last executing test programs: 4.118644006s ago: executing program 5 (id=878): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9acb00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 3.517350572s ago: executing program 5 (id=882): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@routing={0x84}]}}}}}, 0x0) 3.260675564s ago: executing program 4 (id=885): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 3.260502572s ago: executing program 5 (id=886): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000fe"], 0x5c}}, 0x0) 2.989299318s ago: executing program 4 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800010003"], 0x38}}, 0x0) 2.916632824s ago: executing program 5 (id=892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4, 0xa}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}, 0x0) 2.875104853s ago: executing program 4 (id=893): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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", 0x108}, {&(0x7f00000008c0)="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", 0x171}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000), 0xff67}, {&(0x7f00000004c0)="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", 0x156}], 0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.615815564s ago: executing program 5 (id=896): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) 2.502583046s ago: executing program 2 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gre0\x00'}}}}}, 0x30}}, 0x0) 2.392857679s ago: executing program 2 (id=898): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.300580699s ago: executing program 4 (id=900): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.036689148s ago: executing program 4 (id=903): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f0000000580)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYBLOB="7569643d905d71524d6613c415e10839b8aebc330a7196ada7453b3ac69b748c4314d22ec85487abc5c78285138c51d979f457ee167c34bb9e2d88d15ddf56f006eab8f8b4155bd1aac2a44e1d52ee5402b2bfbc1242ec6930b178d71d374ce907288e233b9cd39d67476fd3ab3c9a84fce295ec770000000000000000002000000000", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES16], 0x21, 0x6207, &(0x7f0000012500)="$eJzs3ctvHVcdB/DfffoRmkZdVCVCyG3Do5TmWUKgQNsFLNiwQNmiRK5bRaSAkoDSKiKuvGHBHwFCYokQS1b8AV2wZccfQKQECdRVpxr7HGc88c21k/rOtc/nIzlzf3NmfM/ke+c+PDP3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP/7RT8/1IuLKb9KMExFfiEFEP2KprlciYmnlRHOdF2KzOZ6PiNFCRL3+5j/PRrweER8fj7j/4M5qPfv8Hvvxw7/+608/O/aTf/5ldOb/f7s1eGPScrdv//5/f7/75NsLAAAAJaqqquqlj/knI2KYPtsDAEdffv2vkjxfPXf1+pz1R61Wq9WHsG6qdne3WUTEenOd+j2Dw/EAcMisxyddd4EOyb9ow4g41nUngLnW67oDHIj7D+6s9lK+vebrwcpWez4XZEf+673t6zsmTadpn2Myq8fXRgziuQn9WZpRH+ZJzr/fzv/KVvs4LXfQ+c/KpPzHW5c+FSfnP2jn33J08u/vmn+pcv7DfeU/kD8AAAAAAMyx/Pf/Ex0f/114+k3Zk8cd/12ZUR8AAAAAAAAA4PO23/H/hq3x/7YZ/w8AAADmVv1ZvfaH4w/nTfoutnr+5V7EM63lgcKki2WWu+4HAAAAAAAAAAAAAJRkuHUO7+VexCginllerqqq/mlq1/v1tOsfdqVvP5Ss6yd5AADY8vHx1rX8vYjFiLicvutvtLy8XFWLS8vVcrW0kN/PjhcWq6XG59o8rectjPfwhng4rupftthYr2na5+Vp7e3fV9/XuBrsoWOz0WHgABARW69G970iHTFV9Wx0/S6Hw8H+f/TY/9mLrh+nAAAAwMGrqqrqpa/zPpmO+fe77hQAMBP59b99XECtVqvVavXRq5uq3d1tFhGx3lynfs9gOH4AOGTW45Ouu0CH5F+0YUS80HUngLnW67oDHIj7D+6s9lK+vebrQRrfPZ8LsiP/9d7menn93abTtM8xmdXjayMG8dyE/jw/oz7Mk5x/v53/la32cVruoPOflUn519t5ooP+dC3nP2jn33J08u/vmn+pcv7DfeU/kD8AAAAAAMyx/Pf/E3N1/Hf8pJsz1eOO/64c2L0CAAAAAAAAwMG6/+DOar7uNR///9Iuy7n+82jK+ffkX6Scf7+V/9dbyw0at++9/TD//z64s/rnW//5Yp7uMf+Hv66XHlm99IjopabeME2fZusetTEajOt7GvX6g2E656cavRvX4nqsxdkdy/bT/8fD9nOPbMRos70abLWf39E+3G7P61/Y0T5KZzpVS7n9dKzGL+N6vLPZXrctTNn+xSnt1ZT2nP/A/l+knP+w8VPnv5zae61p7d5H/Uf2++Z0t/t569qXf3f24Ddnqo0YbG9bU719L3XQn83/k2Pj+PXNtRunb1+9devGuUiTHXPPR5p8znL+o/Sz/fz/8lZ7fqJu7q/3PhrvO/95sRHDifm/3Lhdb+8rM+5bF3L+4/ST838nte++/x/m/Cfv/6920B8AAAAAAAAAAAAAAAB4nKqqNi8RfSsiLqbrf7q6NhMAmK38+l8lef6s6sGM70+tPuR1b876M9P602q++qNWH8a6qdrdm80iIv7RXKd+z/Db3X4ZADDPPo2If3fdCToj/4Ll7/urp6e67gwwUzc/+PDnV69fX7txs+ueAAAAAAAAAABPKo//udIY//lUVVV3W8vtGP/17Vh52vE/h/nG9gCjEwaqHux/mx5noz8e9BvDjb8Yk8b/Hm3fetz438Mp9zea0j6e0r7w6KylZrE4Zf1dL/RoyPm/2Bjv/FREnGwNv17C+K/tMe9LkPN/qfF4rvP/Wmu5Zv7VHw9z/v0d+Z+59f6vztz84MPXrr1/9b2199Z+ceHcubMXLl68dOnSmXevXV87u/Vvhz0+WDn/PPa180DLkvPPmcu/LDn/r6Ra/mXJ+X811fIvS84/v9+Tf1ly/vmzj/zLkvN/JdXyL0vO/xupln9Zcv6vplr+Zcn5fzPV8i9Lzv+1VMu/LDn/06mWf1ly/mdSvcf8lw66X8xGzj8f4bL/lyXnn89skH9Zcv7nUy3/suT8L6Ra/mXJ+b+eavmXJef/rVTLvyw5/4upln9Zcv7fTrX8y5Lzv5Rq+Zcl5/+dVMu/LDn/76Za/mXJ+b+RavmXJef/vVTLvyw5/++nWv5lyfn/INXyL0vO/81Uy78sD7//3w03Znxj5OE3vze6fmYCAAAAAAAAAAAAANpmcTpx19sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFynfX9wM+ud9drBxIDIX8nfwMbx4SQONn1S/xCm2LCa8N7IBT6gu1612bBb3jtEmgkGwVKJIyKKtqGi7aAUMlNhVWhilaAcoFaVa0E7QW9QVS0XERVQAG1UltBtppznufZmdnZmVnvZH3mnM9Hin/emTNzzpw5c3a/63xnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABodutr5z41kmVZ47/8jy1Z9rzG3zdNbckve9W13kIAAABgrX6R//nMDemCQ33cqGmZv3vpd762uLi4mL13wx+Of25xMV0xlWXjG7Msvy668sP3jTQvEzyaTY6MNn092mP1G3pcP9bj+vEe10/0uH5jj+sne1y/bAcss6n4fUx+Zzvyv24pdml2YzaeX7ejw60eHdk4Ohp/l5MbyW+zOH48m89OZnPZTMvyxbIj+fLfuLWxrjdlcV2jTeva1jhCfvrIsbgNI2Ef72hZ19J9Rj9+TTb1s58+cuzPzz99c6fZcze03F+xnXdsb2znJ8IlxbaOZBvTPonbOdq0nds6PCcbWrZzJL9d4+/t2/lMn9u5YWkz11X7cz6ZjeZ//26+n8aaf62X9tO2cNl/35Zl2aWlzW5fZtm6stFsc8slo0vPz2RxRDbuo3EovTAbW9Vxemsfx2ljzu5oPU7bXxPx+b813G5shW1ofpp+/PGJpuf954tXc5xGjUe90mul/Rgc9GulLMdgPC6+mz/oxzoegzvC43/k9pWPwY7HTodjMD3upmNwe69jcHRiQ77No1/ZHNe+veUY3NWy/IZ8TSP5fOr27sfg9PlTZ6cXPvqxu+dPHT0xd2Lu9J5du2b27Nt34MCB6ePzJ+dmij+ven+X3eZsNL0Gtod9F18Dr2hbtvlQXfzixLLz79W+Die7vA63tC076NfhWPuDG1mfF+TSMR0vKV4b727s9MnLo9kKr7H8+blz7a/D9LibXodjTa/Djt9Tlm3zSH6bXq/DxjJn7+zvZ5axpv86bcPK3wvWdgxuaToG238eaT8GB/3zSFmOwclwXHz/zpW/F2wL2/vYztX+PLJh2TGYHm449zQuST/vTx7IR6fj8pbGFddNZBcW5s7d8/DR8+fP7crCWBcvajpW2o/XzU2PKVt2vI6u+ng9NP/Sx27pcPmWsK8m7278Mbnic9VYZu893Z+r/Ltb5/3ZcunuLIwBW+/92em7eWN/TmTZ57/98Qe/+cjnX7vi/mzkzU9Mr/1n8ZRLm86/4yucf2Puf7ZYX7qrRzeMjxWv3w1p74y3nI9bn6qx/Nw1kq/7men+zsfj4b/1Ph/f2OV8vLVt2UGfj8fbH1w8H4/0+m3H2rQ/n5PhODk50/183Fhm6+7VHpNjXc/Ht4U5Evb/K0NSSLmo6dhZ6bhN6xobGw+PayyuofU43dOy/HjIZo11PbH76o7TO24r7mtDenRL1us4nWpbdtDHafrd10rH6Uiv375dnfbnczIcFzfu6X6cNpZ5cu/az52b4l+bzp0TvY7B8Q0TjW0eTwdhfr7PFjfFY/Ce7Fh2JjuZzebXTuTH00i+rp339ncMToT/1vtcubXLMXhH27KDPgbT97GVjr2RseUPfgDan8/JcFw8fm/3Y7CxzOv2D/Zn1zvCJWmZpp9d23+/ttLvvG5p203P1bEyFrbz2/u7/262sczJA6vNmd33013hkus67Kf21+9Kr6nZbH3209awnU8fWHk/NbanscznDvZ5PB3Ksuzih+/Pf98b/n3lLy9872st/+7S6d90Ln74/p88//jfrmb7ARh+zxZjc/G9rulfpvr5938AAABgKMTcPxpmIv8DAABAZcTcH/+v8ET+BwAAgMqIuX8szKQm+X/r656ef/Zilpr5i0G8Pu2GB4rlYsd1Jnw9tbikcfn9X577r7+52N+6R7Ms+/kDv9tx+a0PxO0qTIXtvPL61suX+drdfa37yEMX03qb++tfCPcfH0+/h0GnCu5MlmXfuOEz+Xqm3nc5n08+cCSfD1567NHGMs8cLL6Ot3/qRcXyfxLKv4eOH225/VNhP/wozJk3d94f8XZfvfzKbfvfs7S+eLuR7dfnD/vx9xf3G98n57OPFsvH/bzS9n/z0098tbH8wy/vvP0XRztv/xPhfr8c5v+8pFi++TlofB1v98mw/XF98Xb3fOlbHbf/yqeK5c++oVjuSJhx/XeEr3e84en55v318MjRlseVvbFYLq5/5nu/n18f7y/ef/v2Tx6+3LI/2o+PJ/+5uJ/ptuXj5XE90V+3rb9xP83HZ1z/E793pGU/91r/lQefeknjftvXf1fbcmc/fGe+/qX7a33Hpj/95Gc6ri9uz6G/ONvyeA69M7yOw/off384HsP1/3uluL/2d1c48s7W809c/gtbLrY8nuhNPyvWf+XVJ/K5cXLT5uue9/zrL72sse+y7Lsbi/vrtf4Tf3amZfu/eFOxP+L1saPfvv6VxPWf+8jO02cWLszPpr36yA35e+e8pdieuL03hHNr+9eHz5z/wNy5qZmpmSybqu5b6F21L4X5k2Jc6r704rIz6J0Phefzlj/+xubb/+nT8fJ/eXdx+eU3F9+3XhGW+2y4fEt4/la3/uUev/Wm/PU98mTYwsXl7xe8Ftt2/MeBvhYMj7/954J4vJ998Qfy/dC4Lv++EV/Xa9z+H8wW9/P1sF8Xwzszb79paX3Ny8f3Rrj8ruL1vub9F05z8Xn9Sni+3/qj4v7jdsXH+4Pwc8y3trae7+Lx8fWLo+33n7+Lx6VwPskuFdfHpeL+vvzMTR03L74PSXbp5vzrP0j3c/OqHuZKFj66MH1y/vSFh6fPzy2cn1746McOnzpz4fT5w/l7eR7+YK/bL52fNufnp9m5fXuz/Gx1phjPsWu9/WcfOja7f+b22bnjRy8cP//Q2blzJ44tLBybm124/ejx43Mf6XX7+dn7du0+uGf/7p0n5mfvO3Dw4J6DO+dPn2lsRrFRPeyb+dDO0+cO5zdZuG/vwV333rt3ZuepM7Nz9+2fmdl5odft8+9NOxu3/p2d5+ZOHj0/f2pu58L8x+bu23Vw377dPd8N8NTZ4wtT0+cunJ6+sDB3brp4LFPn84sb3/t63Z5qWvjX4ufZdiPFG/Flb79rX3p/1oYvf3zFuyoWaXsD0afDe9H8/QvOHujn65j7x8NMapL/AQAAoA5i7p8IM5H/AQAAoDJi7t8YZiL/AwAAQGXE3D8ZZlKT/F+5/v/Wi32tX/9f/795f+n/16z//66y9f8b54u51OvU/1+btfbv9f8D/X/9f/1//X/9fwagbP3/mPs3ZVkt8z8AAADUQcz9m8NM5H8AAACojJj7rwszkf8BAACgMmLuf16YSU3yv/6//r/+v/6//n/n9a9v/9/n/w+K/n93+v896P9PZ/Xq/18a5Pbr//fZ/5/qdU9USdn6/zH3Pz/MpCb5HwAAAOog5v7rw0zkfwAAAKiMmPtvCDOR/wEAAKAyYu7fEmZSk/yv/6//r/+v/6//33n9+v/DSf+/O/3/HvT/ff6//r/P/2egytb/j7n/BWEmNcn/AAAAUD3Lf5kQc/8Lw0zkfwAAACifsau7Wcz9LwozWZb/r3IFAAAAwDUXc/+NWVsRvCb//q//r/+v/6//r//fef399/83ZPr/5aH/353+fw/6/2vrzzdOjPr/+v/6/zQpW/8/z/3ZZPbiMJOa5H8AAACog5j7bwozkf8BAACgMmLu/39hJvI/AAAAVEbM/VvDTGqS//X/9f/r1v//t736//r/Pv+/yvT/u9P/70H/3+f/6//r/zNQZev/x9x/c5hJTfI/AAAA1EHM/beEmcj/AAAAUBkx9///MBP5HwAAACoj5v5tYSY1yf/6/yXv/8fmqP6/z//X/9f/1//vi/5/d/r/Pej/6//r/+v/M1Bl6//H3P+SMJOa5H8AAACog5j7XxpmIv8DAABAZcTc/7IwE/kfAAAAKiPm/qkwk5rkf/3/kvf/ix78hM//1//X/9f/1//vj/5/d/r/Pej/6//r/+v/M1Bl6//H3H9rmElN8j8AAADUQcz928NM5H8AAACojJj7bwszkf8BAACgMmLu3xFmUpP8r/8/FP3/TP9f/1//X/9f/78/+v/d6f/3oP+v/6//r//PQJWt/x9z/8vDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/FWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dev/7/cNL/707/vwf9f/1//X/9fwaqbP3/mPtfGWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx9+8MM6lJ/tf/1//X/9f/1//vvH79/+Gk/9+d/n8P+v/6//r/+v8MVNn6/zH33x1mUpP8DwAAAHUQc/89YSbyPwAAAFRGzP3TYSbyPwAAAFRGzP0zYSY1yf/6//r/+v+l7P/nNyll//9lS/er/1/Q/y8X/f/u9P970P/X/7/m/f9x/X8qpWz9/5j7d4WZ1CT/AwAAQB3E3L87zET+BwAAgMqIuX9PmIn8DwAAAJURc//eMJOa5H/9f/1//f9S9v9zpez/N9H/L+j/l4v+f3eD7//Hh6j/r/+v/+/z//X/Wa5s/f+Y++8NM6lJ/gcAAIA6iLl/X5iJ/A8AAACVEXP//jAT+R8AAAAqI+b+A2EmNcn/+v/6//r/+v/6/53Xr/8/nMrZ/x/te/3D1//3+f/6/0v0//X/9f9pV7b+f8z9B8NMapL/AQAAoA5i7n9VmIn8DwAAAJURc/8vhZnI/wAAAFAZMff/cphJTfK//n/Z+/+jmf6//r/+v/6//n//ytn/75/+v/6//v/wbr/+v/4/y5Wt/x9z/31hJjXJ/wAAAFAHMff/SpiJ/A8AAACVEXP/q8NM5H8AAACojJj7D4WZ1CT/V6z/P9nfmoep/+/z//X/9f/1//X/V0P/vzv9/x70//X/9f/1/xmosvX/Y+5/TZhJTfI/AAAA1EHM/feHmcj/AAAAUBkx9782zET+BwAAgMqIuf91YSY1yf8V6/9X8PP/9f/1//X/9f/1/1dD/787/f8e9P/1//X/9f8ZqLL1/2Puf32YSU3yPwAAANRBzP1vCDMav2ZbBAAAAAxazP1vDDPx7/8AAABQGTH3vynMpCb5X/9f/1//X/9f/7/z+vX/h5P+f3f6/z3o/+v/6//r/zNQZev/x9z/q2EmNcn/AAAAUAcx9z8QZiL/AwAAQGXE3P/mMBP5HwAAACoj5v63hJnUJP/r/+v/6//r/+v/d16//v9w0v/vbsj6/7+4Plyu/1/Q/y/39q+2/z/W9vVz0v//4Ur9/8WN7bfX/+e5ULb+f8z9bw0zqUn+BwAAgDqIuf9tYSbyPwAAAFRGzP1vDzOR/wEAAKAyYu5/R5hJTfK//n9jO5bay/r/+v/5BevS/3/Hf+r/6/9n+v8Dp//f3ZD1/33+fxv9/3Jvv8//1/9nubL1/2Puf2eYSU3yPwAAANRBzP0PhpnI/wAAAFAZMfe/K8xE/gcAAIDKiLn/3WEmNcn/+v8+/1//3+f/6/93Xr/+/3DS/+9O/78H/X/9/7L1//9d/5/hVrb+f8z9D4WZ1CT/AwAAQB3E3P+eMBP5HwAAACoj5v5fCzOR/wEAAKAyYu5/b5hJTfL/te7/b9L/77P/P6X/r/+v/9/2ePT/9f870f/vTv+/B/1//f+y9f99/j9Drmz9/5j73xdm0n/+n+x7SQAAAOCaiLn/18NMavLv/wAAAFAHMff/RpiJ/A8AAACVEXP/b4aZ1CT/X+v+v8//9/n/+v816v+P6v/r/z/31q//H888+v/6//r/kf6//r/+P+3K1v+Puf+3wkxqkv8BAACgDmLuf3+YifwPAAAAQ6HT/5PdLub+w2Em8j8AAABURsz9R8JMapL/9f9r1P//q38ortT/H47+/x9t/8fvf+dtR3ZVqf/v8//1/9fBun7+f+PF7/P/9f/1/xP9f/1//X/ala3/H3P/0TCTmuR/AAAAqIOY+387zET+BwAAgMqIuf9YmIn8DwAAAJURc/9smElN8r/+f436/z7/f7j6/0P8+f9xf+j/txpY/z+edPX/O1rX/v97lnri+v+r7f9PdLxU/1//f5i3X/9f/5/lytb/j7l/LsykJvkfAAAA6iDk/tHjxVy6Qv4HAACAyoi5/0SYifwPAAAAlRFz/wfCTGqS//X/9f/1//X/ff5/5/WXtv/v8/+70v/vrjz9/870//X/h3n79f/1/1mubP3/mPvnw0xqkv8BAACgDmLu/2CYifwPAAAAlRFz/4fCTOR/AAAAqIyY+0+GmdQk/+v/6//r/+v/6/93Xr/+/3DS/+9O/78H/X/9/6vZ/nDc6P/r/7Nc2fr/MfefCjOpSf4HAACAOoi5/3SYifwPAAD8H3v38WRpWfZx/DQM0l1UiTsXblzrn8BC1/oHuHDjxip1YcKcGMwRE+aAOWMARUyomMGEYhYRc0BFFANijeXMdV3TPefp53TPnNP9nPv+fBZevvM6ngPvlL4/hm/dQDNy9z8qbrH/AQAAoBm5+x8dt3Sy//X/+v9m+//76f93+3z9v/6/Zfr/cfr/BfT/+n/v/+v/Waqp9f+5+x8Tt3Sy/wEAAKAHufsfG7fY/wAAANCM3P0Xxi32PwAAADQjd//j4pZO9v8p/f/GrM/+PzNe/X9L/b/3/3f9fP2//r9lB9v/X/z//+TT/+v/9f9B/6//1/9zqqn1/7n7Hx+3dLL/AQAAoAe5+58Qt9j/AAAA0Izc/U+MW+x/AAAAaEbu/ifFLZ3sf+//e/9f/6//1/8Pf77+fz15/39cT/3/hTee98jbr7rX1fv5/NX3/7ft7P+D/n85Dvv76//1/8ybWv+fu//JcUsn+x8AAAB6kLv/KXGL/Q8AAADNyN3/1LjF/gcAAIBm5O5/WtzSyf7X/+v/9f/6/1b6/0vjx/X/fdP/j+up/z+dz/f+v/5f/6//Z7mm1v/n7n963NLJ/gcAAIAe5O5/Rtxi/wMAAEAzcvdfFLfY/wAAANCM3P1H45ZO9r/+f/X9/3/1//r/uPp/7//r/1dP/z9O/7+A/l//r//X/7NUU+v/c/dfHLd0sv8BAACgB7n7nxm32P8AAADQjNz9z4pb7H8AAABoRu7+Z8ctnex//b/3//X/+n/9//Dn6//Xk/5/nP5/Af3/mfbz5+j/9f/6f7bbZ/9/58h/bC+l/8/d/5y4pZP9DwAAAD3I3f/cuMX+BwAAgGbk7n9e3GL/AwAAQDNy9z8/bulk/+v/9f/6f/3/aff/87/0jtP/D1te/79V/576/3n6/3GT6f83jgz+sP5/7ft/7//r//X/7DC19/9z978gbulk/wMAAEAPcve/MG4Z2f/7/ov5AAAAwKHK3f+iuMXv/wMAAMDay+osd/+L45ZO9r/+X/+v/9f/e/9/+PPH+v+rt30/7/9Pi/5/3GT6/13o//X/6/z99f/6f+ZNrf/P3f+SuKWT/Q8AAAA9yN1/Sdxi/wMAAEAzcve/NG6x/wEAAKAZuftfFrd0sv+H+/+T/3v9/97o/3d+f/3/8K+PZfX/+e+o/x/t/+/f7vv/+v8x+v9x+v8F9P/77+e3/SHq/5vu/7cW/Xz9P0Om1v/n7n953NLJ/gcAAIAe5O5/Rdxi/wMAAEAzcve/Mm6x/wEAAKAZufsvjVs62f/e/9f/Zz+/uQb9/9n6f+//T+T9/9mB9/9H9P97pP8fp/9fQP/v/f82+v/8Ie//c+im1v/n7n9V3NLJ/gcAAIAe5O5/ddxi/wMAAMB62P73Dpz6N5SG3P2viVvsfwAAAGhG7v7Xxi2d7H/9v/7f+//6f/3/8OdPq//3/v9e6f/H6f8X0P+vop8/0lj/f9luP38K/f9Fq3v/X//PadnR/19z8scPq//P3f+6uKWT/Q8AAAA9yN3/+rjF/gcAAIBm5O5/Q9xi/wMAAEAzcve/MW7pZP+vvP/f2v2z9f/6f/2//l//f+JXj/5/efT/4/T/C+j/vf/fxvv/+n8mY0f/v81h9f+5+98Ut3Sy/wEAAKAHufvfHLfY/wAAANCM3P2XxS32PwAAADQjd/9b4pZO9r/3//X/+n/9v/5/+PO9/7+e9P/j9P8L6P+39/MPn+n/9f/6f87Q1Pr/3P1vjVs62f8AAADQg9z9b4tb7H8AAABoRu7+t8ct9j8AAAA0I3f/O+KWTva//n+1/X/+uP5f/z/T/+v/9f8Hotv+f2Pov4nm7dL/X/+wow/c+SP6f/2/9//1//p/lmAS/f+xk//fZe7+d8Ytnex/AAAA6EHu/nfFLfY/AAAANCN3/7vjFvsfAAAAmpG7/z1xyz73/z2W+q0Ojv7f+//6f/2//n/48/X/66nb/n+PvP+/gP5f/6//1/+zVJPo/7f9z7n73xu3+P1/AAAAaEbu/vfFLfY/AAAANCN3//vjFvsfAAAAmpG7/wNxSyf7X/+v/9f/6//1/8Ofr/9fT/r/cRPt/7fyn+j/T6v/v/U++v9JfH/9v/6feVPr/3P3Xx63dLL/AQAAoAe5+z8Yt9j/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//l//r//X/w9/vv5/Pen/x020/y8H0v9fMfIFhvr/Y+dOvf/3/v9Evr/+X//PvKn1/7n7PxK3dLL/AQAAoAe5+6+IW+x/AAAAaEbu/ivjFvsfAAAAmpG7/6NxSyf7X/+v/9f/6//1/8OfP9D/H9n+vfT/06T/H6f/X2A93//X/0/k++v/9f/Mm1r/n7v/Y3FLJ/sfAAAAepC7/6q4xf4HAACAZuTu/3jcYv8DAABAM3L3Xx23dLL/9f/6f/2//l//P/z53v9fT6vr/2f6f/2//n+BffXz5y7lKx/e9x+g/9f/M29q/X/u/k/ELZ3sfwAAAOhB7v5Pxi172f9b56/qawEAAABLlLv/U3GL3/8HAACAZuTu/3Tc0sn+1//PZmdti5f1//r/4z+g/9f/L7v/P1//f1C8/z9O/7+A/t/7//p//T9LNbX+P3f/Z+KWTvY/AAAA9CB3/zVxi/0PAAAAzbjj+D9uzj4bt9j/AAAA0Izc/Z+LWzrZ//p/7//v7P9nM/2//l//f8IBvP+/OdP/L53+f5z+fwH9f5v9/1mzhvr/rV1/vv6fKZpa/5+7//NxSyf7HwAAAHqQu//auMX+BwAAgGbk7v9C3GL/AwAAQDNy938xbulk/+v/9f/e/9f/6/+HP/8A+v/6s6r/Xx79/zj9/wL6/zb7f+//6/85NFPr/3P3fylu6WT/AwAAQA9y9385brH/AQAAoBm5+78St9j/AAAA0Izc/V+NWzrZ//p//b/+X/+v/x/+fP3/etL/j9P/L6D/1//r//X/LNXU+v/c/V+LWzrZ/wAAANCD3P3XxS32PwAAADQjd//1cYv9DwAAAM3I3f/1uKWT/a//1//r/9ez/9/U/+v/9f+DptL/X3DBA27Q/+v/9f/6f/2//r93U+v/c/d/I27pZP8DAABAD3L3fzNusf8BAACgGbn7vxW32P8AAADQjNz9345bOtn/8/3/ObMTheoJQ/1/NGr6/230/zu/v/5/+NeH9//1//r/1Tu1/z93nz/f+/9B/6//1/+vtv+/9/zP1//Toqn1/7n7b4hbOtn/AAAA0IPc/d+JW+x/AAAAaEbu/u/GLfY/AAAANCN3/41xSyf73/v/+n/9/0H2/xv6f/2//n/FpvL+v/7/9L6//l//v87fv5n3/8/W/7M8q+//t+Kf7a3/z93/vbilk/0PAAAAPcjd//24xf4HAACAZuTu/0HcYv8DAABAM3L3/zBu6WT/6//1//p/7//r/4c/X/+/nvT/4/T/C/TT/28O/eBh9/Nn6rC/fzP9v/f/WaKpvf+fu/9HcUsn+x8AAAB6kLv/x3GL/Q8AAADNyN3/k7jF/gcAAIBm5O7/adzSyf7X/+v/2+//H6L/P+XzD6n/P6r/1/8fBP1//jf6MP3/ApPp/4f/r+j9/2l/f/2//p95U+v/c/ffFLd0sv8BAACgB7n7fxa32P8AAADQjNz9N8ct9j8AAAA0I3f/z+OWTva//r+v/n9j1mP/7/3/ifT/3v/X/x8I/f84/f8Ck+n/V/7+/6DD7ucP4fvftczvr//X/zNvav1/7v5bNo50uf8BAABgXT3ovo+4aa//2luO/+Pm7Bdxi/0PAAAAzcjd/8u4xf4HAACAZuTu/1Xc0sn+1//31f/3+f6//l//r//vif5/nP5/Af1/b/3/Ur+//l//z7yp9f+5+38dt2wbfkf2/UcJAAAATEnu/t/ELZ38/j8AAAD0IHf/b+OWuf1/bI9/VzsAAAAwNbn7fxe3dPL7/2vc/w9nGa31/7MV9f/xr+u1/7/2gp1/vvT/+v+hz9f/ryf9/7gz7P+Pbej/9f8jhvv5m++u/9f/6//7NbX+P3f/7+OWTvY/AAAANGrHX1HI3f+HuMX+BwAAgGbk7v9j3GL/AwAAQDNy998at3Sy/9e4/9/lD6ix/v+03v/fqn/m/f/O3/+/ZHPw85fe/5+z849X/z9M/38w9P/jvP+/gP7f+//6f/0/SzW1/j93/5/ilk72PwAAAPQgd/+f4xb7HwAAAJqRu/8vcYv9DwAAAM3I3X9b3NLJ/tf/t9j/7+H9f/1/H/3/Lp/fzvv/9zzv6HUPfuiVl+v/Oekg+//8taD/1//r/0/Q/+v/9f+camr9f+7+v8Ytnex/AAAA6EHu/tvjFvsfAAAAmpG7/29xi/0PAAAAzcjd//e4pZP9r//X/0+l/88/14fQ/x9dv/4/m+Le+3/v/+v/53n/f5z+fwH9v/5f/6//Z6mm1v/n7r8jbulk/wMAAEAPcvf/I27J/b+x7790DwAAAExM7v5/Hr/b/h4tv/8PAAAAzTix+zdn/4pbOtn/+n/9/1T6/+T9/5M/z/v/J+j/9f/7sfb9/+ws/b/+X/+/pt9f/6//Z97U+v/c/f+OWzrZ/wAAANCD3P13xi079//dDvZbAQAAAMuUu/8/cYvf/wcAAIBm5O6/K27pZP/r//X/+n/9v/5/+PP1/+tp7ft/7//r//X/a/v99f/6f+ZNrf/P3f+/AAAA//+4rmTi") mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x2000000}}, 0x0) 1.824945342s ago: executing program 0 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x30}}, 0x0) 1.644704456s ago: executing program 0 (id=909): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="4cf7", 0x2}], 0x1}}], 0x1, 