x25}], 0x2, 0x1, 0x6) 2.095978809s ago: executing program 2 (id=6416): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x1000000}) 1.320133102s ago: executing program 3 (id=6418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.213967791s ago: executing program 3 (id=6421): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r0, 0xfffffbeb) 1.118423959s ago: executing program 3 (id=6423): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00"], 0x114}], 0x1}, 0x0) 1.09650375s ago: executing program 2 (id=6424): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r0, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) 899.955566ms ago: executing program 0 (id=6426): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980901, 0x3, @value=0x140000000000}) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[], 0x0) 866.397579ms ago: executing program 3 (id=6427): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 661.760496ms ago: executing program 0 (id=6429): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x7, 0x1, 0x10000, 0x6, 0x3f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x10005}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 661.633666ms ago: executing program 3 (id=6430): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010) 660.661446ms ago: executing program 1 (id=6437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000140)={0xd5, 0x0, 0xf097af3045ef1724}) 521.983827ms ago: executing program 3 (id=6431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070100f3ff83000058007a159385e582"], 0x0}, 0x0) 521.837197ms ago: executing program 0 (id=6432): r0 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 439.007194ms ago: executing program 1 (id=6433): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 420.471106ms ago: executing program 0 (id=6434): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x2}}, 0x20) 365.57202ms ago: executing program 1 (id=6435): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00"], 0x114}], 0x1}, 0x0) 338.583452ms ago: executing program 2 (id=6436): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000001e00)="$eJzs3U9oHNf9APA3q3+2pVirJL9flKSx1aSpE7eVXdmH9FQHTAshhFx6T3CsxFRJTZ0eEmIs9+RCDykhl5QeUpJbwT0UmlAooVDonxx67im0l5bigiGXGqwtkt9brZ413dVImtVqPx/46unNG833O16xnjfafRuAodVY+3r69GwRwrsfv3P221dWfr267Wh7j7m1r0XsNUMIYx39IjveZ3HD7ZtvnVttV7K2CAtrX9N4eO5G+2cnQwjLYS58Eprh6PHm59dGnl388L1Pj12++Mwru3T6AAAwVK7/aemvT/7jj1+duXX9yJkw0d6ers+bsT8Zr/tPxuv7dN3fCBv7RUd0Gs/2G4nRyPYbyfYbzfKMluQby44zVrLfeJd8Ix3bNjtPAAAAGESNOMdthqIx3zHPbYZGY37+zrx/1WfT48X8axeWFi/1sVgAAACgks+vrL3oVgghhBBiiONWq9Xqdw1CCCHE7kZrut93IAAAAIBhk9YdaK8PllvOVxbYnvbRmr3lv/F0Y/Ofhx1Q9++//IOV/4OrnnEAAKhuv15NpvNK19FpHYN8HcGR7Oe2ev3fyI4zusU6y9YVHJT1BsvqzP9d96qy+rf6OPZLWf35eph7VVn9+Tqde1VZ/RM111FVWf0Haq6jqrL6D9ZcR1Vl9R+quY6qyuqfrLmOqsrqn6q5jqrK6r+n5jqqKqv/cM11VFVW/6C8rLas/mbNdVRVVv9MzXVUVVb/vTXXUVVZ/ffVXEdVZfXfX3Md/fJIbNO/w5FsvHP+nM/pBmWOBwAAAMPuP31b/++bfV/7YNhi7W/Ce6AOIYTY9Vg1twfqEEIIsUnEFcj6XofYwbi6B2oQPcSVft58AAAAAPaE9L6A9K73VpTGR7qMj3YZH+syPt5lfKLLOAAAABDCb64tPvh2sf4+/+2uh5fWjUrrL211HaN8PcKt5t/uumfbzT8o65YBAAAwXIpvfbJy/Oz7r8/cun7kTMfsdyXOd9M6oKPx3sBHsZ9eFzCV9Ys0hz6zMU+jZL/8/sA9Zcd7fpsnCgAAAEMszd+boWjMd8y7m6HRmJ9fn4/PhrFi8cLS+ZOxnz6f5Q/TYxOr279ec90AAABA79bn+5vP/9Pn+M6G8WL+tQtLi5fu9Kfa28canfcFpte3F533BZrZ9oWS7adiP31+5yvTB9e2z5/73tJLO33yAAAAMCQuvfHmd19cWjr/fd/4xje+aX/T72cmAABgp33493f+/INTU7+98/7/9fXv0vv/52K/Gdf2+0vcIb1OIL0P4K7367+wMc902X4XN+7XzPYbiTGR1X2g4zihY73B9HMzG/oj6/s2Nx5nvCTfZJZvKsuXr1Mwmu2fzu9wtj1fnzDtN51tz9dhHM1yFFn+RwMAAACUO/H6qxdPXHrjza9dePXFl8+/fP61UycXvrHw1MLC6YUTa6/rP9H56n4AAABgEK2/6LfflQAAAAAAAAAAAAAAAAAAAMDwquPjxPp9jgAAADDs/n0lhLAshBBC1Bdrn3G6B+oQQgghxODHhOuKnqPVyj9pHgAAAGB33b751rnYXt10h+ViR/O1j9YM4UDH9pVYx+8f/9njq5G233h64/2SQztaDcOu4/f/3KY77PDvv/yDlf+Dqzubv/2c17zTpOe98ue/xsYDnKmW98s/+ecTnfkfGu0xf37+z1fLfyzLfyz0lr/1fpb/hWr5n8jyH+ox/13nf7Fa/idj/tlUz2O95t/4+E/ENp3HwR7zH8/O/6XQa/7s/Js9Jsx8JeYHgGHU6HcBuyRdJaTr6MnYT+cbLzdD/uqHrV7/N7LjjG678o3HTddBD8R+ul6ayvImW61/MjvePRXrzA3Kq0rK6t+px3G3ldU/VnMdVZXVP15zHVWV1T9Rcx1VldV/oOY6qiqrv9d5aL+V1T8o95XL6p+suY6qyuqfqrmOqsrq3+r/4/1SVv/hmuuoqqz+6ZrrqKqs/oq31WpXVv9MzXVUVVb/vTXXUVVZ/ffVXEdVZfXff/emQbkk2pKHY1s2H07zz+k4lvrNrD+xyb/lfr23AAAAAIPmX9b/E0IIIYQQQggh9n20Wv2+A0E/7e67mQHYqzz/DzeP/3Dz+A83jz//S3oNf5H1k5Eu46Ndxse6jI9n4/nv60SX8fuy47aiNH5/l/H/6zJ+uMv4A13GZ7uMP9hl/KEu4w93GQcAAGA4/H9szQ8BAABg/7r8i49+/KtjL9ycuXX9yJkwfte68ydjfyL+bf1a7Ofr3idj8W/+P4z9n8f2d7H9W7a/158AAADA7kufE+Pv/wAAALB/pc8pNf8HAACA/Wsmtub/AAAAsH/dG1vzfwAAANjHigObb45tui/waGx7XdcPANj7vhDbR2J7JLZHY/vF2KbrgMdi+6Wa6gMAds5Pv/Ojp94u1tf7P5WN347bU3uX5Tt3CorGxpX8D8b2UGwf77Ge/PMAes2fHO4xz27ln95mfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/2isfT19erYI4d2P3zk7ffnsy6vbjrb3mFv7WsReM4Qw1v65NLre/2Xc8fbNt86ttiuxbcW2CAuhCEV7PDx3o51pMoSwHObCJ6EZjh5vfn5t5NnFD9/79Njli8+8sov/BAAAALDv/TcAAP//vcAp6A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x81) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000061000000000000000000000002000000000000f0"], 0x400200) 287.422097ms ago: executing program 0 (id=6438): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 249.73664ms ago: executing program 0 (id=6439): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000000)={0x0, 0x23, 0x17, {0x17, 0xa, "98e7c6dd14dbc8854461af49ac3dfa27d1f26ae426"}}, 0x0, 0x0, 0x0}, 0x0) 189.542285ms ago: executing program 1 (id=6440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) 102.496211ms ago: executing program 2 (id=6441): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd25, 0xffffffff, {0xa, 0x0, 0x20, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f08}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 101.809901ms ago: executing program 1 (id=6449): r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x22020400) connect$unix(r0, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 1 (id=6442): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) kernel console output (not intermixed with test programs): on-existent node 16777216 in B*Tree [ 545.008716][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.008926][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.008938][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.010865][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.025588][T20294] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 545.035699][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.047000][T20294] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 545.070433][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.076533][T20294] BTRFS info (device loop1): force zstd compression, level 3 [ 545.101065][T20294] BTRFS info (device loop1): turning on sync discard [ 545.108269][T20294] BTRFS info (device loop1): force clearing of disk cache [ 545.110112][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.128071][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.135661][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.136761][T20294] BTRFS info (device loop1): enabling disk space caching [ 545.143254][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.158008][T20294] BTRFS info (device loop1): turning off discard [ 545.165186][T20294] BTRFS info (device loop1): disk space caching is enabled [ 545.166339][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.180815][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.189899][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.198323][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.207132][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.216621][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.225414][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.235082][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.243705][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.251828][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.260197][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.268541][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.270796][T20318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5561'. [ 545.277309][T20298] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.297215][ T28] audit: type=1800 audit(2000000161.950:323): pid=20298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5557" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 545.344722][T20294] BTRFS info (device loop1): enabling ssd optimizations [ 545.362265][T20294] BTRFS info (device loop1): rebuilding free space tree [ 545.383144][T20294] BTRFS info (device loop1): disabling free space tree [ 545.402666][T20294] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 545.423485][T20294] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 545.508643][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 545.956946][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5572'. [ 546.242111][T20355] team0: Device ip6tnl1 is of different type [ 546.344747][ T786] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 546.449738][T20367] loop1: detected capacity change from 0 to 4096 [ 546.473280][T20368] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.542331][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.553400][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.563153][ T786] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 546.567426][T20370] loop1: detected capacity change from 0 to 4096 [ 546.578746][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.590092][ T786] usb 3-1: config 0 descriptor?? [ 546.593655][T20370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.601817][ T786] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 546.621709][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 546.642460][ T786] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 546.652753][ T786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 546.655165][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.660493][ T786] usb 3-1: media controller created [ 546.677341][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.689438][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 546.708217][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 546.726226][ T786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 546.740679][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 546.760174][ T786] dvb-usb: schedule remote query interval to 150 msecs. [ 546.768547][ T786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 546.828016][T20347] dvb-usb: bulk message failed: -22 (2/0) [ 546.839492][ T1197] usb 3-1: USB disconnect, device number 64 [ 546.864008][ T1197] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 546.885831][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 546.893130][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.905484][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.925744][ T8] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 546.935164][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.945891][ T8] usb 4-1: config 0 descriptor?? [ 547.263664][T20384] loop1: detected capacity change from 0 to 32768 [ 547.284206][ T28] audit: type=1800 audit(2000000163.930:324): pid=20384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5591" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 547.366839][ T8] nti 0003:0757:0A00.004A: unknown main item tag 0x3 [ 547.373612][ T8] nti 0003:0757:0A00.004A: unknown main item tag 0x2 [ 547.397856][ T8] nti 0003:0757:0A00.004A: unknown main item tag 0x3 [ 547.411297][ T8] nti 0003:0757:0A00.004A: unknown global tag 0xd [ 547.421603][ T8] nti 0003:0757:0A00.004A: item 0 0 1 13 parsing failed [ 547.438133][ T8] nti: probe of 0003:0757:0A00.004A failed with error -22 [ 547.565793][ T23] usb 4-1: USB disconnect, device number 42 [ 547.652508][T20394] loop0: detected capacity change from 0 to 512 [ 547.660665][T20394] EXT4-fs: Ignoring removed orlov option [ 547.677016][T20394] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 548.006290][T20409] loop1: detected capacity change from 0 to 512 [ 548.032637][T20409] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 548.048051][T20409] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.5604: iget: bad i_size value: 12154757448730 [ 548.096389][T20409] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5604: couldn't read orphan inode 13 (err -117) [ 548.131502][T20409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.283277][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.322265][T20406] loop0: detected capacity change from 0 to 32768 [ 548.346598][T20406] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.5602 (20406) [ 548.383416][T20406] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 548.414997][T20406] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 548.423725][T20406] BTRFS info (device loop0): use no compression [ 548.441214][T20406] BTRFS info (device loop0): doing ref verification [ 548.461475][T20406] BTRFS info (device loop0): force clearing of disk cache [ 548.482000][T20406] BTRFS info (device loop0): turning off barriers [ 548.492152][T20406] BTRFS info (device loop0): setting nodatasum [ 548.504725][T20406] BTRFS info (device loop0): enabling ssd optimizations [ 548.516479][T20406] BTRFS info (device loop0): using spread ssd allocation scheme [ 548.531054][T20406] BTRFS info (device loop0): not using ssd optimizations [ 548.542121][T20406] BTRFS info (device loop0): not using spread ssd allocation scheme [ 548.573460][T20406] BTRFS info (device loop0): using free space tree [ 548.691178][T20406] BTRFS info (device loop0): rebuilding free space tree [ 548.808264][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5615'. [ 548.881831][T20406] BTRFS error (device loop0): target device is invalid! [ 548.952415][ T5780] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 549.050905][T20465] loop2: detected capacity change from 0 to 512 [ 549.079041][T20465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.150774][T20465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.207187][T20465] ext4 filesystem being mounted at /1421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.226845][T20473] loop0: detected capacity change from 0 to 256 [ 549.234076][T20473] exfat: Deprecated parameter 'utf8' [ 549.240771][T20473] exfat: Deprecated parameter 'utf8' [ 549.323388][T20473] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d) [ 549.345569][T20465] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 549.433186][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.583102][T20484] loop0: detected capacity change from 0 to 128 [ 549.591269][T20484] UDF-fs: bad mount option "Í[CX§.ìÓìú-½ö¾ðF(?