last executing test programs: 1m14.292468787s ago: executing program 0 (id=372): syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1m13.936318897s ago: executing program 0 (id=375): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x3c, r0, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 1m13.555831576s ago: executing program 0 (id=379): socket(0x10, 0x2, 0x0) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r0, 0x0) 1m13.293161981s ago: executing program 0 (id=381): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 1m12.35247848s ago: executing program 0 (id=387): io_setup(0x29e, &(0x7f0000000140)=0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = eventfd2(0x100004, 0x800) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000000)="5e0044856800000004", 0x9, 0x0, 0x0, 0x971a2bbfb5f4c835, r2}]) 1m11.11753975s ago: executing program 0 (id=395): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) write(r0, &(0x7f0000000400)="25ca", 0x2) preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, 0x7, 0x2) 1m10.271384394s ago: executing program 32 (id=395): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) write(r0, &(0x7f0000000400)="25ca", 0x2) preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, 0x7, 0x2) 4.967733691s ago: executing program 6 (id=906): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0x0) 4.876660309s ago: executing program 1 (id=907): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r0) 4.701656883s ago: executing program 6 (id=909): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.687197924s ago: executing program 1 (id=910): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7ff) 4.212986688s ago: executing program 6 (id=914): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@nombcache}, {@init_itable}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 3.886766891s ago: executing program 2 (id=918): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 3.730171796s ago: executing program 6 (id=920): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rename(&(0x7f0000000980)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1\x00') 3.517800435s ago: executing program 2 (id=921): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@loopback, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 3.513455438s ago: executing program 3 (id=922): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x7, 0x6}}}}]}, 0x48}}, 0x0) 3.295185464s ago: executing program 3 (id=925): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000500)=0x7) 3.27829733s ago: executing program 4 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 3.151324319s ago: executing program 2 (id=927): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200084, &(0x7f0000000300)={[{@dir_umask={'dir_umask', 0x3d, 0x7}}, {@creator={'creator', 0x3d, "fddb3dde"}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@codepage={'codepage', 0x3d, 'default'}}, {@part={'part', 0x3d, 0x9}}, {@uid}, {}, {@type={'type', 0x3d, "0642729c"}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x7}}]}, 0x2, 0x376, &(0x7f0000000480)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000001fc0)=""/184, 0x2000208e) getdents(r0, 0x0, 0x0) 3.073304053s ago: executing program 3 (id=928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x9, 0x9, 0xa0, 0x4, 0x7, 0xd, 0xff, 0x2, 0xf, 0x2, 0x6}, 0xe) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="95", 0x1}], 0x1}}], 0x1, 0x200288c0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 3.00759958s ago: executing program 4 (id=929): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400, r1, &(0x7f0000000d40)="f0", 0x1, 0x6, 0x0, 0x2}]) 2.803339738s ago: executing program 2 (id=930): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.801763554s ago: executing program 1 (id=931): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) 2.72586267s ago: executing program 3 (id=933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 2.623153511s ago: executing program 1 (id=934): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listen(r0, 0x40000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x4b, 0xfffffffd, 0xa, 0x8000, 0x8440, 0x81}) 2.461644389s ago: executing program 3 (id=936): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@quota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@uid}]}, 0x1, 0x61fd, &(0x7f000000c900)="$eJzs3c9vHGf9B/DP7C//6Let1UPVb4SQ24YfpTQ/SwgUaIoEBy4cUK4oketWESmgJKC0iogrXzjwR4CQOCLEkRN/QA9cufEHECkBgXrqoLGfxxlP11477u6sPa+X5Mx85pnJPpP3jnc3M7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxg+//6HwREdd+mRasRPxf9CN6EUtVvRoRS6sref1BRLwQW83xfEQMFyKq7bf+eDbi9Yj46JmIh4/urVWLLxywH9/7099//+Onfvi3Pw7P/vfPd/pv7LXe3bu/+c9f7h9tnwEAAKBryrIsi/Qx/1T6fN9ru1MAwEzk1/8yycvVc1dvzFl/1Gq1Wn0M67pyvPv1IiI26ttU7xmcjgeAY2YjPm67C7RI/p02iIin2u4EMNeKtjvAVDx8dG+tSPkW9deD1e32fC3Irvw3ip37O/aaTtK8xmRWz6/N6Mdze/RnaUZ9mCc5/14z/2vb7aO03rTzn5W98h9t3/rUOTn/fjP/hpOTf29s/l2V8x8cKv++/AEAAAAAYI7l//9fafn878LRd+VA9jv/uzqjPgAAAAAAAADAZ+2o4//tMP4fAAAAzK3qs3rlt888XrbXd7FVy68WEU831gc6Jt0ss9x2PwAAAAAAAAAAAACgSwbb1/BeLSKGEfH08nJZltVPXbM+rKNuf9x1ff+hy9r+JQ8AANs+eqZxL38RsRgRV9N3/Q2Xl5fLcnFpuVwulxby+9nRwmK5VPtcm6fVsoXRAd4QD0Zl9Zct1rarm/R5eVJ78++rHmtU9g/QsdloMXAAiIjtV6OHXpFOmLJ8Ntp+l8Px4Pg/eRz/HETbz1MAAABg+sqyLIv0dd6n0jn/XtudAgBmIr/+N88LHOe6qC2bh/6o1Wq1Wj0vdV053v16EREb9W2q9wyG4weAY2YjPm67C7ToSfL/7uZUusLsDSLihbY7Acy1ou0OMBUPH91bK1K+Rf31II3vnq8F2ZX/RrG1Xd5+3HSS5jUms3p+bUY/ntujP8/PqA/zJOffa+Z/bbt9lNabdv6zslf+1X6utNCftuX8+838G05O/r2x+XdVzn9wqPz78gcAAAAAgDmW//9/Za7O/46edHcm2u/87+rUHhUAAAAAAAAApuvho3tr+b7XfP7/c2PWc//nyZTzL+TfSTn/XiP/LzfW69fmH7z1OP9/Pbq39oc7//z/PD1o/gt5pkjPrCI9I4r0SMUgTY+yd5+2OeyPqkcaFr3+IF3zUw7fiRtxM9bj3K51e+nf43H7+V3tVU+HW+1lf7v9wq72wU573v7irvZhutKpXMrtZ2ItfhY34+2t9qptYcL+L05oLye05/z78e+dPjv+uyPnP6j9VPkvp/aiMa08+LD3qeO+Ph33OFdufP7X56a/OxNtRn9n3+qq/Xuphf5s/Zs8NYpf3F6/debu9Tt3bp2PNNm19EKkyWcs5z9MPzu//1/ebs+/9+vH64MPR4fOf15sxmDP/F+uzVf7+8qM+9aGnP8o/eT8307t44//Y5l/9fTe9/h/dfZ9AgAAAAAAAAAAAAAAgH2VZbl1i+iViLiU7v9p695MAGC2rqSv3CiTvHxWdX/Gj6dWH/O6mLP+zLT+pJyv/qjVx7GuK8d7s15ExF/r21yKiF+N+8sAgHn2SUT8o+1O0Br5d1j+vr9qerrtzgAzdfv9D35y/ebN9Vu32+4JAAAAAAAAAPCk8vifq7Xxv0+XZXm/sd6u8V/fitWjjv85yDM7A4zuMVB1//D7tJ/N3qjfqw03/mLsNf73cGduv/G/B80HaHx5wnBCf0YT2hcmtC9OaB97o0dNzv/F2njnpyPiVGP49RMw/uuW/cZ/bY553wU5/5dqz+cq/y811qvnX/7uOOff25X/2Tvv/fzs7fc/eO3Ge9ffXX93/acXz58/d/HSpcuXL59958bN9XPbf7bY4+nK+eexr10H2i05/5y5/Lsl5/+FVMu/W3L+X0y1/Lsl55/f78m/W3L++bOP/Lsl5/9KquXfLTn/r6Ra/t2S83811fLvlpz/V1Mt/27J+b+Wavl3S87/TKrl3y05/7OpPmD+S9PuF7OR889nuBz/3ZLzz1c2yL9bcv4XUi3/bsn5X0y1/Lsl5/96quXfLTn/r6Va/t2S87+Uavl3S87/66mWf7fk/C+nWv7dkvP/Rqrl3y05/2+m+lD5r0yvX8xGzv+NVDv+uyXn/61Uy79bcv7fTrX8uyXn/51Uy79bcv5vplr+3fL4+//NmDFjJs+0/ZsJAAAAAAAAAAAAAGiaxeXEbe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkeuu7wB+9uq1czMQUic1sHaMMc4mu77EF1oXE25pwqW5UdLS2K537Sz4Fq9dkjSSHQVKJIwaVbQND20BRW1eKqwqD7QKKA+oVaVKpH2gLygVKg9RFVCCVKmtQraaM///f2dmZ2d2veP1zDmfjxT/vDNn5pw5c+bsftf5zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQa8OHp77Sl2VZ5b/8j7VZdnXl76tH1+aXfeBKbyEAAACwXL/M/3z9unTB/kXcqGaZf3r3D1+YnZ2dzT478KdDX5+dTVeMZtnQqizLr4su/uTBvtplgqeykb7+mq/726x+oM31g22uH2pz/XCb61e1uX6kyWWra/4+bwc0Wbov3dmm/K9rq7s0uz4byq/b1ORWT/Wt6u+Pv8vJ9eW3mR06kk1nx7KpbKJu+eqyffnyL26orOvOLK6rv2Zd6ytHyBtPHI7b0Bf28aa6dc3dZ/SzD2Wjv3jjicN/fea1G5vNtruh7v6q27llY2U7vxQuqW5rX7Yq7ZO4nf0127m+yXMyULedffntKn9v3M7XF7mdA3ObuaIan/ORrD//+8v5fhqs/bVe2k/rw2X/c3OWZefnNrtxmXnryvqzNXWX9M89PyPVI7JyH5VD6e3Z4JKO0w2LOE4rc3JT/XHa+JqIz/+GcLvBBbah9mn62ZPDNc/7m7OXcpxGlUe90Gul8Rjs9GulW47BeFy8nD/op5seg5vC439i88LHYNNjp8kxmB53zTG4sd0x2D88kG9zehL68tvMHYPb6pYfyNfUl89XN7c+BsfPHD81PvPY47dOHz90dOro1Ikd27ZN7Ni1a8+ePeNHpo9NTVT/vMS93f3WZP3pNbAx7Lv4Gnhfw7K1h+rst4bnnX8v9XU40uJ1uLZh2U6/DgcbH1zfyrwg5x/T1dfG/ZWdPnKhP1vgNZY/P1uX/zpMj7vmdThY8zps+j2lyetwcBGvw8oyp7Yu7meWwZr/mm3Dwt8LlncMrq05Bht/Hmk8Bjv980i3HIMj4bj48daFvxesD9v79NhSfx4ZmHcMpocbzj2VS9LP+yN78tHsuLypcsVVw9nZmanTtz166MyZ09uyMFbEO2qOlcbjdU3NY8rmHa/9Sz5e90+/++mbmly+NuyrkVsrf4ws+FxVltl5W+vnKv/u1nx/1l26PQujw1Z6fzb7bl7Zn8NZ9o0fPHnv9574xocX3J+VvPml8eX/LJ5yac35d2iB82/M/W9V15fu6qmBocHq63cg7Z2huvNx/VM1mJ+7+vJ1vz6+uPPxUPhvpc/H17c4H69rWLbT5+OhxgcXz8d97X7bsTyNz+dIOE6OTbQ+H1eWWbd9qcfkYMvz8c1h9oX9//6QFFIuqjl2Fjpu07oGB4fC4xqMa6g/TnfULT8UslllXc9vv7TjdMvN1fsaSI9uzkodp6MNy3b6OE2/+1roOO1r99u3S9P4fI6E4+L6Ha2P08oyL+1c/rkz/X6u5tw53O4YHBoYrmzzUDoI8/N9Nrs6HoO3ZYezk9mxbDK/djg/nvrydY3dvrhjcDj8t9LnynUtjsEtDct2+hhM38cWOvb6Buc/+A5ofD5HwnHx7O2tj8HKMh/Z3dmfXbeES9IyNT+7Nv5+baHfed3UsJsu17EyGLbzB7tb/262ssyxPUvNma330y3hkqua7KfG1+9Cr6nJbGX207qwna/tWXg/VbansszX9y7yeNqfZdm5R+7If98b/n3l787+6IW6f3dp9m865x654+fXHPnHpWw/AL3vrepYU/1eV/MvU4v5938AAACgJ8Tc3x9mIv8DAABAYcTcH/+v8ET+BwAAgMKIuX8wzKQk+X/dR16bfutclpr5s0G8Pu2Gu6rLxY7rRPh6dHZO5fI7npv67384t7h192dZ9uZdf9h0+XV3xe2qGg3befGj9ZfP88Kti1r3wQfOpfXW9te/Ge4/Pp7FHgbNKrgTWZa9eN3X8vWMPnghny/ddTCf955/+qnKMq/vrX4db//qO6rL/0Uo/+4/cqju9q+G/fDTMCfubr4/4u2+c+H963d/Zm598XZ9G6/NH/azD1XvN75PzjNPVZeP+3mh7f/eV5//TmX5R9/bfPvP9Tff/ufD/T4X5v++q7p87XNQ+Tre7sth++P64u1u+/b3m27/xa9Ulz/1sepyB8OM698Svt70sdema/fXo32H6h5X9vHqcnH9Ez/64/z6eH/x/hu3f+TAhbr90Xh8vPRv1fsZb1g+Xh7XE/19w/or91N7fMb1P/9HB+v2c7v1X7z31XdV7rdx/bc0LHfqka35+ufur/4dm/7yy19rur64Pfv/9lTd49l/T3gdh/U/+1A4HsP1/3exen+N765w8J76809c/ptrz9U9nujOX1TXf/GDR/O5amT1mquuvuba8++p7Lsse3lV9f7arf/oX52s2/5v3VDdH/H62NFvXP9C4vpPf3HsxMmZs9OTaa8+cV3+3jmfqG5P3N7rwrm18esDJ888PHV6dGJ0IstGi/sWepfs22H+vDrOt156dt4ZdOsD4fm86c9fXLP5X78aL//3+6uXX7i7+n3rfWG5Z8Lla8Pzt7T1z/fshhvy13ffS2ELZ+e/X/ByrN/0X3sWtWB4/I0/F8Tj/dQ7H873Q+W6/PtGfF0vc/tfmazez3fDfp0N78y88Ya59dUuH98b4cJ91df7svdfOM3F5/VvwvP9yZ9W7z9uV3y8r4SfY76/rv58F4+P757rb7z//F08zofzSXa+en1cKu7vC6/f0HTz4vuQZOdvzL/+k3Q/Ny7pYS5k5rGZ8WPTJ84+On5maubM+Mxjjx84fvLsiTMH8vfyPPD5drefOz+tyc9Pk1O7dmb52epkdVxmV3r7Tz1weHL3xObJqSOHzh4588CpqdNHD8/MHJ6anNl86MiRqS+2u/305L5t2/fu2L197Oj05L49e/fu2Ds2feJkZTOqG9XGrokvjJ04fSC/ycy+nXu33X77zomx4ycnp/btnpgYO9vu9vn3prHKrf9g7PTUsUNnpo9Pjc1MPz61b9veXbu2t303wOOnjsyMjp8+e2L87MzU6fHqYxk9k19c+d7X7vYU08x/VH+ebdRXfSO+7NO37Ervz1rx3JML3lV1kYY3EH0tvBfNP7/t1J7FfB1z/1CYSUnyPwAAAJRBzP3DYSbyPwAAABRGzP2rwkzkfwAAACiMmPtHwkxKkv8L1/9fd25R69f/1/+v3V/6/yXr/9/Xbf3/6vlC/78zltu/1/8P9P/1//X/9f/1/+mAbuv/x9y/OsuWlv/721wPAAAAdI2Y+9eEmZTk3/8BAACgDGLuvyrMRP4HAACAwoi5/+owk5Lkf/1//X/9f/1//f/m69f/7036/63p/7eh/z+eNfTnX8myrMD9//Od3H79f/1/5uu2/n/M/deEmZQk/wMAAEAZxNx/bZiJ/A8AAACFEXP/dWEm8j8AAAD0ptXzL4q5f22YSUnyv/6//r/+v/6//n/z9ev/9yb9/9b0/9vQ//f5//r/+v90VLf1/2Puf1uYSUnyPwAAAJRBzP1vDzOR/wEAAKD7DF7azWLuf0eYybz8f4krAAAAAK64mPuvzxqK4CX593/9f/1//X/9f/3/5utffP9/INP/7x76/63p/7eh/6//r/+v/09HdVv/P8/92Uj2zjCTkuR/AAAAKIOY+28IM5H/AQAAoLuNLH7RmPt/pfGG8j8AAAAURsz968JMSpL/9f/1//X/9f/1/5uv3+f/9yb9/9b0/9votv5/wxGk/9/d26//r//PfN3W/4+5/8Ywk5LkfwAAACiDmPtvCjOR/wEAAKAwYu7/1TAT+R8AAAAKI+b+9WEmJcn/+v9d3v+PvT/9f/1//X/9f/3/RdH/b03/v41u6/830P/v7u3X/9f/Z75u6//H3P+uMJOS5H8AAAAog5j73x1mIv8DAABAYcTc/54wE/kfAAAACiPm/tEwk5Lkf/3/Lu//+/x//X/9f/1//f8l0f9vTf+/Df1//X/9f/1/Oqrb+v8x928IMylJ/gcAAIAyiLl/Y5iJ/A8AAACFEXP/zWEm8j8AAAAURsz9m8JMSpL/9f/1//X/9f/1/5uvX/+/N+n/t7aY/n9+TtP/1//X/9f/1/+nA7qt/x9z/3vDTEqS/wEAAKAMYu7fHGYi/wMAAEBhxNz/vjAT+R8AAAAKI+b+LWEmJcn/+v/6/2Xt/6+qWaf+v/5/s/Xr//cm/f/WfP5/G/r/+v/6//r/dFS39f9j7n9/mElJ8j8AAACUQcz9W8NM5H8AAAAojJj7bwkzkf8BAACgMGLuHwszKUn+vzL9/zfyP/X/9f99/r/+v/6//n+nlaH//7ml3mkN/f829P/1//X/9f/pqG7r/8fcf2uYSUnyPwAAAJRBzP23hZnI/wAAAFAYMfePh5nI/wAAAFAYMfdPhJmUJP/7/H/9f/1//f8l9f/fM3e/+v9V+v/dpQz9/+XQ/29D/1///4r3/4f0/ymUbuv/x9y/LcykJPkfAAAAyiDm/u1hJvI/AAAAFEbM/TvCTOR/AAAAKIyY+3eGmZQk/+v/6//r/+v/+/z/5uvX/+9N+v+tdb7/Hx+i/r/+v/6/z//X/2e+buv/x9x/e5hJSfI/AAAAlEHM/bvCTOR/AAAAKIyY+3eHmcj/AAAAUBgx9+8JMylJ/tf/70D/f7D5xfr/+v+R/n84HvT/9f9XgP5/az7/vw39f/1//X/9fzqq2/r/MffvDTMpSf4HAACAMoi5/wNhJvI/AAAAFEbM/b8WZiL/AwAAQGHE3P/rYSYlyf/6/z7/X/9f//8K9P9HMv1//f/LRP+/Nf3/NvT/9f/1//X/6ahu6//H3L8vzKQk+R8AAADKIOb+3wgzkf8BAACgMGLu/2CYifwPAAAAhRFz//4wk5Lkf/1//X/9f/1/n//ffP36/71J/781/f829P/1//X/9f/pqG7r/8fc/6Ewk5LkfwAAACiDmPvvCDOR/wEAAKAwYu7/cJiJ/A8AAACFEXP/R8JMSpL/9f/1//X/9f/1/5uvX/+/N+n/t6b/34b+v/6//r/+Px3Vbf3/mPs/GmZSkvwPAAAAZRBz/8fCTOR/AAAAKIyY+z8eZiL/AwAAQGHE3H9nmElJ8r/+v/6//r/+v/5/8/Xr//cm/f/W9P/b0P8vWP9/9Br9f/1/LpdmCWi+S+v/X/3mgitcZv8/5v7fDDMpSf4HAACAMoi5/64wE/kfAAAACiPm/rvDTOR/AAAAKIyY+z8RZlKS/K//r/+v/6//r//ffP36/71J/7+1Huv///LacLn+f5X+f3dvf1f2/3+yUP9/dlXj7fX/uRwurf/fVEf6/zH3fzLMpCT5HwAAAMog5v5PhZnI/wAAAFAYMfd/OsxE/gcAAIDCiLn/t8JMSpL/9f8r2zHXXtb/1//PL9D/1//X/+9Z+v+t9Vj/3+f/N9D/7+7t78r+v8//5wrrtv5/zP33hJmUJP8DAABAGcTcf2+YifwPAAAAhRFz/31hJvI/AAAAFEbM/feHmZQk/+v/+/x//X/9f/3/5uvX/+9N+v+t6f+3of+v/99t/f//1P+nt3Vb/z/m/gfCTEqS/wEAAKAMYu7/TJiJ/A8AAACFEXP/b4eZyP8AAABQGDH3fzbMpCT5X/+/V/r/oyvS/8/0//X/9f/1/3uc/n9r+v9t6P/r/3db/9/n/9Pjuq3/H3P/g2Emi8//I4teEgAAALgiYu7/nTCTkvz7PwAAAJRBzP2/G2Yi/wMAAEBhxNz/uTCTkuT/y9P/b9aGn0//3+f/6//r/+v/6/932sr1/+OZR/9f/1//P9L/X1z/f7bxG12g/08RdVv/P+b+3wszKUn+BwAAgDKIuf+hMBP5HwAAAHrCYv4v9Jj7D4SZyP8AAABQGDH3HwwzKUn+9/n/+v/6/13a//+zjf/y4x9+6uC2K9P/z6f+v/5/L7qs/f94somf/1958fv8f/1//f9E/9/n/+v/06jb+v8x9x8KMylJ/gcAAIAyiLn/98NM5H8AAAAojJj7D4eZyP8AAABQGDH3T4aZlCT/6//r/+v/d2n/v4c//z/uD/3/eh3r/8eTrv5/Uyv3+f/Vr5/R/7/E/v9w00v1//X/e3n79f/1/5nvsvT/Z1elC5fa/4+5fyrMpCT5HwAAAMog5P7+I9U5d4X8DwAAAIURc//RMBP5HwAAAAoj5v6Hw0xKkv/1//X/9f/1/zvd//f5/835/P+Vof/fWvf0/5vT/9f/v1LbPxSm/r/+P53VbZ//H3P/dJhJSfI/AAAAlEHM/Z8PM5H/AQAAoDBi7v9CmIn8DwAAAIURc/+xMJOS5H/9f/1//X/9f/3/5uvX/+9N+v+t6f+3of9f2v5/J7Zf/1//n/m6rf8fc//xMJOS5H/4f/bu5Nnyurzj+OlOU+ku/oAssqEqy+yyyIZFsk7+gCyyySZVqVQKkpA4K42zojjPA84zDqCIEyqKAzihOIvzLDjgjFht6X2ep2/fe+7v3G7Pvfd3vs/rtXmS1vYclBI+dr/rCwAA0EHu/sviFvsfAAAAhpG7//K4xf4HAACAYeTu/++4pcn+1//r/4ft//9B/7/X5+v/9f8j0/9PO9r+f++oM+n/9f+b/P31//p/dptb/5+7/3/ilib7HwAAADrI3f+/cYv9DwAAAMPI3X9F3GL/AwAAwDBy9/9f3NJk/+/o/48tevb/mfHq/w+y/z/u/X/9v/5f/3/wDrf/v+qP/82n//f+v/4/6P/1//p/dppb/5+7///jlib7HwAAADrI3f+AuMX+BwAAgGHk7n9g3GL/AwAAwDBy9z8obmmy/73/7/3/Yd//1//v+fn6f/3/yLz/P61T/3/FnRdfdu+Nf33T+Xy+/r9D/3/rgX1//b/+n93m1v/n7n9w3NJk/wMAAEAHufsfErfY/wAAADCM3P0PjVvsfwAAABhG7v6HxS1N9r/+X/+v/9f/6/+Xf77+fzPp/6d16v8v5PP1/x36/4P7/vp//T+7za3/z93/8Lilyf4HAACADnL3PyJusf8BAABgGLn7r4xb7H8AAAAYRu7+03FLk/2v/z/4/v/3+n/9f1z9v/5f/3/w9P/T9P8r6P/1//p//T9rNbf+P3f/VXFLk/0PAAAAHeTuf2TcYv8DAADAMHL3Pypusf8BAABgGLn7Hx23NNn/+n/v/+v/9f/6/+Wfr//fTPr/aYff/y/7K+Te9P8b3/9fpP/X/+v/2e48+//7Jv5rey39f+7+x8QtTfY/AAAAdJC7/7Fxi/0PAAAAw8jd/7i4xf4HAACAYeTuf3zc0mT/6//1//vq/+M/4yv1//r/bfT/W/T/86L/nzab9/+PnVj6w/r/je//vf+v/9f/c465vf+fu/8JcUsMv8v//oL+MAEAAIAZyd3/xLilya//AwAAQAe5+6+OW+x/AAAAGEbu/ifFLU32v/5f/+/9f/2//n/550/1/zdt+376/3nR/0+bTf+/B/2//n+Tv7/+X//PbnPr/3P3PzluabL/AQAAoIPc/dfELfY/AAAADCN3/1PiFvsfAAAAhpG7/6lxS5P9v7z/P/uP6//3R/9/7vfX/y//82Nd/X/+K+r/J/v/f/T+f0/6/2n6/xX0//p//f9e/f+pVT9f/88yc+v/c/c/LW5psv8BAACgg9z9T49b7H8AAAAYRu7+Z8Qt9j8AAAAMI3f/M+OWJvvf+//6f/3/5vX/3v/fcpTv/y8Ovf8/of/fJ/3/NP3/Cvp//b/+3/v/rNXc+v/c/c+KW5rsfwAAAOggd/+z4xb7HwAAADbD9t87sPM3lIbc/c+JW+x/AAAAGEbu/ufGLU32v/5f/9+7/9/6mfr/zv3/yQ3p/73/v1/6/2n6/xWOtv8/Nmj/f2Kw/v/avX7+HPr/K/X/zMw5/f/NZ3/8qPr/3P3Pi1ua7H8AAADoIHf/8+MW+x8AAACGkbv/BXGL/Q8AAADDyN3/wrilyf4/8P7/1N6frf/X/x99/79F/9+5/9+U9//1//ul/5+m/1/B+//e//f+v/6ftTqn/9/mqPr/3P0vilv/E0CT/Q8AAAAd5O5/cdxi/wMAAMAwcvdfG7fY/wAAADCM3P0viVua7H/v/+v/9f/6f/3/8s/X/28m/f80/f8K+n/9v/5f/89aza3/z93/0rilyf4HAACADnL3vyxusf8BAABgGLn7Xx632P8AAAAwjNz9r4hbmux//f/B9v/54/p//f9C/6//1/8firb9/7FlfyXabY/+//b/OP3P5/6I/l//r//X/+v/WYNZ9P9nzv7dZe7+V8YtTfY/AAAAdJC7/1Vxi/0PAAAAw8jd/+q4xf4HAACAYeTuf03c8qf9v7NC3TwnV/zj+n/v/+v/9f/6/+Wfr//fTG37/33y/v8K+n/9v/5f/89azaL/3/b/5+5/bdzi1/8BAABgGLn7Xxe32P8AAAAwjNz9r49b7H8AAAAYRu7+N8QtTfa//l//r//X/+v/l3++/n8z6f+n6f9X0P/r/9fS//9X/Ij+X//P3Pr/3P3XxS1N9j8AAAB0kLv/jXGL/Q8AAADDyN3/prjF/gcAAID5uX9HoLZPufvfHLc02f/6f/2//l//r/9f/vn6/82k/5+m/18sFtdPfIFl/f+Zv9T/6/+9/6//5wLNrf/P3f+WuKXJ/gcAAIAOcvdfH7fY/wAAADCM3P03xC32PwAAAAwjd/9b45Ym+1//r//X/+v/G/X/x/T/49P/T9P/r+D9f/2//l//z1rNrf/P3f+2uKXJ/gcAAIAOcvffGLfY/wAAADCM3P1vj1vsfwAAABhG7v6b4pY99//xQ/hWh0f/r//X/+v/G/X/A77/f3L1BzdzcP3/Qv+v/9f/r6D/1//r/9lpbv1/7v53xC1+/R8AAACGkbv/nXGL/Q8AAADDyN3/rrjF/gcAAIBh5O5/d9zSZP/r//X/+n/9v/5/+edvRv+/+nO78f7/NP3/Cvp//b/+X//PWs2t/8/d/564pcn+BwAAgA5y998ct9j/AAAAMIzc/e+NW+x/AAAAGEbu/vfFLU32/1H0/8e3Xf3/3Pr/xUL/r//X/285hP7/5EL/v3b6/2n6/xX0/2P2/8cXA/X/p/b8+fp/5mhu/X/u/vfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9A3GL/AwAAwDBy938wbmmy/73/r//f2Pf/L4qfoP/X/29u/1//rur/10f/P03/v4L+/6D6/7vX8gWP7vvPqP/fm/6fOZpb/5+7/9a4pcn+BwAAgA5y938obrH/AQAAYBi5+z8ct9j/AAAAMIzc/R+JW5rsf/2//n9j+3/v/+v/9f/6/yX0/9P0/yvo/8d8/1//r//nyMyt/8/d/9G4pcn+BwAAgA5y998Wt9j/AAAAMIzc/bfHLfY/AAAADCN3/8filib7X/+v/9f/b2b/f1L/r//X/y81l/7/0kv/6Q79v/5f/6//1//r/7ubW/+fu//jcUuT/Q8AAAAd5O7/RNxi/wMAAMAwcvd/Mm6x/wEAAGAYufs/Fbc02f+7+/+LFluF6pZl/X80avr/bfT/535//f/yPz+8/6//1/8fvLn0/97/v7Dvr//X/2/y9z+v/v+S3T9f/8+I5tb/5+6/I25psv8BAACgg9z9n45b7H8AAAAYRu7+z8Qt9j8AAAAMI3f/nXFLk/2/me//H5/4A9L/L/T/+v8Vn6//1/+PbL39/yn9v/5f/6//7/f+/1/o/1mfufX/ufs/G7c02f8AAADQQe7+z8Ut9j8AAAAMI3f/5+MW+x8AAACGkbv/C3FLk/2/mf3/1B+Q/n+h/9f/7/X5f7fQ/+v/h+f9/2kj9/9X3ztu/59/h6r/n/f3H6b/9/4/a7TW/n/nX5QuoP/P3f/FuKXJ/gcAAIAOcvd/KW6x/wEAAGAYufu/HLfY/wAAADCM3P1fiVua7P/19/+X6P+D/n8u/f+/6f93fL7+X/8/Mv1//hV9uZH7//W9/39idv1/0v/P+/vr//X/7LbW/n+x629Hz7v/z91/V9zSZP8DAABAB7n7vxq32P8AAAAwjNz9X4tb7H8AAAAYRu7+r8ctTfa/9/979f/HFh37f+//6//1/53o/6fp/1eY6fv/Sf8/7++v/9f/s9vc+v/c/d+IW5rsfwAAANhU//K3/3nXfv+5ufu/GbfY/wAAADCM3P3filvsfwAAABhG7v5vxy1N9r/+v1f/3/P9f/2//l//34n+f5r+fwX9v/5f/6//Z63m1v/n7v9O3LJt+J047z9KAAAAYE5y9383bmny6/8AAADQQe7+78Utu/b/mX3+rnYAAABgbnL3fz9u2ePX/7f9MxZ/c6Df7HDo/2fe/y/G7//vWej/9f9b9P/6/3XQ/0/7M/v/M8f0//r/Cfp//b/+n53m1v/n7v9B3OL3/wMAAMAmO+d/Ucjd/8O4xf4HAACAYeTu/1HcYv8DAADAMHL33x23NNn/+v+Z9/8X9P7/qfq/NqH/9/7/Afb/15xc+vn6f/3/yPT/07z/v4L+X/+v/9f/s1Zz6/9z998TtzTZ/wAAANBB7v4fxy32PwAAAAwjd/9P4hb7HwAAAIaRu/+ncUuT/a//H7H/36z3//X/3v+/8P7/ry4+fdu//vsN1+n/OWvt/X/8rcGy/j//XND/H0r/f8uyfz39v/5/Tt9f/6//Z7e59f+5+38WtzTZ/wAAANBB7v574xb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuKXJ/tf/6//n0v/nv9dH0P+f3rz+P5vi7v2/9//1/7t5/3/aBvf/3v/X/8/+++v/9f/sNrf+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAYeTu/3XcYv8DAADAMHL3/yZuabL/9f/6/7n0/8n7/2d/nvf/t+j/9f/nQ/8/Tf+/gv5f/6//1/+zVnPr/3P3/zZuabL/AQAAoIPc/ffFLfY/AAAADCN3/+/iFvsfAAAAhpG7//64pcn+1//r//X/+n/9//LP1/9vJv3/NP3/Cvp//b/+X//PWs2t/8/d/4cAAAD//+XfeZY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 