last executing test programs: 5.165053052s ago: executing program 1 (id=1411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000180)={0x20, 0x9, 0x4, "bd57215c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.723458363s ago: executing program 4 (id=1425): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f0000000300)) 3.494230513s ago: executing program 4 (id=1427): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}}, 0x0) 3.384843273s ago: executing program 1 (id=1429): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.254891315s ago: executing program 4 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @broadcast, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @local}}}}, 0x0) 3.070224272s ago: executing program 4 (id=1431): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x540, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 3.069762842s ago: executing program 1 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000a40)=@framed={{}, [@cb_func, @tail_call, @jmp, @cb_func, @snprintf, @printk, @exit, @printk={@s}, @ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 2.854307191s ago: executing program 4 (id=1436): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x1, 0x28, "68691dc3a0bfc70f21a87eba64a6e12db109308d047368146cd1642134a11841dce4010941dc98be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.851388291s ago: executing program 1 (id=1437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) 2.682291127s ago: executing program 3 (id=1439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create(0x800809) 2.526029641s ago: executing program 1 (id=1440): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$eJzs3V+IVNcdB/Azu65uXepOoRQLQlcoLS0+LIVSi5RuS9X6sDJV+lBbdfuHQvFlFR8qfeiGBIPkIesKEvMQNwQiSUAXMcQQIasSDSGQByEo8cGEJWwwD0LyvISde8/szLnenXGjWaOfT9i9c+Z3zrlnhvsw343nTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAQwu3PawMz//vJSFl94vTFubnZ7T0TNw/1bT2//0YIlfrzlby+9/d/3PHvnXuHe+OAkT9lx2q1bMps6K2ssbLlyflxrT9/DyH0JBN058fNfU1jK+kJwoHihIvatmv3hd7J4Y2HD264NHn01FjxpTOvd7kXsFzy62pm4Voaqv/uSno02k2XXqXlEs3GpxfcN/IiAIB7MlirHxofR/OPuI32WFpP2kNJezxpx08I482NpcjmXVm2zoG0vkzrHMqiwqrSdSb1/P1vtGvp+KSdRI17WGdr1zzS9JatczSpL9c6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4me87N/Pf2u1dOltUnTl+cm5vd3jNx81Df1vP7b4RQrT9fycqV6yfXHfvVP7cMvHl8+GeD//rDju58XDyuaOocrscHv+4P4R9NlZk47WdrQqi1FurNcKJY+E/9wbZYAAAA4FHyw/rvrkY7i4M9Le1KPU1W6v9FeVjctftC7+TwxsMHN1yaPHpqbOnz1UrmG7rrfI12deGn0hSMY/xN51uox64HCvMsLp0xzfNXLm+8uOXqnqNl4wv5v7p4/o/vnPwPAADA1yH/p/Msrl3+f/XIE7MDT539adn4Qv4faDllIf/HFcf83xWWlv8BAADgYfag8/9QYZ7Ftcv/f91z4ncfbukdKhtfyP+DneX/Fc3Ljk++Hxe8rz+EwXZLBwAAAErE/+++8KeFmNeziJ/m9TMvH5u+9vFvNpXNV8j/Q53l/577/soAAACApfr57ls/ePHt786W1Qv5v9ZZ/l/1wFcOAAAAdGr9mc1vVV+oPFdWL+T/kc7y/+r8mO98yAZdif8K4Vh/CL3zD0azwtUw/ttGAQAAALhPYk7//7NX33m6+8/fKetXyP+ji9//P97pIO7/b7n/X2H/f1Mhu+vfJjcGAAAA4HFU3M8fb4+ffXNB2ffvd7r//5N1517/5bXp58vOX8j/Y53l/+7m4/38/j8AAABYgm/b9//9pTDP4trd///T77/23pdzP7pcNr6Q/8c7y//x2Nf88qbj+/Nkfwhr5x/kdxN8JZ5uX1KY6mkqZG98MmJnHJEXplY1FepGkxG/6A9h/fyDsaTwvVgYTwp31uSFyaTwQSzk10OjcDopTMcr7fiafLlp4Y1YyDdYTMUdFH2NLRHJiC/KRswX7jrio8bJAQAAHisxPOdZtqe1GdIoO1Vp12F1uw5d7Tp0t+uwIumQdix7Poy0FuLzf3vp7Ooj1Us/DiUK+X+ys/wf34qV2aFs/3+I+//zLyBs7P8fiYVqUpiKhVp6x4BaPEcWdp+J56jW8hF31jYKAAAA8EiLfxfoXuZ1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFfs3X+QXVV9APCzP96+7GazWcRBVAZWqGDqsNkkpojSMdgo1h+4KK1jHWtCsuCaxQQSOoShnQWs/cHYUkDaaa2Eto7CWJrBKZDWlkgbbAc6Bdo6QNTRIiN2qg5Di7UgdN7ee97ed+7evJdkN2Tp5/PHvvPe9/y878e+c+995wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8/HHfHvtoHf/Dw+6vi19/+leeff/Lc2vVf37n0nLsveTSE8ZnHu7Jw1yM3n3DDGZvePrLnpvesGNu8/n19ebk8HpY2/nTndz4Ra/3OshDu6gqhNw2cPpgFavn9wVjfCYMhHBNmA80SEwNZibThsK8/hF1hNtCsak9/CIOFwPkP33vPpxqJG/tDeG0IoZ628Y161kZ/Gji1LwsMpIGtvVngRy9kmoG7u7MAHLb4Zmi+6HePt2YYnrtcxeuvNm8de3Glw+uJieHqfN8/e4E7VdCXPjB+WE9bqToWROntsde7bRG820rb+TpPW/GLVP4N5YXZUD10b564cONlUzviI91hdLSnqqYFep4fferKTQeTXjSvw9iB4Xl5He578KH+49a+e89ta+9cv+f+xx463G4+UtikxfRCq4f8Nbdonsdonc+TRfD2K31LGvGlK4Rw12umT/mlC558Y1W8NP8fPvD8P76c4213S+5Y67ND2dw8PjIYEz8cyubmAAAAsGgshr2m+//w6eEPvPd3bq+qrzT/H+ns+H885J9P5rPR7g1h3UzimuUhHD/zeBa4NTZ3wfIQXjOTGm8NnJ0E9obwypnEimZVSYklscRIEvjuUB5YlwTui4HxJPC5GLguCXwiBnYngU0xsDcJvDUGwmTrOH56KB9Hx4H+GNiQbcTd8SyEp4dia8m22t+sCgAAYJ7ks8Na693CuQ6HmyFOL3f3t8sQz8CuzFBPakhnsM1pVWUNve1q6G5XQ3Pc0wcefqnmrnY1l07D6GrN0PPmdfse3/b460KF0vx/7MDz//ocHekqHf8P4byZvzF3dx6ZasY3jLdkAAAAAA7Dg3//2T//1zPfeUNVvDT/X9fZ+f9xn0hPIXN4IO6G2LI8hLHWQFbtm8uB7Kj30jwAAAAAi0HzeHzzWPhkfpudop3Op8v5xw8yfzzwv27O/J8597tf/tnPvuGcqv6W5v/jnZ3/P9B6m3XivtiLG5aHsKQQ+GrsZSMwYyQGvvWW1kA+/vviBrg2VpWfmNCs6tpYYkMMjCWBXVUlHmyWOL41kD9ZzcavaY5jMi9RCAAAAMARF3cHxOPy8fz/tZ/75avXPPLEB6vKleb/Gw7u/P+ZeXDp9P6ppSGs7A2hJ/1hwAMD2cKAMTDYlSf+ZiCrqyet6qqBEM5qDCyt6tv5+v+96RqDD/dnVcXA8Sd/4alTG4k/7Q9hZTHwtQ/dsraR2JEEmo3/Qn8IJzVGmzb+l0uyxmtp47+/JIQTC4FmVRcsCaHRWF9a1b31/DoGaVV/UQ/h2EKgWdXP1EPYGQBYpOK/0s3FB7fvvGLLxqmpiUsXMBH34feHCyenJkY3bZ3aXK/o0+akzy3LGF1VHlN3h2Pfny9R9NzbTh7uJN38neBYsS/5fvzSiYP5/fhdqDYzztW1lrtr0iG/7pRyE+mQ5hpypz9hPNQhDxQrmX0SK/vRF5aGJZdtn7h09PKNO3Zcuir722n21dnfeJgp21ar0m01MFffOnh5VK6WlTjUbXVasZKVOy7etnL7zitOn7x440UTF018fNWasbE3rl51xplrVzZGNZb9bTPU0+aqOhnqC7d0OK55HOqreguVHIlPDQkJicWWWHHnm37xi//x+ElVHz+l+f+2A8//46dO/OTP12eoOv4/HA/zZ4/PHubfEAO7Oj3+P1x1NL95YsBIEpiOgWmH+QEAAHhpiLsj497MuNf6ye9dcd2xt5z09apypfn/dGe//5+n9f+bS9e/s2qZ/xWxxFjV+v/pMv/N9f+nq9b/T5f5b67/v+tFWP//smYg2SRPW/8fAAB4KThy6/+3Xd4/vUBAKUPb5f3TCwSUMrRdxr/TCwQc9Pr/T/xg65LjX3brhlChNP+/rrP5v4X7AQAA4Ojx6Qc27zrtJz+pPCpcmv/v6mz+f+TX/wtV5/+PVAXGqxYGtP4fAAAAi1TV+n8fe/2WZZP/NnZBVbnS/H93Z/P/eNpFd0vuWOuzQ9madiFd0+6HQ82fDAAAAMDi0B1GR2sd5m1ZGfXsQ2/z0Xwp0AOli87a/Sc/33PldZUtlub/ezub/7f8LmPfgw/1H7f23XuevW3tnev33P/YQ7PH/wEAAICF0+l+CQAAAAAAAAAAAAAA4MW3/m8/+hsfvuezb6iKl37/H86bebzq9//xun/x9wUvb8kda22//l9+//x33b5zZsnCB4ZCOKUY2HL1lmNCfm3+04qBez684hWNxNVpiS9/861PNBIfSQPvOP1lzzQSZyWBDXGRxFemgXhVxWeWJYG4vOK/pIG4PXangb488FvLsnF0pdvqe4PZtupKt9VjgyEsLwSa2+quwayNrnSANyaB5gAvSQNxgOfmge60V7cvzXoVA4Ox6M1Ls14BAHDUit8Ca+HCyamJsfgVPt6+qrf1NmpZsuyqcrVdHTa/P1+a7Lm3nTzcSbon/S46e63xWqg3hrCq9HW1mKVrZpTzU0ubTffyiiG3W+2tu6Jc6mA3XV/1iPqzEY1u2jq1udZ24GvaZ1nd2zbLqtJkp5ile2aTdlBLB33pYEQdbpsOuhzvd4fR0Z4k15ticDi0aPeK6PT3+sV1/qpeBcU8oyf+6hXTE3c8WVVfaf4/3Nn8v14c1zP5xQCm45X1rlkeQuUlBwEAAIBDtP+vH1m99Y8++cX09jff9Sv/e9dPXflMVbnS/H+ks/l/3IOVHwrO9nbsjdf/b87/h7PArbG5C5aH8JqZ1HgskV1Q/52xxFgWuDXuMFkRS2wYb61qSQzsTgLfHcoDe5PAfTGQ76X4Qsh35fzeUAhrZ1LntZbYFksMJ4H3xsBIEhiNgbEksCwG1iWB/1yWB8aTwP0xECZbt9WXltm7AgAAHIJ8nlVrvRvSed7u3nYZutplGGiXobtdhnq7DFWjiPfviBlqyckrXYVMtbTW/qSWUoZ4MfyD7lcpQ3iwNWdasNR0PP+geb5BV2uGUz7/+g+EZb99c6hQmv+PdTb/H2i9zVq/L87/Z6//lwW+Grt3Qzx1fCQGvvWW1kC+Y+C+ONm9tlnVeF4in7RfG0usi4GRJLAtBtYlgQ3n5YFdr2gN5DPtZuPXNBufzEsUAgAAAHDExR0EcTdNnP9f/tzbl3/6i7/+31XlSvP/dZ3N/2N7S4uNfSLW+p1lIdzVNdubZuD0wSwQ92MMxp/HnzAYwjGFHRzNEhMDWYm+pOGwrz/7hXpfWtWe/myNgXj//IfvvedTjcSN/SG8trD3pdnGN+pZG/1p4NS+LDCQBrb2ZoG456cZuLs7C8Bha+4VjC+o/FSXpuG5y1W8/l4q1wRNh1faBzpHvrl+c7VQ6ukD+T7VpoN72krVsSBKb4+93m2L8d027N1W/CKVf0N5YTZUD92bJy7ceNnUjvhI8ZesJQv0PBd/pdpJeh5eh9OH3tv26mkHxpKPj7G5y839OuyK1e178KH+49a+e89ta+9cv+f+xx7quBsV4g+FX/2j24YfKWzehVYP+Wtu0X2ejPs8WYz/BkY8bSGEf1p/4eXPhr/rr4qX5v/jnc3/e5PbGT+OG3P78hBeV9i4D8TN/3PLs8/BQiD7lDy2HMgOuT8+VPnJCQAAAPOtubujub9gMr/NTghP58nl/OMHmT/ur1g3Z/5O+/2GPztz1VdO3P7HVfHS/H/Dgef/S5JuOv7v+D8LxPH/OR3tu6KXpA9MH9au6FJ1LAjH/+d0tL/bHP+fk+P/jv/PxfH/Nhz/n9PR/rSVviVt86WrMR/9nw9+8t/PHjylKl6a/2/rbP5v/b+5F+1rrv+3oWr9v21V6/9NW/8PAABYUBULzaXzvNLqfaUM6ep9pQxtFwhsu8Sg9f8Oev2/Nw/0vv93+29aESqU5v/Tnc3/48thabH1xbL+38h5FVVdFwPbLAwIAADA0ahqBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrpvuHdn3Dz/+0glV8etv/8rzzz95bu36r+9ces7dlzwawuTM411ZuOuRm0+44YxNbx/Zc9N7VoxtXv++el6ult++uiV3rPXZoRB2FR4ZjIkfDjXuzAbOf9ftO3sbiQeGQjilGNhy9ZZjGonPDYVwWjFwz4dXvKKRuDot8eVvvvWJRuIjaeAdp7/smUbirDzQlXb3M8uy7nal3f3UshCWFwLN7n5sWWtVzTbOyQPdaRufH8zaiIHBWPQPBrM2YmAqlphcEsLK3hB60qr+sZ5V1ZNW9Vf1rKqetKpfq4dwVgihN63qm31ZVb3pyP+5L6sqBo4/+QtPndpI7OoLYWUx8LUP3bK2kbgkCTQbf19fCCc1XjJp43fUssZraeM31kI4MYTQl5b4r96sRF9a4tu9IRxbCDQb/2hvCDsDLwnxw2dz8cHtO6/YsnFqauLSBUz05W31hwsnpyZGN22d2lxP+lSlq5B+4aoDxw9k/1NXbmrcPve2k4c7Sffm5WozXV5da7m7Zr56X1ug3sd+DRQrmX0+SvXH/H1haVhy2faJS0cv37hjx6Wrsr+dZl+d/e1pDq6xrVbN17bq1KFuq9OKlazccfG2ldt3XnH65MUbL5q4aOLjq9aMjb1x9aozzly7sjGqsezvfAz1liM/1Ff1Fio5Eh8AEhISiy3R3fLpNna0f5CXvujPdrQW6jMf0KVpRTFL18wo52PQZx/iiA/le0rbEa0qTRxKWVa3z7KmNJmYzdKfZZn5XleaHBZr6p7ZpPF+dxgd7anaDsOtd4ub9/uHsXkfzTddp2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WYfRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//HB8mtQ==") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdd6, 0xfecd) 2.086276531s ago: executing program 2 (id=1443): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rpc\x00') getdents(r0, &(0x7f0000000040)=""/44, 0x2c) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 1.884102669s ago: executing program 0 (id=1444): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x78d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0x0, 0xfffffffffffffffc}) 1.648519921s ago: executing program 0 (id=1445): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x0) 1.647560721s ago: executing program 2 (id=1455): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008ff"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.43832568s ago: executing program 3 (id=1446): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x800, 0x0) chroot(&(0x7f0000000000)='./file0\x00') syz_clone(0x32120000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.368324666s ago: executing program 3 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200060d00000a000600080211000001000004001300060010007e0500000600ab0000000000340081"], 0x78}}, 0x0) 1.120436788s ago: executing program 3 (id=1448): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 1.10532248s ago: executing program 2 (id=1449): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)) 1.10251728s ago: executing program 0 (id=1450): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x2000088, &(0x7f0000000240)=ANY=[], 0x1, 0x122e, &(0x7f0000000400)="$eJzs3E1rHVUYB/DnJjemSc2LWt+60EPduBqaLFwJGiQFyV1INUIriLd2gpeM94bMJRBRW1duBb+FuHQniF/AjV/BZTcuuxBGnEnSmyZpLdZcg7/fZh7OOf+cMxwInMvM3Hn9m083N8psozuMiVYrJrYi0t0UKSZi30trzfXa9bWVTmf1akpXVt5bei2lNP/yTx98/v2ln4fn3/9h/sfp+GXxwzu/L0fE7b/Gf9IrU69M/cEwddONwWDYvVHkk9ErN7OU3inybpmnXr/Mt0f700Yx2NraTd3+zbnZre28LFO3v5s28900HKT23pL6KcuyNDcbnGjqSMtH9zeuf3e3qqqIqpqKJ6KqqmomZuN8PBlzMV9v4lPxdDwTF+LZeC6ejxfixXrUKd4FAAAAAAAAAAAAAAAAAAAA/A886P3/hVj0/j8AAAAAAAAAAAAAAAAAAACcgnevXV9b6XRWr6Z0LqL4emd9Z725Nv0rG9GLIvK4HAvxR9Rv/zea+srbndXLqbYYXxW39vK3dtYnD+eX6s8J7OXbdd9+fqnJp8P56ZgdzS/HQlw4fv7lY/JT30a8+spIPouF+PXjGEQRN+u57+W/XErprdvNmuJg/ov1uBO1/+2dAQAAgMcnSwcOzu9vjpzfs+xof3M+bvKP8PvAfef7dlx0hh67cvezzW5R5NuHi3NHWh5WtCLibw8+qWi1mlX9078z5mLiUVOTe7vx4MH7390c/w2etWLmv7GMM1WM7V8Sp+jeph9u/+3SQTlz+qsCAAAAAAAAAADgYR7bM4PROu7533Y0T5ZNj875RnyRje+OAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUgAAAP//sXy6CQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file1\x00', 0x2) 1.019212478s ago: executing program 1 (id=1451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) recvmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x10000) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000080), 0x3d) 858.120412ms ago: executing program 4 (id=1452): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000100)={[{@pqnoenforce}, {@noquota}, {@usrquota}, {@pqnoenforce}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x98d4, &(0x7f000001ca40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000800)={0x6c0, 0x80000000, 0x80, 0x4, 0x7}) 857.625502ms ago: executing program 3 (id=1453): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) 526.739102ms ago: executing program 0 (id=1454): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r1, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 526.573752ms ago: executing program 2 (id=1456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2], 0x3c}}, 0x0) 306.805512ms ago: executing program 3 (id=1457): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/229, 0xe5}], 0x1) 300.988753ms ago: executing program 2 (id=1458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) 127.585199ms ago: executing program 0 (id=1459): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfc}, 0x2) 168.11µs ago: executing program 0 (id=1460): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x15d, &(0x7f0000000700)="$eJzs281KAlEYxvFn1NTsy7JaRIsgiDY5amC1s0sRnUQaS7KNEkSX0v3Vol2bMhzGCUchMPT48f9tPI8vB98DHn03IwBLq6QjWbIU74XDZPo5Y5luCcCUdP3X7y6A5RP9NN0BADPer6WmpLePp4qi8aH5oFcv9euRxHD9RTqI+XUrqdXwfPEqnfT3W6mR+1NBfW1k/fS4//nr2tCmtpTWtnaU8evVYP/+PyYhAACWh6VsOA+8EdFN3XVyQV7xcj7IcS8XQvk8yAkvZyv3bnVSRwAwpsgf9z8auv+x0P0HML9a7c5t2XWdB9OLr+5MtMFioRYx/2s+K/3M0cLwDxOAibMfG0271e6c1RvlmlNz7oqFYvEqd3mRt73B3x4c/wEskN8/fdOdAAAAAAAAAAAAAACAce1qz3QLAAAAAKZkGo8TmT4jAAAAAAAAAAAAAAAAAACL5icAAP//fWEe3A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) sync() pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1461): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): omplete MPEG2 transport stream to the software demuxer. [ 123.241961][ T4332] usb 5-1: USB disconnect, device number 4 [ 123.282246][ T2183] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 123.291158][ T2183] usb 3-1: media controller created [ 123.319100][ T5448] loop0: detected capacity change from 0 to 512 [ 123.319244][ T2183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.346529][ T5448] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.361790][ T5448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.401: bg 0: block 248: padding at end of block bitmap is not set [ 123.384494][ T5448] __quota_error: 14 callbacks suppressed [ 123.384513][ T5448] Quota error (device loop0): write_blk: dquota write failed [ 123.401250][ T5448] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 123.411473][ T5448] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.401: Failed to acquire dquot type 1 [ 123.439971][ T5448] EXT4-fs (loop0): 1 truncate cleaned up [ 123.466673][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.498266][ T5451] loop3: detected capacity change from 0 to 4096 [ 123.506478][ T5451] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 123.518749][ T5448] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 123.554487][ T5448] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 123.563970][ T5448] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 123.576313][ T5448] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074 [ 123.603879][ T5448] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.401: Failed to acquire dquot type 1 [ 123.676756][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 123.735610][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.877717][ T2183] az6027: usb out operation failed. (-71) [ 123.883614][ T2183] stb0899_attach: Driver disabled by Kconfig [ 123.917332][ T2183] az6027: no front-end attached [ 123.917332][ T2183] [ 123.930851][ T5460] loop3: detected capacity change from 0 to 24 [ 123.957657][ T2183] az6027: usb out operation failed. (-71) [ 123.968894][ T2183] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 123.980720][ T5460] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 124.001030][ T2183] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 124.014039][ T5460] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.047707][ T5461] loop1: detected capacity change from 0 to 2048 [ 124.056115][ T2183] dvb-usb: schedule remote query interval to 400 msecs. [ 124.068532][ T2183] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 124.117189][ T2183] usb 3-1: USB disconnect, device number 3 [ 124.121256][ T5469] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.233448][ T5469] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 124.250816][ T5471] vivid-007: disconnect [ 124.264345][ T2183] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 124.276244][ T5470] vivid-007: reconnect [ 124.283759][ T5469] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 124.320367][ T5469] Remounting filesystem read-only [ 124.381721][ T4250] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 