£ê-Ôƃ+ ° þ[è“cnùÿ€7Í [ 549.591269][T20484]  +ÑÉ ‚Ít+K3¼Ê‚˜ñ¶&sFðç" or missing value [ 549.796156][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5634'. [ 549.810252][T20495] sg_write: process 2693 (syz.0.5635) changed security contexts after opening file descriptor, this is not allowed. [ 550.192068][T20509] loop1: detected capacity change from 0 to 128 [ 550.202894][T20510] futex_wake_op: syz.0.5642 tries to shift op by 32; fix this program [ 550.242783][T20509] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.266819][T20509] ext4 filesystem being mounted at /1445/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 550.377221][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.008562][T20517] loop2: detected capacity change from 0 to 32768 [ 551.068226][T20517] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 551.122594][T20517] XFS (loop2): Ending clean mount [ 551.132247][T20517] XFS (loop2): Quotacheck needed: Please wait. [ 551.223835][T20517] XFS (loop2): Quotacheck: Done. [ 551.326217][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 551.722367][T20546] loop0: detected capacity change from 0 to 32768 [ 551.770227][T20546] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 551.840760][T20546] (syz.0.5657,20546,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 551.985757][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 552.116190][T20559] loop1: detected capacity change from 0 to 40427 [ 552.159982][T20559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 552.268205][T20559] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 552.345108][T20559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 552.348074][T20582] loop0: detected capacity change from 0 to 1024 [ 552.388015][ T28] audit: type=1800 audit(2000000169.040:325): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5663" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 552.461708][ T5786] syz-executor: attempt to access beyond end of device [ 552.461708][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 552.504326][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 552.519344][T18991] hfsplus: b-tree write err: -5, ino 4 [ 552.798298][T20578] loop2: detected capacity change from 0 to 40427 [ 552.817232][T20578] F2FS-fs (loop2): Invalid segment/section count (458776 != 24 * 1) [ 552.841269][T20578] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 552.867144][T20578] F2FS-fs (loop2): invalid crc value [ 552.913095][T20578] F2FS-fs (loop2): Found nat_bits in checkpoint [ 553.035796][T20578] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 553.043060][T20578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 553.278558][T20604] veth1_macvtap: left promiscuous mode [ 553.294463][T20604] macsec0: entered promiscuous mode [ 553.338572][T20605] veth1_macvtap: entered promiscuous mode [ 553.384891][T20605] macsec0: left promiscuous mode [ 553.911008][T20620] loop2: detected capacity change from 0 to 4096 [ 553.936357][T20620] NILFS (loop2): invalid segment: Checksum error in segment payload [ 553.948147][T20620] NILFS (loop2): trying rollback from an earlier position [ 553.969718][T20620] NILFS (loop2): recovery complete [ 553.973330][T20624] loop0: detected capacity change from 0 to 2048 [ 553.976166][T20625] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 553.992990][T20602] loop1: detected capacity change from 0 to 32768 [ 554.016153][T20624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.060403][T20602] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 554.151486][T20602] XFS (loop1): Ending clean mount [ 554.172535][T20602] XFS (loop1): Quotacheck needed: Please wait. [ 554.233878][T20602] XFS (loop1): Quotacheck: Done. [ 554.325121][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 554.369080][T20639] loop2: detected capacity change from 0 to 4096 [ 554.388424][T20639] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 554.482215][T20639] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 554.632880][T20645] loop0: detected capacity change from 0 to 256 [ 554.656417][T20645] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 554.694693][T20645] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 554.738593][T20651] loop2: detected capacity change from 0 to 256 [ 554.756006][T20645] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 554.776252][T20651] exfat: Deprecated parameter 'utf8' [ 554.800120][T20651] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 555.152675][T20671] loop1: detected capacity change from 0 to 1024 [ 555.201752][ T1078] hfsplus: b-tree write err: -5, ino 4 [ 555.251152][T20675] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 555.268342][T20675] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 555.291895][T20677] vivid-000: disconnect [ 555.309308][T20676] vivid-000: reconnect [ 555.364527][ T8] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 555.573023][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 134: 137, using maximum allowed: 30 [ 555.592314][ T8] usb 3-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.643624][ T8] usb 3-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.653926][ T8] usb 3-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 555.667454][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 555.674173][ T8] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 555.683282][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.705162][ T8] usb 3-1: config 0 descriptor?? [ 555.771733][T20699] netlink: 'syz.3.5721': attribute type 3 has an invalid length. [ 556.084284][ T1197] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 556.121047][ T8] uclogic 0003:5543:0003.004B: unknown main item tag 0x0 [ 556.128289][ T8] uclogic 0003:5543:0003.004B: unknown main item tag 0x0 [ 556.135937][ T5173] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 556.143543][ T8] uclogic 0003:5543:0003.004B: unknown main item tag 0x0 [ 556.150923][ T8] uclogic 0003:5543:0003.004B: unknown main item tag 0x0 [ 556.158643][ T8] uclogic 0003:5543:0003.004B: unknown main item tag 0x0 [ 556.167150][ T8] uclogic 0003:5543:0003.004B: No inputs registered, leaving [ 556.175469][ T8] uclogic 0003:5543:0003.004B: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0 [ 556.275789][ T1197] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 556.284013][ T1197] usb 2-1: config 0 has no interface number 0 [ 556.293041][ T1197] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 556.302173][ T1197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.310215][ T1197] usb 2-1: Product: syz [ 556.314634][ T1197] usb 2-1: Manufacturer: syz [ 556.319443][ T1197] usb 2-1: SerialNumber: syz [ 556.325711][ T27] usb 3-1: USB disconnect, device number 65 [ 556.333204][ T1197] usb 2-1: config 0 descriptor?? [ 556.349248][ T5173] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 556.365821][ T1197] mvusb_mdio: probe of 2-1:0.112 failed with error -5 [ 556.372648][ T5173] usb 4-1: config 0 has no interface number 0 [ 556.379103][ T5173] usb 4-1: config 0 interface 98 has no altsetting 0 [ 556.390597][ T5173] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 556.400085][ T5173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.409453][ T5173] usb 4-1: Product: syz [ 556.413615][ T5173] usb 4-1: Manufacturer: syz [ 556.418253][ T5173] usb 4-1: SerialNumber: syz [ 556.424618][ T5173] usb 4-1: config 0 descriptor?? [ 556.551533][ T786] usb 2-1: USB disconnect, device number 59 [ 556.635203][ T1197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.652268][ T5173] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 557.367389][T20712] loop2: detected capacity change from 0 to 40427 [ 557.379039][ T5173] usb 4-1: reset high-speed USB device number 43 using dummy_hcd [ 557.388114][T20712] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 557.397400][T20712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 557.412791][T20712] F2FS-fs (loop2): Found nat_bits in checkpoint [ 557.473759][T20712] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 557.481936][T20712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 557.487250][T20728] sctp: [Deprecated]: syz.1.5733 (pid 20728) Use of int in maxseg socket option. [ 557.487250][T20728] Use struct sctp_assoc_value instead [ 557.622727][T20730] loop1: detected capacity change from 0 to 4096 [ 557.634624][T20730] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 557.695958][T20730] IPv6: addrconf: prefix option has invalid lifetime [ 557.711596][T20730] IPv6: addrconf: prefix option has invalid lifetime [ 557.824482][ T5173] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 557.861632][ T5173] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 557.873469][ T5173] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 557.880800][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5737'. [ 557.884725][ T1197] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 557.910581][ T1197] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 557.927221][ T5173] usb 4-1: USB disconnect, device number 43 [ 558.039170][T20738] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 558.191779][T20742] loop1: detected capacity change from 0 to 8192 [ 558.204861][T20742] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 558.218524][T20742] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 558.228721][T20742] REISERFS (device loop1): using ordered data mode [ 558.244357][T20742] reiserfs: using flush barriers [ 558.251321][T20742] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 558.273000][T20742] REISERFS (device loop1): checking transaction log (loop1) [ 558.431191][T20742] REISERFS (device loop1): Using tea hash to sort names [ 558.449810][T20742] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 558.497731][T20742] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=12, len=4 - odd [ 558.524882][T20744] loop2: detected capacity change from 0 to 32768 [ 558.603140][T20744] overlayfs: upper fs needs to support d_type. [ 558.618819][T20744] overlayfs: upper fs does not support tmpfile. [ 558.648738][T20744] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 558.676278][T20744] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 558.676278][T20744] [ 558.724285][T20744] ERROR: (device loop2): remounting filesystem as read-only [ 558.731768][T20744] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 558.882384][T20760] macvlan2: entered promiscuous mode [ 558.889278][T20760] macvlan2: entered allmulticast mode [ 559.109322][T20768] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 559.121255][T20768] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 559.129108][T20768] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 559.140180][T20768] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 559.143237][T20753] loop0: detected capacity change from 0 to 32768 [ 559.147028][T20768] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 559.147073][T20768] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 559.148018][T20768] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 559.176508][T20753] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.5746 (20753) [ 559.179204][T20768] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 559.196166][T20768] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 559.202750][T20768] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 559.210609][T20768] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 559.221905][T20768] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 559.228826][T20768] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 559.241476][T20768] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 559.250429][T20753] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.266957][T20768] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 559.273601][T20753] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 559.290869][T20768] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 559.298788][T20768] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 559.306942][T20753] BTRFS info (device loop0): use zlib compression, level 3 [ 559.320457][T20768] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 559.327158][T20753] BTRFS info (device loop0): using free space tree [ 559.334673][T20768] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 559.341717][T20768] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 559.353192][T20768] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 559.362214][T20768] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 559.423206][T20753] BTRFS info (device loop0): enabling ssd optimizations [ 559.442454][T20753] BTRFS info (device loop0): auto enabling async discard [ 559.521265][T20793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.537689][ T5784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.581411][ T5780] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.764699][ T28] audit: type=1326 audit(2000000176.420:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20800 comm="syz.3.5760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b298eb69 code=0x0 [ 559.793246][T20805] mkiss: ax0: crc mode is auto. [ 560.311155][T20829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5771'. [ 560.323626][T20829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5771'. [ 560.337303][T20825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5771'. [ 560.365360][T20704] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 560.380281][T20831] loop0: detected capacity change from 0 to 256 [ 560.410777][T20831] FAT-fs (loop0): Directory bread(block 64) failed [ 560.417938][T20831] FAT-fs (loop0): Directory bread(block 65) failed [ 560.424850][T20831] FAT-fs (loop0): Directory bread(block 66) failed [ 560.431549][T20831] FAT-fs (loop0): Directory bread(block 67) failed [ 560.438604][T20831] FAT-fs (loop0): Directory bread(block 68) failed [ 560.445481][T20831] FAT-fs (loop0): Directory bread(block 69) failed [ 560.452586][T20831] FAT-fs (loop0): Directory bread(block 70) failed [ 560.460017][T20831] FAT-fs (loop0): Directory bread(block 71) failed [ 560.468001][T20831] FAT-fs (loop0): Directory bread(block 72) failed [ 560.475063][T20831] FAT-fs (loop0): Directory bread(block 73) failed [ 560.586402][T20704] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 560.608742][T20704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.629003][T20704] usb 3-1: config 0 descriptor?? [ 560.643776][T20704] cp210x 3-1:0.0: cp210x converter detected [ 560.673336][T20841] loop1: detected capacity change from 0 to 64 [ 560.855428][T20849] loop0: detected capacity change from 0 to 256 [ 560.862733][T20849] exfat: Deprecated parameter 'utf8' [ 560.896583][T20849] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 560.923553][T20851] loop1: detected capacity change from 0 to 4096 [ 560.932657][T20851] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 560.963825][T20851] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 560.973862][T20851] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 560.998576][T20851] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 