0x4040001) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 1.50112736s ago: executing program 5 (id=910): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0xff, 0x5e0a, &(0x7f000000c740)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) 1.500789263s ago: executing program 2 (id=911): socket(0x2, 0x3, 0x100000001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 1.500626504s ago: executing program 1 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000302f1"], 0x44}}, 0x0) 1.378366737s ago: executing program 0 (id=914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000200)="f234f40bffe0a901b9772412c055179d06bac36810378fd63312b775d7d941855c99250abbda74299d7e599e8b4771c03e1c90532dca", 0x36}, {&(0x7f00000002c0)="1bfe492d3faf07562c1a49e8e6e856ed988cb28ffce3a452c8badf7ced1d922ee8fcdd809535df9eb4658c85f7f0c9cac47bf58f7d3422fd9533", 0x3a}], 0x2) 1.303949525s ago: executing program 1 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x17, 0x20000000, 0x0) 1.277007221s ago: executing program 2 (id=916): r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x600000000000000}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8810) 1.190502571s ago: executing program 3 (id=917): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r0], 0x60}}, 0x0) 1.177176817s ago: executing program 0 (id=918): r0 = io_uring_setup(0x5895, &(0x7f0000000500)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.024176416s ago: executing program 1 (id=919): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x31f, 0x40000001, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x80000000, @private2, 0x80}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 977.057949ms ago: executing program 2 (id=920): r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file4\x00', 0x200) 953.192982ms ago: executing program 3 (id=921): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x38}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 847.644241ms ago: executing program 0 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x401, 0x3, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x298, 0x401, 0x1}}]}, 0x48}}, 0x10) 744.874926ms ago: executing program 3 (id=923): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x619, &(0x7f0000002f40)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa9xC2l6BBKSA+99CJsORZeK0FSihJKUf9fe8i1kB5066nQu6E9N7dcdQwUeslJ0IPKzM5KK2ulrGXXu7I/H/P2vbdv5r03v/mn2cVsgOfW0nSaD1JkafrtrbK+uzPf2t2Zv1A3t5KU5UbSbGcp1pLmn5ObaaeMdnVXnDTOJ6uL737+5e4X7VqzTtXyjaNdnMV2nTKVZKTOjztlmP39E/u7dWJ//SoOIlMG7FqZbz9Wh/Bk7B/TOTL/28/qJ57vwPlRtO+bx0wmF5OM138HpL46NJ7u7J48918AAACeBy/sZS9buTToeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB5Uv/+f1GnRqc8laLz+/9j9Xupy+dMcaT2YGDzAAAAAAAAAIAn5xt72ctWLnXq+0X1nf/rVeVy9fq1fJiNrGQ917OV5WxmM+uZTTLZ1dHY1vLm5vpsH2vO9Vxz7kzT//mZ1gIAAAAAAACAZ89vsnT4/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyDIhlpZ1W63ClPptFMMp5krFxuO/msUz7PHgx6AgAAAPAUvLCXvWzlUqe+X1TP/K9Uz/3j+TBr2cxqNtPKSm5XnwW0n/obuzvzrd2d+ftlOt7vD/7zSNOoekz7s4feI1+tlpjInaxW71zPrbyfVm6nUa1ZutqZT+95/bqcU/FWW9HnzG7Xebn8n+p8OExWERk9iMhMPbcyGi+eHolH3DsPjzSbxsEnP5f7ivnyxa8eZeKg1Fm43J4/DHXM5+qj77PynDk9Esk3//7Xn91trd27e2djeng26YzqSGw360jMd52Hrz5XkZipInHloL6UH+enmc5U3sl6VvOLLGczK5nKj6rScn08l6+Tp0fq5pHaO181k7F6v7Svoo82p9erdS9lNT/J+7mdlbxZ/ZvLbL6bhSxksWsPX+njrG/UV9q3+gvjtW/VhfI68Mcj14NBK+P6Yldcu6+5k1Vb9zuHUXrp5CgVD9+P+oxS8+t1oRzjt3U+HB6OxGxXJF4+/Xj5y375utFau7d+d/mDPsd7o87LUP5+qO4S5fHyUrmzqtrRo6Nse7ln22zVdvmgrXGs7cpBW88zdb0z/mK19Cs9e5qr2l7t2TZftV3tauv19xYAQ+/ity+OTfx74l8Tn078buLuxNvjP7zwvQuvjWX0n6Pfb86MvNF4rfhbPs2vDp//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs9v46ON7y63WyvqAC0X9Qz5PvOcMyQaeUhhJMgTTeOqFjA/FNBR67x3gGXdj8/4HNzY++vg7q/eX31t5b2VtdGFhcWZx4c35G3dWWysz7ddBzxL4fzi86Q96JgAAAAAAAAAAAEC/nsZ/Jxj0NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn29J0mg9SZHbm+kxZ392Zb5WpUz5cspmkkaT4ZVL8I7mZdspkV3fFSeN8srr47udf7n5x2Fezs3zjtPV6Gn34je06ZSrJSJ0/hiP93Xrs/oqDLSwDdq0TOBi0/wUAAP//+qUJrg==") mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 699.273821ms ago: executing program 2 (id=924): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 687.681208ms ago: executing program 1 (id=925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x41d}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x50}}, 0x0) 592.868659ms ago: executing program 0 (id=926): syz_usb_connect$uac1(0x0, 0xa1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028f0003010000000904000000010100000a24010000000201020b24040000000000000000090401000001020000090401010101020000072401000000000c24020100000008d5ae3746090501090000000000072501000000000904020000010200000904020101010200000b240227a10300049f8eca072401000000000905820908"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mknod(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 503.650375ms ago: executing program 3 (id=927): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0xee02, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000a02000/0x4000)=nil) 420.86454ms ago: executing program 1 (id=928): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396, 0x80}, 0x9c) 380.107092ms ago: executing program 4 (id=929): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) unshare(0x8000400) 213.084332ms ago: executing program 3 (id=930): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000100)='<', 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) 244.389µs ago: executing program 1 (id=931): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 0s ago: executing program 3 (id=932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tected capacity change from 0 to 32768 [ 76.487569][ T5369] BTRFS info (device loop4): using free-space-tree [ 76.567901][ T5361] BTRFS: device /dev/loop3 (7:3) using temp-fsid 581dbc6d-5c36-4e60-9925-bdb63e96357d [ 76.760609][ T5361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.18 (5361) [ 76.857487][ T5361] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.868889][ T5361] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 76.878208][ T5361] BTRFS info (device loop3): using free-space-tree [ 76.899834][ T5414] loop0: detected capacity change from 0 to 128 [ 77.176284][ T5433] loop5: detected capacity change from 0 to 128 [ 77.280016][ T5414] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.280031][ T5433] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 77.322808][ T5220] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.337458][ T5414] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.385642][ T5433] sysv_free_block: trying to free block not in datazone [ 77.459351][ T5433] sysv_count_free_blocks: free block count was -2041545929, correcting to 9 [ 77.558936][ T5219] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.654589][ T5222] BTRFS info (device loop3): last unmount of filesystem 581dbc6d-5c36-4e60-9925-bdb63e96357d [ 77.752672][ T5433] sysv_count_free_inodes: unable to read inode table [ 77.990581][ T5285] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.021257][ T5221] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 78.150389][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 78.178822][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.210711][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.254102][ T5285] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 78.310240][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.347534][ T5285] usb 3-1: config 0 descriptor?? [ 78.567055][ T5480] sctp: [Deprecated]: syz.1.50 (pid 5480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.567055][ T5480] Use struct sctp_sack_info instead [ 78.807336][ T5285] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 78.891573][ T5468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.897624][ T5468] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 78.949650][ T5468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.966509][ T5468] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 78.988512][ T5461] loop0: detected capacity change from 0 to 40427 [ 78.992247][ T5285] playstation 0003:054C:05C4.0001: Invalid byte count transferred, expected 16 got 0 [ 79.023933][ T5461] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.030730][ T5285] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22 [ 79.048413][ T5468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.053084][ T5494] warning: `syz.3.