2.424457008s ago: executing program 2 (id=937): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYBLOB="2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303030382c646973636172642c70726a6a71756f74613d26000000000000ddff0089c5a82bc95815a00aeb55d44b962c696e6c696e655f64656e7472792c666c7573685f6d657267652c6261636b67726f756e645f67633d6f66662c626172726965722c746573745f64756d6d795f656e6372797074696f6e2c6e6f657874656e745f63616368652c6d656d6f72793d6e6f726d616c2c00"], 0xfd, 0x5534, &(0x7f0000005b40)="$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") open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 2.406060102s ago: executing program 4 (id=938): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x900, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 2.335565074s ago: executing program 1 (id=939): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@inode32}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x2, 0xadea}) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 2.185177175s ago: executing program 5 (id=940): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 2.048682615s ago: executing program 4 (id=941): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.860375692s ago: executing program 5 (id=942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="24002f80080001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.529970283s ago: executing program 5 (id=943): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000003c0)={{&(0x7f0000002000/0x2000)=nil, 0x2000}}) 1.528548865s ago: executing program 4 (id=944): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 1.341535287s ago: executing program 6 (id=945): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_gettime(r0, &(0x7f0000000080)) 1.22374032s ago: executing program 5 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000b00)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 958.542092ms ago: executing program 5 (id=947): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) 873.258935ms ago: executing program 3 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026"], 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) 618.064203ms ago: executing program 4 (id=949): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)=')', 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0xffff, @private2, 0x7}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000000580)="ba", 0x1}], 0x1}}], 0x2, 0x40015) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x2, 0x8, 0x0, 0x11f4c23f, 0x9, 0x0, 0xff}, &(0x7f0000000380)=0x20) 492.694908ms ago: executing program 5 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 216.51774ms ago: executing program 6 (id=951): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000000097d, 0x40800) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000000008, 0x2000009, 0x0, 0x0, 0x16, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004d000000005d9ecfbe00", [0xfffffffffeff7ff9, 0x9]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000740)={0x0, {}, 0x0, {}, 0x9, 0x6, 0x8, 0x15, "e21121bc01009a821cec0a324fbc71e025cd6a6f460e38ef608504000000e3ce7707c9d89402fff284004400fffffb77631f5c25f76500000000010000000400", "3721905db7f4dfd09d8d8b37158cb6d03aff7054186d607acfcd47f814a305c7", [0x1, 0x4]}) 195.400112ms ago: executing program 1 (id=952): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x8, 0x3a, 0xff, @local, @mcast1, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=953): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) kernel console output (not intermixed with test programs): ][ T6797] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 130.648201][ T5816] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.676829][ T5820] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.746458][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.796895][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.956411][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 130.993498][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.047511][ T24] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.080757][ T6879] Bluetooth: MGMT ver 1.23 [ 131.100336][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.128951][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 131.154922][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.202129][ T24] usb 3-1: Product: syz [ 131.233856][ T24] usb 3-1: Manufacturer: syz [ 131.261961][ T24] usb 3-1: SerialNumber: syz [ 131.302054][ T24] usb 3-1: config 0 descriptor?? [ 131.506662][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.701441][ T6886] loop1: detected capacity change from 0 to 1024 [ 131.762820][ T24] gs_usb 3-1:0.0: Configuring for 159 interfaces [ 131.813954][ T6886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.837712][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.162296][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.163685][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.167207][ T24] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 132.167672][ T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 132.175903][ T5178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.251484][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.306447][ T24] usb 3-1: USB disconnect, device number 5 [ 132.577359][ T6909] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 132.667601][ T6884] loop5: detected capacity change from 0 to 32768 [ 132.708573][ T6884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.274 (6884) [ 132.747608][ T6884] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.747662][ T6884] BTRFS info (device loop5): using crc32c checksum algorithm [ 132.869896][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.921885][ T6925] Zero length message leads to an empty skb [ 132.969423][ T6884] BTRFS info (device loop5): enabling ssd optimizations [ 133.028694][ T6884] BTRFS info (device loop5): turning on flush-on-commit [ 133.076237][ T6884] BTRFS info (device loop5): enabling free space tree [ 133.111950][ T6884] BTRFS info (device loop5): enabling auto defrag [ 133.141012][ T6932] loop2: detected capacity change from 0 to 512 [ 133.151452][ T6884] BTRFS info (device loop5): use lzo compression, level 1 [ 133.266464][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.299049][ T6932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.330829][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 133.330851][ T31] audit: type=1800 audit(1776317205.585:42): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.274" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 133.385410][ T6932] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.848493][ T6395] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.926910][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.152212][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.541885][ T6961] loop3: detected capacity change from 0 to 2048 [ 134.762103][ T6946] loop4: detected capacity change from 0 to 32768 [ 134.783123][ T6946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.288 (6946) [ 134.938737][ T6946] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.952172][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.976628][ T6946] BTRFS info (device loop4): using sha256 checksum algorithm [ 135.217619][ T6946] BTRFS info (device loop4): rebuilding free space tree [ 135.293250][ T6954] loop0: detected capacity change from 0 to 32768 [ 135.305605][ T6984] loop3: detected capacity change from 0 to 512 [ 135.365124][ T6984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.388726][ T6984] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.441522][ T6954] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.473742][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 135.501129][ T6993] ipvlan2: entered allmulticast mode [ 135.512169][ T6993] syz_tun: entered allmulticast mode [ 135.516321][ T6946] BTRFS info (device loop4): enabling ssd optimizations [ 135.565379][ T6946] BTRFS info (device loop4): using spread ssd allocation scheme [ 135.679042][ T6946] BTRFS info (device loop4): enabling free space tree [ 135.716422][ T6946] BTRFS info (device loop4): force clearing of disk cache [ 135.730392][ T6954] XFS (loop0): Ending clean mount [ 135.751704][ T6946] BTRFS info (device loop4): enabling auto defrag [ 135.780230][ T6946] BTRFS info (device loop4): max_inline set to 0 [ 135.805021][ T6954] XFS (loop0): Quotacheck needed: Please wait. [ 135.948714][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.987459][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.049818][ T6954] XFS (loop0): Quotacheck: Done. [ 136.279607][ T5816] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.306700][ T5178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.326803][ T7003] loop5: detected capacity change from 0 to 4096 [ 136.342129][ T6967] loop1: detected capacity change from 0 to 40427 [ 136.372268][ T6967] F2FS-fs (loop1): invalid crc value [ 136.835908][ T7003] ntfs3(loop5): failed to convert "0000" to iso8859-9 [ 136.896203][ T6967] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 136.906623][ T5178] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.924313][ T6967] F2FS-fs (loop1): Start checkpoint disabled! [ 136.964739][ T6967] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 136.977976][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.002961][ T6967] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 137.006115][ T58] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 137.027162][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.115415][ T5178] usb 3-1: Using ep0 maxpacket: 16 [ 137.142603][ T5178] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.203716][ T5178] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 137.269100][ T5178] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.298959][ T7022] loop5: detected capacity change from 0 to 512 [ 137.301083][ T5178] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 137.369761][ T5178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.401914][ T1009] kworker/u8:7: attempt to access beyond end of device [ 137.401914][ T1009] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.422665][ T7022] EXT4-fs (loop5): 1 truncate cleaned up [ 137.443673][ T1009] CPU: 0 UID: 0 PID: 1009 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 137.443705][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.443721][ T1009] Workqueue: writeback wb_workfn (flush-7:1) [ 137.443771][ T1009] Call Trace: [ 137.443781][ T1009] [ 137.443791][ T1009] dump_stack_lvl+0xe8/0x150 [ 137.443832][ T1009] f2fs_handle_critical_error+0x37c/0x540 [ 137.443884][ T1009] f2fs_write_end_io+0x1273/0x1740 [ 137.443944][ T1009] __submit_merged_bio+0x256/0x6a0 [ 137.443996][ T1009] __submit_merged_write_cond+0x3c9/0x4e0 [ 137.444049][ T1009] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 137.444108][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.444149][ T1009] f2fs_write_data_pages+0x287e/0x34f0 [ 137.444176][ T1009] ? f2fs_build_free_nids+0xdc/0x1810 [ 137.444261][ T1009] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.444351][ T1009] ? unwind_next_frame+0xa6/0x2550 [ 137.444374][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.444421][ T1009] ? unwind_next_frame+0xa6/0x2550 [ 137.444466][ T1009] ? unwind_next_frame+0xa6/0x2550 [ 137.444491][ T1009] ? ret_from_fork_asm+0x1a/0x30 [ 137.444514][ T1009] ? ret_from_fork_asm+0x1a/0x30 [ 137.444561][ T1009] ? __lock_acquire+0x6b5/0x2cf0 [ 137.444603][ T1009] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.444634][ T1009] do_writepages+0x32e/0x550 [ 137.444674][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.444703][ T1009] ? reacquire_held_locks+0x104/0x190 [ 137.444740][ T1009] ? writeback_sb_inodes+0x463/0x19d0 [ 137.444779][ T1009] __writeback_single_inode+0x133/0x10e0 [ 137.444812][ T1009] ? do_raw_spin_unlock+0xf5/0x210 [ 137.444846][ T1009] writeback_sb_inodes+0x979/0x19d0 [ 137.444873][ T1009] ? __lock_acquire+0x6b5/0x2cf0 [ 137.444946][ T1009] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 137.444973][ T1009] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.445056][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445084][ T1009] ? rcu_is_watching+0x15/0xb0 [ 137.445121][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445163][ T1009] wb_writeback+0x445/0xb00 [ 137.445199][ T1009] ? queue_io+0x201/0x470 [ 137.445239][ T1009] ? __pfx_wb_writeback+0x10/0x10 [ 137.445264][ T1009] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.445315][ T1009] wb_workfn+0x3f8/0xf10 [ 137.445350][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445379][ T1009] ? look_up_lock_class+0x57/0x110 [ 137.445452][ T1009] ? __pfx_wb_workfn+0x10/0x10 [ 137.445496][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445525][ T1009] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.445549][ T1009] ? lock_acquire+0x106/0x350 [ 137.445585][ T1009] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.445616][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445650][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445687][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445720][ T1009] ? process_scheduled_works+0xa70/0x1860 [ 137.445754][ T1009] ? process_scheduled_works+0xa70/0x1860 [ 137.445791][ T1009] process_scheduled_works+0xb5d/0x1860 [ 137.445826][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445901][ T1009] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.445943][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.445972][ T1009] ? assign_work+0x3d5/0x5e0 [ 137.446012][ T1009] worker_thread+0xa53/0xfc0 [ 137.446049][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.446098][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.446141][ T1009] kthread+0x388/0x470 [ 137.446167][ T1009] ? __pfx_worker_thread+0x10/0x10 [ 137.446200][ T1009] ? __pfx_kthread+0x10/0x10 [ 137.446227][ T1009] ret_from_fork+0x514/0xb70 [ 137.446268][ T1009] ? __pfx_ret_from_fork+0x10/0x10 [ 137.446303][ T1009] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.446332][ T1009] ? __switch_to+0xc79/0x1410 [ 137.446368][ T1009] ? __pfx_kthread+0x10/0x10 [ 137.446396][ T1009] ret_from_fork_asm+0x1a/0x30 [ 137.446454][ T1009] [ 137.823897][ T5178] usb 3-1: config 0 descriptor?? [ 137.926544][ T7022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.956020][ T1009] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 138.066889][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.155901][ T7030] loop0: detected capacity change from 0 to 4096 [ 138.260087][ T7030] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 138.293288][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.300860][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.315001][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.351610][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.385508][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.418735][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.433453][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.464520][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.480742][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.498030][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.508107][ T5178] ortek 0003:05A4:8003.0004: unknown main item tag 0x0 [ 138.604288][ T5178] ortek 0003:05A4:8003.0004: hidraw0: USB HID v0.08 Device [HID 05a4:8003] on usb-dummy_hcd.2-1/input0 [ 138.695454][ T6032] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.713603][ T5178] usb 3-1: USB disconnect, device number 6 [ 138.868944][ T6032] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 138.902467][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.932277][ T7040] loop4: detected capacity change from 0 to 8192 [ 138.938976][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.973525][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.998664][ T7043] fido_id[7043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 139.021267][ T31] audit: type=1800 audit(1776317211.275:43): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.315" name="bus" dev="loop4" ino=1048621 res=0 errno=0 [ 139.032595][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.107647][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.132051][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.189125][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.227950][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.254049][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.303549][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.334989][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.347643][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.363838][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.395286][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.423478][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.463575][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.502391][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.538736][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.569075][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.617659][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.652685][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.678074][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.730421][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.771537][ T6032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.813469][ T6032] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.852599][ T6032] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.872695][ T6032] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 139.890778][ T6032] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 139.929309][ T6032] usb 4-1: Product: syz [ 139.947537][ T6032] usb 4-1: Manufacturer: syz [ 139.971950][ T6032] usb 4-1: SerialNumber: syz [ 140.013318][ T6032] usb 4-1: config 0 descriptor?? [ 140.043065][ T7042] loop5: detected capacity change from 0 to 32768 [ 140.079355][ T7042] (syz.5.314,7042,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.137730][ T7042] (syz.5.314,7042,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.152069][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.181548][ T6032] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 140.290092][ T7042] JBD2: Ignoring recovery information on journal [ 140.411055][ T7042] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 140.637314][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 140.661823][ T5178] usb 4-1: USB disconnect, device number 3 [ 140.746477][ T5178] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 141.069259][ T6395] ocfs2: Unmounting device (7,5) on (node local) [ 141.134533][ T7060] loop2: detected capacity change from 0 to 32768 [ 141.187483][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.196714][ T7060] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.355805][ T7060] XFS (loop2): Ending clean mount [ 141.411058][ T7060] XFS (loop2): Quotacheck needed: Please wait. [ 141.420849][ T7065] loop1: detected capacity change from 0 to 32768 [ 141.469967][ T7065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.324 (7065) [ 141.588939][ T7065] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.620067][ T7060] XFS (loop2): Quotacheck: Done. [ 141.633358][ T7065] BTRFS info (device loop1): using crc32c checksum algorithm [ 141.748807][ T5178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.817348][ T5819] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.838130][ T7065] BTRFS info (device loop1): allowing degraded mounts [ 141.865212][ T7065] BTRFS info (device loop1): enabling ssd optimizations [ 141.893753][ T7065] BTRFS info (device loop1): turning on async discard [ 141.925317][ T7065] BTRFS info (device loop1): enabling free space tree [ 141.964800][ T7065] BTRFS info (device loop1): enabling auto defrag [ 141.975805][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.051993][ T31] audit: type=1800 audit(1776317214.305:44): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="file3" dev="loop1" ino=261 res=0 errno=0 [ 142.168511][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 142.213278][ T5926] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 142.253885][ T5926] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 142.267605][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.291360][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 142.329692][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 142.388373][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 32769, setting to 1024 [ 142.406530][ T5178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.446205][ T5926] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 142.471978][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.489434][ T5926] usb 4-1: Product: syz [ 142.497295][ T5926] usb 4-1: Manufacturer: syz [ 142.503107][ T5926] usb 4-1: SerialNumber: syz [ 142.531332][ T5926] usb 4-1: config 0 descriptor?? [ 142.569198][ T7065] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 142.570806][ T5926] hub 4-1:0.0: bad descriptor, ignoring hub [ 142.627026][ T5926] hub 4-1:0.0: probe with driver hub failed with error -5 [ 142.735533][ T5926] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 142.936500][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 142.937910][ T5926] usb 4-1: USB disconnect, device number 4 [ 143.018844][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.335'. [ 143.064550][ T5820] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.346504][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.830230][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.840452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.156077][ T7136] option changes via remount are deprecated (pid=7130 comm=syz.1.340) [ 144.187622][ T7136] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 144.325176][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.345199][ T5178] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.386675][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.452395][ T7142] loop1: detected capacity change from 0 to 128 [ 144.506146][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 144.527135][ T5178] usb 6-1: Using ep0 maxpacket: 8 [ 144.543576][ T5926] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.566328][ T5178] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 144.595255][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.604303][ T5178] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.628963][ T5926] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 144.648685][ T5178] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.668397][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.684809][ T5178] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.713968][ T5178] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.728833][ T5926] usb 4-1: config 0 descriptor?? [ 144.756873][ T5178] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.785255][ T5178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.970026][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 145.010456][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 145.011124][ T7145] syz.1.344: attempt to access beyond end of device [ 145.011124][ T7145] loop1: rw=3, sector=138, nr_sectors = 6 limit=128 [ 145.043265][ T5178] usb 6-1: GET_CAPABILITIES returned 0 [ 145.056713][ T7145] syz.1.344: attempt to access beyond end of device [ 145.056713][ T7145] loop1: rw=2051, sector=144, nr_sectors = 106 limit=128 [ 145.064271][ T5178] usbtmc 6-1:16.0: can't read capabilities [ 145.184895][ T5926] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 145.358956][ T6032] usb 6-1: USB disconnect, device number 2 [ 145.428580][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.436922][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.611627][ T24] usb 4-1: USB disconnect, device number 5 [ 145.972915][ T7155] loop1: detected capacity change from 0 to 512 [ 146.051255][ T7155] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.350: invalid indirect mapped block 256 (level 2) [ 146.084357][ T7155] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 146.085124][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 146.100804][ C1] EXT4-fs (loop1): initial error at time 1776317218: ext4_free_branches:1023: inode 11 [ 146.110621][ C1] EXT4-fs (loop1): last error at time 1776317218: ext4_free_branches:1023: inode 11 [ 146.123769][ T7155] EXT4-fs (loop1): 2 truncates cleaned up [ 146.171409][ T7155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.460785][ T3463] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 146.483124][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.553740][ T3463] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28 [ 146.593385][ T3463] EXT4-fs (loop1): This should not happen!! Data will be lost [ 146.593385][ T3463] [ 146.622461][ T3463] EXT4-fs (loop1): Total free blocks count 0 [ 146.646201][ T3463] EXT4-fs (loop1): Free/Dirty block details [ 146.667639][ T3463] EXT4-fs (loop1): free_blocks=0 [ 146.682052][ T3463] EXT4-fs (loop1): dirty_blocks=66 [ 146.698463][ T3463] EXT4-fs (loop1): Block reservation details [ 146.717375][ T3463] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 146.748898][ T5820] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 146.778578][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.550387][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.937165][ T7178] loop1: detected capacity change from 0 to 32768 [ 148.002396][ T7178] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.230884][ T7178] XFS (loop1): Ending clean mount [ 148.314390][ T7178] XFS (loop1): Quotacheck needed: Please wait. [ 148.440326][ T7178] XFS (loop1): Quotacheck: Done. [ 148.468325][ T7187] loop3: detected capacity change from 0 to 32768 [ 148.491279][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.568774][ T7201] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 148.617926][ T7204] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 148.630602][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.655995][ T7187] UFO tlock:0xffffc9000288a240 [ 148.676078][ T5820] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.532770][ T7215] sp0: Synchronizing with TNC [ 149.653930][ T7227] loop5: detected capacity change from 0 to 512 [ 149.666261][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.680366][ T7227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.743629][ T7227] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.374: iget: bad i_size value: 38620345925642 [ 149.866460][ T7227] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.869878][ T7227] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.374: couldn't read orphan inode 15 (err -117) [ 149.879198][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 149.879239][ C1] EXT4-fs (loop5): initial error at time 1776317222: ext4_orphan_get:1397: inode 15 [ 149.879277][ C1] EXT4-fs (loop5): last error at time 1776317222: ext4_orphan_get:1397: inode 15 [ 149.926228][ T7227] loop5: lost filesystem error report for type 5 error -117 [ 149.938871][ T7227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.068025][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.089559][ T7227] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.374: bg 0: block 5: invalid block bitmap [ 150.164968][ T7237] serio: Serial port ptm0 [ 150.254830][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.416753][ T7245] loop0: detected capacity change from 0 to 512 [ 150.459844][ T7245] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.539867][ T7245] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.381: inode has both inline data and extents flags [ 150.656745][ T7245] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 150.659360][ T7245] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.381: couldn't read orphan inode 17 (err -117) [ 150.668638][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 150.668671][ C0] EXT4-fs (loop0): initial error at time 1776317222: ext4_orphan_get:1397: inode 17 [ 150.668709][ C0] EXT4-fs (loop0): last error at time 1776317222: ext4_orphan_get:1397: inode 17 [ 150.707110][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.807312][ T7245] loop0: lost filesystem error report for type 5 error -117 [ 150.811648][ T7245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.884131][ T7233] loop1: detected capacity change from 0 to 32768 [ 150.918726][ T7233] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.376 (7233) [ 151.028873][ T7233] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.071433][ T7233] BTRFS info (device loop1): using crc32c checksum algorithm [ 151.229369][ T7233] BTRFS info (device loop1): enabling ssd optimizations [ 151.231937][ T5816] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 4: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=65, rec_len=12, size=4096 fake=1 [ 151.237246][ T7233] BTRFS info (device loop1): turning on flush-on-commit [ 151.265729][ T7233] BTRFS info (device loop1): enabling free space tree [ 151.272539][ T7233] BTRFS info (device loop1): enabling auto defrag [ 151.282238][ T7233] BTRFS info (device loop1): use lzo compression, level 1 [ 151.299501][ T7233] BTRFS info (device loop1): max_inline set to 4096 [ 151.321333][ T5816] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 65: padding at end of block bitmap is not set [ 151.339832][ T5816] Quota error (device loop0): write_blk: dquota write failed [ 151.378088][ T5816] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 151.411824][ T5816] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz-executor: Failed to acquire dquot type 0 [ 151.489563][ T7275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.386'. [ 151.516125][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.745618][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.777308][ T5820] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.967050][ T7248] loop5: detected capacity change from 0 to 32768 [ 152.038558][ T7248] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.296399][ T7298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.298716][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.347599][ T7248] XFS (loop5): Ending clean mount [ 152.371499][ T7248] XFS (loop5): Quotacheck needed: Please wait. [ 152.573245][ T7248] XFS (loop5): Quotacheck: Done. [ 152.787304][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.964083][ T1009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.027987][ T6395] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.319015][ T1009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.403746][ T7311] loop2: detected capacity change from 0 to 128 [ 153.440004][ T7311] EXT4-fs: Ignoring removed i_version option [ 153.472494][ T7309] loop3: detected capacity change from 0 to 512 [ 153.488054][ T7311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 153.532963][ T7311] System zones: 1-3, 19-19, 35-36 [ 153.579738][ T7311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.605005][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.622538][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.632412][ T7311] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.644473][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.656576][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.666049][ T7309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.679292][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.715375][ T7309] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.794705][ T7321] capability: warning: `syz.1.402' uses 32-bit capabilities (legacy support in use) [ 153.806091][ T31] audit: type=1800 audit(1776317226.045:45): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.398" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 153.835764][ T7309] EXT4-fs (loop3): shut down requested (2) [ 153.843347][ T1009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.843498][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.877639][ T7321] program syz.1.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.914152][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.948300][ T5819] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.033990][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.180823][ T1009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.536629][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.600413][ T7344] block nbd0: Unsupported socket: should be TCP or UNIX. [ 154.737437][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 154.774020][ T24] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 154.810777][ T24] usb 4-1: config 5 has no interface number 0 [ 154.830000][ T24] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 154.853697][ T7350] loop1: detected capacity change from 0 to 128 [ 154.865796][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.880009][ T24] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 154.903327][ T24] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 154.944316][ T7350] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.974264][ T24] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid maxpacket 1280, setting to 1024 [ 154.986395][ T7350] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.060156][ T24] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 155.106997][ T7355] program syz.4.