561.012231][T20851] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 561.052746][T20851] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 561.074772][T20851] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 561.094865][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.107594][T20851] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 561.124264][T20851] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 561.161495][T20851] ntfs: volume version 3.1. [ 561.256750][T20704] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 561.279657][T20704] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 561.306588][T20704] usb 3-1: cp210x converter now attached to ttyUSB0 [ 561.318123][T20704] usb 3-1: USB disconnect, device number 66 [ 561.327243][T20704] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 561.355737][T20704] cp210x 3-1:0.0: device disconnected [ 561.571761][T20862] loop0: detected capacity change from 0 to 32768 [ 561.590274][T20862] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 561.633563][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 561.704420][ T8] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 561.902108][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.911485][ T8] usb 2-1: config 0 has no interface number 0 [ 561.922386][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 561.940689][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 561.958842][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 561.973869][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.996797][ T8] usb 2-1: config 0 descriptor?? [ 562.005287][T20864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 562.023116][ T8] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 562.105630][T20880] loop2: detected capacity change from 0 to 512 [ 562.112939][T20880] EXT4-fs: Ignoring removed i_version option [ 562.121843][T20880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 562.140734][T20880] EXT4-fs (loop2): 1 truncate cleaned up [ 562.149884][T20880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.199520][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.276546][ T8] usb 2-1: USB disconnect, device number 60 [ 562.966601][T20889] loop0: detected capacity change from 0 to 32768 [ 562.986039][T20889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.5799 (20889) [ 563.007910][T20889] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.023068][T20889] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 563.039006][T20902] macvlan3: entered promiscuous mode [ 563.050161][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.060721][T20889] BTRFS info (device loop0): disabling tree log [ 563.068479][T20889] BTRFS info (device loop0): setting nodatacow, compression disabled [ 563.077019][T20902] macvlan3: entered allmulticast mode [ 563.083032][T20889] BTRFS info (device loop0): max_inline at 0 [ 563.089805][T20889] BTRFS info (device loop0): enabling ssd optimizations [ 563.097434][T20889] BTRFS info (device loop0): using spread ssd allocation scheme [ 563.105494][T20889] BTRFS info (device loop0): turning off barriers [ 563.111946][T20889] BTRFS info (device loop0): turning on flush-on-commit [ 563.137189][T20889] BTRFS info (device loop0): doing ref verification [ 563.137616][T20904] loop1: detected capacity change from 0 to 164 [ 563.143825][T20889] BTRFS info (device loop0): force clearing of disk cache [ 563.143854][T20889] BTRFS info (device loop0): turning on sync discard [ 563.143917][T20889] BTRFS info (device loop0): max_inline at 4096 [ 563.182048][T20904] Unable to read rock-ridge attributes [ 563.187618][T20889] BTRFS info (device loop0): using free space tree [ 563.225328][T20910] loop2: detected capacity change from 0 to 512 [ 563.232642][T20910] EXT4-fs: Ignoring removed oldalloc option [ 563.248349][T20904] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 563.280416][T20889] BTRFS info (device loop0): rebuilding free space tree [ 563.294454][T20910] EXT4-fs (loop2): 1 truncate cleaned up [ 563.318516][T20910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.390286][ T5780] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.456365][T20926] CUSE: DEVNAME unspecified [ 563.508233][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.734260][T20704] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 563.875032][ T27] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 563.915284][T20704] usb 2-1: Using ep0 maxpacket: 16 [ 563.922796][T20704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.944213][T20704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.962335][T20938] loop0: detected capacity change from 0 to 4096 [ 563.970854][T20704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.989269][T20938] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 564.001684][T20704] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 564.016142][T20704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.031969][T20704] usb 2-1: config 0 descriptor?? [ 564.054316][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 564.063160][ T27] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 564.078668][ T27] usb 4-1: config 1 has no interface number 0 [ 564.094724][ T27] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 564.110102][ T27] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 564.135021][ T27] usb 4-1: config 1 interface 105 has no altsetting 0 [ 564.144459][T20938] IPv6: addrconf: prefix option has invalid lifetime [ 564.145600][ T27] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 564.163622][T20938] IPv6: addrconf: prefix option has invalid lifetime [ 564.171086][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.184651][ T27] usb 4-1: Product: syz [ 564.188933][ T27] usb 4-1: Manufacturer: syz [ 564.203776][ T27] usb 4-1: SerialNumber: syz [ 564.219640][T20930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 564.231281][T20930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 564.306474][T20942] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0 [ 564.461084][T20704] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 564.484445][T20704] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 564.499591][T20704] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.004C/input/input58 [ 564.599257][T20704] microsoft 0003:045E:07DA.004C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 564.687176][T20930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 564.704587][T20930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 564.712923][T20704] usb 2-1: USB disconnect, device number 61 [ 564.914780][ T27] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 564.925969][ T27] aqc111: probe of 4-1:1.105 failed with error -71 [ 564.935131][ T27] usb 4-1: USB disconnect, device number 44 [ 565.034834][ T8] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 565.224219][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 565.231415][ T8] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 565.239687][ T8] usb 3-1: config 0 has no interface number 0 [ 565.256375][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 565.265518][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.273612][ T8] usb 3-1: Product: syz [ 565.278930][ T8] usb 3-1: Manufacturer: syz [ 565.283586][ T8] usb 3-1: SerialNumber: syz [ 565.290034][ T8] usb 3-1: config 0 descriptor?? [ 565.523643][ T8] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 565.541565][ T8] usb 3-1: Failed to initialize entity for entity 6 [ 565.548446][ T8] usb 3-1: Failed to register entities (-22). [ 565.579558][T20962] loop1: detected capacity change from 0 to 256 [ 565.586929][T20962] exfat: Deprecated parameter 'utf8' [ 565.600127][T20962] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 565.674476][T20960] IPv6: addrconf: prefix option has invalid lifetime [ 565.686791][T20960] IPv6: addrconf: prefix option has invalid lifetime [ 565.729155][ T8] usb 3-1: USB disconnect, device number 67 [ 565.784546][T20969] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0 [ 565.839795][T20971] loop1: detected capacity change from 0 to 256 [ 565.867870][T20971] FAT-fs (loop1): Directory bread(block 64) failed [ 565.878923][T20971] FAT-fs (loop1): Directory bread(block 65) failed [ 565.887305][T20971] FAT-fs (loop1): Directory bread(block 66) failed [ 565.893930][T20971] FAT-fs (loop1): Directory bread(block 67) failed [ 565.904198][T20971] FAT-fs (loop1): Directory bread(block 68) failed [ 565.911820][T20971] FAT-fs (loop1): Directory bread(block 69) failed [ 565.922760][T20971] FAT-fs (loop1): Directory bread(block 70) failed [ 565.930536][T20971] FAT-fs (loop1): Directory bread(block 71) failed [ 565.940724][T20971] FAT-fs (loop1): Directory bread(block 72) failed [ 565.949540][T20971] FAT-fs (loop1): Directory bread(block 73) failed [ 566.315870][T20977] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 566.323849][T20977] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 566.331790][T20977] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 566.339718][T20977] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 566.347631][T20977] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 566.355545][T20977] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 566.815952][T20979] loop2: detected capacity change from 0 to 40427 [ 566.832204][T20979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 566.892698][T20979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 566.961414][ T5781] syz-executor: attempt to access beyond end of device [ 566.961414][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 566.976236][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 566.986284][T20704] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 567.064977][T20990] loop1: detected capacity change from 0 to 32768 [ 567.093269][T20990] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 567.173016][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 567.206032][T20704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.225395][T20704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.244726][T20704] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 567.253802][T20704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.285338][T20704] usb 4-1: config 0 descriptor?? [ 567.480617][T21000] loop2: detected capacity change from 0 to 256 [ 567.534910][T21000] FAT-fs (loop2): Directory bread(block 64) failed [ 567.541486][T21000] FAT-fs (loop2): Directory bread(block 65) failed [ 567.552567][T21000] FAT-fs (loop2): Directory bread(block 66) failed [ 567.560040][T21000] FAT-fs (loop2): Directory bread(block 67) failed [ 567.570411][T21000] FAT-fs (loop2): Directory bread(block 68) failed [ 567.577677][T21000] FAT-fs (loop2): Directory bread(block 69) failed [ 567.585449][T21000] FAT-fs (loop2): Directory bread(block 70) failed [ 567.591998][T21000] FAT-fs (loop2): Directory bread(block 71) failed [ 567.600178][T21000] FAT-fs (loop2): Directory bread(block 72) failed [ 567.609569][T21000] FAT-fs (loop2): Directory bread(block 73) failed [ 567.699264][T20704] greenasia 0003:0E8F:0012.004D: unknown main item tag 0x0 [ 567.713425][T20704] greenasia 0003:0E8F:0012.004D: unknown main item tag 0x0 [ 567.725508][T20704] greenasia 0003:0E8F:0012.004D: unknown main item tag 0x0 [ 567.734190][T20704] greenasia 0003:0E8F:0012.004D: unknown main item tag 0x0 [ 567.741446][T20704] greenasia 0003:0E8F:0012.004D: unknown main item tag 0x0 [ 567.774544][T20704] greenasia 0003:0E8F:0012.004D: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 567.794232][T20704] greenasia 0003:0E8F:0012.004D: no inputs found [ 567.826138][T20998] loop1: detected capacity change from 0 to 32768 [ 567.834786][T20998] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.5841 (20998) [ 567.864248][T20998] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 567.878396][T20998] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 567.888036][T20998] BTRFS info (device loop1): setting nodatacow, compression disabled [ 567.900616][T20998] BTRFS info (device loop1): setting datacow [ 567.902870][ T23] usb 4-1: USB disconnect, device number 45 [ 567.924215][T20998] BTRFS info (device loop1): doing ref verification [ 567.930981][T20998] BTRFS info (device loop1): force clearing of disk cache [ 567.944315][T20998] BTRFS info (device loop1): turning off barriers [ 567.954446][T20998] BTRFS info (device loop1): enabling ssd optimizations [ 567.969121][T20998] BTRFS info (device loop1): using spread ssd allocation scheme [ 567.984532][T20998] BTRFS info (device loop1): not using ssd optimizations [ 567.996574][T20998] BTRFS info (device loop1): not using spread ssd allocation scheme [ 568.009557][T20998] BTRFS info (device loop1): using free space tree [ 568.020152][T21011] netlink: 'syz.0.5846': attribute type 10 has an invalid length. [ 568.055439][T20998] BTRFS info (device loop1): rebuilding free space tree [ 568.160479][T18991] BTRFS info (device loop1): cannot satisfy tickets, dumping space info [ 568.169597][T18991] BTRFS info (device loop1): space_info DATA+METADATA has 10039296 free, is full [ 568.179300][T18991] BTRFS info (device loop1): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 568.193896][T18991] BTRFS info (device loop1): failing ticket with 117440512 bytes [ 568.202703][T20998] BTRFS info (device loop1): space_info DATA+METADATA has 10039296 free, is full [ 568.212423][T20998] BTRFS info (device loop1): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 568.228524][T20998] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792 [ 568.237746][T20998] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 568.246124][T20998] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 568.253783][T20998] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 568.262363][T20998] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 568.335016][ T27] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 568.359554][ T5786] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 568.536435][ T27] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 568.563934][ T27] usb 3-1: config 0 has no interface number 0 [ 568.597549][ T27] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 568.630551][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.674686][ T27] usb 3-1: Product: syz [ 568.678910][ T27] usb 3-1: Manufacturer: syz [ 568.695092][ T27] usb 3-1: SerialNumber: syz [ 568.716589][ T27] usb 3-1: config 0 descriptor?? [ 568.743295][ T27] mvusb_mdio: probe of 3-1:0.112 failed with error -5 [ 569.020868][ T27] usb 3-1: USB disconnect, device number 68 [ 569.210485][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5857'. [ 569.212694][T21050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5856'. [ 569.524728][ T5863] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 569.726029][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.754491][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 569.774188][ T5863] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 569.784148][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.805291][ T5863] usb 4-1: config 0 descriptor?? [ 569.920486][T21070] loop1: detected capacity change from 0 to 32768 [ 569.929182][T21070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5867 (21070) [ 569.947789][T21070] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 569.963122][T21070] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 569.973782][T21070] BTRFS info (device loop1): using free space tree [ 569.997878][T21072] loop2: detected capacity change from 0 to 32768 [ 570.008699][T21072] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5868 (21072) [ 570.033323][T21070] BTRFS info (device loop1): enabling ssd optimizations [ 570.040465][T21070] BTRFS info (device loop1): auto enabling async discard [ 570.040848][T21072] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 570.058822][T21072] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 570.070910][T21072] BTRFS info (device loop2): using free space tree [ 570.118458][T21072] BTRFS info (device loop2): enabling ssd optimizations [ 570.127065][ T5786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 570.127321][T21072] BTRFS info (device loop2): auto enabling async discard [ 570.238516][ T5863] konepure 0003:1E7D:2DB4.004E: item fetching failed at offset 10/11 [ 570.260007][ T5863] konepure 0003:1E7D:2DB4.004E: parse failed [ 570.279282][ T5781] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 570.299878][ T5863] konepure: probe of 0003:1E7D:2DB4.004E failed with error -22 [ 570.450679][ T27] usb 4-1: USB disconnect, device number 46 [ 570.711420][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x4 [ 570.723536][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x2 [ 570.731780][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.739667][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.747392][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.755126][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.762811][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.772848][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.781028][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.788752][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.796769][ T5863] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 570.804471][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.812129][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.820603][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.828785][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.836530][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.844229][ T8] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x0 [ 570.859275][ T8] hid-generic 0000:3000000:0000.004F: hidraw0: HID v0.00 Device [sy] on syz0 [ 571.018607][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 571.021488][T21112] loop2: detected capacity change from 0 to 512 [ 571.035400][ T5863] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 571.046704][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.058570][T21112] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 571.068185][ T5863] usb 2-1: config 0 descriptor?? [ 571.076756][ T5863] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 571.314918][ T27] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 571.489948][T21122] loop2: detected capacity change from 0 to 32768 [ 571.507169][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.518903][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 571.525478][T21122] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 571.533728][ T27] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 571.552215][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.563338][ T27] usb 4-1: config 0 descriptor?? [ 571.568198][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 571.568210][ T28] audit: type=1800 audit(2000000188.210:327): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5877" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 571.572109][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 571.578211][T21122] (syz.2.5877,21122,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -14 [ 571.613292][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 571.639379][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 571.653551][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 571.655565][ T5781] (syz-executor,5781,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 571.661116][ T27] usb 4-1: media controller created [ 571.685915][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 571.706631][ T5863] gspca_vc032x: reg_w err -71 [ 571.711369][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.715934][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.727761][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.733270][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.738091][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 571.752315][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 571.754480][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.763252][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 571.777538][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.782863][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.791529][T21114] dvb-usb: bulk message failed: -22 (2/0) [ 571.804260][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.808452][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 571.814729][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.820314][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 571.830282][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.842862][ T27] usb 4-1: USB disconnect, device number 47 [ 571.844147][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.860649][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.874136][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.878998][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 571.884316][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.895132][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.900497][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.906804][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.912196][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.918429][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.923755][ T5863] gspca_vc032x: Unknown sensor... [ 571.929237][ T5863] vc032x: probe of 2-1:0.0 failed with error -22 [ 571.938592][ T5863] usb 2-1: USB disconnect, device number 62 [ 572.399736][T21132] loop2: detected capacity change from 0 to 512 [ 572.409557][T21132] EXT4-fs: Ignoring removed mblk_io_submit option [ 572.416479][T21132] EXT4-fs: Ignoring removed mblk_io_submit option [ 572.423879][T21132] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 572.441762][T21132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 572.451029][T21132] System zones: 1-12 [ 572.463390][T21132] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.5882: corrupted in-inode xattr: e_value size too large [ 572.486535][T21132] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5882: couldn't read orphan inode 15 (err -117) [ 572.507333][T21132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.560665][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.518338][T21144] loop2: detected capacity change from 0 to 32768 [ 573.536640][T21144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.5885 (21144) [ 573.573789][T21144] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 573.584800][T21144] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 573.593501][T21144] BTRFS info (device loop2): setting nodatacow, compression disabled [ 573.602428][T21144] BTRFS info (device loop2): setting datacow [ 573.609066][T21144] BTRFS info (device loop2): doing ref verification [ 573.616580][T21144] BTRFS info (device loop2): force clearing of disk cache [ 573.623724][T21144] BTRFS info (device loop2): turning off barriers [ 573.630757][T21144] BTRFS info (device loop2): enabling ssd optimizations [ 573.638348][T21144] BTRFS info (device loop2): using spread ssd allocation scheme [ 573.648351][T21144] BTRFS info (device loop2): not using ssd optimizations [ 573.656052][T21144] BTRFS info (device loop2): not using spread ssd allocation scheme [ 573.664965][T21144] BTRFS info (device loop2): using free space tree [ 573.707268][T21144] BTRFS info (device loop2): rebuilding free space tree [ 573.840249][ T1126] BTRFS info (device loop2): cannot satisfy tickets, dumping space info [ 573.848915][ T1126] BTRFS info (device loop2): space_info DATA+METADATA has 10039296 free, is full [ 573.858280][ T1126] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 573.872085][ T1126] BTRFS info (device loop2): failing ticket with 117440512 bytes [ 573.880015][T21144] BTRFS info (device loop2): space_info DATA+METADATA has 10039296 free, is full [ 573.889345][T21144] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 573.903190][T21144] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792 [ 573.912032][T21144] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 573.919953][T21144] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 573.927677][T21144] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 573.935573][T21144] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 573.995495][ T5781] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 574.353071][T21176] loop2: detected capacity change from 0 to 512 [ 574.367546][T21176] EXT4-fs: Ignoring removed nobh option [ 574.379482][T21176] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 574.391103][T21176] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 574.409630][T21176] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.5892: casefold flag without casefold feature [ 574.443718][T21176] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5892: couldn't read orphan inode 13 (err -117) [ 574.473591][T21176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.525490][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.849369][T21181] loop1: detected capacity change from 0 to 32768 [ 574.870036][T21181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5896 (21181) [ 574.906146][T21181] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 574.924609][T21181] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 574.933287][T21181] BTRFS info (device loop1): using free space tree [ 575.045572][T21181] BTRFS info (device loop1): enabling ssd optimizations [ 575.058116][T21181] BTRFS info (device loop1): auto enabling async discard [ 575.142702][T21207] loop2: detected capacity change from 0 to 2048 [ 575.159477][T21207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.252687][ T5786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 575.834921][ T5863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.876745][T21228] loop1: detected capacity change from 0 to 2048 [ 575.903980][T21228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.964043][T21232] vivid-001: disconnect [ 575.985204][T21231] vivid-001: reconnect [ 576.340057][T21224] loop0: detected capacity change from 0 to 32768 [ 576.365191][T21224] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5909 (21224) [ 576.390218][T21224] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 576.403682][T21224] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 576.435270][T21224] BTRFS info (device loop0): force clearing of disk cache [ 576.444843][T21224] BTRFS info (device loop0): enabling auto defrag [ 576.451340][T21224] BTRFS info (device loop0): max_inline at 0 [ 576.479144][T21224] BTRFS info (device loop0): enabling disk space caching [ 576.499404][T21224] BTRFS info (device loop0): disk space caching is enabled [ 576.542450][T21251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5921'. [ 576.614928][T21224] BTRFS info (device loop0): enabling ssd optimizations [ 576.633043][T21224] BTRFS info (device loop0): rebuilding free space tree [ 576.678724][T21224] BTRFS info (device loop0): disabling free space tree [ 576.696069][T21224] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 576.727371][T21240] loop2: detected capacity change from 0 to 40427 [ 576.728698][T21224] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 576.741968][T21240] F2FS-fs (loop2): invalid crc value [ 576.754959][T21240] F2FS-fs (loop2): Found nat_bits in checkpoint [ 576.814304][T21240] F2FS-fs (loop2): Start checkpoint disabled! [ 576.822458][T21240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 576.897281][ T58] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 576.932383][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 577.394062][T21278] loop0: detected capacity change from 0 to 2048 [ 577.409970][T21278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.483254][T21282] loop1: detected capacity change from 0 to 512 [ 577.510901][T21284] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5926'. [ 577.521459][T21284] net_ratelimit: 48 callbacks suppressed [ 577.521474][T21284] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 577.589811][T21282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.607054][T21282] ext4 filesystem being mounted at /1525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.668828][T21282] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.5929: directory missing '..' [ 577.719732][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.861985][T21300] team0: Device ip6tnl2 is of different type [ 578.286155][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5943'. [ 578.300223][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5943'. [ 578.396577][ T5863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.656479][T21316] loop2: detected capacity change from 0 to 512 [ 578.682606][T21321] loop1: detected capacity change from 0 to 8 [ 578.706944][T21316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.732626][T21321] SQUASHFS error: Unable to read directory block [2c0:35] [ 578.745246][T21316] ext4 filesystem being mounted at /1501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.843831][T21319] loop0: detected capacity change from 0 to 8192 [ 578.876700][T21316] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.5944: directory missing '..' [ 578.900243][T21319] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 578.936466][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.944164][T21319] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 578.967188][T21319] REISERFS (device loop0): using ordered data mode [ 578.980022][T21319] reiserfs: using flush barriers [ 