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.065936][ T5285] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 79.080548][ T5468] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 79.091543][ T5285] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 79.100181][ T5468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 79.119781][ T5468] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 79.133326][ T5285] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -22 [ 79.210967][ T5493] loop5: detected capacity change from 0 to 2048 [ 79.347517][ T5347] usb 3-1: USB disconnect, device number 2 [ 79.393046][ T5461] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.445014][ T5461] syz.0.41: attempt to access beyond end of device [ 79.445014][ T5461] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 79.468761][ T5461] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 79.553215][ T5499] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.685599][ T5468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.725176][ T5499] NILFS (loop5): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 79.742021][ T5499] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=2) [ 79.757788][ T5468] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.848099][ T5468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.866480][ T5468] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 79.986991][ T5499] Remounting filesystem read-only [ 79.994325][ T5221] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 80.595426][ T5527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.622328][ T5532] loop2: detected capacity change from 0 to 256 [ 80.865209][ T5539] loop1: detected capacity change from 0 to 256 [ 81.080429][ T5285] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.113231][ T79] cfg80211: failed to load regulatory.db [ 81.270879][ T5285] usb 6-1: Using ep0 maxpacket: 32 [ 81.294240][ T5285] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 81.320483][ T5285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.340880][ T5285] usb 6-1: Product: syz [ 81.358970][ T5285] usb 6-1: Manufacturer: syz [ 81.370532][ T5285] usb 6-1: SerialNumber: syz [ 81.407150][ T5285] usb 6-1: config 0 descriptor?? [ 81.462541][ T5556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.767155][ T5524] loop4: detected capacity change from 0 to 32768 [ 81.777379][ T5564] Bluetooth: MGMT ver 1.23 [ 81.876685][ T5524] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.890144][ T5565] loop0: detected capacity change from 0 to 1764 [ 82.072425][ T5285] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:43:fe:18:f7:3b [ 82.093285][ T5285] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 82.105163][ T5285] usb 6-1: USB disconnect, device number 2 [ 82.148095][ T29] audit: type=1326 audit(1727253872.041:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.216674][ T29] audit: type=1326 audit(1727253872.091:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.338764][ T29] audit: type=1326 audit(1727253872.091:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.407011][ T29] audit: type=1326 audit(1727253872.091:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.551106][ T29] audit: type=1326 audit(1727253872.091:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.575547][ T5593] loop0: detected capacity change from 0 to 64 [ 82.601375][ T5524] XFS (loop4): Ending clean mount [ 82.677197][ T5524] XFS (loop4): Quotacheck needed: Please wait. [ 82.687289][ T29] audit: type=1326 audit(1727253872.101:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.788106][ T5598] loop0: detected capacity change from 0 to 1024 [ 82.794687][ T29] audit: type=1326 audit(1727253872.