124.408065][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 124.415750][ T4250] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 124.435525][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.455016][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.487395][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.508233][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 124.543707][ T4250] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 124.561471][ T4250] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 124.581735][ T4250] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 124.588840][ T5473] loop4: detected capacity change from 0 to 4096 [ 124.596238][ T5473] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.613709][ T4250] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 124.668948][ T4250] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 124.687791][ T4250] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 124.716770][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.747320][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.765760][ T5473] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 124.775369][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.786705][ T5473] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 124.792829][ T2183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.812897][ T5473] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 124.833664][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 124.851962][ T4250] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 124.860214][ T5473] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 124.874658][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.885436][ T5479] loop0: detected capacity change from 0 to 8192 [ 124.904143][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.927395][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.928651][ T5479] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.953679][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 124.967410][ T4250] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 124.978928][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.011447][ T5473] ntfs: volume version 3.1. [ 125.021767][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.083932][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.111852][ T5479] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 125.125996][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 125.141659][ T5479] REISERFS (device loop0): using ordered data mode [ 125.146075][ T4250] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 125.156203][ T4250] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 125.158523][ T5479] reiserfs: using flush barriers [ 125.164183][ T4250] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 125.184526][ T5479] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.187858][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.217502][ T4250] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 125.222160][ T5479] REISERFS (device loop0): checking transaction log (loop0) [ 125.224652][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.247798][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.256086][ T5479] REISERFS (device loop0): Using r5 hash to sort names [ 125.262569][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.271970][ T5479] REISERFS (device loop0): using 3.5.x disk format [ 125.272557][ T4250] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 125.286307][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.299085][ T5479] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 125.818014][ T2183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.951793][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.960545][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.125111][ T5508] loop1: detected capacity change from 0 to 512 [ 126.183389][ T5508] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 126.213715][ T5514] random: crng reseeded on system resumption [ 126.225314][ T5508] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 126.254758][ T5508] EXT4-fs (loop1): group descriptors corrupted! [ 126.347703][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.547404][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 126.554767][ T27] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 126.601506][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.645477][ T27] usb 5-1: config 0 descriptor?? [ 126.755430][ T5523] loop1: detected capacity change from 0 to 2048 [ 126.776833][ T5491] loop3: detected capacity change from 0 to 32768 [ 126.833159][ T5523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.854490][ T2183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.869253][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 126.900069][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.936236][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 126.966715][ T27] usb 5-1: media controller created [ 127.028902][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.051061][ T5527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.059938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.098898][ T5527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.107481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.116432][ T5527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.124866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.133981][ T5527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.142416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.151964][ T5527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.530722][ T27] az6027: usb out operation failed. (-71) [ 127.557401][ T27] stb0899_attach: Driver disabled by Kconfig [ 127.563630][ T27] az6027: no front-end attached [ 127.563630][ T27] [ 127.607957][ T27] az6027: usb out operation failed. (-71) [ 127.613837][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 127.665134][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 127.703746][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 127.725491][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 127.777682][ T27] usb 5-1: USB disconnect, device number 5 [ 127.940512][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 128.020369][ T5549] loop3: detected capacity change from 0 to 512 [ 128.057464][ T5549] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.121754][ T5549] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.188542][ T5549] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 128.278486][ T5549] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.319267][ T5560] vcan0: tx drop: invalid sa for name 0x0008000000000000 [ 128.374108][ T5549] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 128.420617][ T5549] EXT4-fs (loop3): 1 truncate cleaned up [ 128.426550][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.619480][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 129.100539][ T5588] program syz.1.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.277387][ T5562] loop0: detected capacity change from 0 to 32768 [ 129.331733][ T4329] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.517439][ T4329] usb 5-1: Using ep0 maxpacket: 8 [ 129.524421][ T4329] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 129.564160][ T4329] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 129.595807][ T5599] loop1: detected capacity change from 0 to 4096 [ 129.607353][ T4329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.636930][ T4329] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.657131][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.665504][ T4329] usb 5-1: Product: syz [ 129.682791][ T4329] usb 5-1: Manufacturer: syz [ 129.692864][ T4329] usb 5-1: SerialNumber: syz [ 129.797130][ T5600] loop3: detected capacity change from 0 to 8192 [ 129.835914][ T5600] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.862035][ T5600] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 129.872331][ T5600] REISERFS (device loop3): using ordered data mode [ 129.879077][ T5600] reiserfs: using flush barriers [ 129.896506][ T5607] netlink: 9 bytes leftover after parsing attributes in process `syz.0.473'. [ 129.920565][ T5600] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.010115][ T5609] program syz.0.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.019198][ T5600] REISERFS (device loop3): checking transaction log (loop3) [ 130.049347][ T5600] REISERFS (device loop3): Using r5 hash to sort names [ 130.077463][ T5600] reiserfs: enabling write barrier flush mode [ 130.129247][ T5600] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 130.288449][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 130.354536][ T4329] usb 5-1: 0:2 : does not exist [ 130.587655][ T27] usb 5-1: USB disconnect, device number 6 [ 130.846329][ T5633] loop1: detected capacity change from 0 to 2048 [ 130.896419][ T5638] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.908048][ T5637] netlink: 'syz.2.489': attribute type 2 has an invalid length. [ 131.022855][ T5638] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 131.052053][ T5638] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 131.093125][ T5638] Remounting filesystem read-only [ 131.107572][ T33] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 131.114484][ T33] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 131.146620][ T33] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.193420][ T33] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.236840][ T33] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.253666][ T33] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 131.270817][ T33] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 131.297958][ T33] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.322522][ T33] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.341112][ T33] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.368137][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 131.378194][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.407500][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.429196][ T4250] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 131.440924][ T4250] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 131.459313][ T4250] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 131.466061][ T4250] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 131.474676][ T4250] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 131.484238][ T4250] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 131.517925][ T4250] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.528529][ T4299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.580315][ T5654] loop3: detected capacity change from 0 to 4096 [ 131.601326][ T5654] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 131.687622][ T5654] ntfs3: loop3: Failed to load $Extend. [ 131.721062][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.742491][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.773354][ T4299] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 131.827396][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.859991][ T4299] usb 5-1: config 0 descriptor?? [ 132.054689][ T27] net_ratelimit: 2054 callbacks suppressed [ 132.054708][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.283634][ T4299] wacom 0003:056A:00D0.0005: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 132.323304][ T4299] wacom 0003:056A:00D0.0005: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 132.371477][ T4299] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0005/input/input15 [ 132.467994][ T5688] Cannot find set identified by id 0 to match [ 132.572739][ T4299] usb 5-1: USB disconnect, device number 7 [ 132.651930][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.771084][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778809][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.853219][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 132.861645][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 132.916678][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 132.968044][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.976096][ T27] usb 1-1: Product: syz [ 133.017640][ T27] usb 1-1: Manufacturer: syz [ 133.022388][ T27] usb 1-1: SerialNumber: syz [ 133.079945][ T27] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 133.096028][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.324555][ T7] usb 1-1: USB disconnect, device number 6 [ 133.446821][ T5703] tap0: tun_chr_ioctl cmd 1074025677 [ 133.453315][ T5703] tap0: linktype set to 65534 [ 133.454343][ T5704] netlink: 'syz.1.520': attribute type 29 has an invalid length. [ 133.479883][ T5704] netlink: 'syz.1.520': attribute type 29 has an invalid length. [ 133.479932][ T5687] loop3: detected capacity change from 0 to 32768 [ 133.502622][ T5687] XFS: noikeep mount option is deprecated. [ 133.527407][ T4329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.595083][ T5687] XFS (loop3): Mounting V5 Filesystem [ 133.692854][ T5687] XFS (loop3): Ending clean mount [ 133.706421][ T5687] XFS (loop3): Quotacheck needed: Please wait. [ 133.717481][ T4329] usb 3-1: Using ep0 maxpacket: 16 [ 133.725241][ T4329] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.750449][ T4329] usb 3-1: config 0 has no interface number 0 [ 133.767353][ T4329] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.787328][ T4329] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.807557][ T4329] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 133.816680][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.858392][ T4329] usb 3-1: config 0 descriptor?? [ 133.864506][ T5687] XFS (loop3): Quotacheck: Done. [ 134.136437][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.162275][ T5722] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 134.244827][ T4260] XFS (loop3): Unmounting Filesystem [ 134.367623][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.477984][ T4329] uclogic 0003:28BD:0071.0006: pen parameters not found [ 134.485063][ T4329] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 134.723421][ T4329] usb 3-1: USB disconnect, device number 4 [ 134.726799][ T5736] netlink: 'syz.4.532': attribute type 29 has an invalid length. [ 134.788808][ T5736] netlink: 'syz.4.532': attribute type 29 has an invalid length. [ 135.178744][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.464527][ T5764] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 136.220113][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.610236][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.081669][ T5853] Cannot find set identified by id 0 to match [ 137.261558][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.407757][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.422763][ T5766] loop2: detected capacity change from 0 to 32768 [ 137.460530][ T5766] XFS: noikeep mount option is deprecated. [ 137.592709][ T5766] XFS (loop2): Mounting V5 Filesystem [ 137.627578][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.719245][ T5766] XFS (loop2): Ending clean mount [ 137.746436][ T5766] XFS (loop2): Quotacheck needed: Please wait. [ 137.823710][ T5766] XFS (loop2): Quotacheck: Done. [ 137.862897][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.888542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.923046][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.953985][ T27] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 137.977294][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.005142][ T27] usb 4-1: config 0 descriptor?? [ 138.020735][ T4258] XFS (loop2): Unmounting Filesystem [ 138.056082][ T5852] loop1: detected capacity change from 0 to 32768 [ 138.157591][ T5837] loop0: detected capacity change from 0 to 40427 [ 138.229029][ T5837] F2FS-fs (loop0): invalid crc value [ 138.282212][ T5837] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.327474][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.464775][ T27] sony 0003:054C:024B.0007: unexpected long global item [ 138.493117][ T27] sony 0003:054C:024B.0007: parse failed [ 138.508660][ T5837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 138.516982][ T27] sony: probe of 0003:054C:024B.0007 failed with error -22 [ 138.642870][ T4251] syz-executor: attempt to access beyond end of device [ 138.642870][ T4251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.698410][ T27] usb 4-1: USB disconnect, device number 2 [ 138.738935][ T5883] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 138.779415][ T5883] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 138.797475][ T5883] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 138.890284][ T5889] loop4: detected capacity change from 0 to 1024 [ 139.012887][ T5806] hfsplus: b-tree write err: -5, ino 4 [ 139.414020][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.490159][ T5906] loop4: detected capacity change from 0 to 128 [ 139.528670][ T5906] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 139.639576][ T5906] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 140.031169][ T5927] process 'syz.2.576' launched './file0' with NULL argv: empty string added [ 140.158860][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.167322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.194894][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.203561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.233263][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.699967][ T5945] netlink: 277 bytes leftover after parsing attributes in process `syz.4.584'. [ 140.982910][ T5912] loop3: detected capacity change from 0 to 32768 [ 141.031803][ T5912] XFS (loop3): Mounting V5 Filesystem [ 141.187574][ T5912] XFS (loop3): Starting recovery (logdev: internal) [ 141.250196][ T5912] XFS (loop3): Ending recovery (logdev: internal) [ 141.484406][ T4260] XFS (loop3): Unmounting Filesystem [ 141.965284][ T5954] loop4: detected capacity change from 0 to 40427 [ 142.005543][ T5954] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 142.047931][ T5954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.093542][ T5954] F2FS-fs (loop4): invalid crc value [ 142.144779][ T5954] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.330289][ T5954] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.347524][ T5954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.527515][ T4297] net_ratelimit: 2047 callbacks suppressed [ 142.527535][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.603872][ T33] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 142.648478][ T33] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 142.923650][ T6007] device hsr0 entered promiscuous mode [ 142.950664][ T6007] device hsr0 left promiscuous mode [ 143.487716][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.567940][ T26] audit: type=1326 audit(1731097466.761:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 143.645710][ T26] audit: type=1326 audit(1731097466.761:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 143.667860][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.677026][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.685213][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.816325][ T26] audit: type=1326 audit(1731097466.801:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 143.898639][ T26] audit: type=1326 audit(1731097466.951:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8def9b0805 code=0x7ffc0000 [ 144.037588][ T26] audit: type=1326 audit(1731097466.951:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 144.141210][ T26] audit: type=1326 audit(1731097466.951:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 144.203538][ T6035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.227543][ T26] audit: type=1326 audit(1731097466.961:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 144.352551][ T26] audit: type=1326 audit(1731097466.961:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 144.425131][ T26] audit: type=1326 audit(1731097466.961:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 144.537685][ T26] audit: type=1326 audit(1731097467.121:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8def97e719 code=0x7ffc0000 [ 144.720624][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.736786][ T6048] loop1: detected capacity change from 0 to 1024 [ 145.054720][ T4250] hfsplus: node 4:3 still has 1 user(s)! [ 145.741311][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.820281][ T6076] loop3: detected capacity change from 0 to 4096 [ 145.860254][ T6076] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 145.944240][ T6076] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 146.022408][ T6076] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 146.147589][ T6054] loop2: detected capacity change from 0 to 32768 [ 146.188112][ T6054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.627 (6054) [ 146.259373][ T6054] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.296820][ T6054] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 146.336477][ T6054] BTRFS info (device loop2): using free space tree [ 146.385147][ T6094] loop0: detected capacity change from 0 to 128 [ 146.443709][ T6068] loop4: detected capacity change from 0 to 32768 [ 146.499492][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.508694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.527560][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.607011][ T6068] XFS (loop4): Mounting V5 Filesystem [ 146.802101][ T6068] XFS (loop4): Starting recovery (logdev: internal) [ 146.827039][ T6054] BTRFS info (device loop2): enabling ssd optimizations [ 146.882703][ T6068] XFS (loop4): Ending recovery (logdev: internal) [ 147.099560][ T4249] XFS (loop4): Unmounting Filesystem [ 147.114175][ T6084] loop1: detected capacity change from 0 to 32768 [ 147.146536][ T6084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.641 (6084) [ 147.205015][ T4258] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.256260][ T6084] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.292831][ T6084] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 147.360394][ T6084] BTRFS info (device loop1): use zlib compression, level 3 [ 147.407347][ T6084] BTRFS info (device loop1): using free space tree [ 147.728512][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 147.828589][ T27] net_ratelimit: 1 callbacks suppressed [ 147.828606][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.855719][ T6084] BTRFS info (device loop1): enabling ssd optimizations [ 148.100963][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.139104][ T6171] loop2: detected capacity change from 0 to 164 [ 148.455451][ T6132] loop0: detected capacity change from 0 to 32768 [ 148.472549][ T6176] loop3: detected capacity change from 0 to 256 [ 148.640157][ T6187] netlink: 'syz.4.662': attribute type 6 has an invalid length. [ 148.672603][ T6132] XFS (loop0): Mounting V5 Filesystem [ 148.775512][ T6132] XFS (loop0): Ending clean mount [ 148.858672][ T6178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.944087][ T6193] loop1: detected capacity change from 0 to 1024 [ 148.968527][ T4251] XFS (loop0): Unmounting Filesystem [ 149.000695][ T6199] loop3: detected capacity change from 0 to 256 [ 149.109787][ T6199] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.204016][ T46] hfsplus: b-tree write err: -5, ino 4 [ 149.374283][ T6204] loop3: detected capacity change from 0 to 64 [ 149.568919][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.905035][ T6178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.033438][ T6195] loop4: detected capacity change from 0 to 32768 [ 150.175017][ T26] audit: type=1800 audit(1731097473.361:25): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.666" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 150.249950][ T6197] loop2: detected capacity change from 0 to 32768 [ 150.380671][ T6197] XFS (loop2): Mounting V5 Filesystem [ 150.385312][ T6222] loop0: detected capacity change from 0 to 4096 [ 150.486552][ T6197] XFS (loop2): Starting recovery (logdev: internal) [ 150.508877][ T6236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.557544][ T6214] loop1: detected capacity change from 0 to 32768 [ 150.576024][ T6214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.672 (6214) [ 150.599985][ T6197] XFS (loop2): Ending recovery (logdev: internal) [ 150.701332][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.723104][ T6214] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.745813][ T6214] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 150.793394][ T6214] BTRFS info (device loop1): using free space tree [ 150.928025][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.937139][ T6254] loop3: detected capacity change from 0 to 512 [ 150.969656][ T4258] XFS (loop2): Unmounting Filesystem [ 151.011459][ T6254] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.045540][ T6214] BTRFS info (device loop1): enabling ssd optimizations [ 151.095435][ T6254] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 151.136129][ T6254] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 151.181545][ T6254] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 151.210740][ T6254] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.684: bg 0: block 97: padding at end of block bitmap is not set [ 151.271089][ T6254] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 151.292812][ T6254] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #15: comm syz.3.684: corrupted xattr block 19 [ 151.379315][ T6254] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 151.397516][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.444185][ T6254] EXT4-fs (loop3): 1 orphan inode deleted [ 151.464316][ T6254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.579040][ T4250] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.597467][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 151.621481][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 151.626336][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.653179][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.691941][ T7] usb 1-1: Product: syz [ 151.704576][ T7] usb 1-1: Manufacturer: syz [ 151.714701][ T7] usb 1-1: SerialNumber: syz [ 151.743127][ T7] r8152-cfgselector 1-1: config 0 descriptor?? [ 151.987841][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.992268][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 152.040062][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 152.061179][ T7] r8152-cfgselector 1-1: bad CDC descriptors [ 152.106806][ T7] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 152.142486][ T6284] netlink: 576 bytes leftover after parsing attributes in process `syz.1.688'. [ 152.322816][ T7] usb 1-1: USB disconnect, device number 7 [ 152.453937][ T6287] loop2: detected capacity change from 0 to 8192 [ 152.481297][ T6287] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.031332][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.175433][ T6289] loop3: detected capacity change from 0 to 32768 [ 153.225143][ T6289] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.694 (6289) [ 153.247949][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.372240][ T6289] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 153.374210][ T6292] loop4: detected capacity change from 0 to 32768 [ 153.414806][ T6289] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.475946][ T6289] BTRFS info (device loop3): using free space tree [ 153.631282][ T6314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.704'. [ 153.687449][ T6314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.704'. [ 153.723563][ T6323] loop2: detected capacity change from 0 to 64 [ 153.739234][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.897564][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.987469][ T6289] BTRFS info (device loop3): enabling ssd optimizations [ 154.085102][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.279959][ T6305] loop0: detected capacity change from 0 to 32768 [ 154.318035][ T6305] XFS: ikeep mount option is deprecated. [ 154.347381][ T6305] XFS: noikeep mount option is deprecated. [ 154.430790][ T6347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.711'. [ 154.513625][ T6305] XFS (loop0): Mounting V5 Filesystem [ 154.674830][ T4260] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 154.714184][ T6305] XFS (loop0): Ending clean mount [ 154.733134][ T6305] XFS (loop0): Quotacheck needed: Please wait. [ 154.848688][ T6363] netlink: 368 bytes leftover after parsing attributes in process `syz.4.717'. [ 154.876896][ T6305] XFS (loop0): Quotacheck: Done. [ 154.957568][ T4332] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.100557][ T6150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.157505][ T4332] usb 3-1: Using ep0 maxpacket: 16 [ 155.170954][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 9946, setting to 1024 [ 155.194982][ T4332] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 155.274116][ T4332] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 155.301959][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.327200][ T4332] usb 3-1: Product: syz [ 155.331617][ T4251] XFS (loop0): Unmounting Filesystem [ 155.344525][ T4332] usb 3-1: Manufacturer: syz [ 155.357116][ T4332] usb 3-1: SerialNumber: syz [ 155.405169][ T4332] usb 3-1: config 0 descriptor?? [ 155.447108][ T6360] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.491465][ T6157] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.677495][ T4332] usb 3-1: Limiting number of CPorts to U8_MAX [ 155.703563][ T4332] usb 3-1: Not enough endpoints found in device, aborting! [ 155.718177][ T6157] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 155.737525][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.787339][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.815294][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.839311][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.867529][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.883996][ T6354] loop1: detected capacity change from 0 to 40427 [ 155.897441][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.904373][ T4298] usb 3-1: USB disconnect, device number 5 [ 155.918322][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.926394][ T6354] F2FS-fs (loop1): invalid crc value [ 155.937486][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.957621][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.958579][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.976532][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.989534][ T6354] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.990642][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.007706][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.038145][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.055479][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.077066][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.086093][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.092460][ T6354] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.096952][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.120263][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.128779][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.144723][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.150327][ T7] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 156.157101][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.173218][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.183726][ T6157] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.192829][ T6157] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.201075][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.204705][ T6157] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.230738][ T6157] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.232778][ T7] usb 5-1: config 0 descriptor?? [ 156.241933][ T6157] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.256361][ T6157] usb 4-1: Product: syz [ 156.261471][ T6157] usb 4-1: Manufacturer: syz [ 156.262951][ T4250] syz-executor: attempt to access beyond end of device [ 156.262951][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.266341][ T6157] usb 4-1: SerialNumber: syz [ 156.287175][ T7] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 156.288847][ T6157] usb 4-1: config 0 descriptor?? [ 156.319485][ T6157] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 156.330176][ T7] ums-usbat 5-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 156.387493][ T6364] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.513084][ T4332] usb 5-1: USB disconnect, device number 8 [ 156.562820][ T7] usb 4-1: USB disconnect, device number 3 [ 156.599557][ T7] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 156.601147][ T6364] usb 1-1: Using ep0 maxpacket: 8 [ 156.644329][ T6364] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.661882][ T6364] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 156.678711][ T6364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.689437][ T6364] usb 1-1: config 0 descriptor?? [ 156.716486][ T6364] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 156.733613][ T6364] usb 1-1: selecting invalid altsetting 0 [ 156.740517][ T6364] cxusb: set interface failed [ 156.745667][ T6364] dvb-usb: bulk message failed: -22 (1/0) [ 156.775501][ T6364] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.793695][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.793857][ T6364] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 156.816910][ T6364] usb 1-1: media controller created [ 156.857613][ T6364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.964025][ T6364] DVB: Unable to find symbol lgdt330x_attach() [ 156.973639][ T6364] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 156.993848][ T6364] dvb-usb: bulk message failed: -22 (1/0) [ 157.001912][ T6364] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 157.023031][ T6364] usb 1-1: USB disconnect, device number 8 [ 157.067128][ T6364] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 157.253730][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.297639][ T6397] loop1: detected capacity change from 0 to 4096 [ 157.312910][ T6397] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 157.384998][ T6401] loop3: detected capacity change from 0 to 256 [ 157.418095][ T6397] ntfs3: loop1: failed to convert "c46c" to koi8-r [ 157.438368][ T6401] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 157.917163][ T6413] loop1: detected capacity change from 0 to 1024 [ 158.008046][ T6413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.033963][ T6417] tipc: Started in network mode [ 158.047568][ T6417] tipc: Node identity type_len, cluster identity 4711 [ 158.071736][ T6417] tipc: Enabling of bearer rejected, failed to enable media [ 158.324811][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.726364][ T6403] loop4: detected capacity change from 0 to 40427 [ 158.775180][ T6403] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 158.827386][ T6403] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.867963][ T6403] F2FS-fs (loop4): invalid crc value [ 158.880713][ T6441] loop0: detected capacity change from 0 to 256 [ 158.894577][ T6403] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.047210][ T6403] F2FS-fs (loop4): Start checkpoint disabled! [ 159.065503][ T6423] loop2: detected capacity change from 0 to 32768 [ 159.136738][ T6403] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.144639][ T6403] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 159.166493][ T6423] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.307373][ T4332] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.315929][ T4258] ocfs2: Unmounting device (7,2) on (node local) [ 159.377644][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.496573][ T6453] loop1: detected capacity change from 0 to 1024 [ 159.517715][ T4332] usb 4-1: Using ep0 maxpacket: 8 [ 159.524868][ T4332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.567523][ T4332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.597440][ T4332] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 159.606590][ T4332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.621981][ T6453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 159.676102][ T6453] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 159.703028][ T6453] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 159.727099][ T4332] usb 4-1: config 0 descriptor?? [ 159.796237][ T6453] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.796237][ T6453] [ 159.807749][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.848419][ T6453] EXT4-fs (loop1): Total free blocks count 0 [ 159.854549][ T6453] EXT4-fs (loop1): Free/Dirty block details [ 159.861059][ T6453] EXT4-fs (loop1): free_blocks=68451041280 [ 159.867078][ T6453] EXT4-fs (loop1): dirty_blocks=32 [ 159.872937][ T6453] EXT4-fs (loop1): Block reservation details [ 159.879092][ T6453] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 159.889224][ T6461] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 160.175458][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.200784][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.220826][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.243831][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.269582][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.293158][ T6450] loop0: detected capacity change from 0 to 40427 [ 160.304278][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.316200][ T4332] playstation 0003:054C:0CE6.0008: unknown main item tag 0x0 [ 160.331000][ T6450] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 160.343307][ T4332] playstation 0003:054C:0CE6.0008: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 160.365898][ T6450] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.411434][ T6450] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.448807][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.463570][ T4332] playstation 0003:054C:0CE6.0008: Invalid reportID received, expected 9 got 119 [ 160.498189][ T4332] playstation 0003:054C:0CE6.0008: Failed to retrieve DualSense pairing info: -22 [ 160.527532][ T4332] playstation 0003:054C:0CE6.0008: Failed to get MAC address from DualSense [ 160.536353][ T4332] playstation 0003:054C:0CE6.0008: Failed to create dualsense. [ 160.560226][ T4332] playstation: probe of 0003:054C:0CE6.0008 failed with error -22 [ 160.604069][ T6450] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.619855][ T6450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.687543][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.717094][ T6364] usb 4-1: USB disconnect, device number 4 [ 160.881615][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.921425][ T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 160.931179][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.948387][ T7] usb 5-1: config 0 descriptor?? [ 160.971900][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 161.182241][ T6364] usb 5-1: USB disconnect, device number 9 [ 161.247969][ T7] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 161.374750][ T6489] netlink: 830 bytes leftover after parsing attributes in process `syz.0.763'. [ 161.498074][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.757895][ T6485] loop1: detected capacity change from 0 to 32768 [ 161.863266][ T6485] XFS (loop1): Mounting V5 Filesystem [ 161.931551][ T6501] loop0: detected capacity change from 0 to 4096 [ 161.954386][ T6501] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 161.995357][ T6485] XFS (loop1): Ending clean mount [ 162.156303][ T4250] XFS (loop1): Unmounting Filesystem [ 162.368383][ T6521] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 162.527984][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.847563][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.954486][ T6495] loop2: detected capacity change from 0 to 32768 [ 162.980324][ T6495] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.768 (6495) [ 163.065647][ T6495] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.115952][ T6495] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 163.166217][ T6495] BTRFS info (device loop2): using free space tree [ 163.557838][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.566322][ T6495] BTRFS info (device loop2): enabling ssd optimizations [ 163.577579][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.650693][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.785'. [ 164.004895][ T4258] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.028381][ T6577] netlink: 'syz.0.788': attribute type 12 has an invalid length. [ 164.345448][ T6589] loop1: detected capacity change from 0 to 512 [ 164.445412][ T6589] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.793: casefold flag without casefold feature [ 164.484794][ T6589] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.793: couldn't read orphan inode 15 (err -117) [ 164.608085][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.625353][ T6589] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.655515][ T6600] tmpfs: Bad value for 'uid' [ 164.907852][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 165.631894][ T6617] loop4: detected capacity change from 0 to 8192 [ 165.663545][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.755107][ T6629] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.819623][ T26] audit: type=1800 audit(1731097489.011:26): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.801" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 165.887803][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.913991][ T26] audit: type=1800 audit(1731097489.031:27): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.801" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 166.195218][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 166.670633][ T6619] loop0: detected capacity change from 0 to 32768 [ 166.689478][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.715188][ T6658] netlink: 911 bytes leftover after parsing attributes in process `syz.2.814'. [ 166.765133][ T6658] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 166.805614][ T6663] loop1: detected capacity change from 0 to 512 [ 166.829324][ T6619] XFS (loop0): Mounting V5 Filesystem [ 166.887207][ T6663] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 166.935608][ T6671] : renamed from bond0 [ 166.965007][ T6663] EXT4-fs (loop1): invalid journal inode [ 166.984600][ T6619] XFS (loop0): Ending clean mount [ 167.005875][ T6663] EXT4-fs (loop1): can't get journal size [ 167.068644][ T6663] EXT4-fs (loop1): 1 truncate cleaned up [ 167.074363][ T6663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.084764][ T6677] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 167.125346][ T6663] EXT4-fs warning (device loop1): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 167.144355][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.818'. [ 167.339905][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 167.416382][ T4251] XFS (loop0): Unmounting Filesystem [ 167.589631][ T4332] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.728019][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.787404][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 167.813797][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.847825][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.854430][ T6704] loop2: detected capacity change from 0 to 128 [ 167.870483][ T4332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.886903][ T4332] usb 4-1: no configurations [ 167.896066][ T4332] usb 4-1: can't read configurations, error -22 [ 168.132215][ T6709] loop1: detected capacity change from 0 to 4096 [ 168.174605][ T6709] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 168.311304][ T6709] ntfs3: loop1: failed to convert "c46c" to iso8859-14 [ 168.645795][ T6723] loop3: detected capacity change from 0 to 2048 [ 168.665852][ T6726] loop1: detected capacity change from 0 to 1024 [ 168.677530][ T6723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.761482][ T6723] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 168.778007][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.927586][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.970985][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 169.111496][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 169.212200][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.837'. [ 169.304370][ T6745] loop1: detected capacity change from 0 to 512 [ 169.322967][ T26] audit: type=1326 audit(1731097492.511:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c857e719 code=0x0 [ 169.357756][ T6745] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.416948][ T6745] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.838: invalid indirect mapped block 4294967295 (level 1) [ 169.487506][ T6745] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.838: invalid indirect mapped block 4294967295 (level 1) [ 169.559126][ T6745] EXT4-fs (loop1): 2 truncates cleaned up [ 169.600721][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.694536][ T6745] EXT4-fs error (device loop1): ext4_get_parent:1906: inode #11: comm syz.1.838: bad parent inode number: 3 [ 169.813647][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.880527][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 169.899667][ T6758] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3696. macoff=96 [ 170.292294][ T6769] input: syz0 as /devices/virtual/input/input19 [ 170.857926][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.234192][ T6808] loop2: detected capacity change from 0 to 1024 [ 171.373072][ T6811] loop0: detected capacity change from 0 to 128 [ 171.418737][ T6811] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 171.475423][ T6811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.515480][ T6811] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.859: checksumming directory block 0 [ 171.668845][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 171.891438][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.967707][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.063130][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.096128][ T6799] loop3: detected capacity change from 0 to 40427 [ 172.104140][ T6827] loop0: detected capacity change from 0 to 2048 [ 172.144150][ T6827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.214965][ T6799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.267317][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 172.278149][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.285505][ T6827] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 172.297734][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.309653][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.324422][ T14] usb 2-1: no configurations [ 172.337370][ T14] usb 2-1: can't read configurations, error -22 [ 172.443352][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 172.459029][ T6817] loop2: detected capacity change from 0 to 32768 [ 172.483533][ T6799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.547715][ T6817] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 172.588328][ T6817] JBD2: Ignoring recovery information on journal [ 172.744263][ T6817] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.798902][ T46] kworker/u4:3: attempt to access beyond end of device [ 172.798902][ T46] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.933028][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.097766][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.110306][ T6851] loop0: detected capacity change from 0 to 1024 [ 173.134791][ T4258] ocfs2: Unmounting device (7,2) on (node local) [ 173.352172][ T6854] loop4: detected capacity change from 0 to 128 [ 173.380048][ T6854] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 173.453507][ T6854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.546814][ T6854] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.876: checksumming directory block 0 [ 173.726693][ T6860] loop0: detected capacity change from 0 to 4096 [ 173.768993][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 173.809256][ T6860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.968123][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.065520][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 174.365419][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 174.467376][ T6157] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.657344][ T6157] usb 1-1: Using ep0 maxpacket: 32 [ 174.671801][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.700015][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.731614][ T6157] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.747561][ T6157] usb 1-1: no configurations [ 174.767380][ T6157] usb 1-1: can't read configurations, error -22 [ 174.911209][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 175.007632][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.015856][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.066978][ T6877] loop3: detected capacity change from 0 to 32768 [ 175.099012][ T6877] XFS: ikeep mount option is deprecated. [ 175.181471][ T6877] XFS (loop3): Mounting V5 Filesystem [ 175.201544][ T6883] loop4: detected capacity change from 0 to 32768 [ 175.313224][ T6902] loop2: detected capacity change from 0 to 128 [ 175.346205][ T6885] loop1: detected capacity change from 0 to 32768 [ 175.411769][ T6883] XFS (loop4): Mounting V5 Filesystem [ 175.444304][ T6877] XFS (loop3): Ending clean mount [ 175.510904][ T6883] XFS (loop4): Ending clean mount [ 175.553219][ T6877] XFS (loop3): Quotacheck needed: Please wait. [ 175.576717][ T6885] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 175.658663][ T6885] JBD2: Ignoring recovery information on journal [ 175.692252][ T6905] loop0: detected capacity change from 0 to 32768 [ 175.762626][ T4249] XFS (loop4): Unmounting Filesystem [ 175.766641][ T6905] JBD2: Ignoring recovery information on journal [ 175.774845][ T6913] loop2: detected capacity change from 0 to 128 [ 175.780736][ T6877] XFS (loop3): Quotacheck: Done. [ 175.803387][ T6913] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 175.858351][ T6913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.867130][ T6885] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.902519][ T6913] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.892: checksumming directory block 0 [ 175.979282][ T6905] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 176.038855][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 176.044882][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 176.057758][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.126328][ T4260] XFS (loop3): Unmounting Filesystem [ 176.274574][ T6919] loop2: detected capacity change from 0 to 2048 [ 176.324372][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 176.416654][ T6919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.584499][ T6919] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.756740][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 176.784782][ T6926] loop4: detected capacity change from 0 to 4096 [ 176.919537][ T6926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.071214][ T6925] loop1: detected capacity change from 0 to 32768 [ 177.087884][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.127757][ T6925] XFS (loop1): Mounting V5 Filesystem [ 177.189445][ T6925] XFS (loop1): Ending clean mount [ 177.237180][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 177.372093][ T4250] XFS (loop1): Unmounting Filesystem [ 178.047706][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.127881][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.411337][ T6969] vxcan1: tx address claim with different name [ 178.722031][ T6958] loop3: detected capacity change from 0 to 32768 [ 178.764614][ T6973] loop1: detected capacity change from 0 to 4096 [ 178.765619][ T6976] loop4: detected capacity change from 0 to 128 [ 178.787671][ T6958] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 178.813023][ T6958] JBD2: Ignoring recovery information on journal [ 178.920101][ T6973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.945277][ T6963] loop0: detected capacity change from 0 to 32768 [ 178.961714][ T6960] loop2: detected capacity change from 0 to 32768 [ 178.978700][ T6958] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.022449][ T6960] XFS: ikeep mount option is deprecated. [ 179.034342][ T6963] XFS (loop0): Mounting V5 Filesystem [ 179.124224][ T6960] XFS (loop2): Mounting V5 Filesystem [ 179.195068][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.196448][ T4260] ocfs2: Unmounting device (7,3) on (node local) [ 179.245120][ T6963] XFS (loop0): Ending clean mount [ 179.335514][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 179.369942][ T26] audit: type=1326 audit(1731097502.561:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.4.918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8def97e719 code=0x0 [ 179.386317][ T6963] XFS (loop0): Quotacheck needed: Please wait. [ 179.400697][ T6960] XFS (loop2): Ending clean mount [ 179.415699][ T6960] XFS (loop2): Quotacheck needed: Please wait. [ 179.464698][ T6963] XFS (loop0): Quotacheck: Done. [ 179.558779][ T4251] XFS (loop0): Unmounting Filesystem [ 179.585949][ T6960] XFS (loop2): Quotacheck: Done. [ 179.700463][ T4258] XFS (loop2): Unmounting Filesystem [ 180.059924][ T7010] loop3: detected capacity change from 0 to 32768 [ 180.090188][ T7010] [ 180.090188][ T7010] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.090188][ T7010] [ 180.151290][ T7010] find_entry called with index = 0 [ 180.165107][ T7010] read_mapping_page failed! [ 180.169934][ T7010] ERROR: (device loop3): txCommit: [ 180.169934][ T7010] [ 180.218587][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.242581][ T4260] [ 180.242581][ T4260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.242581][ T4260] [ 180.272580][ T4260] [ 180.272580][ T4260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.272580][ T4260] [ 180.533933][ T7021] vxcan1: tx address claim with different name [ 180.975135][ T7019] loop1: detected capacity change from 0 to 32768 [ 181.093433][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.093952][ T7019] XFS (loop1): Mounting V5 Filesystem [ 181.178893][ T7043] loop0: detected capacity change from 0 to 256 [ 181.218891][ T7043] exfat: Deprecated parameter 'utf8' [ 181.234284][ T7019] XFS (loop1): Ending clean mount [ 181.247962][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.300324][ T7043] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 181.384375][ T4250] XFS (loop1): Unmounting Filesystem [ 181.439870][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.458808][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 181.751787][ T7050] vivid-007: disconnect [ 181.771375][ T7049] vivid-007: reconnect [ 182.036840][ T7036] loop2: detected capacity change from 0 to 40427 [ 182.095679][ T7029] loop4: detected capacity change from 0 to 32768 [ 182.162035][ T7029] JBD2: Ignoring recovery information on journal [ 182.176682][ T7036] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.253471][ T7029] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 182.287652][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.365759][ T7036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.452779][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 182.563129][ T4258] syz-executor: attempt to access beyond end of device [ 182.563129][ T4258] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.687887][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.974238][ T7052] loop0: detected capacity change from 0 to 40427 [ 183.056335][ T7052] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.218057][ T7052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.328088][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.334908][ T7054] loop1: detected capacity change from 0 to 32768 [ 183.363315][ T7054] XFS: ikeep mount option is deprecated. [ 183.435221][ T7054] XFS (loop1): Mounting V5 Filesystem [ 183.459040][ T9] kworker/u4:0: attempt to access beyond end of device [ 183.459040][ T9] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.507703][ T7062] loop3: detected capacity change from 0 to 32768 [ 183.587538][ T7054] XFS (loop1): Ending clean mount [ 183.614533][ T7062] XFS (loop3): Mounting V5 Filesystem [ 183.630225][ T7054] XFS (loop1): Quotacheck needed: Please wait. [ 183.716754][ T7064] loop4: detected capacity change from 0 to 32768 [ 183.736886][ T7064] [ 183.736886][ T7064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.736886][ T7064] [ 183.752759][ T7062] XFS (loop3): Ending clean mount [ 183.761930][ T7054] XFS (loop1): Quotacheck: Done. [ 183.781878][ T7062] XFS (loop3): Quotacheck needed: Please wait. [ 183.860629][ T7064] find_entry called with index = 0 [ 183.861322][ T7062] XFS (loop3): Quotacheck: Done. [ 183.891247][ T7064] read_mapping_page failed! [ 183.895831][ T7064] ERROR: (device loop4): txCommit: [ 183.895831][ T7064] [ 183.910490][ T4250] XFS (loop1): Unmounting Filesystem [ 184.002952][ T4249] [ 184.002952][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.002952][ T4249] [ 184.013987][ T4260] XFS (loop3): Unmounting Filesystem [ 184.016710][ T4249] [ 184.016710][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.016710][ T4249] [ 184.127536][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.382141][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.422086][ T7099] loop1: detected capacity change from 0 to 4096 [ 184.448271][ T7099] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 184.490642][ T7102] vivid-007: disconnect [ 184.495595][ T7100] vivid-007: reconnect [ 184.519189][ T7099] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 184.536202][ T7099] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 184.545754][ T7099] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 184.560596][ T7099] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 184.606095][ T7099] ntfs: volume version 3.1. [ 185.119760][ T7103] loop2: detected capacity change from 0 to 32768 [ 185.241352][ T7103] XFS (loop2): Mounting V5 Filesystem [ 185.304540][ T7107] loop1: detected capacity change from 0 to 32768 [ 185.340498][ T7107] JBD2: Ignoring recovery information on journal [ 185.385131][ T7103] XFS (loop2): Ending clean mount [ 185.420578][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.454539][ T7107] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 185.573025][ T4258] XFS (loop2): Unmounting Filesystem [ 185.654287][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 185.884567][ T7105] loop4: detected capacity change from 0 to 40427 [ 185.989461][ T7105] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.187580][ T7105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 186.373807][ T4249] syz-executor: attempt to access beyond end of device [ 186.373807][ T4249] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.474003][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.965472][ T7124] loop3: detected capacity change from 0 to 32768 [ 187.064111][ T7124] XFS (loop3): Mounting V5 Filesystem [ 187.124060][ T7133] loop1: detected capacity change from 0 to 32768 [ 187.130453][ T7124] XFS (loop3): Ending clean mount [ 187.167622][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.232742][ T7133] XFS (loop1): Mounting V5 Filesystem [ 187.249891][ T7135] loop0: detected capacity change from 0 to 32768 [ 187.290285][ T7135] [ 187.290285][ T7135] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.290285][ T7135] [ 187.320538][ T4260] XFS (loop3): Unmounting Filesystem [ 187.346505][ T7135] find_entry called with index = 0 [ 187.372253][ T7153] loop4: detected capacity change from 0 to 512 [ 187.379933][ T7135] read_mapping_page failed! [ 187.384541][ T7135] ERROR: (device loop0): txCommit: [ 187.384541][ T7135] [ 187.428008][ T7153] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 187.456507][ T7153] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 187.473714][ T7153] EXT4-fs (loop4): group descriptors corrupted! [ 187.506700][ T7155] loop2: detected capacity change from 0 to 4096 [ 187.516840][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.524656][ T7155] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 187.559325][ T4251] [ 187.559325][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.559325][ T4251] [ 187.576786][ T7133] XFS (loop1): Ending clean mount [ 187.616211][ T4251] [ 187.616211][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.616211][ T4251] [ 187.643765][ T7133] XFS (loop1): Quotacheck needed: Please wait. [ 187.677112][ T7155] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 187.700565][ T7133] XFS (loop1): Quotacheck: Done. [ 187.729505][ T7155] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 187.757408][ T7155] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 187.803663][ T7155] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 187.857408][ T4250] XFS (loop1): Unmounting Filesystem [ 187.924209][ T7155] ntfs: volume version 3.1. [ 188.476582][ T7172] loop4: detected capacity change from 0 to 2048 [ 188.523265][ T7172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.532765][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.846234][ T7183] loop4: detected capacity change from 0 to 512 [ 188.876206][ T7183] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.909267][ T7183] EXT4-fs (loop4): orphan cleanup on readonly fs [ 188.929889][ T7183] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.943099][ T7185] loop0: detected capacity change from 0 to 2048 [ 188.973313][ T7185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.981780][ T7183] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 189.017683][ T7183] EXT4-fs (loop4): 1 truncate cleaned up [ 189.023526][ T7183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.159579][ T7194] loop3: detected capacity change from 0 to 512 [ 189.178873][ T7194] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 189.234758][ T7194] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 189.235989][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 189.277512][ T7194] EXT4-fs (loop3): group descriptors corrupted! [ 189.595573][ T7200] loop0: detected capacity change from 0 to 4096 [ 189.601504][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.678475][ T7200] __ntfs_warning: 1 callbacks suppressed [ 189.678493][ T7200] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 189.749929][ T7200] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 189.762380][ T7200] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 189.787364][ T7200] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 189.836548][ T7200] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 189.879113][ T7200] ntfs: volume version 3.1. [ 190.207483][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.451518][ T7208] loop3: detected capacity change from 0 to 32768 [ 190.562846][ T7208] XFS (loop3): Mounting V5 Filesystem [ 190.635062][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.637427][ T7206] loop4: detected capacity change from 0 to 40427 [ 190.655582][ T7208] XFS (loop3): Ending clean mount [ 190.807819][ T7206] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.818827][ T4260] XFS (loop3): Unmounting Filesystem [ 190.954196][ T7236] loop2: detected capacity change from 0 to 512 [ 190.971736][ T7213] loop1: detected capacity change