578.999890][T21319] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 579.035518][T21319] REISERFS (device loop0): checking transaction log (loop0) [ 579.205190][T21319] REISERFS (device loop0): Using tea hash to sort names [ 579.212524][T21319] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 579.272181][T21319] REISERFS warning (device loop0): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=12, len=4 - odd [ 579.559492][T21335] loop2: detected capacity change from 0 to 32768 [ 579.567913][T21342] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 579.578934][T21342] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 579.590795][T21335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5952 (21335) [ 579.607832][T21335] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 579.619021][T21335] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 579.629100][T21335] BTRFS info (device loop2): using free space tree [ 579.712584][T21335] BTRFS info (device loop2): enabling ssd optimizations [ 579.724775][T21335] BTRFS info (device loop2): auto enabling async discard [ 579.895513][ T5781] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 580.434898][T21383] xt_hashlimit: max too large, truncated to 1048576 [ 580.467940][T21383] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 580.755777][T21380] loop2: detected capacity change from 0 to 32768 [ 580.763852][T21380] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5961 (21380) [ 580.780644][T21380] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 580.791744][T21380] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 580.801312][T21380] BTRFS info (device loop2): force clearing of disk cache [ 580.809211][T21380] BTRFS info (device loop2): enabling auto defrag [ 580.818900][T21380] BTRFS info (device loop2): max_inline at 0 [ 580.825543][T21380] BTRFS info (device loop2): enabling disk space caching [ 580.832595][T21380] BTRFS info (device loop2): disk space caching is enabled [ 580.864054][T21380] BTRFS info (device loop2): enabling ssd optimizations [ 580.881171][T21380] BTRFS info (device loop2): rebuilding free space tree [ 580.901690][T21380] BTRFS info (device loop2): disabling free space tree [ 580.911108][T21380] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 580.925171][T21380] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 581.061136][ T1108] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 581.090078][ T5781] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 581.922828][T21418] loop2: detected capacity change from 0 to 4096 [ 581.946229][T21418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.012797][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.150144][T21429] vivid-000: ================= START STATUS ================= [ 582.158930][T21429] vivid-000: Generate PTS: true [ 582.166910][T21429] vivid-000: Generate SCR: true [ 582.171835][T21429] tpg source WxH: 1280x720 (Y'CbCr) [ 582.177436][T21429] tpg field: 1 [ 582.180814][T21429] tpg crop: 1280x720@0x0 [ 582.185183][T21429] tpg compose: 1280x720@0x0 [ 582.189691][T21429] tpg colorspace: 3 [ 582.193481][T21429] tpg transfer function: 0/0 [ 582.198705][T21429] tpg Y'CbCr encoding: 0/0 [ 582.203133][T21429] tpg quantization: 0/0 [ 582.207660][T21429] tpg RGB range: 0/1 [ 582.211570][T21429] vivid-000: ================== END STATUS ================== [ 582.245430][ T27] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 582.264512][ T5863] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 582.446965][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.459032][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.466450][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.469909][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 582.486296][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.490643][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.503645][ T5863] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 582.510820][ T27] usb 2-1: config 0 descriptor?? [ 582.522224][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.532914][ T5863] usb 4-1: config 0 descriptor?? [ 582.610030][T21444] netlink: 'syz.0.5987': attribute type 10 has an invalid length. [ 582.642241][T21444] batman_adv: batadv0: Adding interface: team0 [ 582.655553][T21444] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.682940][T21444] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 582.696671][T21445] netlink: 'syz.0.5987': attribute type 10 has an invalid length. [ 582.705425][T21445] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5987'. [ 582.715347][T21445] team0: entered promiscuous mode [ 582.720454][T21445] team_slave_0: entered promiscuous mode [ 582.734468][T21445] team_slave_1: entered promiscuous mode [ 582.743456][T21445] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.751738][T21445] batman_adv: batadv0: Interface activated: team0 [ 582.761133][T21445] batman_adv: batadv0: Interface deactivated: team0 [ 582.768468][T21445] batman_adv: batadv0: Removing interface: team0 [ 582.777755][T21445] bridge0: port 3(team0) entered blocking state [ 582.784949][T21445] bridge0: port 3(team0) entered disabled state [ 582.791457][T21445] team0: entered allmulticast mode [ 582.797189][T21445] team_slave_0: entered allmulticast mode [ 582.803593][T21445] team_slave_1: entered allmulticast mode [ 582.813864][T21445] bridge0: port 3(team0) entered blocking state [ 582.820242][T21445] bridge0: port 3(team0) entered forwarding state [ 582.947883][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 582.960245][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 582.970971][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 582.971448][ T5863] bigben 0003:146B:0902.0051: unexpected rdesc, please submit for review [ 582.982687][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 582.992250][T21449] loop0: detected capacity change from 0 to 764 [ 583.000659][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 583.001876][ T5863] bigben 0003:146B:0902.0051: unbalanced collection at end of report description [ 583.008514][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 583.025512][ T27] wacom 0003:056A:0317.0050: unknown main item tag 0x0 [ 583.032703][T21449] rock: directory entry would overflow storage [ 583.033471][ T27] wacom 0003:056A:0317.0050: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 583.046327][ T5863] bigben 0003:146B:0902.0051: parse failed [ 583.052304][ T27] wacom 0003:056A:0317.0050: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 583.059456][T21449] rock: sig=0x4654, size=5, remaining=4 [ 583.071187][ T27] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.0050/input/input60 [ 583.074060][ T5863] bigben: probe of 0003:146B:0902.0051 failed with error -22 [ 583.155327][T21451] loop0: detected capacity change from 0 to 16 [ 583.177490][T21451] erofs: (device loop0): mounted with root inode @ nid 36. [ 583.207711][ T27] usb 2-1: USB disconnect, device number 63 [ 583.244586][ T5173] usb 4-1: USB disconnect, device number 48 [ 583.329616][T21456] loop2: detected capacity change from 0 to 128 [ 583.957017][T21471] loop0: detected capacity change from 0 to 32768 [ 583.973159][T21471] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 583.990786][T21471] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 584.075470][T21484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6005'. [ 584.085355][T21484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6005'. [ 584.086368][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 584.106408][T21484] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 584.120658][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6004'. [ 584.310562][T21491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6009'. [ 584.474502][T21453] Bluetooth: hci3: command 0x0406 tx timeout [ 584.684713][ T27] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 584.864715][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 584.878173][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 584.891891][ T27] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 584.902472][ T27] usb 2-1: config 12 has no interface number 0 [ 584.917254][ T27] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 584.934049][ T27] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 584.959938][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.972957][ T27] usb 2-1: Product: syz [ 584.978008][ T27] usb 2-1: Manufacturer: syz [ 584.982636][ T27] usb 2-1: SerialNumber: syz [ 585.028979][T21512] tmpfs: Too few inodes for current use [ 585.158167][T21516] loop2: detected capacity change from 0 to 512 [ 585.171111][T21516] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 585.180245][T21516] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.6020: iget: bad i_size value: 12154757448730 [ 585.195760][T21516] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6020: couldn't read orphan inode 13 (err -117) [ 585.210569][T21516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.236712][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 585.265348][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.312021][ T27] usb 2-1: USB disconnect, device number 64 [ 585.345889][T21523] loop2: detected capacity change from 0 to 512 [ 585.353750][T21523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 585.371924][T21523] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.6022: bad orphan inode 131083 [ 585.384815][T21523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.445627][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.933719][T21532] loop2: detected capacity change from 0 to 32768 [ 586.174670][ T8] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 586.387216][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.399098][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.409609][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 586.419091][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.429386][ T8] usb 4-1: config 0 descriptor?? [ 586.775318][T21563] loop2: detected capacity change from 0 to 32768 [ 586.789309][T21563] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 586.798374][T21563] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 586.832049][T21563] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 586.849078][ T8] kone 0003:1E7D:2CED.0052: item fetching failed at offset 0/5 [ 586.870708][ T8] kone 0003:1E7D:2CED.0052: parse failed [ 586.896185][ T8] kone: probe of 0003:1E7D:2CED.0052 failed with error -22 [ 586.959412][T21563] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 587.048638][ T8] usb 4-1: USB disconnect, device number 49 [ 587.253040][T21580] loop2: detected capacity change from 0 to 1024 [ 587.261349][T21580] EXT4-fs: Ignoring removed nobh option [ 587.267246][T21580] EXT4-fs: Ignoring removed bh option [ 587.273161][T21580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 587.300377][T21580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.333059][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.531258][T21589] bridge0: port 3(team0) entered disabled state [ 587.720491][T21593] loop2: detected capacity change from 0 to 2048 [ 587.767874][T21593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.807498][T21597] loop1: detected capacity change from 0 to 4096 [ 587.848032][T21597] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 587.856019][T21597] ntfs3: loop1: Failed to load $Extend (-22). [ 587.862120][T21597] ntfs3: loop1: Failed to initialize $Extend. [ 587.922528][ T28] audit: type=1800 audit(2000000204.570:328): pid=21597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6058" name="file2" dev="loop1" ino=31 res=0 errno=0 [ 588.032251][T21611] bridge0: entered promiscuous mode [ 588.039447][T21611] macvlan4: entered promiscuous mode [ 588.127435][T21615] loop0: detected capacity change from 0 to 64 [ 588.150954][T21617] loop2: detected capacity change from 0 to 16 [ 588.164779][ T28] audit: type=1800 audit(2000000204.800:329): pid=21615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6066" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 588.217689][T21617] erofs: (device loop2): mounted with root inode @ nid 36. [ 588.285178][T21617] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 123 of nid 36 [ 588.630102][T21639] loop1: detected capacity change from 0 to 8 [ 588.644748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.748052][T21643] loop0: detected capacity change from 0 to 4096 [ 588.779576][T21643] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 588.940421][T21652] loop2: detected capacity change from 0 to 128 [ 588.975767][T21652] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.048945][T21652] ext4 filesystem being mounted at /1546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 589.186054][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.570871][T21688] loop2: detected capacity change from 0 to 256 [ 589.804959][ T27] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 589.937444][T21684] loop1: detected capacity change from 0 to 32768 [ 589.998555][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 590.012556][ T27] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 590.038961][ T27] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 590.053461][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.065534][ T27] usb 4-1: language id specifier not provided by device, defaulting to English [ 590.085166][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.095500][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.545903][ T27] usb 4-1: 0:2 : does not exist [ 590.582869][ T27] usb 4-1: USB disconnect, device number 50 [ 590.618554][T21699] loop0: detected capacity change from 0 to 32768 [ 590.705133][ T786] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 590.890198][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.913879][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.939420][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 590.971311][ T786] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 590.981302][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.992734][ T786] usb 3-1: config 0 descriptor?? [ 591.123158][T21730] veth1_macvtap: left promiscuous mode [ 591.133713][T21730] macsec0: entered promiscuous mode [ 591.191088][T21730] veth1_macvtap: entered promiscuous mode [ 591.199412][T21730] macsec0: left promiscuous mode [ 591.428433][ T786] wacom 0003:056A:0027.0053: ignoring exceeding usage max [ 591.458330][ T786] wacom 0003:056A:0027.0053: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 591.482764][ T786] wacom 0003:056A:0027.0053: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 591.506584][ T786] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0053/input/input63 [ 591.583053][T21744] netlink: 