last executing test programs: 5.375652227s ago: executing program 1 (id=1414): r0 = eventfd2(0x8, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, r0}]) 4.865900428s ago: executing program 1 (id=1417): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xf1ffffff}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) 4.400074866s ago: executing program 1 (id=1419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x0, r2}) 4.050661438s ago: executing program 1 (id=1421): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x0, 0x2ad, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f000001fe00)) 3.917576044s ago: executing program 4 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa486, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800, 0x6a4846db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 3.658530405s ago: executing program 1 (id=1424): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000006940)=ANY=[@ANYRES8=0x0], 0x6, 0x6297, &(0x7f0000012e80)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00') write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x20) 3.658223367s ago: executing program 4 (id=1425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000001240)="b9ff03076804268c989e", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.736571872s ago: executing program 3 (id=1433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts_2292={{0x12, 0x29, 0x5}}], 0x18}, 0x0) 2.5505552s ago: executing program 4 (id=1434): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.534902498s ago: executing program 3 (id=1435): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="060000000a000200bbbbbbbbbbbb00000c000e8004000100"], 0x34}}, 0x0) 2.246985155s ago: executing program 4 (id=1437): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)=""/216, 0xd8}], 0x3}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000540)=""/184, &(0x7f0000000280), &(0x7f0000001540), 0x4, r0}, 0x38) 2.246202265s ago: executing program 3 (id=1438): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) 2.082661118s ago: executing program 1 (id=1440): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080), 0xa, 0x96aa, &(0x7f0000012dc0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.98114628s ago: executing program 3 (id=1441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1.963103972s ago: executing program 5 (id=1442): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) 1.750694541s ago: executing program 0 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 1.74617152s ago: executing program 2 (id=1444): r0 = syz_io_uring_setup(0x110, &(0x7f00000005c0), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.726970685s ago: executing program 4 (id=1445): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) 1.716949436s ago: executing program 3 (id=1446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) 1.668504025s ago: executing program 5 (id=1447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$media(&(0x7f0000000180), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000200)) 1.502627199s ago: executing program 3 (id=1448): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) statfs(0x0, 0x0) 1.502337312s ago: executing program 4 (id=1449): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000000c0)='./file1\x00', 0x2210810, &(0x7f00000001c0), 0x1, 0x50dd, &(0x7f0000005140)="$eJzs3U+IVVUcB/DzZhwdFJznTl2EgVthEoUioiE0K8x5ZkHRYqYWQYgwKJiLArGgpIUDgla4MJgW2R9nVdFCXDUEQRAFgQizEKSdUAyGhDHv3vPmvnN9972Z1DH9fGTm3nN/55x33uMu3vc5974AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIYTjl86cqapvnpk6va1v1+UL149tPzE2PBtCrXm8ltfHnnrmhTf2jT0/GAeM78229XqnKbOhs1ljZdvB+XHtP6+FEAaSCfrz7c7+0qzF3YPlCSvtPT+35dCN3TumjoweOHd440T5qTNvcLkXsFzy8+rKwrk00vzdl/RotQunXq3tFM3GpyfcXXkSAMCiDDeam9bb0fwtbqt9NK0n7ZGkPZm04zuEyWJjKbJ5V3Za56a0vkzrHMmiwqpO66wn9fz1b7UbST2k7faosYh1tnfNI81gp3VOJPXlWicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAveTpT7+8WlXfPDN1elvfrssXrh/bfmJseDaEevN4LSvXnpi7NLfhrZ2Pfr/zq0/+qo8e78/Hxe2KQufwe9x5bCiE1wuVK3HaP9aG0GgvNJvh43LhzebOs7EAAADA/WRD83dfq53FwYG2dq2ZJmvNf1EWFveen9ty6MbuHVNHRg+cO7xxYunzNTrMN3LL+Vrt+sJPrRCMY/xN51uox64HS/NUS2dM8/zLwx9trRpfyv/16vwfXzn5HwAAgP9C/k/nqdYt/89+8eqeqvGl/L+p7SFL+T+uOOb/vrC0/A8AAAD3sjud/0dK81Trlv+/+WDPyarxpfw/3Fv+X1Fcdjz4U1zw/qEQhrstHQAAAOgg/r/7wkcLMa9nnxykef3FzVcHquYr5f+R3vJ/5aQAAADAXfXjqUduVtVL+b/RW/5fdUdXDQAAACzGQ++P76uql/L/eG/5f3W+za98yAb9EP8K4eRQCIPzOxNZYSZMPtkqAAAAALdJzOkvfbfxcFW/Uv6fqL7/f7zTQbz+v+3+f6Xr/wuF7K5/j7sxAAAAAA+i8vX88fb42TcXdPr+/V6v///sl9/WVT1+Kf8f7S3/9xe3t/P7/wAAAGAJ/m/f//dKaZ5q3e7///Z76xaX/yd7y/9xu6b49C7G1+fdoRDWz+/kdxP8PD7c/qQwPVAoNDWSEfviiLwwvapQaJpIRmwdCuHh+Z2jSWFdLEwmhWtr88LZpPBzLOTnQ6vwdVK4GM+0U2vz5aaFb2Mhv8BiOl5BsaZ1SUQy4s9OI+YLtxxxqfXgAAAAD5QYnvMsO9DeDGmUna5167C6W4e+bh36u3VYkXRIO3Y6HsbbC/H437+OPhcqlPL/2d7yf3wpVmab9Pr/d/65ebNQmInfa9i6/n88FupJYToWGukdAxrxMbKw+2G8x0C9kY+4tr5VAAAAgPta/Fygf5nXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MvevcfYcdUHAD77vN71endDkPKQRczLkEper+04WA0IJ1UEAilZi6hShULW2JvU8QYbPwqOLNUYVJQihAuuiEIftkRUpxLIKm15hBKLKkFVLRpBmz+cR9MCQpWgUYrrEiWSq3tnzuzcM3sffqztDd8nee+593fmnDnn3jueMzP3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxmuPrbN3yxXfxtP/jql2/qfd/z3/v1wfVfuGfyxRCmGq/3ZOGe95x59sx1n7h9w3du/9ojp8fvfGgwXy6Ph6X1P735k8/EUn+6LIRv9oTQnwZWjWSBgfz5SCxv+UgIV4W5QLHEzHC2RFpxeHIohCNhLlAU9e2hEEZKgbt+9P0nPl9PHB4K4e0hhFpax/O1rI6hNLByMAsMp4Ed/Vng/85misC3erMAXLD4ZSg+9MenmjOMz79ci8/fwEVbscsrbV5fTIy3zvfLWxd4pUoG0xemLuhtqxTHgqh8PU74ti2Cb1ulnw9528o7Uvkeytm5UC30bp25d/Pe2T3xld4wMdHXqqQFep9Pvbx/y7mkF83nMK7A+EX5HN5/+OZnBj9yxwuPvPb4/tO1ryy/0NVs1b0LrRbyz9yieR+jjbYni+DrV9lLWmGnK4Rw+sTJ/e3ilfH/ePvxf/w4x8feptyx1FdHs7F5fGUkJl4azcbmAAAAsGgshqOmgyv+7SftyquM/1d0d/4/nvLPB/NZa0+EsLGR+PRYCNc2Xs8Cj8XqPjoWwpsbqanmwK1J4EQI1zUSNxZFJUssiUusSAI/H80DG5PAUzEwlQQejYFDSeAzMXA8CWyJgRNJ4LYYCNua2/Fbo3k7ug4MxcB01onH41UIvxqNtSV99WxRFAAAwEWSjw4Hmp+WrnW40AxxeHl8qFOGeAV2ywy1pIR0BFsMq1qW0N+phN5OJRTtPtC++ZWSezqVXLkMo6c5w/+eumZHaKMy/p9sP/6vzbMiPZXz/2FyU+Mh5u7NI7NFhumppgwAAADABfj9N05vbhevjP83dnf9fzwm0lfKHE7GwxDbx0KYbA5kxd5SDWRnvZfmAQAAAFgMivPxxbnwbfljdol2Op6u5p86x/zxxP/GefPv+OG/Pt5ufSvj/6nurv8fbn7MVuKpuBZfGgthSSnwg7iW9UDDihh48b3Ngbz9T8UO+FwsKr8woSjqc3GJ6RiYTAJHWi3xdLHEtc2B/M0qKv900Y5t+RKlAAAAAFxy8XBAPC8fr/9f83d/9GS75Srj/+lzu/6/MQ6uXN4/uzSE1f0h9KU/DDg5nE0MGAMjPXniH4azsvrSog4Oh3BLvWFpUf+Zz//fn84x+OOhrKgYuPYtx15eWU98dSiE1eXAMx8+ur6e2JsEisp/dyiEG+qtTSv/+yVZ5QNp5Q8vCeFNpUBR1JYlIdQrG0yL+sdafh+DtKjjtRCuLgWKot5VC2FfAGCxiv+Xbi2/uHvfg9s3z87O7FrARDyIPxTu3TY7M7Flx+zWWot12pqsc9M8Rp+qtqnbW988F+couvvYWDfp4oeCk+W68gP5lSsH8+dxZ2ig0c61A01P16VNfudbq1WE0q5Uqyb3LnCTh8uFzL2JlfJj/sGwNCzZu3tm18QnN+/Zs2tN9rfb7Guzv/E8U9ZXa9K+Gp5v3br4eLScLitxvn21slzI6j0P7Fy9e9+Dq7Y9sPm+mftmPrZhct3aDTdPrn/X6nqjJrO/HVq6cr6Sk5aePdplsy5iS6/vLxVyKTYaEhISiy0xOHDnqXabn8r4f2f78X/c6sQNfz4/Q6vz/+PxNH/2+txp/ukYONLt+f/xVmfziwsDViSBAzFwwGl+AAAAXh/i4ch4NDMelD7wjuff0265yvj/QHe//79I8/8XU9d/oNU0/zfGJSZbzf+fTvNfzP9/oNX8/+k0/8X8/0cuw/z/e4tA0iW/Mv8/AADwenDp5v/vOL1/eoOASoaO0/unNwioZOg4jX+3Nwg45/n///YXa9aHNirj/0Pdjf9N3A8AAABXjmtuu+GH7eKV8f+R7sb/l37+v9Dq+v8VrQJTrSYGNP8fAAAAi1Sr+f9+9KGd7223XGX8f7y78X+87KK3KXcs9dXRbE67kM5p99Jo8ZMBAAAAWBx6w8TEQJd5myZGvfX86zwVpwJtky479Nlj5/b7/xPdjf+bfpdx/+Gbnxn8yB0vvPrIa4/vP137yvK58/8AAADAwun2uAQAAAAAAAAAAAAAAHD5PXr1N+adFyCq/P4/bGq83ur3//G+f003TTyTTwZ4IM6s/4Ux0/wBAADAwnro1lcejv/u++If/3e7vJXx/3h34/94f4H8PnjZrfdOxPv/fXoshMat9cazwGOxuo+OhfDmRmoqLpHdUO8DcYnJLPBYnDDxxrjE9FRzUUti4HgS+PloHjiRBJ6KgfwoxbF4Y8A/GQ1hfSO1qXmJnXGJ8SRwZwysSAITMTCZBJbFwMYk8ItleWAqCfxzDOQ3Hyz66hvL8r4CAAA4F/k4a6D5aUjHecf7O2Xo6ZShYxXDnTL0dspQa5EhPv+buA4D5fn48wzxpYG01KGklEqGeDO88296MV3f08050wUrVffFBcebc8YMO//lpi+FNirj/xXdjf8v4/3/07v5b4yBFUlgZwxsTALTm/LAkWuaA+7/DwAAwJWt1f3/R9/014faLVcZ/092N/6PByLe2JQ7ltr5/v/587s++PV9jVU+ORrCW8uB7Qe3X1VPPDoawjvKgSfuvrExaj+YLvHdF277WT1xTxp4/6o3nKkn3p0EpmMnXZcG4lGVM8uSQOzeH6eB2B/H08BgHnhoWdaOnrSv/msk66uetK9OjWSXV/SkffXNkayOnrSBh5NA0cCPp4HYwDvyQG+6Vl9fmq1VDIzERf9yaXHRBwAAV6a4FzgQ7t02OzOZ/oT3+v7mx6jpluWfqhbb02X1z8Vbk999bKybdF+6L1orihoItXoT1lR2V8tZehqtvDildOi6N7Zocqe7vfe2WC51rl032LpFQ1mLJrbsmN060LHh6zpnWdvfMcuaymCnnKW30aVdlNLFunTRoi77potVjs97w8REX5Lrt2NwPDTp9Ino9n595fv8t/oUlPMc/ex/vNKuvMr4f2N34//YnqWh9HH+TCz1p8tC+GbP3NGIIrBqJAvE5o7E4fHykRCuKvVDscTMcLbEYFJxeHIoG6EOpkV9eyg7xhCf3/Wj7z/x+Xri8FAIby+9V0Udz9eyOobSwMrBLDCcBnb0Z4F45UcR+FZvFoALVmwU4gcq/6lLYXz+5Vp8/l4v9wRNm1e5BmqefPNtcxdKLX0hv6aqcG5vW6U4FkTl63HCt20xftuCb1t5RyrfQzk7F6qF3q0z927eO7snvlLek61YoPe5vJfaTfoifA4PnP/adlZLV2Ay2XxMzr/c/J/Dnljc/YdvfmbwI3e88Mhrj+8/XfvK8q5Xo4U4UHjyf95wVbl7F1ot5J+5Rbc9mbI9WYz/DYx720IIh/5i6OPt4pXx/1R34//+5LHhldiZu8dCeGepc0/G7v+dsWw7WApkW8mrq4HskvufjLbccgIAAMDFVhzuKI4XbMsfsx+Ep+Pkav6pc8wfj1dsnDd/t+u9/8k/eKxdvDL+n24//l+SrKbz/87/s0Cc/5/XlX4oekn6woELOhRdKY4F4fz/vK70b5vz//Ny/t/5//k4/9+B8//zutLftspe0k47XSGEs9cPPNwuXhn/7+xu/P8bNv9/Opt/Mf9/Oml/Mf//dKv5/3e2mv//gPn/AQCABdViovl0nFeZnL+SIZ2cv5KhJ8lw7rcY6DiNvvn/0/n/D/75LXtCG5Xx/4Huxv/x4zBSrn2xzP8/vqnFEhs3Na9uETgUAzvdMQAAAIDLKB4giBe9dzvDJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrjlfObG4Xf9sPvvrlm3rf9/z3fn1w/RfumXwxhG2N13uycM97zjx75rpP3L7hO7d/7ZHT43c+VMuXG8gflzfljqW+OhrCkdIrIzHx0mj9yVzgrg9+fV9/PXFyNIS3lgPbD26/qp54dDSEd5QDT9x94zX1xMF0ie++cNvP6ol70sD7V73hTD3x7jzQk67uny3LVrcnXd3PLwthrBQoVvf+Zc1FFXW8Lw/0pnX81UhWRwyMxEUfHsnqiIHZuMS2JSGs7g+hLy3qn2pZUX1pUd+pZUX1pUX9YS2EW0II/WlR/z6YFdWftvzpwayoGLj2LcdeXllPHB0MYXU58MyHj66vJ3YlgaLyDw2GcEP9I5NW/o2BrPKBtPI/HQjhTaVAUdT0QAj1ygbTok70Z0UNpkV9rT+Eq0uBoqib+kPYF7hc4oZka/nF3fse3L55dnZm1wImBvO6hsK922ZnJrbsmN1aS9aplZ5S+uynzr/tz728f0sjcfexsW7SxXpNltfl6anKi+Xn/fnTgUY71w40PV23WJo8XC5k7k2slB/zD4alYcne3TO7Jj65ec+eXWuyv91mX5v97cujWV+tWSx9tbJcyOo9D+xcvXvfg6u2PbD5vpn7Zj62YXLd2g03T65/1+p6oyazvxejpUcvfUuv7y8Vcik2Go3Enb+34FVISEhcrERv09Zt8krfjld29OdWdCDUGhvoyrCinKWn0cqL0ehbz6O1uXNtdGVIUmnRmsrAoZJlbecs6ypjhrksQ1mWxr5gZXBYLqm30aXxeW+YmOhr1Q/jzU/L3fvLC+jeU7HrukwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//g1vyJQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000080000002598e113eefd197e213a48230000000037bd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)) 1.467038824s ago: executing program 5 (id=1450): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="3aa7ce25daaed132126e3af1740fa1f61f1eea0b0df392058b892c531791f1d8ac08d30e4ae0daed38ef", 0x2a}], 0x1, 0x0, 0x0, 0x40c0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000800}}], 0x2, 0x200448c0) 1.360017507s ago: executing program 2 (id=1451): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x840, 0x4) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) 1.250675185s ago: executing program 5 (id=1452): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@bridge_setlink={0x38, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x18, 0xc, 0x0, 0x1, [@AF_INET={0x8, 0xc, 0x0, 0x1, {0x4, 0x5}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x38}}, 0x0) 999.291385ms ago: executing program 5 (id=1453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r1, 0x607, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x0) 995.565086ms ago: executing program 2 (id=1454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 856.190862ms ago: executing program 0 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3400}, [@RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @RTA_IIF={0x8, 0x3, r2}]}, 0x34}}, 0x0) 736.900655ms ago: executing program 2 (id=1456): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r0, 0x0) sendmmsg$unix(r0, &(0x7f0000000480)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x193bc0d8627a41f8) 716.692599ms ago: executing program 5 (id=1457): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000380)={{r0}, 0x1, &(0x7f00000001c0)=[0x8], 0x6, 0x8}) 626.573857ms ago: executing program 0 (id=1458): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_elf64(r0, 0x0, 0x18) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 487.214713ms ago: executing program 0 (id=1459): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0x0, 0x101}, 0x14) 444.584483ms ago: executing program 2 (id=1460): add_key(&(0x7f0000001340)='big_key\x00', &(0x7f0000001380)={'syz', 0x1}, &(0x7f0000001300)='n', 0x1, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) 206.499938ms ago: executing program 0 (id=1461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0xfffffe11, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c844) 183.162396ms ago: executing program 2 (id=1462): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5, 0x0, 0x100000}) 0s ago: executing program 0 (id=1463): r0 = syz_io_uring_setup(0x45b4, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered blocking state [ 134.566912][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.575501][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.582843][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.622146][ T6395] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.728763][ T5292] gspca_vc032x: reg_r err -71 [ 134.741291][ T6356] BTRFS error (device loop0): target device ß ñÕ×åÿ²°ºÌ®£íìùId µðÛÚO¥ÛQl0émÑŒ%ÒÛ£µÄÖˆhµðB{[+ ý is invalid! [ 134.755812][ T5292] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 134.776097][ T5292] usb 6-1: USB disconnect, device number 4 [ 134.905432][ T5227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.092100][ T6428] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.385'. [ 135.249309][ T6434] trusted_key: syz.3.387 sent an empty control message without MSG_MORE. [ 135.286134][ T6436] loop1: detected capacity change from 0 to 128 [ 135.360259][ T6436] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.467541][ T6436] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.475172][ T6442] netlink: 340 bytes leftover after parsing attributes in process `syz.0.391'. [ 135.606741][ T6447] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 135.696115][ T6450] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 135.727436][ T5677] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.163367][ T6466] loop0: detected capacity change from 0 to 32768 [ 137.440512][ T6500] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 137.850434][ T6506] loop5: detected capacity change from 0 to 256 [ 137.954970][ T6506] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 138.070797][ T6506] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 138.129355][ T6506] exFAT-fs (loop5): Filesystem has been set read-only [ 138.258044][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.556362][ T6527] loop0: detected capacity change from 0 to 2048 [ 138.583708][ T6527] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.614123][ T6533] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.772057][ T6537] netlink: 160 bytes leftover after parsing attributes in process `syz.4.435'. [ 139.092589][ T6550] loop1: detected capacity change from 0 to 2048 [ 139.150070][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.284523][ T6522] loop5: detected capacity change from 0 to 32768 [ 139.334334][ T6550] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.441: reserved inode found cleared - inode=1 [ 139.378460][ T6522] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.511798][ T6572] loop0: detected capacity change from 0 to 4096 [ 139.520960][ T6572] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 139.535530][ T6522] XFS (loop5): Ending clean mount [ 139.571181][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.797383][ T6580] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 139.811907][ T6572] ntfs3: loop0: failed to convert "c46c" to iso8859-14 [ 139.835911][ T5231] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.824518][ T6610] loop4: detected capacity change from 0 to 1024 [ 140.876774][ T6610] EXT4-fs: Ignoring removed nobh option [ 140.914863][ T6610] EXT4-fs: Ignoring removed orlov option [ 140.924972][ T6610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.932201][ T5296] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.019816][ T6578] loop1: detected capacity change from 0 to 32768 [ 141.036501][ T6578] XFS: ikeep mount option is deprecated. [ 141.036703][ T6610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.045690][ T6578] XFS: ikeep mount option is deprecated. [ 141.102667][ T6620] Bluetooth: MGMT ver 1.23 [ 141.109298][ T6620] Bluetooth: hci3: unsupported parameter 64512 [ 141.116947][ T6620] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 141.184205][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.191081][ T6578] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.198066][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.223194][ T5296] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.235851][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.248789][ T5296] usb 3-1: config 0 descriptor?? [ 141.380046][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.582478][ T6578] XFS (loop1): Ending clean mount [ 141.877880][ T5296] usb 3-1: string descriptor 0 read error: -71 [ 141.907388][ T5677] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.912440][ T5296] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 141.936894][ T5296] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 141.945039][ T5296] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 141.956681][ T5296] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 141.964404][ T5296] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 141.984267][ T5296] usb 3-1: USB disconnect, device number 5 [ 142.246548][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 142.591640][ T6669] process 'syz.5.488' launched './file0' with NULL argv: empty string added [ 142.937894][ T6679] loop0: detected capacity change from 0 to 2048 [ 143.004986][ T6679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.072672][ T6686] binder: 6684:6686 ioctl 400c620e 20000380 returned -22 [ 143.331789][ T6693] loop2: detected capacity change from 0 to 512 [ 143.464884][ T6693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.485736][ T6693] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.595761][ T6693] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 143.861404][ T6693] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 143.985056][ T6719] loop1: detected capacity change from 0 to 2048 [ 144.055136][ T6719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.069565][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.547808][ T6739] loop1: detected capacity change from 0 to 8 [ 144.624484][ T6739] SQUASHFS error: zlib decompression failed, data probably corrupt [ 144.695887][ T6739] SQUASHFS error: Failed to read block 0x4e8: -5 [ 144.719818][ T29] audit: type=1800 audit(1726087644.275:8): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.519" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 144.979140][ T6758] loop0: detected capacity change from 0 to 256 [ 145.006941][ T6758] vfat: Unknown parameter '' [ 145.082270][ T6758] loop0: detected capacity change from 0 to 1024 [ 145.128838][ T6758] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 145.136282][ T6761] Bluetooth: MGMT ver 1.23 [ 145.197265][ T6758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.297573][ T6758] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 145.377519][ T6771] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 145.432549][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.442301][ T5233] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.603574][ T6777] block nbd1: NBD_DISCONNECT [ 145.635977][ T5233] usb 3-1: Using ep0 maxpacket: 32 [ 145.643380][ T5233] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 145.665777][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.707368][ T5233] usb 3-1: config 0 descriptor?? [ 145.723482][ T5233] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 145.792149][ T6784] vivid-003: disconnect [ 145.810169][ T6783] vivid-003: reconnect [ 145.865945][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.006419][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.055957][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 146.080794][ T46] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 146.121428][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.165342][ T46] usb 1-1: config 0 descriptor?? [ 146.174708][ T29] audit: type=1326 audit(1726087645.735:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 146.196785][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.266010][ T29] audit: type=1326 audit(1726087645.765:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 146.267547][ T46] usb 1-1: can't set config #0, error -71 [ 146.334275][ T46] usb 1-1: USB disconnect, device number 2 [ 146.336755][ T29] audit: type=1326 audit(1726087645.765:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 146.429486][ T29] audit: type=1326 audit(1726087645.765:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 146.504957][ T29] audit: type=1326 audit(1726087645.775:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 146.527438][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.563663][ T5233] gspca_nw80x: reg_r err -71 [ 146.569006][ T5233] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 146.584508][ T29] audit: type=1326 audit(1726087645.775:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 146.622724][ T5233] usb 3-1: USB disconnect, device number 6 [ 146.655707][ T29] audit: type=1326 audit(1726087645.775:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb86a174ea7 code=0x7ffc0000 [ 146.678064][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.742859][ T29] audit: type=1326 audit(1726087645.775:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86a119869 code=0x7ffc0000 [ 146.764978][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.814187][ T29] audit: type=1326 audit(1726087645.775:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb86a174ea7 code=0x7ffc0000 [ 147.903426][ T5291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.101328][ T5291] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 148.121654][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.155721][ T5291] usb 3-1: Product: syz [ 148.159950][ T5291] usb 3-1: Manufacturer: syz [ 148.185007][ T5291] usb 3-1: SerialNumber: syz [ 148.206571][ T5291] usb 3-1: config 0 descriptor?? [ 148.830731][ T6877] loop5: detected capacity change from 0 to 8 [ 148.923902][ T6877] SQUASHFS error: zlib decompression failed, data probably corrupt [ 148.962944][ T6877] SQUASHFS error: Failed to read block 0x13e: -5 [ 149.032853][ T6883] SQUASHFS error: Unable to read metadata cache entry [13c] [ 149.049808][ T5291] usb 3-1: f81604_write: reg: 105 data: f2 failed: -EPROTO [ 149.058496][ T5291] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 149.066249][ T6877] SQUASHFS error: Unable to read metadata cache entry [13c] [ 149.075684][ T5291] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 149.092946][ T6883] SQUASHFS error: Unable to read directory block [13c:26] [ 149.105957][ T5291] usb 3-1: USB disconnect, device number 7 [ 149.130340][ T6877] SQUASHFS error: Unable to read directory block [13c:26] [ 149.536882][ T5233] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 149.587711][ T6899] loop1: detected capacity change from 0 to 16 [ 149.594915][ T6899] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 149.654488][ T6899] cramfs: Error -3 while decompressing! [ 149.661116][ T6899] cramfs: ffffffff9a46c688(27)->ffff88807cfb1000(4096) [ 149.668367][ T6899] cramfs: Error -3 while decompressing! [ 149.674013][ T6899] cramfs: ffffffff9a46c688(27)->ffff88807cfb1000(4096) [ 149.746016][ T5233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.779947][ T5233] usb 1-1: not running at top speed; connect to a high speed hub [ 149.805049][ T5233] usb 1-1: config 129 has an invalid interface number: 135 but max is 1 [ 149.837572][ T5233] usb 1-1: config 129 has an invalid interface number: 5 but max is 1 [ 149.865716][ T5233] usb 1-1: config 129 has no interface number 0 [ 149.886388][ T5233] usb 1-1: config 129 has no interface number 1 [ 149.905879][ T5233] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 149.946690][ T5233] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 149.981452][ T5233] usb 1-1: config 129 interface 5 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 150.026758][ T5233] usb 1-1: config 129 interface 5 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 150.075425][ T5233] usb 1-1: config 129 interface 5 altsetting 7 endpoint 0x87 has invalid maxpacket 29759, setting to 64 [ 150.126208][ T5233] usb 1-1: config 129 interface 5 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 37 [ 150.170734][ T5233] usb 1-1: config 129 interface 135 has no altsetting 0 [ 150.190391][ T5233] usb 1-1: config 129 interface 5 has no altsetting 0 [ 150.199041][ T6919] netlink: 88 bytes leftover after parsing attributes in process `syz.4.602'. [ 150.221857][ T5233] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 150.238273][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 150.251633][ T5233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.269953][ T5233] usb 1-1: Product: syz [ 150.275814][ T5233] usb 1-1: Manufacturer: syz [ 150.294504][ T5233] usb 1-1: SerialNumber: syz [ 150.454482][ T6929] loop5: detected capacity change from 0 to 1024 [ 150.480022][ T6929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.527830][ T6929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.641818][ T5233] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.680232][ T5233] usb 1-1: MIDIStreaming interface descriptor not found [ 150.845925][ T5233] usb 1-1: USB disconnect, device number 3 [ 150.888573][ T5231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.491086][ T6961] loop4: detected capacity change from 0 to 128 [ 151.553052][ T6961] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.576670][ T6961] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.759173][ T6965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.825967][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.874817][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 151.912732][ T6965] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 152.063062][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 152.063087][ T29] audit: type=1326 audit(1726087651.605:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.145713][ T29] audit: type=1326 audit(1726087651.605:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.167915][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.181412][ T6977] loop2: detected capacity change from 0 to 128 [ 152.209280][ T29] audit: type=1326 audit(1726087651.655:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.263136][ T6977] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.275730][ T5233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.283948][ T29] audit: type=1326 audit(1726087651.655:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.296617][ T6981] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 152.307760][ T29] audit: type=1326 audit(1726087651.665:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.340715][ T29] audit: type=1326 audit(1726087651.665:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.368510][ T29] audit: type=1326 audit(1726087651.665:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.391675][ T29] audit: type=1326 audit(1726087651.665:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.414131][ T6981] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 152.425850][ T6977] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.434662][ T29] audit: type=1326 audit(1726087651.665:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.512037][ T5233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.545761][ T29] audit: type=1326 audit(1726087651.665:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 152.545851][ T5233] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 152.567879][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.671667][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.714854][ T5233] usb 5-1: config 0 descriptor?? [ 152.736543][ T5233] pwc: Askey VC010 type 2 USB webcam detected. [ 152.772762][ T5229] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.943267][ T5233] pwc: send_video_command error -71 [ 152.951526][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.955755][ T5233] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 152.959715][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.025069][ T5233] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 153.111832][ T5233] usb 5-1: USB disconnect, device number 2 [ 153.425203][ T7008] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 153.444216][ T7008] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 153.532288][ T6980] loop5: detected capacity change from 0 to 40427 [ 153.595889][ T6980] F2FS-fs (loop5): Found nat_bits in checkpoint [ 153.631218][ T7017] loop0: detected capacity change from 0 to 512 [ 153.646586][ T7017] EXT4-fs: Ignoring removed nobh option [ 153.665908][ T5233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.678609][ T7017] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 153.699866][ T7017] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 153.720762][ T6980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 153.734517][ T7017] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.646: casefold flag without casefold feature [ 153.763337][ T7017] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.646: couldn't read orphan inode 13 (err -117) [ 153.817882][ T5231] syz-executor: attempt to access beyond end of device [ 153.817882][ T5231] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.818873][ T7017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.838866][ T5231] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 153.878156][ T5233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.888999][ T5233] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 153.946276][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.966801][ T5233] usb 5-1: config 0 descriptor?? [ 153.989503][ T5233] pwc: Askey VC010 type 2 USB webcam detected. [ 154.010676][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.215558][ T7033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.653'. [ 154.380846][ T5233] pwc: recv_control_msg error -71 req 02 val 2b00 [ 154.412776][ T5233] pwc: recv_control_msg error -71 req 02 val 2700 [ 154.440112][ T5233] pwc: recv_control_msg error -71 req 02 val 2c00 [ 154.469276][ T5233] pwc: recv_control_msg error -71 req 04 val 1000 [ 154.496274][ T7038] batadv0: entered promiscuous mode [ 154.515747][ T5233] pwc: recv_control_msg error -71 req 04 val 1300 [ 154.525720][ T5233] pwc: recv_control_msg error -71 req 04 val 1400 [ 154.575754][ T5233] pwc: recv_control_msg error -71 req 02 val 2000 [ 154.586996][ T5233] pwc: recv_control_msg error -71 req 02 val 2100 [ 154.616139][ T5233] pwc: recv_control_msg error -71 req 04 val 1500 [ 154.641491][ T5233] pwc: recv_control_msg error -71 req 02 val 2500 [ 154.668442][ T5233] pwc: recv_control_msg error -71 req 02 val 2400 [ 154.695875][ T5233] pwc: recv_control_msg error -71 req 02 val 2600 [ 154.715922][ T5233] pwc: recv_control_msg error -71 req 02 val 2900 [ 154.752711][ T5233] pwc: recv_control_msg error -71 req 02 val 2800 [ 154.795719][ T5233] pwc: recv_control_msg error -71 req 04 val 1100 [ 154.807201][ T5233] pwc: recv_control_msg error -71 req 04 val 1200 [ 154.871583][ T5233] pwc: Registered as video71. [ 154.889356][ T5233] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 154.952034][ T5233] usb 5-1: USB disconnect, device number 3 [ 155.174675][ T7063] loop4: detected capacity change from 0 to 1024 [ 155.196712][ T7063] EXT4-fs: Ignoring removed i_version option [ 155.258086][ T7067] block nbd3: shutting down sockets [ 155.290776][ T7063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.347654][ T7069] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 155.386154][ T7069] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 155.410989][ T7077] loop1: detected capacity change from 0 to 2048 [ 155.424120][ T7069] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 155.475551][ T7077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.623039][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.111743][ T6983] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 156.130113][ T7095] loop1: detected capacity change from 0 to 64 [ 156.232493][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.468305][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 156.513556][ T7108] loop2: detected capacity change from 0 to 1024 [ 156.519658][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 156.579527][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.878624][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.441586][ T7144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 157.534380][ T7148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.117390][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.157031][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.344607][ T7174] loop4: detected capacity change from 0 to 4096 [ 158.357470][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.358310][ T7174] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 158.495141][ T7174] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 158.529030][ T7133] loop1: detected capacity change from 0 to 40427 [ 158.565694][ T7133] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 158.587756][ T7133] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 158.615076][ T7174] ntfs3: loop4: ino=5, "/" directory corrupted [ 158.625214][ T7133] F2FS-fs (loop1): invalid crc value [ 158.637959][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 158.664871][ T7133] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.729957][ T5230] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 158.900274][ T7196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.909609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.928853][ T7133] F2FS-fs (loop1): Start checkpoint disabled! [ 159.055693][ T7133] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 159.085699][ T7133] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 159.257394][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.390332][ T2987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.406987][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.425780][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.445541][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.610666][ T7221] loop5: detected capacity change from 0 to 16 [ 159.619930][ T52] kworker/u8:3: attempt to access beyond end of device [ 159.619930][ T52] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 159.644202][ T7221] erofs: (device loop5): mounted with root inode @ nid 36. [ 159.701283][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 159.736467][ T7221] overlayfs: failed to get metacopy (-117) [ 159.753122][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 159.811106][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 159.835863][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 160.258899][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.739'. [ 161.157242][ T7223] loop2: detected capacity change from 0 to 32768 [ 161.216526][ T7223] find_entry called with index >= next_index [ 161.234322][ T7223] find_entry called with index >= next_index [ 161.257086][ T7223] find_entry called with index >= next_index [ 161.322496][ T7223] jfs: Unrecognized mount option "ÿÿ00000000000000000000004¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 161.356515][ T934] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.577221][ T934] usb 6-1: Using ep0 maxpacket: 16 [ 161.603366][ T934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 161.647800][ T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.689638][ T934] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.705348][ T934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.729155][ T934] usb 6-1: Product: syz [ 161.733472][ T934] usb 6-1: Manufacturer: syz [ 161.765667][ T934] usb 6-1: SerialNumber: syz [ 161.801427][ T934] usb 6-1: config 0 descriptor?? [ 161.849478][ T934] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.863472][ T7256] netlink: 'syz.0.751': attribute type 30 has an invalid length. [ 161.878453][ T934] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 162.474627][ T934] em28xx 6-1:0.0: chip ID is em2870 [ 162.750688][ T5291] usb 6-1: USB disconnect, device number 5 [ 162.776337][ T5291] em28xx 6-1:0.0: Disconnecting em28xx [ 162.808993][ T5291] em28xx 6-1:0.0: Freeing device [ 162.848632][ T7283] loop2: detected capacity change from 0 to 256 [ 162.897881][ T7283] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 163.075179][ T7290] loop1: detected capacity change from 0 to 1024 [ 163.126623][ T7290] EXT4-fs: Ignoring removed i_version option [ 163.180870][ T7290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.412143][ T7296] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.768'. [ 163.638386][ T5292] net_ratelimit: 5 callbacks suppressed [ 163.638409][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.835766][ T5233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.867825][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.888014][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.905906][ T5291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.026486][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.078351][ T7316] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 164.086298][ T7316] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.777'. [ 164.095344][ T7316] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 164.103309][ T7316] netlink: 209 bytes leftover after parsing attributes in process `syz.2.777'. [ 164.107679][ T5233] usb 1-1: config 0 has no interfaces? [ 164.139230][ T7318] nicvf0: renamed from bridge_slave_1 (while UP) [ 164.152270][ T5233] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 164.179287][ T5233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.206139][ T5233] usb 1-1: config 0 descriptor?? [ 164.217388][ T7318] netlink: 'syz.5.776': attribute type 2 has an invalid length. [ 164.236518][ T7318] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 164.364013][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'. [ 164.532332][ T5292] usb 1-1: USB disconnect, device number 4 [ 164.569972][ T7330] loop1: detected capacity change from 0 to 512 [ 164.642255][ T7330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.673001][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.695862][ T7330] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.027878][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.053217][ T7343] loop4: detected capacity change from 0 to 128 [ 165.148677][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.164003][ T5291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.190746][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.360005][ T7347] loop0: detected capacity change from 0 to 1024 [ 165.380469][ T7347] EXT4-fs: Ignoring removed i_version option [ 165.519550][ T7347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.706869][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.251038][ T7365] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 166.294073][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'. [ 166.361192][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.958769][ T7354] loop1: detected capacity change from 0 to 32768 [ 167.007634][ T7354] [ 167.007634][ T7354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.007634][ T7354] [ 167.096938][ T7354] read_mapping_page failed! [ 167.118559][ T7354] ERROR: (device loop1): txCommit: [ 167.118559][ T7354] [ 167.180265][ T7385] jfs_unlink: dtDelete returned -116 [ 167.218652][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 167.229532][ T7385] jfs_unlink: dtDelete returned -116 [ 167.373077][ T64] [ 167.373077][ T64] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.373077][ T64] [ 167.415861][ T64] [ 167.415861][ T64] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.415861][ T64] [ 167.456618][ T111] [ 167.456618][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.456618][ T111] [ 167.488313][ T64] [ 167.488313][ T64] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.488313][ T64] [ 167.515852][ T64] [ 167.515852][ T64] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.515852][ T64] [ 167.544869][ T111] [ 167.544869][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.544869][ T111] [ 167.612119][ T5677] [ 167.612119][ T5677] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.612119][ T5677] [ 167.649545][ T5677] [ 167.649545][ T5677] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.649545][ T5677] [ 168.313972][ T7425] netlink: 'syz.1.807': attribute type 21 has an invalid length. [ 168.369228][ T7425] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 168.664343][ T29] audit: type=1326 audit(1726087668.215:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 168.765408][ T29] audit: type=1326 audit(1726087668.255:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 168.787590][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.829286][ T5233] net_ratelimit: 3 callbacks suppressed [ 168.829310][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.894550][ T29] audit: type=1326 audit(1726087668.275:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 168.985447][ T29] audit: type=1326 audit(1726087668.275:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 169.059112][ T29] audit: type=1326 audit(1726087668.285:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 169.153916][ T29] audit: type=1326 audit(1726087668.285:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86a17def9 code=0x7ffc0000 [ 169.236889][ T7458] loop0: detected capacity change from 0 to 512 [ 169.245884][ T29] audit: type=1326 audit(1726087668.285:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb86a174ea7 code=0x7ffc0000 [ 169.267888][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.296158][ T7458] EXT4-fs: Ignoring removed bh option [ 169.341031][ T7458] EXT4-fs error (device loop0): __ext4_iget:4985: inode #15: block 1803188595: comm syz.0.838: invalid block [ 169.345679][ T29] audit: type=1326 audit(1726087668.285:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86a119869 code=0x7ffc0000 [ 169.358301][ T7458] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.838: couldn't read orphan inode 15 (err -117) [ 169.391753][ T7458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.450315][ T29] audit: type=1326 audit(1726087668.285:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb86a174ea7 code=0x7ffc0000 [ 169.472332][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.505451][ T29] audit: type=1326 audit(1726087668.285:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86a119869 code=0x7ffc0000 [ 169.574034][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.704666][ T7471] Bluetooth: hci3: too big key_count value 34945 [ 169.802598][ T7473] loop0: detected capacity change from 0 to 64 [ 169.866887][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.917303][ T7473] hfs: request for non-existent node 1280 in B*Tree [ 169.944204][ T7473] hfs: request for non-existent node 1280 in B*Tree [ 169.957349][ T7473] hfs: request for non-existent node 1280 in B*Tree [ 169.984442][ T7473] hfs: request for non-existent node 1280 in B*Tree [ 170.268001][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.282508][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.296200][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.355481][ T7488] sctp: [Deprecated]: syz.0.847 (pid 7488) Use of int in max_burst socket option. [ 170.355481][ T7488] Use struct sctp_assoc_value instead [ 170.586029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.607086][ T7498] vxcan1: tx address claim with dest, not broadcast [ 170.816856][ T7506] unknown channel width for channel at 909000KHz? [ 170.914932][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.025749][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 171.221138][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.255904][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 171.265036][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.323983][ T46] usb 2-1: config 0 descriptor?? [ 171.468659][ T7526] loop0: detected capacity change from 0 to 4096 [ 171.493418][ T7526] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 171.561415][ T7526] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 171.811040][ T7532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 171.841778][ T7532] Zero length message leads to an empty skb [ 171.946431][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.983662][ T7534] loop2: detected capacity change from 0 to 2048 [ 172.074558][ T7534] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 172.146426][ T7534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.186154][ T46] video4linux radio32: keene_cmd_main failed (-71) [ 172.199863][ T46] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 172.249131][ T46] usb 2-1: USB disconnect, device number 2 [ 172.997392][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.306113][ T5291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.716440][ T7586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.895'. [ 173.967189][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.897'. [ 174.004723][ T7562] loop0: detected capacity change from 0 to 32768 [ 174.012418][ T7562] XFS: noikeep mount option is deprecated. [ 174.028301][ T46] net_ratelimit: 1 callbacks suppressed [ 174.028320][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.056848][ T7558] loop5: detected capacity change from 0 to 32768 [ 174.108620][ T7562] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.286037][ T7558] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.308019][ T7562] XFS (loop0): Ending clean mount [ 174.339640][ T7562] XFS (loop0): Quotacheck needed: Please wait. [ 174.378345][ T7558] XFS (loop5): Ending clean mount [ 174.394667][ T7558] XFS (loop5): Quotacheck needed: Please wait. [ 174.404033][ T46] IPVS: starting estimator thread 0... [ 174.456363][ T7623] loop2: detected capacity change from 0 to 512 [ 174.477715][ T7558] XFS (loop5): Quotacheck: Done. [ 174.486054][ T7623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.519710][ T7562] XFS (loop0): Quotacheck: Done. [ 174.525808][ T7622] IPVS: using max 17 ests per chain, 40800 per kthread [ 174.553948][ T7623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.555402][ T7562] XFS (loop0): User initiated shutdown received. [ 174.595944][ T7562] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:453). Shutting down filesystem. [ 174.622161][ T5231] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.625396][ T7562] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 174.637387][ T7623] EXT4-fs (loop2): 1 truncate cleaned up [ 174.661323][ T7623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.730804][ T5227] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.919110][ T934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.955654][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.066363][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.094627][ T7630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.128581][ T934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.141925][ T7630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.168125][ T934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.179612][ T7630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.185974][ T934] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 175.215226][ T934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.263591][ T934] usb 5-1: config 0 descriptor?? [ 175.431462][ T7638] loop1: detected capacity change from 0 to 1024 [ 175.528228][ T7638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.725390][ T934] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 175.751021][ T7638] EXT4-fs error (device loop1): ext4_xattr_ibody_list:797: inode #2: comm syz.1.910: corrupted in-inode xattr: bad e_name length [ 175.897116][ T5677] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2792: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 175.916008][ T934] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 175.954437][ T934] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 175.961758][ T5677] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 175.990500][ T934] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 176.028300][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.056074][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.074963][ T5291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.083407][ T5677] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 176.085751][ T934] usb 5-1: USB disconnect, device number 4 [ 176.107598][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.205978][ T5677] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 176.245264][ T7658] loop5: detected capacity change from 0 to 128 [ 176.306008][ T7658] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 176.364253][ T7658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.495015][ T7636] loop0: detected capacity change from 0 to 32768 [ 176.513023][ T7636] btrfs: Deprecated parameter 'usebackuproot' [ 176.528263][ T7636] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 176.564351][ T7662] loop2: detected capacity change from 0 to 1024 [ 176.591753][ T7636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.907 (7636) [ 176.651819][ T7636] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.668608][ T7636] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 176.705975][ T7636] BTRFS info (device loop0): using free-space-tree [ 176.733971][ T7664] loop5: detected capacity change from 0 to 512 [ 176.744487][ T5677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.896809][ T7664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.915904][ T7664] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.942954][ T2987] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xdd624956 level 0 [ 176.969852][ T7636] BTRFS warning (device loop0): couldn't read tree root [ 177.005767][ T7636] BTRFS warning (device loop0): try to load backup roots slot 1 [ 177.040997][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.127133][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.147407][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.199235][ T7636] BTRFS info (device loop0 state M): force compression, level 0 [ 177.271261][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.337824][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.369312][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.395780][ T46] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 177.399562][ T5231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.425808][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.463351][ T46] usb 5-1: config 0 descriptor?? [ 177.499951][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.732087][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.737702][ T5227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.888653][ T7691] tun0: tun_chr_ioctl cmd 2147767511 [ 177.953324][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 177.995663][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.002605][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.028452][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.047688][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.075813][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.095463][ T46] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.186235][ T46] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 178.391364][ T52] bridge_slave_1: left allmulticast mode [ 178.401967][ T52] bridge_slave_1: left promiscuous mode [ 178.428359][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.484653][ T52] bridge_slave_0: left allmulticast mode [ 178.519940][ T52] bridge_slave_0: left promiscuous mode [ 178.531709][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.546993][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.556406][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.564859][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.572989][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.578285][ T5233] usb 5-1: USB disconnect, device number 5 [ 178.587133][ T46] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.591422][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.606952][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.802392][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 178.826247][ T46] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 178.856565][ T46] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 178.900148][ T46] usb 6-1: config 135 has no interface number 0 [ 178.922300][ T46] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.972780][ T46] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 179.015860][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.041211][ T46] usb 6-1: Product: syz [ 179.055815][ T46] usb 6-1: Manufacturer: syz [ 179.070688][ T46] usb 6-1: SerialNumber: syz [ 179.100204][ T46] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 179.125734][ T46] usb 6-1: No valid video chain found. [ 179.146112][ T5296] net_ratelimit: 1 callbacks suppressed [ 179.146136][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.226234][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.362087][ T46] usb 6-1: USB disconnect, device number 6 [ 179.858706][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.889354][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.948419][ T52] bond0 (unregistering): Released all slaves [ 180.269047][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.319160][ T7749] loop0: detected capacity change from 0 to 1024 [ 180.666168][ T5246] Bluetooth: hci1: command tx timeout [ 180.799689][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 180.811246][ T7768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.820207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.950862][ T52] hsr_slave_0: left promiscuous mode [ 180.967813][ T52] hsr_slave_1: left promiscuous mode [ 180.983407][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.004499][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.023721][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.040845][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.137739][ T52] veth1_macvtap: left promiscuous mode [ 181.155830][ T52] veth0_macvtap: left promiscuous mode [ 181.169413][ T52] veth1_vlan: left promiscuous mode [ 181.180559][ T52] veth0_vlan: left promiscuous mode [ 181.306096][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.440075][ T7783] loop0: detected capacity change from 0 to 256 [ 181.460389][ T7781] netlink: 248 bytes leftover after parsing attributes in process `syz.3.969'. [ 181.565039][ T7762] loop4: detected capacity change from 0 to 32768 [ 181.788974][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.806288][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.814629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.814926][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.145912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.156040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.165026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.175761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 182.346812][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.516768][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 182.516790][ T29] audit: type=1326 audit(1726087682.075:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.601589][ T29] audit: type=1326 audit(1726087682.115:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.663143][ T29] audit: type=1326 audit(1726087682.125:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.686496][ T29] audit: type=1326 audit(1726087682.125:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.721773][ T29] audit: type=1326 audit(1726087682.125:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.767587][ T5246] Bluetooth: hci1: command 0x041b tx timeout [ 182.793668][ T29] audit: type=1326 audit(1726087682.125:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.831455][ T29] audit: type=1326 audit(1726087682.125:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.856726][ T29] audit: type=1326 audit(1726087682.125:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 182.928988][ T29] audit: type=1326 audit(1726087682.125:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 183.241280][ T52] team0 (unregistering): Port device team_slave_1 removed [ 183.305515][ T52] team0 (unregistering): Port device team_slave_0 removed [ 184.328654][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 184.426016][ C0] net_ratelimit: 2 callbacks suppressed [ 184.426040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.440216][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.466833][ T29] audit: type=1326 audit(1726087684.015:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0377def9 code=0x7ffc0000 [ 184.681546][ T7708] chnl_net:caif_netlink_parms(): no params data found [ 184.836031][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 184.842789][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.224191][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.246695][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.273419][ T7708] bridge_slave_0: entered allmulticast mode [ 185.295096][ T7708] bridge_slave_0: entered promiscuous mode [ 185.315093][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.340272][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.363709][ T7708] bridge_slave_1: entered allmulticast mode [ 185.382215][ T7708] bridge_slave_1: entered promiscuous mode [ 185.416199][ T934] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 185.443159][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1001'. [ 185.465967][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.523132][ T52] IPVS: stop unused estimator thread 0... [ 185.526944][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.579021][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.655818][ T934] usb 3-1: Using ep0 maxpacket: 32 [ 185.685194][ T934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.702074][ T7830] loop0: detected capacity change from 0 to 32768 [ 185.716741][ T934] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.732411][ T7830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.991 (7830) [ 185.760461][ T934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.780931][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.807172][ T934] usb 3-1: SerialNumber: syz [ 185.818925][ T7708] team0: Port device team_slave_0 added [ 185.830585][ T934] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 185.836233][ T7830] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.887684][ T7830] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 185.888440][ T7708] team0: Port device team_slave_1 added [ 185.911407][ T7830] BTRFS info (device loop0): using free-space-tree [ 186.007324][ T7863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.049089][ T7847] loop2: detected capacity change from 0 to 16 [ 186.056946][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.059843][ T7847] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.064061][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.104442][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.117715][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.124674][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.161212][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.395441][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'. [ 186.462999][ T7708] hsr_slave_0: entered promiscuous mode [ 186.463902][ T5227] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.490236][ T7708] hsr_slave_1: entered promiscuous mode [ 186.506479][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.526843][ T7708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.565706][ T7708] Cannot create hsr debugfs directory [ 186.916392][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 186.981627][ T7895] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 187.076373][ T7895] syz_tun: entered promiscuous mode [ 187.135219][ T7895] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.175198][ T5292] usb 3-1: USB disconnect, device number 8 [ 187.192496][ T7901] loop0: detected capacity change from 0 to 256 [ 187.237379][ T7901] exfat: Deprecated parameter 'namecase' [ 187.292839][ T7901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 187.546244][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.556469][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.566096][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.585827][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.089203][ T25] IPVS: starting estimator thread 0... [ 188.171153][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.186139][ T7921] IPVS: using max 17 ests per chain, 40800 per kthread [ 188.289911][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.529980][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.745361][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.793938][ T7933] loop4: detected capacity change from 0 to 64 [ 188.857550][ T7708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.977835][ T7708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.986675][ T5234] Bluetooth: hci1: command 0x041b tx timeout [ 189.027384][ T7708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.065270][ T7935] loop5: detected capacity change from 0 to 128 [ 189.112247][ T7935] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.126767][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.146061][ T7708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.149838][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.163311][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.166883][ T7935] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.174552][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.221805][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.233571][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.446823][ T64] bridge_slave_1: left allmulticast mode [ 189.452536][ T64] bridge_slave_1: left promiscuous mode [ 189.476132][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.500473][ T5231] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.512117][ T64] bridge_slave_0: left allmulticast mode [ 189.523122][ T64] bridge_slave_0: left promiscuous mode [ 189.529646][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.630405][ T5337] net_ratelimit: 2 callbacks suppressed [ 189.630429][ T5337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.322893][ T5233] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.483848][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.503983][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.527877][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.542603][ T64] bond0 (unregistering): Released all slaves [ 190.549527][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.578789][ T5233] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 190.618103][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.643897][ T5233] usb 3-1: config 0 descriptor?? [ 190.670619][ T5337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.679362][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.810628][ T7976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.971159][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'. [ 191.000285][ T7976] ipvlan2: entered allmulticast mode [ 191.011063][ T7976] veth0_vlan: entered allmulticast mode [ 191.113477][ T5233] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 191.141289][ T5233] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 191.179152][ T5233] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 191.280745][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.309407][ T7983] mkiss: ax0: crc mode is auto. [ 191.317357][ T5246] Bluetooth: hci0: command tx timeout [ 191.324985][ T5233] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 191.529793][ T5233] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 191.578581][ T5233] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 191.593985][ T7983] mkiss: ax0: crc mode is auto. [ 191.619793][ T5233] usb 3-1: USB disconnect, device number 9 [ 191.636633][ T64] hsr_slave_0: left promiscuous mode [ 191.686886][ T64] hsr_slave_1: left promiscuous mode [ 191.705033][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.714290][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.715890][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.738174][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.751095][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.809029][ T64] veth1_macvtap: left promiscuous mode [ 191.814917][ T64] veth0_macvtap: left promiscuous mode [ 191.828152][ T64] veth1_vlan: left promiscuous mode [ 191.833668][ T64] veth0_vlan: left promiscuous mode [ 192.668825][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.753191][ T5337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.800785][ T64] team0 (unregistering): Port device team_slave_1 removed [ 192.862837][ T64] team0 (unregistering): Port device team_slave_0 removed [ 193.307878][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.327481][ T5337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.349339][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.395771][ T5246] Bluetooth: hci0: command tx timeout [ 193.624351][ T8002] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1061'. [ 193.706583][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 193.765840][ T7936] chnl_net:caif_netlink_parms(): no params data found [ 193.786214][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.961903][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.968542][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.005168][ T8011] loop5: detected capacity change from 0 to 4096 [ 194.035308][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.047940][ T8011] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 194.211132][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.218410][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.287296][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.294594][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.452174][ T8011] overlayfs: invalid redirect ((null)) [ 194.621725][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.641791][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.659353][ T7936] bridge_slave_0: entered allmulticast mode [ 194.673329][ T7936] bridge_slave_0: entered promiscuous mode [ 194.692087][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.702311][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.709792][ T7936] bridge_slave_1: entered allmulticast mode [ 194.725030][ T7936] bridge_slave_1: entered promiscuous mode [ 194.826943][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.923855][ T7936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.946089][ T8031] ALSA: mixer_oss: invalid OSS volume '' [ 194.989681][ T7936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.218173][ T7936] team0: Port device team_slave_0 added [ 195.294920][ T7936] team0: Port device team_slave_1 added [ 195.466101][ T5246] Bluetooth: hci0: command tx timeout [ 195.543393][ T7936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.551595][ T7936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.581539][ T7936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.752116][ T7936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.776857][ T7936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.849226][ T7936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.875016][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.988827][ T8060] loop5: detected capacity change from 0 to 64 [ 196.050433][ T8060] syz.5.1085: attempt to access beyond end of device [ 196.050433][ T8060] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 196.115809][ T8060] Buffer I/O error on dev loop5, logical block 512, async page read [ 196.153261][ T8060] syz.5.1085: attempt to access beyond end of device [ 196.153261][ T8060] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 196.219742][ T7936] hsr_slave_0: entered promiscuous mode [ 196.247798][ T8060] Buffer I/O error on dev loop5, logical block 56576, async page read [ 196.256762][ T7936] hsr_slave_1: entered promiscuous mode [ 196.371416][ T7708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.436397][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.634551][ T8077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.852836][ T8083] loop4: detected capacity change from 0 to 256 [ 196.862970][ T8085] loop2: detected capacity change from 0 to 512 [ 196.882789][ T8083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 196.916152][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.920871][ T8085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.926710][ T8087] loop5: detected capacity change from 0 to 1024 [ 197.001292][ T8085] EXT4-fs (loop2): 1 truncate cleaned up [ 197.025409][ T8085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.140283][ T52] hfsplus: b-tree write err: -5, ino 4 [ 197.193079][ T8085] EXT4-fs error (device loop2): swap_inode_boot_loader:384: inode #5: comm syz.2.1096: iget: bad extra_isize 46 (inode size 256) [ 197.341306][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.391884][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.557235][ T5246] Bluetooth: hci0: command tx timeout [ 197.708562][ T7708] veth0_vlan: entered promiscuous mode [ 197.756690][ T7708] veth1_vlan: entered promiscuous mode [ 197.835915][ T934] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.931218][ T7708] veth0_macvtap: entered promiscuous mode [ 197.947311][ T7708] veth1_macvtap: entered promiscuous mode [ 197.947613][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.962345][ T7936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.996036][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.031647][ T7936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.051299][ T934] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.061960][ T7936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.076052][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.095495][ T7936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.103063][ T8109] loop5: detected capacity change from 0 to 128 [ 198.105096][ T934] usb 3-1: config 0 descriptor?? [ 198.121746][ T934] cp210x 3-1:0.0: cp210x converter detected [ 198.137818][ T8109] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 198.170428][ T8111] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 198.180049][ T8111] netem: change failed [ 198.190440][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.222126][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 198.250781][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.262738][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.282410][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.295000][ T25] usb 5-1: config 0 descriptor?? [ 198.315695][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.335930][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.361290][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.372266][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.382464][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.393366][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.406474][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.408859][ T1095] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 198.460902][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.487660][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.515904][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.545690][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.545958][ T25] usb 5-1: string descriptor 0 read error: -71 [ 198.566255][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.582334][ T25] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 198.585726][ T934] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 198.597601][ T25] usb 5-1: No valid video chain found. [ 198.599939][ T25] usb 5-1: USB disconnect, device number 6 [ 198.611478][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.632750][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.640969][ T934] usb 3-1: cp210x converter now attached to ttyUSB0 [ 198.647694][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.659966][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.671433][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.684451][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.771397][ T7708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.788985][ T7708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.802521][ T7708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.813995][ T7708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.866125][ T934] usb 3-1: USB disconnect, device number 10 [ 198.883157][ T934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.931130][ T934] cp210x 3-1:0.0: device disconnected [ 198.987736][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.067554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.305689][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.318674][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.470290][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.495427][ T7936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.609314][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.634199][ T7936] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.635767][ T5233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.684626][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.769107][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.776377][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.834275][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.841614][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.922325][ T5233] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 199.937068][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.977757][ T5233] usb 5-1: config 0 descriptor?? [ 200.007179][ T5233] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 200.026794][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.546194][ T8159] netlink: 'syz.1.1122': attribute type 6 has an invalid length. [ 200.639833][ T5233] gspca_stv06xx: vv6410 sensor detected [ 200.684668][ T46] kernel write not supported for file 407/task/408/clear_refs (pid: 46 comm: kworker/1:1) [ 200.720046][ T7936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.792146][ T8168] netlink: 'syz.3.1125': attribute type 6 has an invalid length. [ 200.922422][ T5233] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 200.965379][ T5233] usb 5-1: USB disconnect, device number 7 [ 200.979076][ T7936] veth0_vlan: entered promiscuous mode [ 201.039400][ T7936] veth1_vlan: entered promiscuous mode [ 201.079705][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.193507][ T7936] veth0_macvtap: entered promiscuous mode [ 201.249092][ T7936] veth1_macvtap: entered promiscuous mode [ 201.347712][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.369176][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.400145][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.435689][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.477642][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.525995][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.566085][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.604338][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.635206][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.668210][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.701286][ T7936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.747268][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 201.762033][ T8187] netlink: 'syz.3.1135': attribute type 9 has an invalid length. [ 201.809865][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.851041][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.895692][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.922812][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.953333][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.981521][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.009673][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.057255][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.086103][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.107702][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.125328][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.145272][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.163859][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.185144][ T7936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.200784][ T7936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.219476][ T7936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.233342][ T7936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.251306][ T7936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.268721][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.298716][ T8173] loop5: detected capacity change from 0 to 40427 [ 202.345996][ T8173] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 202.353424][ T8173] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 202.400452][ T8173] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1fffff [ 202.430385][ T8183] loop1: detected capacity change from 0 to 32768 [ 202.454025][ T8173] F2FS-fs (loop5): invalid crc value [ 202.482592][ T8173] F2FS-fs (loop5): Found nat_bits in checkpoint [ 202.517305][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.602868][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 202.602895][ T29] audit: type=1800 audit(1726087702.145:87): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1133" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 202.656880][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.700609][ T8185] loop2: detected capacity change from 0 to 32768 [ 202.709664][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.738701][ T8185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1134 (8185) [ 202.779891][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.799459][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.839621][ T8185] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.850144][ T8173] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 202.888984][ T8173] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 202.904494][ T8185] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 202.940808][ T8185] BTRFS info (device loop2): using free-space-tree [ 203.156786][ T5231] syz-executor: attempt to access beyond end of device [ 203.156786][ T5231] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.178377][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.179016][ T5231] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 203.420205][ T8227] loop0: detected capacity change from 0 to 