from 0 to 40427 [ 190.979433][ T7236] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.010273][ T7236] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.034946][ T7236] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 191.063825][ T7236] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.101460][ T7213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.121189][ T7206] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.148804][ T7236] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 191.181743][ T7236] EXT4-fs (loop2): 1 truncate cleaned up [ 191.189064][ T7236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.198263][ T7213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.368099][ T4250] syz-executor: attempt to access beyond end of device [ 191.368099][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.384808][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 191.424961][ T5042] kworker/u4:8: attempt to access beyond end of device [ 191.424961][ T5042] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.443067][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 191.635436][ T7252] netlink: 9 bytes leftover after parsing attributes in process `syz.3.988'. [ 192.146911][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 192.752483][ T7281] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1008'. [ 193.100911][ T7263] loop0: detected capacity change from 0 to 32768 [ 193.191275][ T7263] XFS (loop0): Mounting V5 Filesystem [ 193.363796][ T7263] XFS (loop0): Ending clean mount [ 193.581539][ T4251] XFS (loop0): Unmounting Filesystem [ 194.082517][ T7283] loop1: detected capacity change from 0 to 40427 [ 194.176915][ T7283] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.212456][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218864][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.427095][ T7283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 194.543294][ T7308] loop3: detected capacity change from 0 to 32768 [ 194.571188][ T7308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1017 (7308) [ 194.624265][ T7308] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.645098][ T7308] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 194.656305][ T5806] kworker/u4:14: attempt to access beyond end of device [ 194.656305][ T5806] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.694378][ T7308] BTRFS info (device loop3): setting nodatacow, compression disabled [ 194.716522][ T7308] BTRFS info (device loop3): setting datacow [ 194.743581][ T7308] BTRFS info (device loop3): doing ref verification [ 194.763221][ T7308] BTRFS info (device loop3): force clearing of disk cache [ 194.781142][ T7308] BTRFS info (device loop3): turning off barriers [ 194.800781][ T7308] BTRFS info (device loop3): enabling ssd optimizations [ 194.808616][ T7308] BTRFS info (device loop3): using spread ssd allocation scheme [ 194.816577][ T7308] BTRFS info (device loop3): setting datasum [ 194.826559][ T7308] BTRFS info (device loop3): using free space tree [ 195.032081][ T7308] BTRFS info (device loop3): rebuilding free space tree [ 195.470999][ T4260] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.221308][ T7407] program syz.1.1051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.426380][ T7404] loop2: detected capacity change from 0 to 8192 [ 196.478364][ T7404] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.500482][ T7404] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 196.509985][ T7404] REISERFS (device loop2): using ordered data mode [ 196.516640][ T7404] reiserfs: using flush barriers [ 196.523803][ T7404] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.540850][ T7404] REISERFS (device loop2): checking transaction log (loop2) [ 196.549913][ T7404] REISERFS (device loop2): Using r5 hash to sort names [ 196.569654][ T7404] reiserfs: enabling write barrier flush mode [ 196.583654][ T7404] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 197.334765][ T7443] program syz.4.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.621491][ T7449] loop4: detected capacity change from 0 to 8192 [ 197.656637][ T7449] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.678527][ T7449] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 197.688817][ T7449] REISERFS (device loop4): using ordered data mode [ 197.695568][ T7449] reiserfs: using flush barriers [ 197.709161][ T7449] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.710938][ T7425] loop2: detected capacity change from 0 to 40427 [ 197.734492][ T7449] REISERFS (device loop4): checking transaction log (loop4) [ 197.747088][ T7449] REISERFS (device loop4): Using r5 hash to sort names [ 197.754899][ T6157] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.784106][ T7449] reiserfs: enabling write barrier flush mode [ 197.793176][ T7425] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.796637][ T7449] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 197.850696][ T7425] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.968924][ T4906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.987548][ T6157] usb 2-1: Using ep0 maxpacket: 16 [ 198.005664][ T6157] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 198.045556][ T6157] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 198.090016][ T33] kworker/u4:2: attempt to access beyond end of device [ 198.090016][ T33] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.105353][ T6157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.117061][ T6157] usb 2-1: Product: syz [ 198.124682][ T6157] usb 2-1: Manufacturer: syz [ 198.150723][ T6157] usb 2-1: SerialNumber: syz [ 198.191265][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.204201][ T6157] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 198.294453][ T7458] loop0: detected capacity change from 0 to 8192 [ 198.329391][ T7458] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.368914][ T7458] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 198.409695][ T7] usb 2-1: USB disconnect, device number 8 [ 198.417659][ T7458] REISERFS (device loop0): using ordered data mode [ 198.424334][ T7458] reiserfs: using flush barriers [ 198.441302][ T7458] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.458452][ T7458] REISERFS (device loop0): checking transaction log (loop0) [ 198.478709][ T7458] REISERFS (device loop0): Using r5 hash to sort names [ 198.514732][ T7458] reiserfs: enabling write barrier flush mode [ 198.524699][ T7458] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 198.554603][ T7470] tap0: tun_chr_ioctl cmd 1074025677 [ 198.567498][ T7470] tap0: linktype set to 65534 [ 198.813469][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.873239][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.884830][ T7481] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 198.903872][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.959997][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.999641][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.030760][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.047428][ T6174] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.069624][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.237472][ T6174] usb 1-1: Using ep0 maxpacket: 8 [ 199.244532][ T6174] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 199.274330][ T6174] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 199.311231][ T7495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.333310][ T6174] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.356428][ T6174] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.399542][ T6174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.418872][ T6174] usb 1-1: Product: syz [ 199.423086][ T6174] usb 1-1: Manufacturer: syz [ 199.447326][ T6174] usb 1-1: SerialNumber: syz [ 199.715084][ T7502] loop1: detected capacity change from 0 to 8192 [ 199.751743][ T7502] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.765858][ T7502] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 199.779346][ T7502] REISERFS (device loop1): using ordered data mode [ 199.785992][ T7502] reiserfs: using flush barriers [ 199.801482][ T7502] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.835701][ T7502] REISERFS (device loop1): checking transaction log (loop1) [ 199.869135][ T7502] REISERFS (device loop1): Using r5 hash to sort names [ 199.978384][ T7502] reiserfs: enabling write barrier flush mode [ 200.007117][ T7502] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 200.100565][ T6174] usb 1-1: 0:2 : does not exist [ 200.308242][ T7497] loop4: detected capacity change from 0 to 40427 [ 200.313609][ T6174] usb 1-1: USB disconnect, device number 11 [ 200.435530][ T7497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 200.520969][ T7497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 200.599928][ T7527] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 200.624690][ T7525] tap0: tun_chr_ioctl cmd 1074025677 [ 200.637497][ T6157] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.645417][ T7525] tap0: linktype set to 65534 [ 200.706895][ T46] kworker/u4:3: attempt to access beyond end of device [ 200.706895][ T46] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.847584][ T6157] usb 4-1: Using ep0 maxpacket: 16 [ 200.854744][ T6157] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.921934][ T6157] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 200.978518][ T6157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.986667][ T6157] usb 4-1: Product: syz [ 201.022496][ T6157] usb 4-1: Manufacturer: syz [ 201.027153][ T6157] usb 4-1: SerialNumber: syz [ 201.072557][ T6157] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 201.285236][ T4906] usb 4-1: USB disconnect, device number 7 [ 201.868594][ T7532] loop1: detected capacity change from 0 to 40427 [ 201.983361][ T7532] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.101826][ T7574] loop0: detected capacity change from 0 to 1024 [ 202.124341][ T7574] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 202.181070][ T7532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.357354][ T6174] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.365947][ T5822] kworker/u4:20: attempt to access beyond end of device [ 202.365947][ T5822] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.483798][ T7581] xt_bpf: check failed: parse error [ 202.537484][ T6174] usb 3-1: Using ep0 maxpacket: 8 [ 202.550361][ T6174] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 202.575627][ T6174] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 202.606357][ T6174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.623847][ T6174] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.633671][ T6174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.648156][ T6174] usb 3-1: Product: syz [ 202.652498][ T6174] usb 3-1: Manufacturer: syz [ 202.657833][ T6174] usb 3-1: SerialNumber: syz [ 203.269144][ T7579] loop4: detected capacity change from 0 to 32768 [ 203.310569][ T6174] usb 3-1: 0:2 : does not exist [ 203.338376][ T7579] JBD2: Ignoring recovery information on journal [ 203.437100][ T7579] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 203.488032][ T6174] net_ratelimit: 11 callbacks suppressed [ 203.488050][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.551957][ T7579] (syz.4.1125,7579,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 203.554881][ T6165] usb 3-1: USB disconnect, device number 6 [ 203.808312][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 203.826671][ T7599] loop1: detected capacity change from 0 to 2048 [ 203.957436][ T7600] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.047730][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.358019][ T7589] loop3: detected capacity change from 0 to 32768 [ 204.379901][ T7589] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1128 (7589) [ 204.412454][ T7589] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 204.431745][ T7589] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 204.469521][ T7589] BTRFS info (device loop3): using free space tree [ 204.497642][ T6174] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 204.566668][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.699180][ T6174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.737293][ T6174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 204.740017][ T7589] BTRFS info (device loop3): enabling ssd optimizations [ 204.813302][ T6174] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 204.849727][ T6174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.882993][ T6174] usb 5-1: Product: syz [ 204.887898][ T6174] usb 5-1: Manufacturer: syz [ 204.892548][ T6174] usb 5-1: SerialNumber: syz [ 204.943621][ T7606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.978100][ T4260] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 205.171769][ T7604] loop0: detected capacity change from 0 to 40427 [ 205.202714][ T6174] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 205.209091][ T7604] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 205.287381][ T4296] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.307648][ T7604] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 205.354755][ T7604] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 205.417880][ C1] usblp0: nonzero read bulk status received: -71 [ 205.428621][ T7606] usblp0: error -71 reading from printer [ 205.437219][ C0] usblp0: nonzero read bulk status received: -71 [ 205.490002][ T7] usb 5-1: USB disconnect, device number 10 [ 205.507366][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 205.517703][ T4296] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.543023][ T7] usblp0: removed [ 205.564822][ T4296] usb 2-1: config 0 has no interface number 0 [ 205.602260][ T4296] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.641431][ T7604] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 205.659213][ T4296] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.679680][ T7604] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.703794][ T4296] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 205.743676][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.768455][ T4296] usb 2-1: config 0 descriptor?? [ 205.774972][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.847946][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.858374][ T4251] syz-executor: attempt to access beyond end of device [ 205.858374][ T4251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.874884][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.367319][ T7647] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.395629][ T4296] uclogic 0003:28BD:0071.000A: pen parameters not found [ 206.412946][ T4296] uclogic 0003:28BD:0071.000A: interface is invalid, ignoring [ 206.567414][ T7647] usb 4-1: Using ep0 maxpacket: 8 [ 206.574480][ T7647] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 206.592960][ T7669] loop2: detected capacity change from 0 to 1024 [ 206.607474][ T7647] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 206.628378][ T4296] usb 2-1: USB disconnect, device number 9 [ 206.628549][ T7647] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.686486][ T7647] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.726499][ T7647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.736633][ T7647] usb 4-1: Product: syz [ 206.756927][ T7647] usb 4-1: Manufacturer: syz [ 206.761976][ T7647] usb 4-1: SerialNumber: syz [ 206.781125][ T5806] hfsplus: b-tree write err: -5, ino 4 [ 206.927518][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.087593][ T4905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.166833][ T7665] loop4: detected capacity change from 0 to 32768 [ 207.402460][ T7647] usb 4-1: 0:2 : does not exist [ 207.643218][ T7647] usb 4-1: USB disconnect, device number 8 [ 207.967488][ T7648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.035730][ T7717] loop1: detected capacity change from 0 to 1024 [ 208.133040][ T7721] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 208.411895][ T33] hfsplus: b-tree write err: -5, ino 4 [ 208.493057][ T7727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.772593][ T7648] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 208.946598][ T7748] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 208.955060][ T7748] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 208.957501][ T7647] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.965999][ T7748] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 209.008874][ T7648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.026665][ T7648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.038326][ T7648] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 209.053983][ T7648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.064947][ T7648] usb 1-1: config 0 descriptor?? [ 209.072577][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.167458][ T7647] usb 4-1: Using ep0 maxpacket: 16 [ 209.175507][ T7647] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.195676][ T7647] usb 4-1: config 0 has no interface number 0 [ 209.203120][ T7647] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.216817][ T7741] loop2: detected capacity change from 0 to 32768 [ 209.222085][ T7647] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.234298][ T7647] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 209.243792][ T7647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.274316][ T7647] usb 4-1: config 0 descriptor?? [ 209.501002][ T7648] sony 0003:054C:024B.000B: unexpected long global item [ 209.517953][ T7648] sony 0003:054C:024B.000B: parse failed [ 209.528323][ T7648] sony: probe of 0003:054C:024B.000B failed with error -22 [ 209.575607][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.597486][ T4297] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 209.711925][ T27] usb 1-1: USB disconnect, device number 12 [ 209.787458][ T4297] usb 2-1: Using ep0 maxpacket: 8 [ 209.794922][ T4297] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 209.814743][ T4297] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 209.835424][ T4297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.858789][ T4297] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.888049][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.898507][ T7647] uclogic 0003:28BD:0071.000C: pen parameters not found [ 209.906224][ T7647] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 209.922588][ T7764] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 209.924214][ T4297] usb 2-1: Product: syz [ 209.951355][ T4297] usb 2-1: Manufacturer: syz [ 209.956251][ T4297] usb 2-1: SerialNumber: syz [ 210.118450][ T27] usb 4-1: USB disconnect, device number 9 [ 210.132120][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.580708][ T4297] usb 2-1: 0:2 : does not exist [ 210.782656][ T7789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.810100][ T27] usb 2-1: USB disconnect, device number 10 [ 211.167479][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.329100][ T7800] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 211.345354][ T7800] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 211.369670][ T7800] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 211.487870][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.821430][ T7796] loop0: detected capacity change from 0 to 32768 [ 211.977850][ T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.169640][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.206020][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.234267][ T27] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 212.235968][ T7816] loop2: detected capacity change from 0 to 1024 [ 212.255219][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.276779][ T27] usb 5-1: config 0 descriptor?? [ 212.288124][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.431756][ T9] hfsplus: b-tree write err: -5, ino 4 [ 212.617609][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.718292][ T27] sony 0003:054C:024B.000D: unexpected long global item [ 212.720373][ T4296] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 212.730860][ T27] sony 0003:054C:024B.000D: parse failed [ 212.780063][ T27] sony: probe of 0003:054C:024B.000D failed with error -22 [ 212.939387][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.965381][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.995832][ T4296] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 213.012093][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.023374][ T4905] usb 5-1: USB disconnect, device number 11 [ 213.038568][ T4296] usb 1-1: config 0 descriptor?? [ 213.327530][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.456945][ T4296] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0 [ 213.486134][ T4296] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0 [ 213.496256][ T4296] lenovo 0003:17EF:6067.000E: item fetching failed at offset 2/7 [ 213.525217][ T4296] lenovo 0003:17EF:6067.000E: hid_parse failed [ 213.552506][ T4296] lenovo: probe of 0003:17EF:6067.000E failed with error -22 [ 213.660118][ T27] usb 1-1: USB disconnect, device number 13 [ 214.058335][ T7864] capability: warning: `syz.4.1217' uses 32-bit capabilities (legacy support in use) [ 214.314620][ T7846] loop3: detected capacity change from 0 to 32768 [ 214.327060][ T7871] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1233'. [ 214.367586][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.693749][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.837494][ T4905] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.044821][ T4905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.082986][ T4905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.115534][ T4905] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 215.139176][ T4905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.174839][ T4905] usb 3-1: config 0 descriptor?? [ 215.410001][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.596964][ T4905] sony 0003:054C:024B.000F: unexpected long global item [ 215.617835][ T4905] sony 0003:054C:024B.000F: parse failed [ 215.623555][ T4905] sony: probe of 0003:054C:024B.000F failed with error -22 [ 215.657518][ T4905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.806730][ T4905] usb 3-1: USB disconnect, device number 7 [ 215.897474][ T7920] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1243'. [ 216.053988][ T7926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.073307][ T7926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.097071][ T7899] loop0: detected capacity change from 0 to 32768 [ 216.102654][ T7926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.136842][ T7899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1234 (7899) [ 216.227582][ T7899] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.248650][ T7899] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 216.287434][ T7899] BTRFS info (device loop0): enabling disk space caching [ 216.294541][ T7899] BTRFS info (device loop0): enabling auto defrag [ 216.337321][ T7899] BTRFS info (device loop0): doing ref verification [ 216.344001][ T7899] BTRFS info (device loop0): use no compression [ 216.407300][ T7899] BTRFS info (device loop0): force clearing of disk cache [ 216.414720][ T7899] BTRFS info (device loop0): disabling disk space caching [ 216.448823][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.508952][ T7940] binder: 7936:7940 ioctl 40046205 0 returned -22 [ 216.742575][ T7899] BTRFS info (device loop0): enabling ssd optimizations [ 216.756367][ T7899] BTRFS info (device loop0): rebuilding free space tree [ 216.801166][ T7899] BTRFS info (device loop0): disabling free space tree [ 216.813490][ T7899] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.838023][ T7899] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.357733][ T4251] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.499695][ T7977] device hsr0 entered promiscuous mode [ 217.511937][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.694433][ T7983] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1264'. [ 217.757867][ T7977] device hsr0 left promiscuous mode [ 218.529315][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.864010][ T8015] device hsr0 entered promiscuous mode [ 218.885175][ T8015] device hsr0 left promiscuous mode [ 220.345342][ T8052] device hsr0 entered promiscuous mode [ 220.384513][ T8052] device hsr0 left promiscuous mode [ 220.797876][ T8064] net_ratelimit: 1 callbacks suppressed [ 220.797899][ T8064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.628055][ T26] audit: type=1326 audit(1731097544.821:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 221.707347][ T26] audit: type=1326 audit(1731097544.851:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 221.729911][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.806637][ T26] audit: type=1326 audit(1731097544.921:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 221.883557][ T26] audit: type=1326 audit(1731097544.921:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 221.908798][ T26] audit: type=1326 audit(1731097544.961:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f73b81b0805 code=0x7ffc0000 [ 221.935017][ T26] audit: type=1326 audit(1731097544.961:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 221.958285][ T26] audit: type=1326 audit(1731097544.961:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 221.980454][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.997426][ T26] audit: type=1326 audit(1731097544.961:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 222.035712][ T26] audit: type=1326 audit(1731097545.121:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f73b817e719 code=0x7ffc0000 [ 222.240124][ T8103] device hsr0 entered promiscuous mode [ 222.277927][ T8103] device hsr0 left promiscuous mode [ 222.863958][ T26] audit: type=1326 audit(1731097546.051:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c857e719 code=0x7ffc0000 [ 222.987545][ T8128] loop3: detected capacity change from 0 to 1024 [ 223.219659][ T4260] hfsplus: node 4:3 still has 1 user(s)! [ 223.542826][ T8153] loop2: detected capacity change from 0 to 128 [ 223.611451][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 223.736675][ T8156] loop1: detected capacity change from 0 to 4096 [ 223.807113][ T8156] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 223.840077][ T8164] loop0: detected capacity change from 0 to 64 [ 223.882019][ T8156] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 223.962570][ T8156] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 224.009975][ T8169] loop4: detected capacity change from 0 to 164 [ 224.226630][ T8171] loop2: detected capacity change from 0 to 1024 [ 224.419142][ T8179] syz.2.1352: attempt to access beyond end of device [ 224.419142][ T8179] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 224.466710][ T8181] loop0: detected capacity change from 0 to 16 [ 224.532858][ T8181] erofs: (device loop0): mounted with root inode @ nid 36. [ 224.839525][ T8192] loop4: detected capacity change from 0 to 64 [ 225.034488][ T8160] loop3: detected capacity change from 0 to 32768 [ 225.045298][ T8160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1347 (8160) [ 225.097589][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.127096][ T8160] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.157409][ T8160] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 225.176417][ T8160] BTRFS info (device loop3): use zlib compression, level 3 [ 225.196655][ T8160] BTRFS info (device loop3): using free space tree [ 225.307588][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 225.315182][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.349249][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.386594][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.417161][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.459676][ T8160] BTRFS info (device loop3): enabling ssd optimizations [ 225.477400][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.517181][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.649626][ T4260] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.735682][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 225.749276][ T27] usbtmc 3-1:16.0: can't read capabilities [ 225.980300][ T27] usb 3-1: USB disconnect, device number 8 [ 226.356478][ T8241] loop3: detected capacity change from 0 to 512 [ 226.388731][ T8241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.497114][ T8225] loop4: detected capacity change from 0 to 32768 [ 226.505111][ T8225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1372 (8225) [ 226.521778][ T8241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 226.536495][ T8241] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.547802][ T8225] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.558089][ T8225] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 226.566802][ T8225] BTRFS info (device loop4): using free space tree [ 226.651218][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 226.710289][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 226.925914][ T8276] netlink: 'syz.0.1385': attribute type 6 has an invalid length. [ 226.991430][ T8270] loop3: detected capacity change from 0 to 4096 [ 227.018939][ T8225] BTRFS info (device loop4): enabling ssd optimizations [ 227.054551][ T8283] loop0: detected capacity change from 0 to 8 [ 227.065659][ T8284] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.187393][ T4903] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 227.235901][ T4249] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.348574][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 227.348592][ T26] audit: type=1326 audit(1731097550.531:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.0.