79 bytes leftover after parsing attributes in process `syz.1.6128'. [ 591.632162][ T27] usb 3-1: USB disconnect, device number 69 [ 591.920212][T21751] loop1: detected capacity change from 0 to 4096 [ 591.941823][T21751] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 591.986077][T21751] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 592.168670][T21765] loop1: detected capacity change from 0 to 128 [ 592.196605][T21765] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 592.230728][T21765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.642099][T21761] loop0: detected capacity change from 0 to 40427 [ 592.660214][T21761] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 592.684961][T21761] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 592.715359][T21761] F2FS-fs (loop0): invalid crc value [ 592.752040][T21761] F2FS-fs (loop0): Found nat_bits in checkpoint [ 592.784711][ T27] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 592.848212][T21761] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 592.858962][T21761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 592.892270][T21761] F2FS-fs (loop0): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem [ 592.986326][ T27] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 593.004651][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.037704][ T27] usb 3-1: config 0 descriptor?? [ 593.066109][ T27] cp210x 3-1:0.0: cp210x converter detected [ 593.109980][T21796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6152'. [ 593.397260][ T23] IPVS: starting estimator thread 0... [ 593.469530][T21805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6156'. [ 593.489111][T21803] IPVS: using max 17 ests per chain, 40800 per kthread [ 593.558251][T21809] loop1: detected capacity change from 0 to 64 [ 593.579825][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6157'. [ 593.593991][T21809] hfs: small file entry [ 593.660404][ T27] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 593.680126][ T27] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 593.707129][ T27] usb 3-1: cp210x converter now attached to ttyUSB0 [ 593.730748][ T27] usb 3-1: USB disconnect, device number 70 [ 593.751107][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 593.762563][T21817] netlink: 'syz.1.6161': attribute type 2 has an invalid length. [ 593.766196][ T27] cp210x 3-1:0.0: device disconnected [ 593.778422][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.790281][T21819] program syz.3.6162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.803939][T21817] netlink: 'syz.1.6161': attribute type 2 has an invalid length. [ 593.821146][T21817] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6161'. [ 594.010335][T21827] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.370548][T21839] loop1: detected capacity change from 0 to 1024 [ 594.435200][T21839] hfsplus: walked past end of dir [ 594.491125][T21841] nbd: socks must be embedded in a SOCK_ITEM attr [ 594.543520][T21821] loop0: detected capacity change from 0 to 40427 [ 594.583970][T21821] F2FS-fs (loop0): Found nat_bits in checkpoint [ 594.632565][T21821] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 594.660191][T21846] loop1: detected capacity change from 0 to 1024 [ 594.676158][T21821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 594.778445][ T28] audit: type=1800 audit(2000000211.430:330): pid=21821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6163" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 594.861496][ T5780] syz-executor: attempt to access beyond end of device [ 594.861496][ T5780] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 594.898299][ T5780] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 595.037461][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.050096][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.332023][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6178'. [ 595.430735][T21864] netlink: 1021 bytes leftover after parsing attributes in process `syz.0.6182'. [ 595.435522][T21852] loop2: detected capacity change from 0 to 32768 [ 595.530360][ T28] audit: type=1326 audit(2000000212.180:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.596051][ T28] audit: type=1326 audit(2000000212.180:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.666035][ T28] audit: type=1326 audit(2000000212.180:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.717032][ T28] audit: type=1326 audit(2000000212.180:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.775268][ T28] audit: type=1326 audit(2000000212.180:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.815704][ T28] audit: type=1326 audit(2000000212.220:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.849368][ T28] audit: type=1326 audit(2000000212.220:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.882386][T21878] loop0: detected capacity change from 0 to 512 [ 595.897453][T21878] EXT4-fs: Ignoring removed bh option [ 595.903532][ T28] audit: type=1326 audit(2000000212.220:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.0.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2998eb69 code=0x7ffc0000 [ 595.913446][T21876] loop2: detected capacity change from 0 to 4096 [ 595.943916][T21878] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 595.944074][T21876] EXT4-fs: Ignoring removed mblk_io_submit option [ 595.960424][T21878] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 595.971635][T21876] EXT4-fs (loop2): Test dummy encryption mode enabled [ 595.986486][T21878] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 596.002684][T21878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 596.013443][T21878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.027055][T21876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.141423][ T5173] Process accounting resumed [ 596.169358][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.220053][T21891] loop1: detected capacity change from 0 to 164 [ 596.237576][T21876] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 596.341711][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.598614][T21911] loop0: detected capacity change from 0 to 1024 [ 596.769709][T21913] loop2: detected capacity change from 0 to 4096 [ 596.779256][T21913] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 597.128230][T21937] loop2: detected capacity change from 0 to 64 [ 597.752008][T21942] loop2: detected capacity change from 0 to 32768 [ 597.778300][T21942] ialloc: diAlloc returned -5! [ 597.814425][ T112] ERROR: (device loop2): diUpdatePMap: the iag is outside the map [ 597.814425][ T112] [ 597.830949][ T112] ERROR: (device loop2): remounting filesystem as read-only [ 597.838328][T21944] loop0: detected capacity change from 0 to 32768 [ 598.014337][ T5173] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 598.098956][T21957] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.226203][ T5173] usb 4-1: too many endpoints for config 0 interface 0 altsetting 134: 137, using maximum allowed: 30 [ 598.244186][ T5173] usb 4-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.261056][ T5173] usb 4-1: config 0 interface 0 altsetting 134 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.271063][ T5173] usb 4-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 598.288525][ T5173] usb 4-1: config 0 interface 0 has no altsetting 0 [ 598.297351][ T5173] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 598.308621][ T5173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.323405][ T5173] usb 4-1: config 0 descriptor?? [ 598.485088][T21967] loop2: detected capacity change from 0 to 1024 [ 598.511093][T21967] hfsplus: walked past end of dir [ 598.744220][ T5173] uclogic 0003:5543:0003.0054: unknown main item tag 0x0 [ 598.751299][ T5173] uclogic 0003:5543:0003.0054: unknown main item tag 0x0 [ 598.758495][ T5173] uclogic 0003:5543:0003.0054: unknown main item tag 0x0 [ 598.765600][ T5173] uclogic 0003:5543:0003.0054: unknown main item tag 0x0 [ 598.772624][ T5173] uclogic 0003:5543:0003.0054: unknown main item tag 0x0 [ 598.780298][ T5173] uclogic 0003:5543:0003.0054: No inputs registered, leaving [ 598.789449][ T5173] uclogic 0003:5543:0003.0054: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0 [ 598.965617][ T5173] usb 4-1: USB disconnect, device number 51 [ 599.526012][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.687149][T21976] loop0: detected capacity change from 0 to 4096 [ 599.745228][T21976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.819840][T21988] netlink: 1021 bytes leftover after parsing attributes in process `syz.2.6238'. [ 599.842581][T21976] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.6232: corrupted inode contents [ 599.891679][T21976] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #15: comm syz.0.6232: mark_inode_dirty error [ 599.909583][T21976] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.6232: corrupted inode contents [ 599.919570][T21993] mkiss: ax0: crc mode is auto. [ 599.923913][T21976] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.6232: mark_inode_dirty error [ 599.942214][T21976] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.6232: corrupted inode contents [ 599.955612][T21976] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.6232: mark_inode_dirty error [ 599.969335][T21976] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.6232: corrupted inode contents [ 599.982643][T21976] EXT4-fs error (device loop0): ext4_truncate:4288: inode #15: comm syz.0.6232: mark_inode_dirty error [ 600.004179][T21976] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 600.035153][T21989] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.6232: corrupted inode contents [ 600.082168][T21999] macsec1: entered promiscuous mode [ 600.092599][T21999] macsec1: entered allmulticast mode [ 600.121905][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.253469][T22005] loop1: detected capacity change from 0 to 256 [ 600.308323][T22005] FAT-fs (loop1): Directory bread(block 64) failed [ 600.319217][T22005] FAT-fs (loop1): Directory bread(block 65) failed [ 600.331660][T22005] FAT-fs (loop1): Directory bread(block 66) failed [ 600.343600][T22005] FAT-fs (loop1): Directory bread(block 67) failed [ 600.359001][T22005] FAT-fs (loop1): Directory bread(block 68) failed [ 600.367474][T22005] FAT-fs (loop1): Directory bread(block 69) failed [ 600.380092][T22005] FAT-fs (loop1): Directory bread(block 70) failed [ 600.386754][T22005] FAT-fs (loop1): Directory bread(block 71) failed [ 600.393384][T22005] FAT-fs (loop1): Directory bread(block 72) failed [ 600.406296][T22005] FAT-fs (loop1): Directory bread(block 73) failed [ 600.558166][T22018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6249'. [ 600.567679][T22018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6249'. [ 600.578439][T22015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6249'. [ 600.684934][ T23] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 600.794491][ T5863] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 600.803165][T18991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.867372][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.901161][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.924642][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 600.949754][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.975906][ T23] usb 4-1: config 0 descriptor?? [ 601.028146][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.049643][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.063345][T22024] loop0: detected capacity change from 0 to 32768 [ 601.069963][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 601.084632][ T5863] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 601.094434][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.113052][ T5863] usb 2-1: config 0 descriptor?? [ 601.422744][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.445597][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.452517][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.460174][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.468337][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.476031][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.483045][ T23] wacom 0003:056A:0317.0055: unknown main item tag 0x0 [ 601.492144][ T23] wacom 0003:056A:0317.0055: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 601.508081][ T23] wacom 0003:056A:0317.0055: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 601.523094][ T23] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.0055/input/input66 [ 601.539847][ T5863] wacom 0003:056A:0027.0056: ignoring exceeding usage max [ 601.567145][ T5863] wacom 0003:056A:0027.0056: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 601.578930][ T5863] wacom 0003:056A:0027.0056: hidraw1: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 601.591982][ T5863] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.0056/input/input69 [ 601.676044][ T5863] usb 4-1: USB disconnect, device number 52 [ 601.831736][ T23] usb 2-1: USB disconnect, device number 65 [ 601.908526][T22039] loop2: detected capacity change from 0 to 512 [ 601.921499][T22039] EXT4-fs: Ignoring removed bh option [ 601.930113][T22039] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.940276][T22039] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 601.951573][T22039] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 601.962550][T22039] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 601.972053][T22039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.022068][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.239827][T22049] loop0: detected capacity change from 0 to 164 [ 602.477261][T22045] loop2: detected capacity change from 0 to 32768 [ 602.487785][T22045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.6261 (22045) [ 602.527340][T22045] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 602.541335][T22045] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 602.558755][T22045] BTRFS info (device loop2): use zlib compression, level 3 [ 602.579159][T22045] BTRFS info (device loop2): using free space tree [ 602.654616][T22045] BTRFS info (device loop2): enabling ssd optimizations [ 602.661188][T22065] loop1: detected capacity change from 0 to 4096 [ 602.661732][T22045] BTRFS info (device loop2): auto enabling async discard [ 602.669877][T22065] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.683560][T22065] EXT4-fs (loop1): Test dummy encryption mode enabled [ 602.701721][T22065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.765800][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 602.799576][ T23] Process accounting resumed [ 602.825613][T22065] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 602.890581][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.302194][T22090] loop2: detected capacity change from 0 to 4096 [ 603.324869][T22090] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 603.359922][T22090] ntfs3: loop2: Failed to load $Extend (-22). [ 603.366856][T22090] ntfs3: loop2: Failed to initialize $Extend. [ 603.523378][T22099] loop1: detected capacity change from 0 to 4096 [ 603.532483][T22099] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 603.614251][ T5863] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 603.796373][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.815529][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.839573][T22112] loop1: detected capacity change from 0 to 4096 [ 603.850212][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 603.853451][T22116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6289'. [ 603.866366][T22112] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 603.882343][ T5863] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 603.892364][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.909225][ T5863] usb 4-1: config 0 descriptor?? [ 603.933181][T22112] ntfs3: loop1: Failed to load $Extend (-22). [ 603.939485][T22112] ntfs3: loop1: Failed to initialize $Extend. [ 604.348156][ T5863] wacom 0003:056A:0027.0057: ignoring exceeding usage max [ 604.357007][ T5863] wacom 0003:056A:0027.0057: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 604.369266][ T5863] wacom 0003:056A:0027.0057: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 604.383151][ T5863] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0057/input/input72 [ 604.580283][ T5863] usb 4-1: USB disconnect, device number 53 [ 605.142587][T22126] loop2: detected capacity change from 0 to 512 [ 605.154241][T22126] EXT4-fs: Ignoring removed mblk_io_submit option [ 605.160750][T22126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 605.178828][T22126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 605.194306][T22126] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 605.246061][T22126] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.6296: Allocating blocks 41-42 which overlap fs metadata [ 605.267066][T22126] Quota error (device loop2): write_blk: dquota write failed [ 605.275725][T18991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.294144][T22126] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 605.310217][T22126] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.6296: Allocating blocks 41-42 which overlap fs metadata [ 605.324883][T22126] Quota error (device loop2): write_blk: dquota write failed [ 605.332703][T22126] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 605.348478][T22126] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6296: Failed to acquire dquot type 1 [ 605.360952][T22126] EXT4-fs error (device loop2): mb_free_blocks:1943: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 605.386548][T22126] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #12: comm syz.2.6296: corrupted inode contents [ 605.403353][T22126] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #12: comm syz.2.6296: mark_inode_dirty error [ 605.421388][T22126] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #12: comm syz.2.6296: corrupted inode contents [ 605.449941][T22126] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.6296: mark_inode_dirty error [ 605.479546][T22126] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #12: comm syz.2.6296: corrupted inode contents [ 605.505864][T22126] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 605.520059][T22129] loop1: detected capacity change from 0 to 32768 [ 605.528263][T22126] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #12: comm syz.2.6296: corrupted inode contents [ 605.537479][T22129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.6303 (22129) [ 605.554535][T22126] EXT4-fs error (device loop2): ext4_truncate:4288: inode #12: comm syz.2.6296: mark_inode_dirty error [ 605.569737][T22129] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 605.585797][T22126] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 605.597771][T22129] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 605.608140][T22129] BTRFS info (device loop1): disabling tree log [ 605.616008][T22129] BTRFS info (device loop1): setting nodatacow, compression disabled [ 605.628667][T22126] EXT4-fs (loop2): 1 truncate cleaned up [ 605.634978][T22129] BTRFS info (device loop1): max_inline at 0 [ 605.640990][T22129] BTRFS info (device loop1): enabling ssd optimizations [ 605.655863][T22126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.670097][T22129] BTRFS info (device loop1): using spread ssd allocation scheme [ 605.679584][T22129] BTRFS info (device loop1): turning off barriers [ 605.687184][T22129] BTRFS info (device loop1): turning on flush-on-commit [ 605.697948][T22129] BTRFS info (device loop1): doing ref verification [ 605.705446][T22129] BTRFS info (device loop1): force clearing of disk cache [ 605.712662][T22129] BTRFS info (device loop1): turning on sync discard [ 605.720589][T22129] BTRFS info (device loop1): max_inline at 4096 [ 605.727815][T22129] BTRFS info (device loop1): using free space tree [ 605.849863][T22129] BTRFS info (device loop1): rebuilding free space tree [ 605.872426][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.957605][T22163] loop0: detected capacity change from 0 to 4096 [ 605.968392][T22163] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 606.047148][T22163] ntfs3: loop0: Failed to load $Extend (-22). [ 606.054260][T22163] ntfs3: loop0: Failed to initialize $Extend. [ 606.061639][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 606.534350][ T5863] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 606.555210][T18991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.684248][ T23] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 606.705148][T22178] loop0: detected capacity change from 0 to 1024 [ 606.712443][T22178] EXT4-fs: Ignoring removed nobh option [ 606.721492][T22178] EXT4-fs: Ignoring removed bh option [ 606.728319][T22178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 606.735455][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 606.749575][ T5863] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 606.759519][ T5863] usb 3-1: config 1 has no interface number 0 [ 606.766179][ T5863] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 606.777122][ T5863] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 606.786956][T22178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.793416][ T5863] usb 3-1: config 1 interface 105 has no altsetting 0 [ 606.832405][ T5863] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 606.843161][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.855715][ T5863] usb 3-1: Product: syz [ 606.859909][ T5863] usb 3-1: Manufacturer: syz [ 606.867627][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.868377][ T5863] usb 3-1: SerialNumber: syz [ 606.879864][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.889553][T22174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.895000][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 606.906674][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.909806][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.927059][T22174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.939510][ T23] usb 2-1: config 0 descriptor?? [ 607.347950][T22174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 607.355891][T22174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 607.366597][ T23] kone 0003:1E7D:2CED.0058: item fetching failed at offset 0/5 [ 607.375123][ T23] kone 0003:1E7D:2CED.0058: parse failed [ 607.380808][ T23] kone: probe of 0003:1E7D:2CED.0058 failed with error -22 [ 607.567117][ T5863] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 607.578363][ T5863] aqc111: probe of 3-1:1.105 failed with error -71 [ 607.589595][ T5863] usb 3-1: USB disconnect, device number 71 [ 607.612489][ T23] usb 2-1: USB disconnect, device number 66 [ 608.822288][T22197] loop2: detected capacity change from 0 to 32768 [ 608.843254][T22197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.6316 (22197) [ 608.867997][T22197] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 608.910930][T22197] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 608.935439][T22197] BTRFS info (device loop2): disabling tree log [ 608.941740][T22197] BTRFS info (device loop2): setting nodatacow, compression disabled [ 608.965843][T22197] BTRFS info (device loop2): max_inline at 0 [ 608.985965][T22197] BTRFS info (device loop2): enabling ssd optimizations [ 609.003109][T22197] BTRFS info (device loop2): using spread ssd allocation scheme [ 609.021062][T22197] BTRFS info (device loop2): turning off barriers [ 609.040781][T22197] BTRFS info (device loop2): turning on flush-on-commit [ 609.056493][T22197] BTRFS info (device loop2): doing ref verification [ 609.080199][T22197] BTRFS info (device loop2): force clearing of disk cache [ 609.094753][T22197] BTRFS info (device loop2): turning on sync discard [ 609.101549][T22197] BTRFS info (device loop2): max_inline at 4096 [ 609.124655][T22197] BTRFS info (device loop2): using free space tree [ 609.234625][T22197] BTRFS info (device loop2): rebuilding free space tree [ 609.374559][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 609.432971][T22222] loop1: detected capacity change from 0 to 512 [ 609.441135][T22222] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.448211][T22222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.457253][T22222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.466766][T22222] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.572933][T22222] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.6331: Allocating blocks 41-42 which overlap fs metadata [ 609.625018][T22222] Quota error (device loop1): write_blk: dquota write failed [ 609.632859][T22222] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 609.655124][T22222] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.6331: Allocating blocks 41-42 which overlap fs metadata [ 609.688935][T22222] Quota error (device loop1): write_blk: dquota write failed [ 609.716830][T22222] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 609.743149][T22222] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6331: Failed to acquire dquot type 1 [ 609.751989][T22227] loop2: detected capacity change from 0 to 1024 [ 609.780953][T22222] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 609.811347][T22222] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.6331: corrupted inode contents [ 609.832038][T22222] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #12: comm syz.1.6331: mark_inode_dirty error [ 609.857296][T22222] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.6331: corrupted inode contents [ 609.872333][T22222] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.6331: mark_inode_dirty error [ 609.885613][T22222] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.6331: corrupted inode contents [ 609.900337][T22222] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 609.909701][T22222] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.6331: corrupted inode contents [ 609.922338][T22222] EXT4-fs error (device loop1): ext4_truncate:4288: inode #12: comm syz.1.6331: mark_inode_dirty error [ 609.933874][T22222] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 609.943925][T22222] EXT4-fs (loop1): 1 truncate cleaned up [ 609.950862][T22222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.020264][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.184285][ T5863] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 610.214984][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x4 [ 610.222698][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x2 [ 610.230570][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.239153][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.248131][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.256355][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.264003][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.272071][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.280236][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.288337][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.296361][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.306195][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.313865][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.322901][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.331118][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.340108][ T23] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x0 [ 610.349088][ T23] hid-generic 0000:3000000:0000.0059: hidraw0: HID v0.00 Device [sy] on syz0 [ 610.386214][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 610.401080][ T5863] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 610.411323][ T5863] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 610.426053][T22240] loop1: detected capacity change from 0 to 512 [ 610.432361][ T5863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.433574][T22240] EXT4-fs: Ignoring removed mblk_io_submit option [ 610.449323][ T5863] usb 3-1: language id specifier not provided by device, defaulting to English [ 610.451549][T22240] EXT4-fs: Ignoring removed mblk_io_submit option [ 610.466930][T22240] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 610.481955][T22240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 610.490905][T22240] System zones: 1-12 [ 610.493746][ T5863] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.503553][T22240] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.6328: corrupted in-inode xattr: e_value size too large [ 610.504221][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.530276][T22240] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6328: couldn't read orphan inode 15 (err -117) [ 610.545160][T22240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.595257][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.947381][ T5863] usb 3-1: 0:2 : does not exist [ 610.959304][ T5863] usb 3-1: USB disconnect, device number 72 [ 611.035105][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.755271][T22257] loop2: detected capacity change from 0 to 32768 [ 611.772912][T22257] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 611.828342][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 612.172002][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x4 [ 612.190343][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x2 [ 