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.128946][ T24] usb 4-1: config 5 interface 168 has no altsetting 0 [ 155.167951][ T24] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 155.173930][ T5820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.195237][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.227781][ T24] usb 4-1: Product: syz [ 155.239109][ T24] usb 4-1: Manufacturer: syz [ 155.250346][ T24] usb 4-1: SerialNumber: syz [ 155.285957][ T7335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.301504][ T7335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.343269][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.418'. [ 155.370598][ T1009] bridge_slave_1: left allmulticast mode [ 155.378855][ T1009] bridge_slave_1: left promiscuous mode [ 155.403313][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.478341][ T1009] bridge_slave_0: left allmulticast mode [ 155.498139][ T1009] bridge_slave_0: left promiscuous mode [ 155.518144][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.575276][ C1] usb 4-1: NFC: Urb failure (status -71) [ 155.599127][ C1] usb 4-1: NFC: Urb failure (status -71) [ 155.635630][ T24] usb 4-1: NFC: Unable to get FW version [ 155.644790][ T24] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71 [ 155.708616][ T24] usb 4-1: USB disconnect, device number 6 [ 155.746959][ T5135] Bluetooth: hci0: command tx timeout [ 155.909291][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.938001][ T7352] loop2: detected capacity change from 0 to 32768 [ 155.976301][ T7352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.413 (7352) [ 156.054154][ T7352] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.089531][ T7352] BTRFS info (device loop2): using sha256 checksum algorithm [ 156.223303][ T7352] BTRFS info (device loop2): enabling ssd optimizations [ 156.253387][ T7352] BTRFS info (device loop2): turning on async discard [ 156.299840][ T7352] BTRFS info (device loop2): enabling free space tree [ 156.413420][ T7398] loop3: detected capacity change from 0 to 64 [ 156.419869][ T7396] loop4: detected capacity change from 0 to 64 [ 156.466827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.482067][ T7400] loop5: detected capacity change from 0 to 512 [ 156.497291][ T7400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.575193][ T7400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.582132][ T5819] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.606345][ T7400] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.686914][ T31] audit: type=1800 audit(1776317228.945:46): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.424" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 156.876735][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.948964][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.957195][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.965203][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.009139][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.062868][ T1009] bond0 (unregistering): Released all slaves [ 157.112545][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.671408][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 157.733652][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 157.776703][ T7428] loop5: detected capacity change from 0 to 1024 [ 157.790257][ T7318] chnl_net:caif_netlink_parms(): no params data found [ 157.826382][ T5135] Bluetooth: hci0: command tx timeout [ 157.998820][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.149356][ T31] audit: type=1800 audit(1776317230.405:47): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.434" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 158.418762][ T7413] loop4: detected capacity change from 0 to 32768 [ 158.536434][ T7413] lbmIODone: I/O error in JFS log [ 158.565610][ T7413] *** Log Format Error ! *** [ 158.572738][ T7413] lmLogInit: exit(-22) [ 158.576944][ T7413] lmLogOpen: exit(-22) [ 158.585817][ T7413] jfs_dirty_inode called on read-only volume [ 158.593455][ T7413] Is remount racy? [ 158.851360][ T1009] hsr_slave_0: left promiscuous mode [ 158.906214][ T1009] hsr_slave_1: left promiscuous mode [ 158.927971][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.947405][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.971938][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.001999][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.029056][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.072280][ T1009] veth1_macvtap: left promiscuous mode [ 159.098618][ T1009] veth0_macvtap: left promiscuous mode [ 159.124712][ T1009] veth1_vlan: left promiscuous mode [ 159.143953][ T1009] veth0_vlan: left promiscuous mode [ 159.802771][ T7449] loop5: detected capacity change from 0 to 32768 [ 159.830677][ T7449] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.439 (7449) [ 159.890357][ T7449] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.905359][ T5135] Bluetooth: hci0: command tx timeout [ 159.917869][ T7449] BTRFS info (device loop5): using crc32c checksum algorithm [ 159.988640][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.064132][ T7500] loop1: detected capacity change from 0 to 64 [ 160.080325][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.119032][ T7449] BTRFS info (device loop5): enabling ssd optimizations [ 160.120355][ T7505] program syz.4.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.136168][ T7449] BTRFS info (device loop5): turning on flush-on-commit [ 160.150620][ T7449] BTRFS info (device loop5): enabling free space tree [ 160.165358][ T7449] BTRFS info (device loop5): enabling auto defrag [ 160.191681][ T7449] BTRFS info (device loop5): use lzo compression, level 1 [ 160.228199][ T7449] BTRFS info (device loop5): max_inline set to 4096 [ 160.441792][ T7510] loop4: detected capacity change from 0 to 8 [ 160.469324][ T7510] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 160.522275][ T5881] udevd[5881]: incorrect cramfs checksum on /dev/loop4 [ 160.548072][ T7510] cramfs: empty filesystem [ 160.648674][ T5881] udevd[5881]: incorrect cramfs checksum on /dev/loop4 [ 160.656373][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 160.788854][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 160.826718][ T6395] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.028229][ T7519] loop4: detected capacity change from 0 to 256 [ 161.051139][ T7519] exfat: Deprecated parameter 'utf8' [ 161.080198][ T7519] exfat: Deprecated parameter 'utf8' [ 161.105652][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.278084][ T7519] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 161.653830][ T7462] warning: `syz.2.442' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.708910][ T5481] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.814708][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.853004][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.891855][ T7318] bridge_slave_0: entered allmulticast mode [ 161.939408][ T7318] bridge_slave_0: entered promiscuous mode [ 161.986842][ T5135] Bluetooth: hci0: command tx timeout [ 161.993345][ T7534] loop4: detected capacity change from 0 to 256 [ 162.031953][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.086757][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.128316][ T7318] bridge_slave_1: entered allmulticast mode [ 162.145855][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.173675][ T7318] bridge_slave_1: entered promiscuous mode [ 162.194804][ T7542] loop1: detected capacity change from 0 to 128 [ 162.288102][ T7542] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.353913][ T7542] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.498236][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.634162][ T5820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.637826][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.808446][ T7553] ªªªªªª: renamed from vlan0 (while UP) [ 163.044340][ T5178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.196754][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.295795][ T7318] team0: Port device team_slave_0 added [ 163.334757][ T7318] team0: Port device team_slave_1 added [ 163.379484][ T1009] IPVS: stop unused estimator thread 0... [ 163.566663][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.592162][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.679924][ T7318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.736366][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.769329][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.842827][ T7554] loop2: detected capacity change from 0 to 32768 [ 163.894991][ T7581] loop1: detected capacity change from 0 to 512 [ 163.904033][ T7318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.959144][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 163.976447][ T7554] JBD2: Ignoring recovery information on journal [ 164.035264][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 164.090715][ T5481] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.147184][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.191252][ T7554] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 164.225569][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.257781][ T7589] netlink: 108 bytes leftover after parsing attributes in process `syz.5.480'. [ 164.329580][ T7318] hsr_slave_0: entered promiscuous mode [ 164.375535][ T7318] hsr_slave_1: entered promiscuous mode [ 164.403770][ T7318] debugfs: 'hsr0' already exists in 'hsr' [ 164.436577][ T7318] Cannot create hsr debugfs directory [ 164.569699][ T5819] ocfs2: Unmounting device (7,2) on (node local) [ 164.597175][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.793134][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.824743][ T24] usb 2-1: config 129 has an invalid interface number: 241 but max is 0 [ 164.861358][ T24] usb 2-1: config 129 has no interface number 0 [ 164.884250][ T24] usb 2-1: config 129 interface 241 altsetting 216 has an endpoint descriptor with address 0x5E, changing to 0xE [ 164.918224][ T24] usb 2-1: config 129 interface 241 altsetting 216 endpoint 0xE has invalid wMaxPacketSize 0 [ 164.940509][ T24] usb 2-1: config 129 interface 241 altsetting 216 endpoint 0xA has invalid wMaxPacketSize 0 [ 164.982423][ T24] usb 2-1: config 129 interface 241 altsetting 216 bulk endpoint 0xA has invalid maxpacket 0 [ 165.030611][ T24] usb 2-1: config 129 interface 241 has no altsetting 0 [ 165.052365][ T24] usb 2-1: New USB device found, idVendor=0421, idProduct=0486, bcdDevice=83.52 [ 165.074334][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.099589][ T24] usb 2-1: Product: syz [ 165.109504][ T24] usb 2-1: Manufacturer: syz [ 165.121143][ T24] usb 2-1: SerialNumber: syz [ 165.128368][ T7616] block nbd2: NBD_DISCONNECT [ 165.247969][ T7614] loop4: detected capacity change from 0 to 4096 [ 165.266605][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.354362][ T7623] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.360827][ T24] rndis_host 2-1:129.241: ACM capabilities 01, not really RNDIS? [ 165.462040][ T24] usb 2-1: USB disconnect, device number 2 [ 165.472988][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'. [ 165.621094][ T7318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.677406][ T7318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.711382][ T7318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.749489][ T7318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.780419][ T7318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.860783][ T7318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.904349][ T7318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.955156][ T7318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.305621][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.562585][ T5481] 8021q: adding VLAN 0 to HW filter on device eth3 [ 166.634697][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.650920][ T7659] Bluetooth: MGMT ver 1.23 [ 166.732806][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.754246][ T7318] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.827439][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.834686][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.919213][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.926489][ T547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.077620][ T7640] loop3: detected capacity change from 0 to 32768 [ 167.113079][ T7640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.496 (7640) [ 167.191151][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.236863][ T7640] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.288144][ T7640] BTRFS info (device loop3): using sha256 checksum algorithm [ 167.346911][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.358203][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.531050][ T7640] BTRFS info (device loop3): enabling ssd optimizations [ 167.583123][ T7640] BTRFS info (device loop3): turning on async discard [ 167.641600][ T7640] BTRFS info (device loop3): enabling free space tree [ 167.951364][ T5818] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.281309][ T7318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.385947][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.356684][ T5481] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.378252][ T7701] loop1: detected capacity change from 0 to 32768 [ 169.425480][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.614650][ T7709] loop4: detected capacity change from 0 to 32768 [ 169.652579][ T7709] btrfs: Deprecated parameter 'usebackuproot' [ 169.698943][ T7709] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 169.742084][ T7709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.509 (7709) [ 169.758257][ T7318] veth0_vlan: entered promiscuous mode [ 169.833089][ T7318] veth1_vlan: entered promiscuous mode [ 169.905631][ T7709] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.966442][ T7709] BTRFS info (device loop4): using crc32c checksum algorithm [ 170.012433][ T7318] veth0_macvtap: entered promiscuous mode [ 170.071777][ T7318] veth1_macvtap: entered promiscuous mode [ 170.197550][ T7709] BTRFS info (device loop4): rebuilding free space tree [ 170.211255][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.230318][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.300782][ T7709] BTRFS info (device loop4): disabling free space tree [ 170.331506][ T7709] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 170.335416][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.392791][ T7709] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 170.438719][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.467309][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.528209][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.597593][ T7709] BTRFS info (device loop4): enabling ssd optimizations [ 170.607360][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.657570][ T7709] BTRFS info (device loop4): force clearing of disk cache [ 170.685264][ T7709] BTRFS info (device loop4): trying to use backup root at mount time [ 170.731457][ T7732] loop3: detected capacity change from 0 to 32768 [ 170.746887][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.079946][ T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.121570][ T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.279673][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.312785][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.501541][ T5821] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.516173][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.957376][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.243144][ T7763] loop5: detected capacity change from 0 to 32768 [ 172.298727][ T7763] (syz.5.520,7763,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.320259][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.380766][ T7763] (syz.5.520,7763,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.543453][ T7763] JBD2: Ignoring recovery information on journal [ 172.545619][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.564307][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.580503][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.734884][ T7769] loop1: detected capacity change from 0 to 32768 [ 172.751915][ T7763] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 172.855193][ T7799] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 172.895199][ T6032] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.083013][ T6032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.133936][ T6032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.155154][ T6032] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 173.178795][ T5178] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 173.187082][ T6032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.213759][ T6032] usb 3-1: config 0 descriptor?? [ 173.347517][ T5178] usb 5-1: config index 0 descriptor too short (expected 98, got 45) [ 173.368161][ T5178] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 173.387692][ T5178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.405600][ T5178] usb 5-1: Product: syz [ 173.415186][ T5178] usb 5-1: Manufacturer: syz [ 173.425864][ T5178] usb 5-1: SerialNumber: syz [ 173.586802][ T24] net_ratelimit: 6 callbacks suppressed [ 173.586826][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.678697][ T6032] hid_parser_main: 28 callbacks suppressed [ 173.678724][ T6032] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 173.733768][ T6032] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 173.772497][ T6032] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 173.791362][ T6032] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 173.809476][ T6032] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 173.838209][ T6395] ocfs2: Unmounting device (7,5) on (node local) [ 173.852749][ T6032] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 