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c857e719 code=0x0 [ 227.384931][ T4903] usb 3-1: Using ep0 maxpacket: 8 [ 227.414615][ T4903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 227.434520][ T4903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.454033][ T4903] usb 3-1: Product: syz [ 227.473137][ T4903] usb 3-1: Manufacturer: syz [ 227.478221][ T4903] usb 3-1: SerialNumber: syz [ 227.508459][ T4903] usb 3-1: config 0 descriptor?? [ 227.736394][ T4903] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 227.747381][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 227.859305][ T8292] loop3: detected capacity change from 0 to 32768 [ 227.880846][ T8292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1390 (8292) [ 227.918024][ T8292] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.942195][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 227.949695][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.972179][ T8292] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 227.985273][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.001123][ T8292] BTRFS info (device loop3): using free space tree [ 228.009174][ T27] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 228.021182][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.034712][ T27] usb 2-1: config 0 descriptor?? [ 228.187766][ T8292] BTRFS info (device loop3): enabling ssd optimizations [ 228.345988][ T4903] usb write operation failed. (-71) [ 228.366101][ T4903] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 228.382155][ T4903] dvbdev: DVB: registering new adapter (Terratec H7) [ 228.390582][ T4260] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.407393][ T4903] usb 3-1: media controller created [ 228.423324][ T4903] usb read operation failed. (-71) [ 228.446847][ T4903] usb write operation failed. (-71) [ 228.450865][ T27] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 228.454660][ T8323] loop4: detected capacity change from 0 to 256 [ 228.471105][ T4903] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 228.503453][ T4903] usb 3-1: USB disconnect, device number 9 [ 228.512753][ T27] ft260 0003:0403:6030.0010: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 228.648143][ T27] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 228.849261][ T27] ft260 0003:0403:6030.0010: failed to retrieve system status [ 228.862503][ T27] ft260: probe of 0003:0403:6030.0010 failed with error -71 [ 228.913420][ T27] usb 2-1: USB disconnect, device number 11 [ 229.279833][ T8344] loop4: detected capacity change from 0 to 256 [ 229.339666][ T8344] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.372014][ T8348] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1410'. [ 229.767391][ T4909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.947361][ T4909] usb 2-1: Using ep0 maxpacket: 16 [ 229.961268][ T4909] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 229.987401][ T4909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.005756][ T4909] usb 2-1: Product: syz [ 230.010462][ T4909] usb 2-1: Manufacturer: syz [ 230.015307][ T4909] usb 2-1: SerialNumber: syz [ 230.055995][ T4909] r8152-cfgselector 2-1: config 0 descriptor?? [ 230.281598][ T4909] r8152-cfgselector 2-1: Unknown version 0x0000 [ 230.291787][ T8355] loop3: detected capacity change from 0 to 32768 [ 230.307970][ T4909] r8152-cfgselector 2-1: Unknown version 0x0000 [ 230.323283][ T4909] r8152-cfgselector 2-1: bad CDC descriptors [ 230.338075][ T4909] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 230.435759][ T8355] XFS (loop3): Mounting V5 Filesystem [ 230.446492][ T8361] loop0: detected capacity change from 0 to 32768 [ 230.482607][ T8381] loop4: detected capacity change from 0 to 128 [ 230.518565][ T26] audit: type=1800 audit(1731097553.711:53): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1415" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 230.523361][ T8355] XFS (loop3): Ending clean mount [ 230.555155][ T4909] usb 2-1: USB disconnect, device number 12 [ 230.785543][ T4260] XFS (loop3): Unmounting Filesystem [ 230.863765][ T8372] loop2: detected capacity change from 0 to 32768 [ 231.149771][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 231.619351][ T8403] loop0: detected capacity change from 0 to 512 [ 231.685696][ T8403] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.721744][ T8403] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 231.733571][ T8403] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 231.749008][ T8403] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 231.780393][ T8403] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1432: bg 0: block 97: padding at end of block bitmap is not set [ 231.873233][ T8403] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 231.905263][ T8403] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #15: comm syz.0.1432: corrupted xattr block 19 [ 231.925995][ T8403] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 231.935591][ T8403] EXT4-fs (loop0): 1 orphan inode deleted [ 231.962665][ T8403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.987676][ T6163] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.062602][ T8418] loop2: detected capacity change from 0 to 4096 [ 232.087969][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 232.179585][ T6163] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 232.197718][ T6163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.228758][ T6163] usb 5-1: config 0 descriptor?? [ 232.287738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.502818][ T8428] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1442'. [ 232.657963][ T6163] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 233.077151][ T6163] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 233.093385][ T8422] loop1: detected capacity change from 0 to 32768 [ 233.102961][ T8422] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.1440 (8422) [ 233.121942][ T8422] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 233.140988][ T8422] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.153985][ T8422] BTRFS info (device loop1): using free space tree [ 233.253842][ T8422] BTRFS info (device loop1): enabling ssd optimizations [ 233.340188][ T8458] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1447'. [ 233.377700][ T6163] usb 5-1: USB disconnect, device number 12 [ 233.630019][ T4250] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 233.815466][ T8462] loop0: detected capacity change from 0 to 8192 [ 233.873269][ T8462] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.081982][ T8470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1456'. [ 234.618989][ T8486] loop0: detected capacity change from 0 to 64 [ 234.662725][ T8484] ================================================================== [ 234.670857][ T8484] BUG: KASAN: use-after-free in dev_map_enqueue+0x3c/0x340 [ 234.678202][ T8484] Read of size 8 at addr ffff888053a2fe00 by task syz.2.1461/8484 [ 234.686141][ T8484] [ 234.688510][ T8484] CPU: 1 PID: 8484 Comm: syz.2.1461 Not tainted 6.1.116-syzkaller #0 [ 234.696611][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.706798][ T8484] Call Trace: [ 234.710111][ T8484] [ 234.713120][ T8484] dump_stack_lvl+0x1e3/0x2cb [ 234.717843][ T8484] ? nf_tcp_handle_invalid+0x642/0x642 [ 234.723358][ T8484] ? panic+0x764/0x764 [ 234.727508][ T8484] ? _printk+0xd1/0x111 [ 234.731708][ T8484] ? __virt_addr_valid+0x17f/0x530 [ 234.736865][ T8484] ? __virt_addr_valid+0x17f/0x530 [ 234.740499][ T8468] loop4: detected capacity change from 0 to 32768 [ 234.742002][ T8484] print_report+0x15f/0x4f0 [ 234.742031][ T8484] ? __virt_addr_valid+0x17f/0x530 [ 234.742062][ T8484] ? __virt_addr_valid+0x17f/0x530 [ 234.763334][ T8484] ? __virt_addr_valid+0x45b/0x530 [ 234.763606][ T8468] XFS: ikeep mount option is deprecated. [ 234.768472][ T8484] ? __phys_addr+0xb6/0x170 [ 234.768508][ T8484] ? dev_map_enqueue+0x3c/0x340 [ 234.768532][ T8484] kasan_report+0x136/0x160 [ 234.768556][ T8484] ? dev_map_enqueue+0x3c/0x340 [ 234.768582][ T8484] dev_map_enqueue+0x3c/0x340 [ 234.768606][ T8484] xdp_do_redirect_frame+0x323/0x660 [ 234.768642][ T8484] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 234.768674][ T8484] ? __mutex_unlock_slowpath+0x218/0x750 [ 234.768708][ T8484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 234.768743][ T8484] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 234.768771][ T8484] ? xdp_convert_md_to_buff+0x330/0x330 [ 234.806077][ T8468] XFS: noikeep mount option is deprecated. [ 234.809128][ T8484] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 234.809167][ T8484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 234.809203][ T8484] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 234.809239][ T8484] ? __might_fault+0xbd/0x110 [ 234.809267][ T8484] ? _copy_from_user+0x109/0x170 [ 234.864568][ T8484] ? bpf_test_init+0x15a/0x180 [ 234.869460][ T8484] ? xdp_convert_md_to_buff+0x5b/0x330 [ 234.874933][ T8484] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 234.880342][ T8484] ? dev_put+0x80/0x80 [ 234.884430][ T8484] ? dev_put+0x80/0x80 [ 234.888508][ T8484] bpf_prog_test_run+0x32f/0x3a0 [ 234.893466][ T8484] __sys_bpf+0x3eb/0x6c0 [ 234.897723][ T8484] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 234.903115][ T8484] ? print_irqtrace_events+0x210/0x210 [ 234.908587][ T8484] ? print_irqtrace_events+0x210/0x210 [ 234.914070][ T8484] ? syscall_enter_from_user_mode+0x2e/0x230 [ 234.920071][ T8484] ? lockdep_hardirqs_on+0x94/0x130 [ 234.925454][ T8484] __x64_sys_bpf+0x78/0x90 [ 234.929888][ T8484] do_syscall_64+0x3b/0xb0 [ 234.934314][ T8484] ? clear_bhb_loop+0x45/0xa0 [ 234.938999][ T8484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.944922][ T8484] RIP: 0033:0x7f73b817e719 [ 234.949369][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.968992][ T8484] RSP: 002b:00007f73b8ff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.977422][ T8484] RAX: ffffffffffffffda RBX: 00007f73b8335f80 RCX: 00007f73b817e719 [ 234.985403][ T8484] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 234.993464][ T8484] RBP: 00007f73b81f139e R08: 0000000000000000 R09: 0000000000000000 [ 235.001448][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.009425][ T8484] R13: 0000000000000000 R14: 00007f73b8335f80 R15: 00007ffc2ed3a938 [ 235.017409][ T8484] [ 235.020432][ T8484] [ 235.022755][ T8484] Allocated by task 8090: [ 235.027189][ T8484] kasan_set_track+0x4b/0x70 [ 235.031804][ T8484] __kasan_kmalloc+0x97/0xb0 [ 235.036411][ T8484] __kmalloc_node+0xb3/0x230 [ 235.041030][ T8484] kvmalloc_node+0x6e/0x180 [ 235.045902][ T8484] alloc_fdtable+0x154/0x280 [ 235.050525][ T8484] dup_fd+0x95c/0xca0 [ 235.054603][ T8484] copy_files+0x72/0xe0 [ 235.058764][ T8484] copy_process+0x1873/0x4060 [ 235.063442][ T8484] kernel_clone+0x222/0x920 [ 235.067951][ T8484] __x64_sys_clone+0x231/0x280 [ 235.072745][ T8484] do_syscall_64+0x3b/0xb0 [ 235.077168][ T8484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.083081][ T8484] [ 235.085407][ T8484] The buggy address belongs to the object at ffff888053a2fe00 [ 235.085407][ T8484] which belongs to the cache kmalloc-cg-96 of size 96 [ 235.099638][ T8484] The buggy address is located 0 bytes inside of [ 235.099638][ T8484] 96-byte region [ffff888053a2fe00, ffff888053a2fe60) [ 235.112742][ T8484] [ 235.115094][ T8484] The buggy address belongs to the physical page: [ 235.121512][ T8484] page:ffffea00014e8bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888053a2ff00 pfn:0x53a2f [ 235.132972][ T8484] memcg:ffff88801efc2401 [ 235.137213][ T8484] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 235.144778][ T8484] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017c428c0 [ 235.153365][ T8484] raw: ffff888053a2ff00 0000000080200000 00000001ffffffff ffff88801efc2401 [ 235.162040][ T8484] page dumped because: kasan: bad access detected [ 235.168458][ T8484] page_owner tracks the page as allocated [ 235.174254][ T8484] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4999, tgid 4999 (syz.0.241), ts 106112048223, free_ts 106111155549 [ 235.192413][ T8484] post_alloc_hook+0x18d/0x1b0 [ 235.197185][ T8484] get_page_from_freelist+0x3731/0x38d0 [ 235.202750][ T8484] __alloc_pages+0x28d/0x770 [ 235.207341][ T8484] alloc_slab_page+0x6a/0x150 [ 235.212036][ T8484] new_slab+0x84/0x2d0 [ 235.216116][ T8484] ___slab_alloc+0xc20/0x1270 [ 235.220797][ T8484] __kmem_cache_alloc_node+0x19f/0x260 [ 235.226386][ T8484] kmalloc_trace+0x26/0xe0 [ 235.230808][ T8484] copy_semundo+0xb1/0x230 [ 235.235263][ T8484] copy_process+0x1848/0x4060 [ 235.240035][ T8484] kernel_clone+0x222/0x920 [ 235.244629][ T8484] __se_sys_clone3+0x373/0x410 [ 235.249483][ T8484] do_syscall_64+0x3b/0xb0 [ 235.253927][ T8484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.259833][ T8484] page last free stack trace: [ 235.264523][ T8484] free_unref_page_prepare+0xf63/0x1120 [ 235.270073][ T8484] free_unref_page+0x33/0x3e0 [ 235.274754][ T8484] __unfreeze_partials+0x1b7/0x210 [ 235.279876][ T8484] put_cpu_partial+0x17b/0x250 [ 235.284650][ T8484] qlist_free_all+0x76/0xe0 [ 235.289160][ T8484] kasan_quarantine_reduce+0x156/0x170 [ 235.294626][ T8484] __kasan_slab_alloc+0x1f/0x70 [ 235.299480][ T8484] slab_post_alloc_hook+0x52/0x3a0 [ 235.304598][ T8484] kmem_cache_alloc+0x10c/0x2d0 [ 235.309453][ T8484] getname_flags+0xb8/0x4f0 [ 235.313976][ T8484] user_path_at_empty+0x28/0x60 [ 235.318843][ T8484] do_readlinkat+0x114/0x3a0 [ 235.323447][ T8484] __x64_sys_readlink+0x7b/0x90 [ 235.328308][ T8484] do_syscall_64+0x3b/0xb0 [ 235.332728][ T8484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.338634][ T8484] [ 235.340960][ T8484] Memory state around the buggy address: [ 235.346620][ T8484] ffff888053a2fd00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 235.354681][ T8484] ffff888053a2fd80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 235.362743][ T8484] >ffff888053a2fe00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 235.370803][ T8484] ^ [ 235.374869][ T8484] ffff888053a2fe80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 235.382931][ T8484] ffff888053a2ff00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 235.391253][ T8484] ================================================================== [ 235.399502][ T8484] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.406725][ T8484] CPU: 1 PID: 8484 Comm: syz.2.1461 Not tainted 6.1.116-syzkaller #0 [ 235.414824][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.425012][ T8484] Call Trace: [ 235.428345][ T8484] [ 235.431307][ T8484] dump_stack_lvl+0x1e3/0x2cb [ 235.436057][ T8484] ? nf_tcp_handle_invalid+0x642/0x642 [ 235.441554][ T8484] ? panic+0x764/0x764 [ 235.445685][ T8484] ? vscnprintf+0x59/0x80 [ 235.450078][ T8484] panic+0x318/0x764 [ 235.454021][ T8484] ? check_panic_on_warn+0x1d/0xa0 [ 235.459187][ T8484] ? memcpy_page_flushcache+0xfc/0xfc [ 235.464694][ T8484] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 235.470725][ T8484] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 235.476667][ T8484] ? _raw_spin_unlock+0x40/0x40 [ 235.481564][ T8484] ? print_report+0x4a3/0x4f0 [ 235.486379][ T8484] check_panic_on_warn+0x7e/0xa0 [ 235.491368][ T8484] ? dev_map_enqueue+0x3c/0x340 [ 235.496270][ T8484] end_report+0x66/0x110 [ 235.500645][ T8484] kasan_report+0x143/0x160 [ 235.505202][ T8484] ? dev_map_enqueue+0x3c/0x340 [ 235.510191][ T8484] dev_map_enqueue+0x3c/0x340 [ 235.514920][ T8484] xdp_do_redirect_frame+0x323/0x660 [ 235.520267][ T8484] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 235.525704][ T8484] ? __mutex_unlock_slowpath+0x218/0x750 [ 235.531400][ T8484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 235.536731][ T8484] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 235.542507][ T8484] ? xdp_convert_md_to_buff+0x330/0x330 [ 235.548117][ T8484] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 235.554083][ T8484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 235.559432][ T8484] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 235.566092][ T8484] ? __might_fault+0xbd/0x110 [ 235.570828][ T8484] ? _copy_from_user+0x109/0x170 [ 235.575873][ T8484] ? bpf_test_init+0x15a/0x180 [ 235.580774][ T8484] ? xdp_convert_md_to_buff+0x5b/0x330 [ 235.586458][ T8484] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 235.591982][ T8484] ? dev_put+0x80/0x80 [ 235.596110][ T8484] ? dev_put+0x80/0x80 [ 235.600230][ T8484] bpf_prog_test_run+0x32f/0x3a0 [ 235.605236][ T8484] __sys_bpf+0x3eb/0x6c0 [ 235.609549][ T8484] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 235.614992][ T8484] ? print_irqtrace_events+0x210/0x210 [ 235.618719][ T8468] XFS (loop4): Mounting V5 Filesystem [ 235.625987][ T8484] ? print_irqtrace_events+0x210/0x210 [ 235.631516][ T8484] ? syscall_enter_from_user_mode+0x2e/0x230 [ 235.637555][ T8484] ? lockdep_hardirqs_on+0x94/0x130 [ 235.642813][ T8484] __x64_sys_bpf+0x78/0x90 [ 235.647381][ T8484] do_syscall_64+0x3b/0xb0 [ 235.651857][ T8484] ? clear_bhb_loop+0x45/0xa0 [ 235.656580][ T8484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.662531][ T8484] RIP: 0033:0x7f73b817e719 [ 235.666988][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.672940][ T8468] XFS (loop4): Ending clean mount [ 235.676241][ T8468] XFS (loop4): Quotacheck needed: Please wait. [ 235.697913][ T8484] RSP: 002b:00007f73b8ff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.706371][ T8484] RAX: ffffffffffffffda RBX: 00007f73b8335f80 RCX: 00007f73b817e719 [ 235.714375][ T8484] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 235.722426][ T8484] RBP: 00007f73b81f139e R08: 0000000000000000 R09: 0000000000000000 [ 235.730429][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.735500][ T8468] XFS (loop4): Quotacheck: Done. [ 235.743542][ T8484] R13: 0000000000000000 R14: 00007f73b8335f80 R15: 00007ffc2ed3a938 [ 235.751556][ T8484] [ 235.754853][ T8484] Kernel Offset: disabled [ 235.759227][ T8484] Rebooting in 86400 seconds..