612.200234][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.217574][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.230242][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.254902][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.272855][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.285005][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.297510][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.306850][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.319111][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.325363][T18991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.337344][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.346262][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.357614][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.366669][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.375515][ T786] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x0 [ 612.401662][ T786] hid-generic 0000:3000000:0000.005A: hidraw0: HID v0.00 Device [sy] on syz0 [ 612.461898][T22284] loop1: detected capacity change from 0 to 4096 [ 612.470576][T22284] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 612.570100][ T28] audit: type=1800 audit(2000000229.220:339): pid=22284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6356" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 612.693946][T22293] netlink: 'syz.3.6353': attribute type 2 has an invalid length. [ 612.701941][T22293] netlink: 'syz.3.6353': attribute type 2 has an invalid length. [ 612.710457][T22293] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6353'. [ 613.042885][T22310] loop1: detected capacity change from 0 to 64 [ 614.380257][T22347] loop2: detected capacity change from 0 to 4096 [ 614.405196][T22347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.438946][T22347] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.6376: corrupted inode contents [ 614.457011][T22347] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #15: comm syz.2.6376: mark_inode_dirty error [ 614.471522][T22347] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.6376: corrupted inode contents [ 614.493319][T22347] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.6376: mark_inode_dirty error [ 614.513793][T22347] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.6376: corrupted inode contents [ 614.532165][T22347] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.6376: mark_inode_dirty error [ 614.551126][T22347] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.6376: corrupted inode contents [ 614.570150][T22347] EXT4-fs error (device loop2): ext4_truncate:4288: inode #15: comm syz.2.6376: mark_inode_dirty error [ 614.582549][T22347] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 614.598710][T22350] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.6376: corrupted inode contents [ 614.604709][T22345] loop1: detected capacity change from 0 to 32768 [ 614.665316][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.816439][T22352] loop1: detected capacity change from 0 to 4096 [ 614.831472][T22353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 614.843702][T22352] NILFS (loop1): error -2 reading inode: ino=17293822569102704642 [ 614.898034][T22355] loop2: detected capacity change from 0 to 128 [ 615.161143][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.169115][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.177100][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.185030][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.192885][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.200809][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.208659][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.216622][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.224540][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.232420][T22368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 615.552070][T22388] loop2: detected capacity change from 0 to 8 [ 615.595779][T22388] SQUASHFS error: Unable to read directory block [2c0:35] [ 615.664506][ T5863] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 615.867760][ T5863] usb 2-1: unable to get BOS descriptor or descriptor too short [ 615.885394][ T5863] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 615.894722][ T5863] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 615.915058][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.934149][ T5863] usb 2-1: language id specifier not provided by device, defaulting to English [ 615.977354][ T5863] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.987805][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.156275][ T1126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.259958][T22402] loop2: detected capacity change from 0 to 22 [ 616.267326][T22402] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 616.289562][T22402] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 616.470739][ T5863] usb 2-1: 0:2 : does not exist [ 616.513728][ T5863] usb 2-1: USB disconnect, device number 67 [ 617.089612][T22418] loop2: detected capacity change from 0 to 40427 [ 617.099198][T22418] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 617.108736][T22418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 617.128110][T22418] F2FS-fs (loop2): invalid crc value [ 617.171048][T22418] F2FS-fs (loop2): Found nat_bits in checkpoint [ 617.305415][T22418] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 617.312506][T22418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 617.407770][T22443] loop1: detected capacity change from 0 to 128 [ 617.448795][T22443] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 617.458481][T22447] loop0: detected capacity change from 0 to 512 [ 617.459261][T22447] EXT4-fs: Ignoring removed oldalloc option [ 617.517518][T22447] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.6422: Parent and EA inode have the same ino 15 [ 617.556668][T22443] FAT-fs (loop1): FAT read failed (blocknr 128) [ 617.569045][T22447] EXT4-fs (loop0): Remounting filesystem read-only [ 617.579384][T22447] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -5) [ 617.593890][T22447] EXT4-fs (loop0): 1 orphan inode deleted [ 617.601572][T22447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.631690][T22450] netlink: 'syz.3.6423': attribute type 1 has an invalid length. [ 617.650915][T22450] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6423'. [ 617.663347][T22450] netlink: 'syz.3.6423': attribute type 1 has an invalid length. [ 617.671650][T22450] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6423'. [ 617.736930][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.879256][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 618.075184][T18991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.326350][T22478] netlink: 'syz.1.6435': attribute type 1 has an invalid length. [ 618.343798][T22478] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6435'. [ 618.354345][T22478] netlink: 'syz.1.6435': attribute type 1 has an invalid length. [ 618.369521][T22478] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6435'. [ 618.399003][T22481] loop2: detected capacity change from 0 to 4096 [ 618.404710][ T786] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 618.440137][T22484] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.466891][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6440'. [ 618.491985][T22481] NILFS (loop2): error -2 reading inode: ino=17293822569102704642 [ 618.594819][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 618.599950][T22491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6441'. [ 618.610220][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.630737][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.643102][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.656617][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.666499][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.678017][ T786] usb 4-1: config 0 descriptor?? [ 619.093844][ T786] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 619.101417][ T786] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 619.113444][ T786] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.005B/input/input75 [ 619.203324][ T786] microsoft 0003:045E:07DA.005B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 619.320250][ T5863] usb 4-1: USB disconnect, device number 54 [ 619.362665][ T1197] ------------[ cut here ]------------ [ 619.368762][ T1197] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 619.378712][ T1197] WARNING: CPU: 0 PID: 1197 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 619.388071][ T1197] Modules linked in: [ 619.392025][ T1197] CPU: 0 PID: 1197 Comm: kworker/0:2 Not tainted 6.6.101-syzkaller #0 [ 619.400292][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.410439][ T1197] Workqueue: events request_firmware_work_func [ 619.416916][ T1197] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 619.422814][ T1197] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 da d1 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 08 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 8b 72 ff [ 619.442587][ T1197] RSP: 0018:ffffc90004b1f800 EFLAGS: 00010246 [ 619.448790][ T1197] RAX: 8a94367fbb0b5b00 RBX: ffffffff8b214ea0 RCX: ffff888023dd1e00 [ 619.456833][ T1197] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 619.464858][ T1197] RBP: dffffc0000000000 R08: ffffc90004b1f407 R09: 1ffff92000963e80 [ 619.472845][ T1197] R10: dffffc0000000000 R11: fffff52000963e81 R12: 1ffffffff16429d8 [ 619.480920][ T1197] R13: 0000000000000001 R14: ffff888023a7e9b0 R15: ffff888142f58008 [ 619.488947][ T1197] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 619.498043][ T1197] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.504685][ T1197] CR2: 00007f2f3964bf5f CR3: 0000000061e31000 CR4: 00000000003506f0 [ 619.512667][ T1197] Call Trace: [ 619.516051][ T1197] [ 619.519257][ T1197] ? sysfs_unmerge_group+0x10d/0x130 [ 619.524679][ T1197] device_del+0x251/0x900 [ 619.529039][ T1197] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 619.535045][ T1197] ? kill_device+0x160/0x160 [ 619.539653][ T1197] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 619.545626][ T1197] ? _raw_spin_unlock+0x40/0x40 [ 619.550497][ T1197] ? complete_all+0x2d/0x1d0 [ 619.555169][ T1197] ? __fw_load_abort+0x8b/0x1a0 [ 619.560047][ T1197] firmware_fallback_sysfs+0x682/0x940 [ 619.565583][ T1197] _request_firmware+0xed9/0x1510 [ 619.570630][ T1197] ? request_firmware+0x50/0x50 [ 619.575556][ T1197] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 619.581550][ T1197] ? read_lock_is_recursive+0x20/0x20 [ 619.587025][ T1197] request_firmware_work_func+0xb0/0x1b0 [ 619.592675][ T1197] ? process_scheduled_works+0x957/0x15b0 [ 619.598522][ T1197] process_scheduled_works+0xa45/0x15b0 [ 619.604161][ T1197] ? assign_work+0x400/0x400 [ 619.608785][ T1197] ? assign_work+0x39e/0x400 [ 619.613392][ T1197] worker_thread+0xa55/0xfc0 [ 619.618071][ T1197] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 619.624195][ T1197] ? _raw_spin_unlock+0x40/0x40 [ 619.629078][ T1197] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 619.635066][ T1197] kthread+0x2fa/0x390 [ 619.639142][ T1197] ? pr_cont_work+0x560/0x560 [ 619.643809][ T1197] ? kthread_blkcg+0xd0/0xd0 [ 619.648465][ T1197] ret_from_fork+0x48/0x80 [ 619.652887][ T1197] ? kthread_blkcg+0xd0/0xd0 [ 619.657575][ T1197] ret_from_fork_asm+0x11/0x20 [ 619.662448][ T1197] [ 619.665522][ T1197] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 619.672798][ T1197] CPU: 0 PID: 1197 Comm: kworker/0:2 Not tainted 6.6.101-syzkaller #0 [ 619.680936][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.690989][ T1197] Workqueue: events request_firmware_work_func [ 619.697155][ T1197] Call Trace: [ 619.700418][ T1197] [ 619.703333][ T1197] dump_stack_lvl+0x16c/0x230 [ 619.708006][ T1197] ? show_regs_print_info+0x20/0x20 [ 619.713188][ T1197] ? load_image+0x3b0/0x3b0 [ 619.717701][ T1197] panic+0x2c0/0x710 [ 619.721586][ T1197] ? bpf_jit_dump+0xd0/0xd0 [ 619.726098][ T1197] ? ret_from_fork_asm+0x11/0x20 [ 619.731056][ T1197] __warn+0x2e0/0x470 [ 619.735041][ T1197] ? sysfs_remove_group+0x178/0x2a0 [ 619.740238][ T1197] ? sysfs_remove_group+0x178/0x2a0 [ 619.745424][ T1197] report_bug+0x2be/0x4f0 [ 619.749747][ T1197] ? sysfs_remove_group+0x178/0x2a0 [ 619.754931][ T1197] ? sysfs_remove_group+0x178/0x2a0 [ 619.760121][ T1197] ? sysfs_remove_group+0x17a/0x2a0 [ 619.765310][ T1197] handle_bug+0xcf/0x120 [ 619.769543][ T1197] exc_invalid_op+0x1a/0x50 [ 619.774040][ T1197] asm_exc_invalid_op+0x1a/0x20 [ 619.778892][ T1197] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 619.784689][ T1197] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 da d1 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 08 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 8b 72 ff [ 619.804282][ T1197] RSP: 0018:ffffc90004b1f800 EFLAGS: 00010246 [ 619.810338][ T1197] RAX: 8a94367fbb0b5b00 RBX: ffffffff8b214ea0 RCX: ffff888023dd1e00 [ 619.818294][ T1197] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 619.826254][ T1197] RBP: dffffc0000000000 R08: ffffc90004b1f407 R09: 1ffff92000963e80 [ 619.834222][ T1197] R10: dffffc0000000000 R11: fffff52000963e81 R12: 1ffffffff16429d8 [ 619.842190][ T1197] R13: 0000000000000001 R14: ffff888023a7e9b0 R15: ffff888142f58008 [ 619.850165][ T1197] ? sysfs_unmerge_group+0x10d/0x130 [ 619.855463][ T1197] device_del+0x251/0x900 [ 619.859802][ T1197] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 619.865696][ T1197] ? kill_device+0x160/0x160 [ 619.870283][ T1197] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 619.876176][ T1197] ? _raw_spin_unlock+0x40/0x40 [ 619.881031][ T1197] ? complete_all+0x2d/0x1d0 [ 619.885610][ T1197] ? __fw_load_abort+0x8b/0x1a0 [ 619.890454][ T1197] firmware_fallback_sysfs+0x682/0x940 [ 619.895913][ T1197] _request_firmware+0xed9/0x1510 [ 619.900944][ T1197] ? request_firmware+0x50/0x50 [ 619.905785][ T1197] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 619.911754][ T1197] ? read_lock_is_recursive+0x20/0x20 [ 619.917117][ T1197] request_firmware_work_func+0xb0/0x1b0 [ 619.922745][ T1197] ? process_scheduled_works+0x957/0x15b0 [ 619.928457][ T1197] process_scheduled_works+0xa45/0x15b0 [ 619.934009][ T1197] ? assign_work+0x400/0x400 [ 619.938592][ T1197] ? assign_work+0x39e/0x400 [ 619.943173][ T1197] worker_thread+0xa55/0xfc0 [ 619.947760][ T1197] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 619.953646][ T1197] ? _raw_spin_unlock+0x40/0x40 [ 619.958484][ T1197] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 619.964382][ T1197] kthread+0x2fa/0x390 [ 619.968443][ T1197] ? pr_cont_work+0x560/0x560 [ 619.973108][ T1197] ? kthread_blkcg+0xd0/0xd0 [ 619.977684][ T1197] ret_from_fork+0x48/0x80 [ 619.982090][ T1197] ? kthread_blkcg+0xd0/0xd0 [ 619.986670][ T1197] ret_from_fork_asm+0x11/0x20 [ 619.991437][ T1197] [ 619.994655][ T1197] Kernel Offset: disabled [ 619.999072][ T1197] Rebooting in 86400 seconds..