2048 [ 203.436488][ T5229] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.534087][ T8227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.811240][ T7936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.181983][ T8205] loop4: detected capacity change from 0 to 32768 [ 204.205693][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.214190][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.079480][ T8260] loop1: detected capacity change from 0 to 512 [ 205.114979][ T8260] EXT4-fs: Ignoring removed i_version option [ 205.155810][ T8260] EXT4-fs: Ignoring removed nobh option [ 205.186715][ T8260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.299497][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.308024][ T8260] EXT4-fs (loop1): 1 truncate cleaned up [ 205.349841][ T8260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.442353][ T29] audit: type=1326 audit(1726087704.995:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b7def9 code=0x7ffc0000 [ 205.538067][ T29] audit: type=1326 audit(1726087704.995:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b7def9 code=0x7ffc0000 [ 205.624458][ T29] audit: type=1326 audit(1726087705.035:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f3495b7def9 code=0x7ffc0000 [ 205.735702][ T29] audit: type=1326 audit(1726087705.035:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b7def9 code=0x7ffc0000 [ 205.740647][ T7708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.831609][ T29] audit: type=1326 audit(1726087705.035:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b7def9 code=0x7ffc0000 [ 206.130660][ T8289] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 206.165710][ T8289] netlink: 9380 bytes leftover after parsing attributes in process `syz.1.1168'. [ 206.212066][ T8247] loop5: detected capacity change from 0 to 40427 [ 206.269036][ T8247] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 206.285750][ T8247] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 206.326731][ T8247] F2FS-fs (loop5): invalid crc value [ 206.355207][ T8247] F2FS-fs (loop5): Found nat_bits in checkpoint [ 206.356297][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.565015][ T8302] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 206.595894][ T8247] F2FS-fs (loop5): Start checkpoint disabled! [ 206.628556][ T8247] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 206.646850][ T8247] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 206.731584][ T8247] syz.5.1145: attempt to access beyond end of device [ 206.731584][ T8247] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 206.886946][ T8298] loop2: detected capacity change from 0 to 4096 [ 206.928164][ T8298] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 207.000949][ T8298] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 207.036044][ T8298] ntfs3: loop2: Failed to load $MFT (-22). [ 207.123135][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 207.132477][ T8314] loop1: detected capacity change from 0 to 128 [ 207.151610][ T8314] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 207.156612][ T8279] loop0: detected capacity change from 0 to 40427 [ 207.189397][ T8314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.227210][ T11] kworker/u8:0: attempt to access beyond end of device [ 207.227210][ T11] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 207.242677][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.255948][ T8279] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.296496][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 207.303436][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 207.373576][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 207.389587][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.414751][ T8279] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.423668][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 207.618157][ T7936] syz-executor: attempt to access beyond end of device [ 207.618157][ T7936] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.674890][ T7936] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 208.084772][ T8333] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1189'. [ 208.198177][ T1844] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 208.338582][ T8340] loop2: detected capacity change from 0 to 64 [ 208.426539][ T1844] usb 5-1: Using ep0 maxpacket: 32 [ 208.436941][ T1844] usb 5-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 208.456468][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.476010][ T1844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.506118][ T1844] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.528085][ T1844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.548556][ T1844] usb 5-1: config 0 descriptor?? [ 208.566733][ T1844] hub 5-1:0.0: bad descriptor, ignoring hub [ 208.588704][ T1844] hub 5-1:0.0: probe with driver hub failed with error -5 [ 208.883175][ T1844] usb 5-1: USB disconnect, device number 8 [ 209.265714][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.293033][ T8335] loop5: detected capacity change from 0 to 32768 [ 209.411907][ T8335] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 209.472584][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.525766][ T46] usb 5-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 209.576481][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.603867][ T8335] XFS (loop5): Ending clean mount [ 209.619600][ T46] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.40 [ 209.624020][ T8345] loop1: detected capacity change from 0 to 32768 [ 209.652492][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.675825][ T8345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1194 (8345) [ 209.690492][ T46] usb 5-1: config 0 descriptor?? [ 209.719860][ T8345] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.723516][ T46] ttusbir 5-1:0.0: cannot find expected altsetting [ 209.741592][ T8345] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 209.766331][ T8345] BTRFS info (device loop1): using free-space-tree [ 209.873500][ T8335] syz.5.1180 (8335) used greatest stack depth: 18816 bytes left [ 209.942456][ T5294] usb 5-1: USB disconnect, device number 9 [ 210.062076][ T5231] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 210.174480][ T7708] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.288173][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.516143][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.916260][ T8383] loop0: detected capacity change from 0 to 40427 [ 211.064892][ T8383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.321717][ T8383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.492665][ T8393] loop2: detected capacity change from 0 to 40427 [ 211.549192][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.582379][ T8393] F2FS-fs (loop2): invalid crc value [ 211.614372][ T8393] F2FS-fs (loop2): Found nat_bits in checkpoint [ 211.860004][ T8393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 211.876360][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.939719][ T8393] syz.2.1205: attempt to access beyond end of device [ 211.939719][ T8393] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.005720][ T8393] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 212.025965][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 212.335808][ T8454] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1229'. [ 212.355962][ T8454] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1229'. [ 212.587836][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.025373][ T8441] loop4: detected capacity change from 0 to 32768 [ 213.091028][ T8471] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 213.137623][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 213.227917][ T8475] loop0: detected capacity change from 0 to 256 [ 213.326266][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.337112][ T8475] FAT-fs (loop0): Directory bread(block 64) failed [ 213.365752][ T8475] FAT-fs (loop0): Directory bread(block 65) failed [ 213.372513][ T8475] FAT-fs (loop0): Directory bread(block 66) failed [ 213.392348][ T8475] FAT-fs (loop0): Directory bread(block 67) failed [ 213.405836][ T8475] FAT-fs (loop0): Directory bread(block 68) failed [ 213.425725][ T8475] FAT-fs (loop0): Directory bread(block 69) failed [ 213.432542][ T8475] FAT-fs (loop0): Directory bread(block 70) failed [ 213.440259][ T8481] loop1: detected capacity change from 0 to 256 [ 213.457808][ T8481] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 213.474217][ T8475] FAT-fs (loop0): Directory bread(block 71) failed [ 213.481538][ T8475] FAT-fs (loop0): Directory bread(block 72) failed [ 213.488580][ T8481] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 213.497918][ T8475] FAT-fs (loop0): Directory bread(block 73) failed [ 213.583618][ T8481] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000006) [ 213.632806][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.632984][ T8481] exFAT-fs (loop1): Filesystem has been set read-only [ 213.987280][ T8493] netlink: 'syz.0.1246': attribute type 22 has an invalid length. [ 214.200929][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1250'. [ 214.444712][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.455757][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.670360][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.825977][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 215.035863][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 215.063271][ T8497] loop2: detected capacity change from 0 to 32768 [ 215.071528][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.106258][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.144118][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.182809][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.214844][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.244778][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.484829][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 215.502298][ T25] usbtmc 2-1:16.0: can't read capabilities [ 215.704279][ T25] usb 2-1: USB disconnect, device number 3 [ 215.744709][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.822956][ T8519] loop4: detected capacity change from 0 to 32768 [ 215.836592][ T8519] XFS: ikeep mount option is deprecated. [ 215.893362][ T8519] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 216.102554][ T8519] XFS (loop4): Ending clean mount [ 216.115293][ T8519] XFS (loop4): Quotacheck needed: Please wait. [ 216.200099][ T8536] loop0: detected capacity change from 0 to 32768 [ 216.228287][ T8519] XFS (loop4): Quotacheck: Done. [ 216.280796][ T8556] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 216.620416][ T5230] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 216.757939][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.971737][ T8570] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 217.005640][ T5312] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.217885][ T5312] usb 6-1: Using ep0 maxpacket: 8 [ 217.226716][ T5312] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.255810][ T5312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.305812][ T5312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.329107][ T5312] usb 6-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 217.349159][ T5312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.370740][ T5312] usb 6-1: Product: syz [ 217.374971][ T5312] usb 6-1: Manufacturer: syz [ 217.405703][ T5312] usb 6-1: SerialNumber: syz [ 217.428108][ T5312] usb 6-1: config 0 descriptor?? [ 217.551625][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.672141][ T5312] radio-si470x 6-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 217.786009][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.868838][ T5312] radio-si470x 6-1:0.0: software version 98, hardware version 86 [ 218.070570][ T5312] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 218.096445][ T5312] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 218.129751][ T5312] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 218.154773][ T5312] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 218.194400][ T5312] usb 6-1: USB disconnect, device number 7 [ 218.269772][ T8610] (syz.4.1296,8610,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 218.325954][ T8610] (syz.4.1296,8610,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 218.459789][ T8599] loop0: detected capacity change from 0 to 32768 [ 218.487065][ T8599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1291 (8599) [ 218.566856][ T8599] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.581791][ T8594] loop2: detected capacity change from 0 to 32768 [ 218.616894][ T8599] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 218.657884][ T8617] kernel profiling enabled (shift: 0) [ 218.667003][ T8599] BTRFS info (device loop0): using free-space-tree [ 218.832238][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.991182][ T8599] BTRFS info (device loop0): rebuilding free space tree [ 219.454814][ T7936] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.810614][ T8631] loop1: detected capacity change from 0 to 32768 [ 219.867481][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.990449][ T8631] ERROR: (device loop1): diAllocBit: iag inconsistent [ 219.990449][ T8631] [ 220.043013][ T8631] ialloc: diAlloc returned -5! [ 220.493044][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 220.586525][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.743018][ T8666] loop0: detected capacity change from 0 to 22 [ 220.761167][ T8666] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 220.805310][ T8666] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 220.916085][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.028743][ T8650] loop2: detected capacity change from 0 to 40427 [ 221.038618][ T8650] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 221.053780][ T8650] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 221.082431][ T8650] F2FS-fs (loop2): invalid crc value [ 221.117567][ T8650] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.204734][ T8617] syz.4.1299: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 221.239255][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.4.1299 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 221.250011][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.260107][ T8617] Call Trace: [ 221.263461][ T8617] [ 221.266424][ T8617] dump_stack_lvl+0x241/0x360 [ 221.271145][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.276387][ T8617] ? __pfx__printk+0x10/0x10 [ 221.281031][ T8617] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 221.287502][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.293208][ T8617] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 221.299776][ T8617] warn_alloc+0x278/0x410 [ 221.304173][ T8617] ? __pfx_warn_alloc+0x10/0x10 [ 221.309099][ T8617] ? profile_init+0xb1/0x100 [ 221.313750][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.319448][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.325127][ T8617] ? __get_vm_area_node+0x23d/0x270 [ 221.330482][ T8617] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 221.336440][ T8617] ? _printk+0xd5/0x120 [ 221.339795][ T8685] loop5: detected capacity change from 0 to 128 [ 221.340656][ T8617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.353278][ T8617] ? rcu_is_watching+0x15/0xb0 [ 221.358102][ T8617] ? rcu_is_watching+0x15/0xb0 [ 221.362925][ T8617] ? profile_init+0xb1/0x100 [ 221.367556][ T8617] ? __pfx_sysfs_kf_write+0x10/0x10 [ 221.372883][ T8617] vzalloc_noprof+0x79/0x90 [ 221.377420][ T8617] ? profile_init+0xb1/0x100 [ 221.382034][ T8617] profile_init+0xb1/0x100 [ 221.386488][ T8617] profiling_store+0x6c/0xf0 [ 221.391103][ T8617] kernfs_fop_write_iter+0x3a3/0x500 [ 221.396433][ T8617] vfs_write+0xa74/0xc90 [ 221.400700][ T8617] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 221.406537][ T8617] ? __pfx_vfs_write+0x10/0x10 [ 221.411317][ T8617] ? do_futex+0x392/0x560 [ 221.415688][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.421354][ T8617] ksys_write+0x1a0/0x2c0 [ 221.425701][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.431367][ T8617] ? __pfx_ksys_write+0x10/0x10 [ 221.436235][ T8617] ? do_syscall_64+0x100/0x230 [ 221.441024][ T8617] ? do_syscall_64+0xb6/0x230 [ 221.445737][ T8617] do_syscall_64+0xf3/0x230 [ 221.450269][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.456271][ T8617] RIP: 0033:0x7f45e777def9 [ 221.460697][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.480421][ T8617] RSP: 002b:00007f45e8519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.488863][ T8617] RAX: ffffffffffffffda RBX: 00007f45e7935f80 RCX: 00007f45e777def9 [ 221.496856][ T8617] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000003 [ 221.504935][ T8617] RBP: 00007f45e77f0b56 R08: 0000000000000000 R09: 0000000000000000 [ 221.512939][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.520931][ T8617] R13: 0000000000000000 R14: 00007f45e7935f80 R15: 00007ffc65e06518 [ 221.528945][ T8617] [ 221.543358][ T8617] Mem-Info: [ 221.547482][ T8617] active_anon:8816 inactive_anon:0 isolated_anon:0 [ 221.547482][ T8617] active_file:11705 inactive_file:38333 isolated_file:0 [ 221.547482][ T8617] unevictable:768 dirty:312 writeback:0 [ 221.547482][ T8617] slab_reclaimable:9999 slab_unreclaimable:102038 [ 221.547482][ T8617] mapped:28193 shmem:6339 pagetables:896 [ 221.547482][ T8617] sec_pagetables:0 bounce:0 [ 221.547482][ T8617] kernel_misc_reclaimable:0 [ 221.547482][ T8617] free:1301099 free_pcp:2147 free_cma:0 [ 221.593607][ T8617] Node 0 active_anon:35364kB inactive_anon:0kB active_file:46756kB inactive_file:153252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112708kB dirty:1228kB writeback:0kB shmem:23820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10692kB pagetables:3584kB sec_pagetables:0kB all_unreclaimable? no [ 221.632639][ T8617] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 221.668896][ T8617] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.697816][ T8617] lowmem_reserve[]: 0 2467 2468 0 0 [ 221.699300][ T8685] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.704369][ T8617] Node 0 DMA32 free:1248472kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:35232kB inactive_anon:0kB active_file:46756kB inactive_file:152432kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1112kB local_pcp:912kB free_cma:0kB [ 221.762417][ T8685] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.794899][ T8650] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 221.808820][ T8650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.825650][ T8617] lowmem_reserve[]: 0 0 0 0 0 [ 221.836528][ T8617] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 221.900392][ T8685] fscrypt (loop5, inode 12): Unsupported encryption flags (0x1b) [ 221.902637][ T8696] loop1: detected capacity change from 0 to 64 [ 221.940660][ T8617] lowmem_reserve[]: 0 0 0 0 0 [ 221.946205][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.960954][ T8617] Node 1 Normal free:3940324kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:80kB unevictable:1536kB writepending:20kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:7208kB local_pcp:3756kB free_cma:0kB [ 222.032254][ T5229] syz-executor: attempt to access beyond end of device [ 222.032254][ T5229] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.065846][ T8617] lowmem_reserve[]: 0 0 0 0 0 [ 222.072534][ T5231] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.092291][ T5229] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 222.103401][ T8617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.284860][ T8617] Node 0 DMA32: 37*4kB (UME) 9*8kB (M) 138*16kB (UME) 441*32kB (UM) 242*64kB (UM) 82*128kB (UME) 34*256kB (UM) 14*512kB (UME) 6*1024kB (UME) 4*2048kB (UME) 287*4096kB (M) = 1248284kB [ 222.345813][ T8617] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 222.387961][ T8617] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 12*16kB (UM) 11*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (UM) 2*512kB (M) 1*1024kB (U) 0*2048kB 961*4096kB (M) = 3940324kB [ 222.447302][ T8704] syz.0.1334 uses obsolete (PF_INET,SOCK_PACKET) [ 222.464197][ T8709] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1331'. [ 222.473910][ T8617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.493798][ T8709] netlink: get zone limit has 8 unknown bytes [ 222.505940][ T8617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.522985][ T8617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.555757][ T8617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.585114][ T8617] 56315 total pagecache pages [ 222.595765][ T8617] 0 pages in swap cache [ 222.606691][ T8617] Free swap = 124532kB [ 222.627977][ T8617] Total swap = 124996kB [ 222.636973][ T8617] 2097051 pages RAM [ 222.645756][ T8617] 0 pages HighMem/MovableOnly [ 222.665308][ T8617] 426967 pages reserved [ 222.674534][ T8617] 0 pages cma reserved [ 222.986043][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.383797][ T8728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.394795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.539586][ T8734] loop0: detected capacity change from 0 to 1024 [ 223.550259][ T8735] binder: Binderfs stats mode cannot be changed during a remount [ 223.570711][ T8734] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.608638][ T8734] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1344: Invalid block bitmap block 0 in block_group 0 [ 223.635901][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.659985][ T8734] Quota error (device loop0): write_blk: dquota write failed [ 223.668530][ T8734] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 223.678865][ T8734] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1344: Failed to acquire dquot type 0 [ 223.695393][ T8734] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.1344: Freeing blocks not in datazone - block = 0, count = 4096 [ 223.734779][ T8734] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1344: Invalid inode bitmap blk 0 in block_group 0 [ 223.749181][ T1095] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 223.755247][ T8740] vlan2: entered promiscuous mode [ 223.764682][ T8740] vlan2: entered allmulticast mode [ 223.770486][ T8740] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 223.778160][ T8734] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 223.788059][ T1095] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:5: Failed to release dquot type 0 [ 223.802531][ T8740] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 223.810049][ T8734] EXT4-fs (loop0): 1 orphan inode deleted [ 223.821889][ T8734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.860845][ T8740] team0: Port device vlan2 added [ 223.902576][ T8734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4436: comm syz.0.1344: Invalid inode table block 12884901889 in block_group 0 [ 223.959167][ T8734] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Corrupt filesystem [ 224.026080][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.034299][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.109267][ T64] EXT4-fs error (device loop0): __ext4_get_inode_loc:4436: comm kworker/u8:4: Invalid inode table block 12884901889 in block_group 0 [ 224.180336][ T8745] mkiss: ax0: crc mode is auto. [ 224.186620][ T7936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.272796][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 224.425834][ T8751] mkiss: ax0: crc mode is auto. [ 224.436063][ T1844] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.639064][ T1844] usb 6-1: Using ep0 maxpacket: 32 [ 224.673432][ T1844] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.681212][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.701552][ T1844] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.825480][ T1844] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.858074][ T1844] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 224.894293][ T1844] usb 6-1: Product: syz [ 224.915191][ T1844] usb 6-1: Manufacturer: syz [ 224.960903][ T1844] hub 6-1:4.0: USB hub found [ 225.041465][ T8775] loop1: detected capacity change from 0 to 128 [ 225.088530][ T8775] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.134294][ T8775] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.164870][ T1844] hub 6-1:4.0: 2 ports detected [ 225.283787][ T7708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.327767][ T25] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 225.458126][ T8786] loop4: detected capacity change from 0 to 2048 [ 225.473159][ T8789] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.1368'. [ 225.489175][ T8789] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 225.503050][ T8789] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1368'. [ 225.533440][ T8786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.558964][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.561023][ T8794] loop2: detected capacity change from 0 to 512 [ 225.577938][ T1844] hub 6-1:4.0: set hub depth failed [ 225.583380][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 225.601111][ T25] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 225.607391][ T8794] EXT4-fs: journaled quota format not specified [ 225.635207][ T1844] usb 6-1: USB disconnect, device number 8 [ 225.662603][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.709886][ T25] usb 1-1: language id specifier not provided by device, defaulting to English [ 225.728865][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.760152][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.780067][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.085220][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 226.110128][ T1844] net_ratelimit: 2 callbacks suppressed [ 226.110157][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.284713][ T8816] loop1: detected capacity change from 0 to 512 [ 226.316569][ T8816] EXT4-fs: Ignoring removed i_version option [ 226.358247][ T8820] loop2: detected capacity change from 0 to 64 [ 226.364961][ T8816] EXT4-fs (loop1): 1 truncate cleaned up [ 226.386755][ T8816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.456764][ T25] usb 1-1: 0:2 : does not exist [ 226.463354][ T8820] syz.2.1381: attempt to access beyond end of device [ 226.463354][ T8820] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 226.545719][ T8820] Buffer I/O error on dev loop2, logical block 512, async page read [ 226.553828][ T8820] syz.2.1381: attempt to access beyond end of device [ 226.553828][ T8820] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 226.555422][ T8823] loop5: detected capacity change from 0 to 1024 [ 226.595803][ T8820] Buffer I/O error on dev loop2, logical block 56576, async page read [ 226.666353][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.671460][ T5233] usb 1-1: USB disconnect, device number 5 [ 226.726925][ T8823] hfsplus: invalid extended attribute record [ 226.750686][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 226.892396][ T7708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.915120][ T11] hfsplus: b-tree write err: -5, ino 8 [ 226.991082][ T8828] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 227.143810][ T8832] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 227.166106][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.183189][ T8832] netlink: 9380 bytes leftover after parsing attributes in process `syz.1.1385'. [ 227.644333][ T8848] bond0: Unable to set down delay as MII monitoring is disabled [ 228.019489][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 228.189511][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.227969][ T8878] loop1: detected capacity change from 0 to 128 [ 228.267940][ T8878] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 228.483019][ T35] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 229.006066][ T5296] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 229.221843][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.234006][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.285712][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.336371][ T5296] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 229.345492][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.446775][ T5296] usb 6-1: config 0 descriptor?? [ 229.614234][ T8909] loop0: detected capacity change from 0 to 1024 [ 229.717898][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.748602][ T8909] hfsplus: walked past end of dir [ 229.932146][ T5296] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 229.965946][ T8912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.976171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.103496][ T5296] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 230.131493][ T5296] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 230.157852][ T5296] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 230.214738][ T5296] usb 6-1: USB disconnect, device number 9 [ 230.286196][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.291975][ T8919] loop1: detected capacity change from 0 to 256 [ 230.369178][ T8920] input: syz1 as /devices/virtual/input/input9 [ 230.450066][ T8922] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 231.148557][ T8916] loop0: detected capacity change from 0 to 32768 [ 231.255650][ T8935] loop5: detected capacity change from 0 to 8 [ 231.338202][ T1844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.878319][ T8947] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 231.899295][ T8928] loop1: detected capacity change from 0 to 32768 [ 232.001922][ T29] audit: type=1800 audit(1726087731.555:93): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1424" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 232.359693][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.619288][ T8967] Bluetooth: MGMT ver 1.23 [ 232.625502][ T8964] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 232.705492][ T8964] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 232.747412][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.043442][ T8981] netlink: 'syz.5.1452': attribute type 12 has an invalid length. [ 233.086184][ T8981] netlink: 'syz.5.1452': attribute type 10 has an invalid length. [ 233.155847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.164262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.173147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.181696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.190327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.198691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.207366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.191019][ T8978] loop4: detected capacity change from 0 to 32768 [ 234.237536][ T8978] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1449 (8978) [ 234.266629][ T30] INFO: task syz.3.34:5414 blocked for more than 143 seconds. [ 234.294993][ T30] Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 234.313772][ T8978] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 234.338691][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.345884][ T8978] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 234.380476][ T30] task:syz.3.34 state:D stack:23840 pid:5414 tgid:5412 ppid:5232 flags:0x00000004 [ 234.389312][ T8978] BTRFS info (device loop4): using free-space-tree [ 234.415977][ T30] Call Trace: [ 234.419677][ T30] [ 234.422816][ T30] __schedule+0x1800/0x4a60 [ 234.469642][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.485513][ T30] ? __pfx___schedule+0x10/0x10 [ 234.513982][ T30] ? __blk_flush_plug+0x449/0x500 [ 