173.939414][ T7805] loop6: detected capacity change from 0 to 256 [ 174.179311][ T6032] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 32: -71 [ 174.242529][ T6032] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense firmware info: -71 [ 174.278188][ T5178] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 174.307747][ T6032] playstation 0003:054C:0DF2.0006: Failed to get firmware info from DualSense [ 174.323449][ T5178] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.334086][ T6032] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 174.360006][ T6032] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 174.370621][ T5178] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.418116][ T6032] usb 3-1: USB disconnect, device number 7 [ 174.452084][ T5178] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 174.540691][ T5178] usb 5-1: USB disconnect, device number 3 [ 174.628602][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.961777][ T7829] mmap: syz.6.542 (7829) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.120562][ T5178] IPVS: starting estimator thread 0... [ 175.139398][ T7831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.255332][ T7832] IPVS: using max 24 ests per chain, 57600 per kthread [ 175.373169][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.382752][ T7842] IPv6: NLM_F_CREATE should be set when creating new route [ 175.390182][ T7842] IPv6: NLM_F_CREATE should be set when creating new route [ 175.397607][ T7842] IPv6: NLM_F_CREATE should be set when creating new route [ 175.502863][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.536436][ T7848] loop1: detected capacity change from 0 to 128 [ 175.665403][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.731891][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 175.781934][ T1009] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.827570][ T1009] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.879898][ T1009] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.929078][ T1009] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.223010][ T7871] netlink: 40 bytes leftover after parsing attributes in process `syz.6.560'. [ 176.420965][ T7877] loop4: detected capacity change from 0 to 512 [ 176.477910][ T7877] EXT4-fs: Ignoring removed nobh option [ 176.514506][ T7877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.577708][ T7877] EXT4-fs (loop4): 1 truncate cleaned up [ 176.660759][ T7877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.947072][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.056557][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.570'. [ 177.336061][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.391878][ T7902] batadv_slave_0: entered promiscuous mode [ 177.414782][ T7875] loop5: detected capacity change from 0 to 32768 [ 177.440484][ T7900] batadv_slave_0: left promiscuous mode [ 177.474780][ T7875] (syz.5.562,7875,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.515924][ T7875] (syz.5.562,7875,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.672902][ T7875] JBD2: Ignoring recovery information on journal [ 177.751706][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.915046][ T7875] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 177.933264][ T7915] blktrace: Concurrent blktraces are not allowed on sg0 [ 177.970332][ T7915] blktrace: Concurrent blktraces are not allowed on loop4 [ 178.103509][ T7920] loop6: detected capacity change from 0 to 64 [ 178.161210][ T7920] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 178.439623][ T7924] loop4: detected capacity change from 0 to 4096 [ 178.573675][ T7929] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.593032][ T6395] ocfs2: Unmounting device (7,5) on (node local) [ 178.604622][ T7889] loop2: detected capacity change from 0 to 32768 [ 178.722020][ T7889] JBD2: Ignoring recovery information on journal [ 178.786838][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.888231][ T7889] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.926630][ T7931] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean [ 178.982358][ T7931] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean [ 179.063051][ T7935] loop6: detected capacity change from 0 to 1024 [ 179.111191][ T7935] EXT4-fs: Ignoring removed bh option [ 179.212842][ T7935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.234634][ T7935] EXT4-fs (loop6): shut down requested (2) [ 179.345531][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.366091][ T5819] ocfs2: Unmounting device (7,2) on (node local) [ 179.407924][ T7318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.547665][ T7940] loop2: detected capacity change from 0 to 128 [ 179.586923][ T7940] EXT4-fs (loop2): Test dummy encryption mode enabled [ 179.634278][ T7940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 179.675992][ T7940] System zones: 1-3, 19-19, 35-36 [ 179.717159][ T7940] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 179.776363][ T7940] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.791940][ T7945] loop5: detected capacity change from 0 to 2048 [ 179.808051][ T7940] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 179.826940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.909034][ T7945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.120245][ T5819] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.212133][ T1009] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.286313][ T1009] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 180.306233][ T1009] EXT4-fs (loop5): This should not happen!! Data will be lost [ 180.306233][ T1009] [ 180.316799][ T1009] EXT4-fs (loop5): Total free blocks count 0 [ 180.322824][ T1009] EXT4-fs (loop5): Free/Dirty block details [ 180.329764][ T1009] EXT4-fs (loop5): free_blocks=2415919504 [ 180.336094][ T1009] EXT4-fs (loop5): dirty_blocks=32 [ 180.341382][ T1009] EXT4-fs (loop5): Block reservation details [ 180.350373][ T1009] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 180.358241][ T1009] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 180.376685][ T7927] loop3: detected capacity change from 0 to 32768 [ 180.384193][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 180.398521][ T6395] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 180.445373][ T7927] (syz.3.582,7927,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.580688][ T7927] (syz.3.582,7927,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.686261][ T7965] Bluetooth: MGMT ver 1.23 [ 180.713791][ T3463] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.808171][ T3463] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.839766][ T7927] JBD2: Ignoring recovery information on journal [ 180.868943][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.906709][ T3463] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.003377][ T7970] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.596'. [ 181.127278][ T3463] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.130451][ T7927] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.249099][ T7975] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.598'. [ 181.314406][ T7942] loop1: detected capacity change from 0 to 32768 [ 181.424404][ T7942] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.597552][ T6032] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.706392][ T7942] XFS (loop1): Ending clean mount [ 181.815354][ T6032] usb 3-1: Using ep0 maxpacket: 16 [ 181.821591][ T5818] ocfs2: Unmounting device (7,3) on (node local) [ 181.828947][ T7998] tun0: tun_chr_ioctl cmd 1074025672 [ 181.828976][ T7998] tun0: ignored: set checksum enabled [ 181.860915][ T6032] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.895252][ T6032] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.905600][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.922972][ T6032] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 181.945148][ T6032] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.956991][ T5820] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.960114][ T6032] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.027513][ T6032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.097633][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.6.604'. [ 182.141982][ T8002] erspan0: entered promiscuous mode [ 182.152440][ T6032] usb 3-1: config 0 descriptor?? [ 182.388284][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.672843][ T6032] hid (null): global environment stack underflow [ 182.712726][ T6032] hid (null): report_id 0 is invalid [ 182.736979][ T6032] hid (null): global environment stack underflow [ 182.774589][ T6032] hid (null): report_id 0 is invalid [ 182.805198][ T6032] hid (null): global environment stack underflow [ 182.900684][ T6032] usb 3-1: USB disconnect, device number 8 [ 182.945564][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.128806][ T8020] loop4: detected capacity change from 0 to 512 [ 183.162722][ T8020] EXT4-fs: Ignoring removed bh option [ 183.222658][ T8020] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 183.282121][ T8015] sp0: Synchronizing with TNC [ 183.334377][ T8020] EXT4-fs (loop4): 1 truncate cleaned up [ 183.397673][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.479737][ T31] audit: type=1800 audit(1776317255.735:48): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.610" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 183.514212][ T8020] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.610: bg 0: block 465: padding at end of block bitmap is not set [ 183.583738][ T8020] EXT4-fs error (device loop4) in ext4_setattr:6030: error 28 [ 183.767164][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.999823][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.464944][ T8022] loop5: detected capacity change from 0 to 40427 [ 184.528558][ T8022] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 184.570606][ T8022] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 184.618140][ T8061] loop6: detected capacity change from 0 to 512 [ 184.642911][ T8022] F2FS-fs (loop5): invalid crc value [ 184.675035][ T8061] EXT4-fs (loop6): 1 truncate cleaned up [ 184.756751][ T8061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.001876][ T8061] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.025702][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.123238][ T8022] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.201126][ T8022] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 185.233781][ T7318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.253436][ T8078] netlink: 'syz.4.627': attribute type 8 has an invalid length. [ 185.271602][ T8022] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 185.427696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.479589][ T3463] kworker/u8:8: attempt to access beyond end of device [ 185.479589][ T3463] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.576676][ T3463] CPU: 0 UID: 0 PID: 3463 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 185.576713][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.576730][ T3463] Workqueue: writeback wb_workfn (flush-7:5) [ 185.576781][ T3463] Call Trace: [ 185.576791][ T3463] [ 185.576801][ T3463] dump_stack_lvl+0xe8/0x150 [ 185.576840][ T3463] f2fs_handle_critical_error+0x37c/0x540 [ 185.576889][ T3463] f2fs_write_end_io+0x1273/0x1740 [ 185.576943][ T3463] __submit_merged_bio+0x256/0x6a0 [ 185.576992][ T3463] __submit_merged_write_cond+0x3c9/0x4e0 [ 185.577042][ T3463] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 185.577097][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.577136][ T3463] f2fs_write_data_pages+0x287e/0x34f0 [ 185.577164][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.577234][ T3463] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 185.577261][ T3463] ? cfg80211_inform_single_bss_data+0x13b9/0x1af0 [ 185.577343][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.577377][ T3463] ? __lock_acquire+0x6b5/0x2cf0 [ 185.577415][ T3463] ? rcu_is_watching+0x15/0xb0 [ 185.577496][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.577524][ T3463] ? __lock_acquire+0x6b5/0x2cf0 [ 185.577574][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.577603][ T3463] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.577630][ T3463] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 185.577660][ T3463] do_writepages+0x32e/0x550 [ 185.577698][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.577728][ T3463] ? reacquire_held_locks+0x104/0x190 [ 185.577764][ T3463] ? writeback_sb_inodes+0x463/0x19d0 [ 185.577801][ T3463] __writeback_single_inode+0x133/0x10e0 [ 185.577833][ T3463] ? do_raw_spin_unlock+0xf5/0x210 [ 185.577865][ T3463] writeback_sb_inodes+0x979/0x19d0 [ 185.577893][ T3463] ? __lock_acquire+0x6b5/0x2cf0 [ 185.577958][ T3463] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 185.577987][ T3463] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.578058][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578088][ T3463] ? rcu_is_watching+0x15/0xb0 [ 185.578124][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578164][ T3463] wb_writeback+0x445/0xb00 [ 185.578202][ T3463] ? queue_io+0x201/0x470 [ 185.578239][ T3463] ? __pfx_wb_writeback+0x10/0x10 [ 185.578264][ T3463] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.578310][ T3463] wb_workfn+0x3f8/0xf10 [ 185.578347][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578376][ T3463] ? look_up_lock_class+0x57/0x110 [ 185.578436][ T3463] ? __pfx_wb_workfn+0x10/0x10 [ 185.578484][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578514][ T3463] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.578538][ T3463] ? lock_acquire+0x106/0x350 [ 185.578573][ T3463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.578603][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578637][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578673][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578706][ T3463] ? process_scheduled_works+0xa70/0x1860 [ 185.578741][ T3463] ? process_scheduled_works+0xa70/0x1860 [ 185.578777][ T3463] process_scheduled_works+0xb5d/0x1860 [ 185.578811][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578876][ T3463] ? __pfx_process_scheduled_works+0x10/0x10 [ 185.578918][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.578948][ T3463] ? assign_work+0x3d5/0x5e0 [ 185.578988][ T3463] worker_thread+0xa53/0xfc0 [ 185.579025][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.579072][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.579113][ T3463] kthread+0x388/0x470 [ 185.579139][ T3463] ? __pfx_worker_thread+0x10/0x10 [ 185.579172][ T3463] ? __pfx_kthread+0x10/0x10 [ 185.579199][ T3463] ret_from_fork+0x514/0xb70 [ 185.579240][ T3463] ? __pfx_ret_from_fork+0x10/0x10 [ 185.579276][ T3463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.579305][ T3463] ? __switch_to+0xc79/0x1410 [ 185.579339][ T3463] ? __pfx_kthread+0x10/0x10 [ 185.579367][ T3463] ret_from_fork_asm+0x1a/0x30 [ 185.579411][ T3463] [ 185.583764][ T3463] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 185.709156][ T8052] loop2: detected capacity change from 0 to 32768 [ 185.865609][ T8090] loop1: detected capacity change from 0 to 256 [ 185.919177][ T8029] loop3: detected capacity change from 0 to 40427 [ 185.940945][ T8052] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.620 (8052) [ 185.962948][ T8029] F2FS-fs (loop3): invalid crc value [ 186.070297][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.106228][ T8052] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.126967][ T8090] FAT-fs (loop1): Directory bread(block 64) failed [ 186.150784][ T8052] BTRFS info (device loop2): using blake2b checksum algorithm [ 186.178987][ T8090] FAT-fs (loop1): Directory bread(block 65) failed [ 186.218376][ T8090] FAT-fs (loop1): Directory bread(block 66) failed [ 186.266430][ T8090] FAT-fs (loop1): Directory bread(block 67) failed [ 186.363666][ T8090] FAT-fs (loop1): Directory bread(block 68) failed [ 186.416188][ T8090] FAT-fs (loop1): Directory bread(block 69) failed [ 186.445698][ T8090] FAT-fs (loop1): Directory bread(block 70) failed [ 186.526820][ T8090] FAT-fs (loop1): Directory bread(block 71) failed [ 186.554967][ T8052] BTRFS info (device loop2): enabling ssd optimizations [ 186.556727][ T8090] FAT-fs (loop1): Directory bread(block 72) failed [ 186.565361][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.583955][ T8114] xt_hashlimit: size too large, truncated to 1048576 [ 186.596382][ T8052] BTRFS info (device loop2): turning on async discard [ 186.615168][ T8052] BTRFS info (device loop2): enabling free space tree [ 186.635037][ T8090] FAT-fs (loop1): Directory bread(block 73) failed [ 186.650844][ T8052] BTRFS info (device loop2): use zstd compression, level 3 [ 186.832178][ T31] audit: type=1800 audit(1776317259.085:49): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.620" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 186.972888][ T8029] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 187.031772][ T8029] F2FS-fs (loop3): Start checkpoint disabled! [ 187.109791][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.123686][ T8029] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 187.402443][ T5819] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.654700][ T8133] loop1: detected capacity change from 0 to 64 [ 188.147766][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.556349][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.644160][ T8155] loop1: detected capacity change from 0 to 1024 [ 188.854569][ T8153] loop5: detected capacity change from 0 to 8192 [ 188.944397][ T8153] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.042105][ T31] audit: type=1800 audit(1776317261.295:50): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.647" name="file2" dev="loop5" ino=1048631 res=0 errno=0 [ 189.097174][ T6032] hid-generic 0005:4C4A:5508.0008: item fetching failed at offset 0/1 [ 189.102776][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.144595][ T8153] FAT-fs (loop5): Filesystem has been set read-only [ 189.164462][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.177942][ T8172] input: syz1 as /devices/virtual/input/input9 [ 189.186658][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.233518][ T6032] hid-generic 0005:4C4A:5508.0008: probe with driver hid-generic failed with error -22 [ 189.251894][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.325891][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.379252][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.389572][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.406562][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.487223][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.554535][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.575325][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 189.611791][ T8153] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.619081][ T29] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.673196][ T29] usb 4-1: config 0 has no interface number 0 [ 189.708246][ T29] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.728901][ T8186] loop4: detected capacity change from 0 to 1024 [ 189.737856][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.775737][ T29] usb 4-1: Product: syz [ 189.802870][ T29] usb 4-1: Manufacturer: syz [ 189.831487][ T29] usb 4-1: SerialNumber: syz [ 189.863564][ T29] usb 4-1: config 0 descriptor?? [ 189.906774][ T29] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.907440][ T8186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.165026][ T8204] IPVS: rr: FWM 3 0x00000003 - no destination available [ 190.172792][ T5926] IPVS: starting estimator thread 0... [ 190.177046][ T29] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.238799][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.278623][ T29] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.336329][ T8206] IPVS: using max 24 ests per chain, 57600 per kthread [ 190.376011][ T8212] bridge0: entered promiscuous mode [ 190.411395][ T8212] bridge0: entered allmulticast mode [ 190.578750][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.596275][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.599922][ T10] usb 4-1: USB disconnect, device number 7 [ 190.696450][ T8217] loop5: detected capacity change from 0 to 512 [ 190.697921][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.741930][ T8217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.802855][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.834127][ T8217] EXT4-fs (loop5): 1 truncate cleaned up [ 190.867841][ T8217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.927283][ T10] quatech2 4-1:0.51: device disconnected [ 191.270591][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.362600][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 191.391776][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 191.493290][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.585580][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.306357][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.524944][ T8235] loop4: detected capacity change from 0 to 40427 [ 192.601539][ T8261] loop6: detected capacity change from 0 to 128 [ 192.611029][ T8235] F2FS-fs (loop4): invalid crc value [ 192.670804][ T31] audit: type=1800 audit(1776317264.925:51): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.682" name="file2" dev="loop6" ino=1048632 res=0 errno=0 [ 192.768511][ T8246] loop5: detected capacity change from 0 to 32768 [ 192.817176][ T8246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.675 (8246) [ 192.914308][ T8268] netlink: 128 bytes leftover after parsing attributes in process `syz.1.684'. [ 192.931462][ T8246] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.957190][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 192.975210][ T8246] BTRFS info (device loop5): using crc32c checksum algorithm [ 192.988908][ T8235] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 193.006204][ T31] audit: type=1804 audit(1776317265.255:52): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.682" name="/newroot/37/file1/file2" dev="loop6" ino=1048632 res=1 errno=0 [ 193.049159][ T8235] F2FS-fs (loop4): Start checkpoint disabled! [ 193.108939][ T8235] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 193.126971][ T8235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 193.204197][ T8282] loop1: detected capacity change from 0 to 256 [ 193.235126][ T8246] BTRFS info (device loop5): enabling ssd optimizations [ 193.276535][ T8246] BTRFS info (device loop5): turning on flush-on-commit [ 193.283706][ T8246] BTRFS info (device loop5): enabling free space tree [ 193.294125][ T8246] BTRFS info (device loop5): enabling auto defrag [ 193.300649][ T8246] BTRFS info (device loop5): use lzo compression, level 1 [ 193.307919][ T8246] BTRFS info (device loop5): max_inline set to 4096 [ 193.369028][ T8282] FAT-fs (loop1): Directory bread(block 64) failed [ 193.392585][ T8282] FAT-fs (loop1): Directory bread(block 65) failed [ 193.420904][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.443459][ T8282] FAT-fs (loop1): Directory bread(block 66) failed [ 193.482873][ T8282] FAT-fs (loop1): Directory bread(block 67) failed [ 193.522369][ T8282] FAT-fs (loop1): Directory bread(block 68) failed [ 193.560238][ T8282] FAT-fs (loop1): Directory bread(block 69) failed [ 193.592679][ T8282] FAT-fs (loop1): Directory bread(block 70) failed [ 193.605499][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.632315][ T8282] FAT-fs (loop1): Directory bread(block 71) failed [ 193.637411][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.695276][ T8294] loop2: detected capacity change from 0 to 512 [ 193.697319][ T8282] FAT-fs (loop1): Directory bread(block 72) failed [ 193.718805][ T6395] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.760977][ T8282] FAT-fs (loop1): Directory bread(block 73) failed [ 193.778163][ T8294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.837987][ T8294] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.209050][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.488515][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.633079][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.886578][ T8323] block nbd4: not configured, cannot reconfigure [ 195.217195][ T8329] loop6: detected capacity change from 0 to 4096 [ 195.292584][ T8329] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 195.353244][ T8329] ntfs3(loop6): Failed to load $Extend (-22). [ 195.384069][ T8329] ntfs3(loop6): Failed to initialize $Extend. [ 195.506285][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.906824][ T8354] netlink: 48 bytes leftover after parsing attributes in process `syz.6.711'. [ 195.931319][ T8316] loop3: detected capacity change from 0 to 40427 [ 195.971040][ T8316] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 195.989261][ T8316] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 196.026690][ T8316] F2FS-fs (loop3): invalid crc value [ 196.115204][ T6032] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.158448][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.328276][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.386733][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.396467][ T8316] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 196.419804][ T6032] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 196.464098][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.488976][ T8316] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 196.526367][ T8316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 196.528987][ T6032] usb 6-1: config 0 descriptor?? [ 196.548013][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.899812][ T5818] syz-executor: attempt to access beyond end of device [ 196.899812][ T5818] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.958319][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 196.958354][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.958369][ T5818] Call Trace: [ 196.958378][ T5818] [ 196.958389][ T5818] dump_stack_lvl+0xe8/0x150 [ 196.958455][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 196.958505][ T5818] f2fs_write_end_io+0x1273/0x1740 [ 196.958560][ T5818] __submit_merged_bio+0x256/0x6a0 [ 196.958609][ T5818] __submit_merged_write_cond+0x3c9/0x4e0 [ 196.958660][ T5818] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 196.958716][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.958757][ T5818] f2fs_write_data_pages+0x287e/0x34f0 [ 196.958828][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.958910][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.958939][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.958971][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959015][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959044][ T5818] ? __lock_acquire+0x6b5/0x2cf0 [ 196.959084][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959113][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 196.959150][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959188][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.959220][ T5818] do_writepages+0x32e/0x550 [ 196.959252][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959285][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959319][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959349][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 196.959380][ T5818] filemap_fdatawrite+0x1e9/0x2f0 [ 196.959417][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 196.959498][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959531][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959566][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 196.959599][ T5818] f2fs_sync_dirty_inodes+0x30e/0x830 [ 196.959648][ T5818] f2fs_write_checkpoint+0x9df/0x26a0 [ 196.959678][ T5818] ? __lock_acquire+0x6b5/0x2cf0 [ 196.959748][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 196.959778][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959870][ T5818] kill_f2fs_super+0x314/0x720 [ 196.959908][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 196.959952][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.959982][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.960021][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.960066][ T5818] deactivate_locked_super+0xbc/0x130 [ 196.960103][ T5818] cleanup_mnt+0x437/0x4d0 [ 196.960140][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.960180][ T5818] task_work_run+0x1d9/0x270 [ 196.960214][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 196.960251][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.960279][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 196.960316][ T5818] ? rcu_is_watching+0x15/0xb0 [ 196.960354][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.960382][ T5818] do_syscall_64+0x33e/0xf80 [ 196.960420][ T5818] ? trace_irq_disable+0x3b/0x140 [ 196.960464][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.960490][ T5818] RIP: 0033:0x7f5111b9da57 [ 196.960513][ T5818] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 196.960535][ T5818] RSP: 002b:00007fffc3ae0338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 196.960561][ T5818] RAX: 0000000000000000 RBX: 00007f5111c32048 RCX: 00007f5111b9da57 [ 196.960578][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc3ae03f0 [ 196.960595][ T5818] RBP: 00007fffc3ae03f0 R08: 00007fffc3ae13f0 R09: 00000000ffffffff [ 196.960612][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc3ae1480 [ 196.960629][ T5818] R13: 00007f5111c32048 R14: 0000000000030076 R15: 00007fffc3ae14c0 [ 196.960668][ T5818] [ 197.335722][ T5818] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 197.414839][ T8376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.425961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.590154][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.622907][ T6032] razer 0003:1532:010E.0009: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 197.669255][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.818666][ T6032] usb 6-1: USB disconnect, device number 3 [ 198.627295][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.187303][ T8413] loop2: detected capacity change from 0 to 2048 [ 199.268981][ T8413] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 199.352381][ T8413] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 199.447904][ T8413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.622481][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.667337][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.753475][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.768870][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.783117][ T8407] loop5: detected capacity change from 0 to 32768 [ 199.848032][ T8422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.907873][ T8422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.926191][ T8431] loop3: detected capacity change from 0 to 4096 [ 199.932824][ T8407] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.012500][ T8431] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.120480][ T8431] NILFS (loop3): mounting unchecked fs [ 200.232827][ T8407] XFS (loop5): Ending clean mount [ 200.244628][ T8431] NILFS (loop3): recovery complete [ 200.282942][ T8445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.553768][ T31] audit: type=1800 audit(1776317272.805:53): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 200.617493][ T8447] loop2: detected capacity change from 0 to 4096 [ 200.687004][ T8447] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 200.707378][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.715683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.813819][ T8447] ntfs3(loop2): ino=19, mi_enum_attr [ 200.843691][ T8447] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 201.127848][ T6395] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.746388][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.336477][ T8458] loop4: detected capacity change from 0 to 32768 [ 202.378874][ T8458] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 202.417332][ T8458] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.481869][ T8498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.558596][ T8458] XFS (loop4): Ending clean mount [ 202.585955][ T8458] XFS (loop4): Quotacheck needed: Please wait. [ 202.783118][ T8458] XFS (loop4): Quotacheck: Done. [ 202.788638][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.841401][ T8503] loop1: detected capacity change from 0 to 4096 [ 203.117651][ T8474] loop2: detected capacity change from 0 to 32768 [ 203.139955][ T5821] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.208051][ T8474] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.231997][ T31] audit: type=1800 audit(1776317275.475:54): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.750" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 203.396005][ T8474] XFS (loop2): Ending clean mount [ 203.763347][ T5819] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.946524][ T5888] net_ratelimit: 2 callbacks suppressed [ 204.946546][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.224939][ T8544] loop4: detected capacity change from 0 to 32768 [ 205.261853][ T8544] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 205.294646][ T8544] JBD2: Ignoring recovery information on journal [ 205.414275][ T8544] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 205.545512][ T5888] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 205.632082][ T31] audit: type=1800 audit(1776317277.885:55): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.783" name="file1" dev="tmpfs" ino=762 res=0 errno=0 [ 205.745275][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 205.745551][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.767659][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 205.809722][ T5888] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 205.870850][ T5888] usb 7-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5 [ 205.913509][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 205.913550][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 205.925760][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 205.939485][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.950412][ T5888] usb 7-1: Product: syz [ 205.954760][ T5888] usb 7-1: Manufacturer: syz [ 205.967433][ T5888] usb 7-1: SerialNumber: syz [ 205.989209][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.153988][ T5821] ocfs2: Unmounting device (7,4) on (node local) [ 206.214933][ T8604] ip6erspan0: entered allmulticast mode [ 206.238287][ T5888] usb 7-1: USB disconnect, device number 2 [ 206.624801][ T8613] loop5: detected capacity change from 0 to 1024 [ 206.659310][ T8613] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.720614][ T8613] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 5: comm syz.5.791: lblock 5 mapped to illegal pblock 5 (length 1) [ 206.736575][ T8613] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.745087][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 206.760677][ C0] EXT4-fs (loop5): initial error at time 1776317278: ext4_map_blocks:833: inode 3: block 5 [ 206.770749][ C0] EXT4-fs (loop5): last error at time 1776317278: ext4_map_blocks:833: inode 3: block 5 [ 206.785391][ T8613] Quota error (device loop5): write_blk: dquota write failed [ 206.795005][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.822396][ T8613] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 206.943244][ T8613] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.791: Failed to acquire dquot type 0 [ 206.984597][ T8613] loop5: lost filesystem error report for type 5 error -117 [ 206.987192][ T8613] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.791: Freeing blocks not in datazone - block = 0, count = 4096 [ 207.020390][ T8629] loop6: detected capacity change from 0 to 256 [ 207.029547][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.103057][ T8629] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 207.106815][ T8613] loop5: lost filesystem error report for type 5 error -117 [ 207.227769][ T8636] loop1: detected capacity change from 0 to 512 [ 207.232170][ T8613] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.791: Invalid inode bitmap blk 0 in block_group 0 [ 207.232265][ T8613] loop5: lost filesystem error report for type 5 error -117 [ 207.252086][ T8636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.254583][ T3463] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 5: comm kworker/u8:8: lblock 5 mapped to illegal pblock 5 (length 1) [ 207.254651][ T3463] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 207.259851][ T3463] Quota error (device loop5): remove_tree: Can't read quota data block 5 [ 207.259954][ T3463] EXT4-fs error (device loop5): ext4_release_dquot:7064: comm kworker/u8:8: Failed to release dquot type 0 [ 207.260000][ T3463] loop5: lost filesystem error report for type 5 error -117 [ 207.274056][ T8613] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 207.274088][ T8613] loop5: lost filesystem error report for type 5 error -117 [ 207.274362][ T8613] EXT4-fs (loop5): 1 orphan inode deleted [ 207.283723][ T8613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.328053][ T8640] loop4: detected capacity change from 0 to 16 [ 207.344674][ T8640] erofs (device loop4): mounted with root inode @ nid 36. [ 207.352714][ T8640] erofs (device loop4): invalid fast symlink size 39 @ nid 83 [ 207.439000][ T8636] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.801: invalid indirect mapped block 4294967295 (level 0) [ 207.548149][ T8636] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 207.565093][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 207.580840][ C0] EXT4-fs (loop1): initial error at time 1776317279: ext4_free_branches:1023: inode 16 [ 207.590723][ C0] EXT4-fs (loop1): last error at time 1776317279: ext4_free_branches:1023: inode 16 [ 207.619626][ T8636] EXT4-fs (loop1): Remounting filesystem read-only [ 207.620248][ T8613] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 207.628437][ T8636] EXT4-fs (loop1): 1 orphan inode deleted [ 207.641514][ T8636] EXT4-fs (loop1): 1 truncate cleaned up [ 207.649564][ T8636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.754816][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.971742][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.066777][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.203866][ T8657] loop1: detected capacity change from 0 to 64 [ 208.210353][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 208.284136][ T8657] MINIX-fs: mounting file system with errors, running fsck is recommended [ 208.486126][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.195209][ T6032] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 209.392182][ T8689] loop2: detected capacity change from 0 to 128 [ 209.411692][ T6032] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 209.455761][ T6032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.508249][ T6032] usb 2-1: Product: syz [ 209.524405][ T8689] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.554601][ T6032] usb 2-1: Manufacturer: syz [ 209.584282][ T6032] usb 2-1: SerialNumber: syz [ 209.585786][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.613122][ T8689] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.708352][ T8675] loop6: detected capacity change from 0 to 131072 [ 209.722886][ T8675] F2FS-fs (loop6): invalid crc value [ 209.737301][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.765104][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.834453][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.841420][ T8675] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 209.863541][ T8675] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 209.876740][ T5888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.903370][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.942520][ T5888] usb 4-1: SerialNumber: syz [ 210.081585][ T6032] rtl8150 2-1:1.0: couldn't reset the device [ 210.096775][ T5819] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.109779][ T6032] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 210.234531][ T6032] usb 2-1: USB disconnect, device number 3 [ 210.427688][ T5888] usb 4-1: 0:2 : does not exist [ 210.459686][ T8707] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 210.638406][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.840073][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 210.859735][ T8719] netlink: 'syz.5.832': attribute type 3 has an invalid length. [ 210.905203][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 211.085876][ T8725] loop3: detected capacity change from 0 to 64 [ 211.105152][ T5888] usb 4-1: USB disconnect, device number 8 [ 211.500492][ T8732] loop5: detected capacity change from 0 to 2048 [ 211.572631][ T8732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.688961][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.767814][ T8740] bond0: option miimon: invalid value (18446744071562133503) [ 211.826371][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.835765][ T8740] bond0: option miimon: allowed values 0 - 2147483647 [ 212.010719][ T8725] syz.3.833: attempt to access beyond end of device [ 212.010719][ T8725] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 212.075898][ T8725] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 212.126902][ T8725] syz.3.833: attempt to access beyond end of device [ 212.126902][ T8725] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 212.161550][ T8725] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 212.206825][ T8725] syz.3.833: attempt to access beyond end of device [ 212.206825][ T8725] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 212.265106][ T8725] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 212.309551][ T8725] syz.3.833: attempt to access beyond end of device [ 212.309551][ T8725] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 212.364272][ T8725] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 212.432318][ T8725] syz.3.833: attempt to access beyond end of device [ 212.432318][ T8725] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 212.483292][ T8725] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 212.520244][ T8725] syz.3.833: attempt to access beyond end of device [ 212.520244][ T8725] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 212.583932][ T8725] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 212.620004][ T8725] syz.3.833: attempt to access beyond end of device [ 212.620004][ T8725] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 212.634957][ T8757] loop2: detected capacity change from 0 to 512 [ 212.662751][ T8757] EXT4-fs: Ignoring removed oldalloc option [ 212.685724][ T8725] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 212.707154][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.716950][ T8757] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.844: bad orphan inode 32 [ 212.735887][ T8757] loop2: lost filesystem error report for type 5 error -117 [ 212.737967][ T8757] ext4_test_bit(bit=31, block=4) = 0 [ 212.745375][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 212.745400][ C0] EXT4-fs (loop2): initial error at time 1776317284: ext4_orphan_get:1423 [ 212.745430][ C0] EXT4-fs (loop2): last error at time 1776317284: ext4_orphan_get:1423 [ 212.756110][ T8725] syz.3.833: attempt to access beyond end of device [ 212.756110][ T8725] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 212.794029][ T8725] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 212.806312][ T8725] syz.3.833: attempt to access beyond end of device [ 212.806312][ T8725] loop3: rw=2049, sector=78, nr_sectors = 504 limit=64 [ 212.860059][ T8757] EXT4-fs (loop2): 1 truncate cleaned up [ 212.867091][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.904219][ T8757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.547432][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.548860][ T8782] raw_sendmsg: syz.4.854 forgot to set AF_INET. Fix it! [ 213.747833][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.962323][ T8796] netlink: 'syz.5.860': attribute type 9 has an invalid length. [ 214.037258][ T8800] loop3: detected capacity change from 0 to 512 [ 214.046201][ T8796] macvlan2: entered promiscuous mode [ 214.089185][ T8796] macvlan2: entered allmulticast mode [ 214.124023][ T8800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.175685][ T8800] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.228374][ T31] audit: type=1326 audit(1776317286.485:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 214.364669][ T31] audit: type=1326 audit(1776317286.485:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 214.477655][ T31] audit: type=1326 audit(1776317286.485:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 214.483559][ T8819] netlink: 1 bytes leftover after parsing attributes in process `syz.5.870'. [ 214.597244][ T31] audit: type=1326 audit(1776317286.485:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 214.673857][ T8822] loop4: detected capacity change from 0 to 128 [ 214.692180][ T31] audit: type=1326 audit(1776317286.485:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 214.766027][ T8822] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.785881][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.849609][ T31] audit: type=1326 audit(1776317286.485:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 214.911733][ T8822] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.994721][ T31] audit: type=1326 audit(1776317286.485:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 215.059874][ T8830] loop5: detected capacity change from 0 to 256 [ 215.099632][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 215.104389][ T31] audit: type=1326 audit(1776317286.485:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 215.203469][ T31] audit: type=1326 audit(1776317286.485:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 215.219872][ T8818] loop2: detected capacity change from 0 to 32768 [ 215.266805][ T8830] FAT-fs (loop5): Directory bread(block 64) failed [ 215.273556][ T8830] FAT-fs (loop5): Directory bread(block 65) failed [ 215.310470][ T8830] FAT-fs (loop5): Directory bread(block 66) failed [ 215.317629][ T31] audit: type=1326 audit(1776317286.485:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e819c819 code=0x7ffc0000 [ 215.353093][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.357808][ T8830] FAT-fs (loop5): Directory bread(block 67) failed [ 215.390684][ T5821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.392793][ T8830] FAT-fs (loop5): Directory bread(block 68) failed [ 215.471146][ T8830] FAT-fs (loop5): Directory bread(block 69) failed [ 215.478710][ T8830] FAT-fs (loop5): Directory bread(block 70) failed [ 215.485997][ T8830] FAT-fs (loop5): Directory bread(block 71) failed [ 215.492803][ T8830] FAT-fs (loop5): Directory bread(block 72) failed [ 215.501564][ T8830] FAT-fs (loop5): Directory bread(block 73) failed [ 215.825848][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.907933][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.284505][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.468841][ T8853] loop5: detected capacity change from 0 to 4096 [ 216.488909][ T8853] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 216.528137][ T8853] ntfs3(loop5): ino=3, mi_enum_attr [ 216.840885][ T6032] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.871836][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.878111][ T8868] netlink: 'syz.6.889': attribute type 2 has an invalid length. [ 217.030318][ T6032] usb 3-1: Using ep0 maxpacket: 32 [ 217.059123][ T6032] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 217.088760][ T6032] usb 3-1: config 0 has no interface number 0 [ 217.118706][ T6032] usb 3-1: config 0 interface 12 has no altsetting 0 [ 217.156868][ T6032] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 217.190503][ T6032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.218087][ T6032] usb 3-1: Product: syz [ 217.231888][ T6032] usb 3-1: Manufacturer: syz [ 217.258165][ T5926] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 217.266748][ T6032] usb 3-1: SerialNumber: syz [ 217.300586][ T6032] usb 3-1: config 0 descriptor?? [ 217.446922][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 217.489860][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 217.538850][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 217.579130][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 217.628296][ T5926] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 217.648351][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.673978][ T5926] usb 2-1: Product: syz [ 217.688790][ T5926] usb 2-1: Manufacturer: syz [ 217.708956][ T5926] usb 2-1: SerialNumber: syz [ 217.749709][ T5926] usb 2-1: config 0 descriptor?? [ 217.781116][ T5926] usb 2-1: no audio or video endpoints found [ 217.907101][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.044430][ T10] usb 2-1: USB disconnect, device number 4 [ 218.168284][ T6032] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 218.187825][ T6032] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 218.205640][ T6032] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 218.213513][ T6032] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 218.242384][ T6032] usb 3-1: USB disconnect, device number 9 [ 218.256341][ T5926] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 218.363391][ T8910] loop5: detected capacity change from 0 to 64 [ 218.457077][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 218.471523][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.485505][ T5926] usb 5-1: config 0 has no interfaces? [ 218.493605][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=ab.c3 [ 218.513148][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.534252][ T5926] usb 5-1: Product: syz [ 218.541828][ T5926] usb 5-1: Manufacturer: syz [ 218.551580][ T5926] usb 5-1: SerialNumber: syz [ 218.608180][ T5926] usb 5-1: config 0 descriptor?? [ 218.908109][ T10] usb 5-1: USB disconnect, device number 4 [ 218.945677][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.953860][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.000834][ T8926] loop2: detected capacity change from 0 to 1024 [ 219.081315][ T8926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.177379][ T8930] loop3: detected capacity change from 0 to 4096 [ 219.276025][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.302583][ T8937] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.332345][ T8934] EXT4-fs warning (device loop2): ext4_rmdir:3185: inode #11: comm syz.2.908: empty directory 'file0' has too many links (111) [ 219.346574][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.361374][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.377182][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.539390][ T8941] loop6: detected capacity change from 0 to 512 [ 219.624255][ T8941] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.914: missing EA_INODE flag [ 219.650578][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.663702][ T8941] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.665516][ C0] EXT4-fs (loop6): initial error at time 1776317291: ext4_xattr_inode_iget:441: inode 12 [ 219.684812][ C0] EXT4-fs (loop6): last error at time 1776317291: ext4_xattr_inode_iget:441: inode 12 [ 219.702533][ T8941] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.914: error while reading EA inode 12 err=-117 [ 219.716744][ T8941] loop6: lost filesystem error report for type 5 error -117 [ 219.718691][ T8941] EXT4-fs (loop6): 1 orphan inode deleted [ 219.739741][ T8941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.857865][ T8944] ALSA: mixer_oss: invalid OSS volume '' [ 219.923273][ T7318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.490310][ T8967] loop2: detected capacity change from 0 to 64 [ 220.908004][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 221.026090][ T24] net_ratelimit: 1 callbacks suppressed [ 221.026112][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.209681][ T8958] loop6: detected capacity change from 0 to 32768 [ 221.233902][ T8958] (syz.6.920,8958,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.250384][ T8958] (syz.6.920,8958,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.265626][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 221.335242][ T8958] JBD2: Ignoring recovery information on journal [ 221.441922][ T8958] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 221.811888][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.942'. [ 221.985865][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.066686][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.317066][ T7318] ocfs2: Unmounting device (7,6) on (node local) [ 222.509728][ T8990] loop3: detected capacity change from 0 to 32768 [ 222.540965][ T8995] loop1: detected capacity change from 0 to 32768 [ 222.545863][ T8989] loop2: detected capacity change from 0 to 40427 [ 222.576468][ T8989] F2FS-fs (loop2): invalid crc value [ 222.630068][ T8995] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.744510][ T5818] read_mapping_page failed! [ 222.759129][ T8995] XFS (loop1): Ending clean mount [ 222.789507][ T8995] XFS (loop1): Quotacheck needed: Please wait. [ 222.811183][ T8989] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.824588][ T5818] ERROR: (device loop3): txCommit: [ 222.824588][ T5818] [ 222.888586][ T8989] F2FS-fs (loop2): Start checkpoint disabled! [ 222.930117][ T5818] read_mapping_page failed! [ 222.970634][ T5818] ERROR: (device loop3): txCommit: [ 222.970634][ T5818] [ 222.998496][ T8989] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 223.023526][ T8989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 223.034439][ T8995] XFS (loop1): Quotacheck: Done. [ 223.087865][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 223.087891][ T31] audit: type=1326 audit(1776317295.335:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.120509][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.164930][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.182117][ T31] audit: type=1326 audit(1776317295.395:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.244015][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.277327][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.287718][ T31] audit: type=1326 audit(1776317295.395:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.332058][ T31] audit: type=1326 audit(1776317295.405:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.402739][ T5820] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.412786][ T31] audit: type=1326 audit(1776317295.405:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.465949][ T31] audit: type=1326 audit(1776317295.405:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.495467][ T31] audit: type=1326 audit(1776317295.405:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.527327][ T31] audit: type=1326 audit(1776317295.405:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.6.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320579c819 code=0x7ffc0000 [ 223.567447][ T9033] loop3: detected capacity change from 32768 to 32767 [ 223.569585][ T12] kworker/u8:0: attempt to access beyond end of device [ 223.569585][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.580139][ T8651] ------------[ cut here ]------------ [ 223.602307][ T8651] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2780:24 [ 223.612235][ T8651] index 4278848010 is out of range for type 's8[1365]' (aka 'signed char[1365]') [ 223.622294][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.3.807 Not tainted syzkaller #0 PREEMPT(full) [ 223.622324][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.622341][ T8651] Call Trace: [ 223.622351][ T8651] [ 223.622361][ T8651] dump_stack_lvl+0xe8/0x150 [ 223.622415][ T8651] ubsan_epilogue+0xa/0x30 [ 223.622441][ T8651] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 223.622491][ T8651] dbJoin+0x29f/0x300 [ 223.622530][ T8651] dbFreeBits+0x4e1/0xdb0 [ 223.622578][ T8651] dbFree+0x336/0x650 [ 223.622617][ T8651] txFreeMap+0x9e6/0xde0 [ 223.622645][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.622674][ T8651] ? __mark_inode_dirty+0x4cf/0x13b0 [ 223.622730][ T8651] xtTruncate+0xd38/0x2f20 [ 223.622785][ T8651] ? __pfx_xtTruncate+0x10/0x10 [ 223.622847][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.622876][ T8651] ? __asan_memset+0x22/0x50 [ 223.622910][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.622939][ T8651] ? __dquot_initialize+0x21b/0xd30 [ 223.622974][ T8651] jfs_free_zero_link+0x35b/0x4c0 [ 223.623019][ T8651] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 223.623064][ T8651] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 223.623104][ T8651] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.623134][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.623174][ T8651] jfs_evict_inode+0x363/0x440 [ 223.623208][ T8651] ? evict+0x612/0xb10 [ 223.623246][ T8651] ? __pfx_jfs_evict_inode+0x10/0x10 [ 223.623284][ T8651] evict+0x61e/0xb10 [ 223.623334][ T8651] ? __pfx_evict+0x10/0x10 [ 223.623374][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.623403][ T8651] ? _raw_spin_unlock+0x28/0x50 [ 223.623437][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.623467][ T8651] ? iput+0xb25/0xe80 [ 223.623510][ T8651] __dentry_kill+0x1a2/0x5e0 [ 223.623538][ T8651] ? shrink_kill+0x8d/0x2c0 [ 223.623569][ T8651] shrink_kill+0xa9/0x2c0 [ 223.623604][ T8651] shrink_dentry_list+0x2e0/0x5e0 [ 223.623646][ T8651] shrink_dcache_tree+0xcf/0x310 [ 223.623682][ T8651] ? __pfx_select_collect_umount+0x10/0x10 [ 223.623715][ T8651] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 223.623760][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.623796][ T8651] shrink_dcache_for_umount+0xa8/0x1f0 [ 223.623836][ T8651] generic_shutdown_super+0x6f/0x2d0 [ 223.623875][ T8651] kill_block_super+0x44/0x90 [ 223.623913][ T8651] deactivate_locked_super+0xbc/0x130 [ 223.623949][ T8651] cleanup_mnt+0x437/0x4d0 [ 223.623993][ T8651] task_work_run+0x1d9/0x270 [ 223.624027][ T8651] ? __pfx_task_work_run+0x10/0x10 [ 223.624055][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.624084][ T8651] ? kmem_cache_free+0x182/0x650 [ 223.624123][ T8651] ? put_net+0x191/0x260 [ 223.624163][ T8651] do_exit+0x70f/0x22c0 [ 223.624200][ T8651] ? __pfx_do_exit+0x10/0x10 [ 223.624227][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.624264][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.624302][ T8651] do_group_exit+0x21b/0x2d0 [ 223.624328][ T8651] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.624367][ T8651] get_signal+0x1284/0x1330 [ 223.624426][ T8651] arch_do_signal_or_restart+0xbc/0x830 [ 223.624459][ T8651] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 223.624488][ T8651] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 223.624530][ T8651] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 223.624579][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.624608][ T8651] exit_to_user_mode_loop+0x86/0x480 [ 223.624638][ T8651] ? rcu_is_watching+0x15/0xb0 [ 223.624677][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.624712][ T8651] do_syscall_64+0x33e/0xf80 [ 223.624750][ T8651] ? trace_irq_disable+0x3b/0x140 [ 223.624785][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.624810][ T8651] RIP: 0033:0x7f5111b5d04e [ 223.624833][ T8651] Code: Unable to access opcode bytes at 0x7f5111b5d024. [ 223.624846][ T8651] RSP: 002b:00007f51129acf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 223.624872][ T8651] RAX: fffffffffffffdfc RBX: 00007f51129ad6c0 RCX: 00007f5111b5d04e [ 223.624892][ T8651] RDX: 00007f51129acfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.624909][ T8651] RBP: 00007f5111c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 223.624925][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.624941][ T8651] R13: 00007f5111e16038 R14: 00007f5111e15fa0 R15: 00007fffc3ae10c8 [ 223.624981][ T8651] [ 223.721076][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 223.721112][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.721129][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 223.721186][ T12] Call Trace: [ 223.721197][ T12] [ 223.721207][ T12] dump_stack_lvl+0xe8/0x150 [ 223.721250][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 223.721302][ T12] f2fs_write_end_io+0x1273/0x1740 [ 223.721356][ T12] __submit_merged_bio+0x256/0x6a0 [ 223.721409][ T12] __submit_merged_write_cond+0x3c9/0x4e0 [ 223.721468][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 223.721524][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.721566][ T12] f2fs_write_data_pages+0x287e/0x34f0 [ 223.721594][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.721665][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 223.721691][ T12] ? cfg80211_inform_single_bss_data+0x13b9/0x1af0 [ 223.721775][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.721804][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 223.721871][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.721926][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.721955][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 223.721986][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 223.722017][ T12] do_writepages+0x32e/0x550 [ 223.722056][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.722085][ T12] ? reacquire_held_locks+0x104/0x190 [ 223.722122][ T12] ? writeback_sb_inodes+0x463/0x19d0 [ 223.722159][ T12] __writeback_single_inode+0x133/0x10e0 [ 223.722190][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 223.722223][ T12] writeback_sb_inodes+0x979/0x19d0 [ 223.722249][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 223.722315][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 223.722342][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.722414][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.722448][ T12] ? rcu_is_watching+0x15/0xb0 [ 223.722485][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.722524][ T12] wb_writeback+0x445/0xb00 [ 223.722557][ T12] ? queue_io+0x201/0x470 [ 223.722594][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 223.722620][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.722666][ T12] wb_workfn+0x3f8/0xf10 [ 223.722700][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.722729][ T12] ? look_up_lock_class+0x57/0x110 [ 223.722791][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 223.722832][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.722861][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.722885][ T12] ? lock_acquire+0x106/0x350 [ 223.722920][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.722951][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.722984][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.723021][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.723054][ T12] ? process_scheduled_works+0xa70/0x1860 [ 223.723089][ T12] ? process_scheduled_works+0xa70/0x1860 [ 223.723126][ T12] process_scheduled_works+0xb5d/0x1860 [ 223.723159][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.723225][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 223.723267][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.723296][ T12] ? assign_work+0x3d5/0x5e0 [ 223.723336][ T12] worker_thread+0xa53/0xfc0 [ 223.723392][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.723432][ T12] kthread+0x388/0x470 [ 223.723464][ T12] ? __pfx_worker_thread+0x10/0x10 [ 223.723497][ T12] ? __pfx_kthread+0x10/0x10 [ 223.723524][ T12] ret_from_fork+0x514/0xb70 [ 223.723565][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 223.723600][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.723629][ T12] ? __switch_to+0xc79/0x1410 [ 223.723664][ T12] ? __pfx_kthread+0x10/0x10 [ 223.723691][ T12] ret_from_fork_asm+0x1a/0x30 [ 223.723735][ T12] [ 223.739333][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 223.759431][ T8651] ---[ end trace ]--- [ 224.148131][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.440656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.504248][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.589734][ T8651] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 224.597029][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.3.807 Not tainted syzkaller #0 PREEMPT(full) [ 224.606274][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.616349][ T8651] Call Trace: [ 224.619632][ T8651] [ 224.622564][ T8651] vpanic+0x56c/0xa60 [ 224.626572][ T8651] ? __pfx_vpanic+0x10/0x10 [ 224.631099][ T8651] panic+0xc5/0xd0 [ 224.634832][ T8651] ? __pfx_panic+0x10/0x10 [ 224.639260][ T8651] ? __pfx__printk+0x10/0x10 [ 224.643865][ T8651] check_panic_on_warn+0x89/0xb0 [ 224.648812][ T8651] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 224.654553][ T8651] dbJoin+0x29f/0x300 [ 224.658580][ T8651] dbFreeBits+0x4e1/0xdb0 [ 224.662974][ T8651] dbFree+0x336/0x650 [ 224.667065][ T8651] txFreeMap+0x9e6/0xde0 [ 224.671358][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.676998][ T8651] ? __mark_inode_dirty+0x4cf/0x13b0 [ 224.682353][ T8651] xtTruncate+0xd38/0x2f20 [ 224.686802][ T8651] ? __pfx_xtTruncate+0x10/0x10 [ 224.691687][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.697339][ T8651] ? __asan_memset+0x22/0x50 [ 224.701947][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.707586][ T8651] ? __dquot_initialize+0x21b/0xd30 [ 224.712822][ T8651] jfs_free_zero_link+0x35b/0x4c0 [ 224.717866][ T8651] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 224.723420][ T8651] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 224.729526][ T8651] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.734562][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.740219][ T8651] jfs_evict_inode+0x363/0x440 [ 224.745038][ T8651] ? evict+0x612/0xb10 [ 224.749132][ T8651] ? __pfx_jfs_evict_inode+0x10/0x10 [ 224.754433][ T8651] evict+0x61e/0xb10 [ 224.758354][ T8651] ? __pfx_evict+0x10/0x10 [ 224.762783][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.768424][ T8651] ? _raw_spin_unlock+0x28/0x50 [ 224.773342][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.778982][ T8651] ? iput+0xb25/0xe80 [ 224.783159][ T8651] __dentry_kill+0x1a2/0x5e0 [ 224.787749][ T8651] ? shrink_kill+0x8d/0x2c0 [ 224.792261][ T8651] shrink_kill+0xa9/0x2c0 [ 224.796600][ T8651] shrink_dentry_list+0x2e0/0x5e0 [ 224.801657][ T8651] shrink_dcache_tree+0xcf/0x310 [ 224.806605][ T8651] ? __pfx_select_collect_umount+0x10/0x10 [ 224.812418][ T8651] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 224.818003][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.823653][ T8651] shrink_dcache_for_umount+0xa8/0x1f0 [ 224.829135][ T8651] generic_shutdown_super+0x6f/0x2d0 [ 224.834440][ T8651] kill_block_super+0x44/0x90 [ 224.839142][ T8651] deactivate_locked_super+0xbc/0x130 [ 224.844526][ T8651] cleanup_mnt+0x437/0x4d0 [ 224.849040][ T8651] task_work_run+0x1d9/0x270 [ 224.853742][ T8651] ? __pfx_task_work_run+0x10/0x10 [ 224.858854][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.864490][ T8651] ? kmem_cache_free+0x182/0x650 [ 224.869443][ T8651] ? put_net+0x191/0x260 [ 224.873788][ T8651] do_exit+0x70f/0x22c0 [ 224.877984][ T8651] ? __pfx_do_exit+0x10/0x10 [ 224.882582][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.888230][ T8651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.893875][ T8651] do_group_exit+0x21b/0x2d0 [ 224.898464][ T8651] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.903687][ T8651] get_signal+0x1284/0x1330 [ 224.908245][ T8651] arch_do_signal_or_restart+0xbc/0x830 [ 224.913795][ T8651] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 224.918993][ T8651] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 224.925188][ T8651] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 224.931027][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.937119][ T8651] exit_to_user_mode_loop+0x86/0x480 [ 224.942406][ T8651] ? rcu_is_watching+0x15/0xb0 [ 224.947177][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.953248][ T8651] do_syscall_64+0x33e/0xf80 [ 224.957853][ T8651] ? trace_irq_disable+0x3b/0x140 [ 224.962884][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.968777][ T8651] RIP: 0033:0x7f5111b5d04e [ 224.973225][ T8651] Code: Unable to access opcode bytes at 0x7f5111b5d024. [ 224.980230][ T8651] RSP: 002b:00007f51129acf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 224.988668][ T8651] RAX: fffffffffffffdfc RBX: 00007f51129ad6c0 RCX: 00007f5111b5d04e [ 224.996634][ T8651] RDX: 00007f51129acfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.004628][ T8651] RBP: 00007f5111c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 225.012596][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.020562][ T8651] R13: 00007f5111e16038 R14: 00007f5111e15fa0 R15: 00007fffc3ae10c8 [ 225.028545][ T8651] [ 225.031860][ T8651] Kernel Offset: disabled [ 225.036263][ T8651] Rebooting in 86400 seconds..