234.519808][ T30] ? __pfx_lock_release+0x10/0x10 [ 234.543409][ T30] ? __blk_flush_plug+0x449/0x500 [ 234.548854][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.554105][ T8985] loop1: detected capacity change from 0 to 32768 [ 234.555400][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 234.574291][ T30] ? schedule+0x90/0x320 [ 234.579872][ T30] schedule+0x14b/0x320 [ 234.589163][ T30] io_schedule+0x8d/0x110 [ 234.593822][ T30] folio_wait_bit_common+0x882/0x12b0 [ 234.599703][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 234.607020][ T8985] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 234.608029][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 234.621413][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 234.627159][ T30] z_erofs_runqueue+0xa8c/0x2010 [ 234.632466][ T30] ? __pfx_z_erofs_runqueue+0x10/0x10 [ 234.638098][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.643915][ T30] ? _raw_spin_unlock+0x28/0x50 [ 234.649028][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.654871][ T30] ? lockref_put_or_lock+0x75/0xc0 [ 234.660492][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.666701][ T30] z_erofs_readahead+0xbae/0xf00 [ 234.675188][ T30] ? __pfx_z_erofs_readahead+0x10/0x10 [ 234.682229][ T30] ? __pfx_lock_release+0x10/0x10 [ 234.689301][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.695087][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.701060][ T30] ? blk_start_plug+0x70/0x1b0 [ 234.705983][ T30] read_pages+0x180/0x840 [ 234.712945][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 234.718740][ T30] ? __pfx_read_pages+0x10/0x10 [ 234.723631][ T30] ? filemap_add_folio+0x26d/0x650 [ 234.729057][ T30] ? __pfx_filemap_add_folio+0x10/0x10 [ 234.734568][ T30] page_cache_ra_unbounded+0x6ce/0x7f0 [ 234.740205][ T30] force_page_cache_ra+0x280/0x2f0 [ 234.745511][ T30] generic_fadvise+0x528/0x840 [ 234.750871][ T30] ? __pfx_generic_fadvise+0x10/0x10 [ 234.756389][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.762064][ T30] ? __fget_files+0x3f6/0x470 [ 234.766910][ T30] ? __fget_files+0x29/0x470 [ 234.771737][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.777895][ T30] __x64_sys_fadvise64+0x145/0x190 [ 234.782733][ T8985] XFS (loop1): Ending clean mount [ 234.783090][ T30] do_syscall_64+0xf3/0x230 [ 234.794093][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.801548][ T30] RIP: 0033:0x7fca5277def9 [ 234.806544][ T30] RSP: 002b:00007fca521ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 234.823825][ T8993] loop5: detected capacity change from 0 to 32768 [ 234.833496][ T30] RAX: ffffffffffffffda RBX: 00007fca52935f80 RCX: 00007fca5277def9 [ 234.835141][ T8993] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1457 (8993) [ 234.858014][ T30] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 234.869995][ T8993] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.880486][ T30] RBP: 00007fca527f0b56 R08: 0000000000000000 R09: 0000000000000000 [ 234.888887][ T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 234.898842][ T8993] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 234.913619][ T30] R13: 0000000000000000 R14: 00007fca52935f80 R15: 00007ffd1869b0e8 [ 234.921881][ T30] [ 234.925240][ T30] [ 234.925240][ T30] Showing all locks held in the system: [ 234.933805][ T8993] BTRFS info (device loop5): using free-space-tree [ 234.943653][ T30] 3 locks held by kworker/u8:0/11: [ 234.948919][ T8978] BTRFS error (device loop4): balance: invalid convert metadata profile raid1c3 [ 234.950857][ T30] 1 lock held by khungtaskd/30: [ 234.965147][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 234.975964][ T30] 2 locks held by kworker/u8:2/35: [ 234.981169][ T30] #0: ffff888022378948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 234.993589][ T30] #1: ffffc90000ab7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 235.008032][ T30] 2 locks held by getty/4981: [ 235.012775][ T30] #0: ffff8880305d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 235.026107][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 235.037062][ T30] 1 lock held by syz.3.34/5414: [ 235.041962][ T30] #0: ffff8880789c0330 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 235.054501][ T30] 2 locks held by syz.4.1449/8978: [ 235.064722][ T30] 2 locks held by syz.1.1440/8983: [ 235.071034][ T30] 2 locks held by syz.5.1457/8993: [ 235.083931][ T30] #0: ffff888069b080e0 (&type->s_umount_key#52/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 235.094718][ T30] #1: ffffffff8e7e2a28 (wq_pool_mutex){+.+.}-{3:3}, at: alloc_workqueue+0xba2/0x1fe0 [ 235.111894][ T30] [ 235.114280][ T30] ============================================= [ 235.114280][ T30] [ 235.140318][ T30] NMI backtrace for cpu 1 [ 235.144719][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 235.151673][ T7708] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.155230][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.172361][ T5230] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 235.174013][ T30] Call Trace: [ 235.174025][ T30] [ 235.190589][ T30] dump_stack_lvl+0x241/0x360 [ 235.195294][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.200515][ T30] ? __pfx__printk+0x10/0x10 [ 235.205123][ T30] ? vprintk_emit+0x667/0x7c0 [ 235.209907][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 235.214950][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 235.219921][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.225402][ T30] ? _printk+0xd5/0x120 [ 235.229584][ T30] ? __pfx__printk+0x10/0x10 [ 235.234194][ T30] ? __wake_up_klogd+0xcc/0x110 [ 235.239161][ T30] ? __pfx__printk+0x10/0x10 [ 235.243769][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.249599][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 235.254644][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 235.260645][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 235.266656][ T30] watchdog+0xff4/0x1040 [ 235.271015][ T30] ? watchdog+0x1ea/0x1040 [ 235.275453][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.280158][ T30] kthread+0x2f2/0x390 [ 235.284245][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.288945][ T30] ? __pfx_kthread+0x10/0x10 [ 235.293544][ T30] ret_from_fork+0x4d/0x80 [ 235.297987][ T30] ? __pfx_kthread+0x10/0x10 [ 235.302676][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.307999][ T30] [ 235.313132][ T30] Sending NMI from CPU 1 to CPUs 0: [ 235.318889][ C0] NMI backtrace for cpu 0 [ 235.318906][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 235.318931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.318946][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 235.318984][ C0] RIP: 0010:preempt_count_sub+0x67/0x170 [ 235.319017][ C0] Code: 81 e1 ff ff ff 7f 39 d9 7c 27 81 fb fe 00 00 00 77 07 0f b6 c0 85 c0 74 5f 65 8b 05 7b d5 a0 7e f7 db 65 01 1d 72 d5 a0 7e 5b <41> 5e e9 6d 3f 8d 0a 90 e8 2c 22 4c 03 85 c0 74 3a 48 c7 c0 50 a8 [ 235.319036][ C0] RSP: 0018:ffffc90000106698 EFLAGS: 00000293 [ 235.319053][ C0] RAX: 0000000080000202 RBX: ffffc90000108000 RCX: 0000000000000202 [ 235.319070][ C0] RDX: 0000000000000000 RSI: ffffc90000106b48 RDI: 0000000000000001 [ 235.319086][ C0] RBP: ffffc90000106780 R08: ffffffff81414545 R09: ffffffff814140bf [ 235.319103][ C0] R10: 0000000000000003 R11: ffff88801cacbc00 R12: ffffc90000106b70 [ 235.319119][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffc90000106b78 [ 235.319140][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 235.319159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.319175][ C0] CR2: 00007ffc65e04ff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 235.319192][ C0] Call Trace: [ 235.319201][ C0] [ 235.319211][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 235.319242][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 235.319279][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.319308][ C0] ? nmi_handle+0x2a/0x5a0 [ 235.319344][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 235.319374][ C0] ? nmi_handle+0x151/0x5a0 [ 235.319396][ C0] ? nmi_handle+0x2a/0x5a0 [ 235.319420][ C0] ? preempt_count_sub+0x67/0x170 [ 235.319447][ C0] ? default_do_nmi+0x63/0x160 [ 235.319485][ C0] ? exc_nmi+0x123/0x1f0 [ 235.319515][ C0] ? end_repeat_nmi+0xf/0x53 [ 235.319550][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 235.319585][ C0] ? unwind_next_frame+0x1df5/0x2a00 [ 235.319623][ C0] ? preempt_count_sub+0x67/0x170 [ 235.319652][ C0] ? preempt_count_sub+0x67/0x170 [ 235.319682][ C0] ? preempt_count_sub+0x67/0x170 [ 235.319712][ C0] [ 235.319719][ C0] [ 235.319727][ C0] unwind_next_frame+0x1e65/0x2a00 [ 235.319771][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 235.319807][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 235.319838][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.319870][ C0] arch_stack_walk+0x151/0x1b0 [ 235.319900][ C0] ? __kmalloc_noprof+0x1fc/0x400 [ 235.319929][ C0] stack_trace_save+0x118/0x1d0 [ 235.319960][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 235.319987][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320027][ C0] ? __pfx_validate_chain+0x10/0x10 [ 235.320055][ C0] kasan_save_track+0x3f/0x80 [ 235.320085][ C0] ? kasan_save_track+0x3f/0x80 [ 235.320114][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 235.320186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320221][ C0] __kasan_kmalloc+0x98/0xb0 [ 235.320254][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 235.320291][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 235.320328][ C0] __kmalloc_noprof+0x1fc/0x400 [ 235.320356][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 235.320397][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.320435][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 235.320475][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320508][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 235.320529][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320562][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 235.320598][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.320640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320675][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 235.320712][ C0] ? kvfree_call_rcu+0x48c/0x790 [ 235.320745][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320784][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 235.320821][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.320891][ C0] ? cfg80211_update_known_bss+0xb95/0x1500 [ 235.320924][ C0] ieee80211_inform_bss+0x15f/0x1080 [ 235.320963][ C0] ? __cfg80211_bss_update+0x1202/0x2170 [ 235.320994][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.321030][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 235.321073][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 235.321101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.321158][ C0] ? cfg80211_inform_single_bss_data+0xd3d/0x2030 [ 235.321188][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 235.321227][ C0] cfg80211_inform_single_bss_data+0xe95/0x2030 [ 235.321256][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.321290][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 235.321336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.321370][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 235.321409][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 235.321453][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 235.321494][ C0] ? __kernel_text_address+0xd/0x40 [ 235.321520][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 235.321557][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 235.321588][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 235.321636][ C0] ? __pfx_validate_chain+0x10/0x10 [ 235.321683][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 235.321716][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.321749][ C0] ? mark_lock+0x9a/0x350 [ 235.321786][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.321818][ C0] ? __lock_acquire+0x137a/0x2040 [ 235.321876][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 235.321907][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 235.321947][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 235.321984][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 235.322019][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 235.322059][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 235.322095][ C0] ? __pfx_lock_release+0x10/0x10 [ 235.322126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.322166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.322205][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 235.322255][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 235.322290][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 235.322328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.322364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.322397][ C0] ? mark_lock+0x9a/0x350 [ 235.322433][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.322470][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.322505][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.322538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.322570][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.322612][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 235.322657][ C0] cfg80211_wiphy_work+0x2dd/0x490 [ 235.322694][ C0] ? process_scheduled_works+0x945/0x1830 [ 235.322725][ C0] process_scheduled_works+0xa2e/0x1830 [ 235.322780][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.322819][ C0] ? assign_work+0x364/0x3d0 [ 235.322853][ C0] worker_thread+0x86d/0xd10 [ 235.322898][ C0] ? __kthread_parkme+0x169/0x1d0 [ 235.322933][ C0] ? __pfx_worker_thread+0x10/0x10 [ 235.322965][ C0] kthread+0x2f2/0x390 [ 235.322985][ C0] ? __pfx_worker_thread+0x10/0x10 [ 235.323016][ C0] ? __pfx_kthread+0x10/0x10 [ 235.323038][ C0] ret_from_fork+0x4d/0x80 [ 235.323071][ C0] ? __pfx_kthread+0x10/0x10 [ 235.323092][ C0] ret_from_fork_asm+0x1a/0x30 [ 235.323138][ C0] [ 236.068060][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 236.074992][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 236.086053][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.096320][ T30] Call Trace: [ 236.099648][ T30] [ 236.102712][ T30] dump_stack_lvl+0x241/0x360 [ 236.107434][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.112694][ T30] ? __pfx__printk+0x10/0x10 [ 236.117334][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.123372][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.129062][ T30] ? vscnprintf+0x5d/0x90 [ 236.133441][ T30] panic+0x349/0x860 [ 236.137377][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.143045][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 236.149228][ T30] ? __pfx_panic+0x10/0x10 [ 236.153659][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 236.159056][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.164713][ T30] ? __irq_work_queue_local+0x137/0x410 [ 236.170283][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.176085][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 236.181506][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 236.187786][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 236.193967][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.199626][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 236.205808][ T30] watchdog+0x1033/0x1040 [ 236.210256][ T30] ? watchdog+0x1ea/0x1040 [ 236.214714][ T30] ? __pfx_watchdog+0x10/0x10 [ 236.219495][ T30] kthread+0x2f2/0x390 [ 236.223582][ T30] ? __pfx_watchdog+0x10/0x10 [ 236.228351][ T30] ? __pfx_kthread+0x10/0x10 [ 236.232954][ T30] ret_from_fork+0x4d/0x80 [ 236.237397][ T30] ? __pfx_kthread+0x10/0x10 [ 236.241999][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.246822][ T30] [ 236.250119][ T30] Kernel Offset: disabled [ 236.254473][ T30] Rebooting in 86400 seconds..