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa277def9 code=0x7ffc0000 [ 82.896657][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 82.914158][ T29] audit: type=1326 audit(1727253872.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa2774ea7 code=0x7ffc0000 [ 82.961432][ T29] audit: type=1326 audit(1727253872.101:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fa2719879 code=0x7ffc0000 [ 82.970521][ T5524] XFS (loop4): Quotacheck: Done. [ 82.983886][ T29] audit: type=1326 audit(1727253872.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa2774ea7 code=0x7ffc0000 [ 83.072005][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 83.092447][ T5220] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.379981][ T5611] loop2: detected capacity change from 0 to 64 [ 83.489359][ T5617] macvlan2: entered promiscuous mode [ 83.502217][ T5617] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 83.559828][ T5284] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.589087][ T5617] team0: Port device macvlan2 added [ 83.890379][ T5284] usb 6-1: Using ep0 maxpacket: 8 [ 83.897253][ T5284] usb 6-1: config 0 has no interfaces? [ 83.910979][ T5284] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.926670][ T5284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.949435][ T5284] usb 6-1: Product: syz [ 83.953997][ T5284] usb 6-1: Manufacturer: syz [ 83.958769][ T5284] usb 6-1: SerialNumber: syz [ 83.968564][ T5284] usb 6-1: config 0 descriptor?? [ 84.127436][ T5635] Illegal XDP return value 5635 on prog (id 10) dev N/A, expect packet loss! [ 84.249868][ T5285] usb 6-1: USB disconnect, device number 3 [ 84.410407][ T5640] input: syz0 as /devices/virtual/input/input5 [ 84.437887][ T5642] loop2: detected capacity change from 0 to 512 [ 84.470491][ T5642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.588502][ T5636] loop0: detected capacity change from 0 to 32768 [ 84.603967][ T5636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.116 (5636) [ 84.760547][ T5636] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.772381][ T5636] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 84.781116][ T5636] BTRFS info (device loop0): using free-space-tree [ 84.813008][ T5615] loop3: detected capacity change from 0 to 40427 [ 84.823435][ T5223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.877928][ T5615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.311856][ T5615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.635807][ T5222] syz-executor: attempt to access beyond end of device [ 85.635807][ T5222] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.688291][ T5219] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.701887][ T5222] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 86.346885][ T5695] loop4: detected capacity change from 0 to 32768 [ 86.431175][ T5695] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.135 (5695) [ 86.572097][ T5695] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.582676][ T5695] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 86.593490][ T5695] BTRFS info (device loop4): using free-space-tree [ 87.394661][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 87.638429][ T5672] coredump: 64(syz.1.124): written to core: VMAs: 34, size 99516416; core: 62112710 bytes, pos 99524608 [ 87.693268][ T5749] loop0: detected capacity change from 0 to 1024 [ 87.742634][ T5749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.869039][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 87.869061][ T29] audit: type=1800 audit(1727253877.731:43): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.135" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 88.109172][ T5736] loop2: detected capacity change from 0 to 32768 [ 88.508108][ T5220] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.697045][ T5773] loop0: detected capacity change from 0 to 512 [ 88.703833][ T5285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.803944][ T5773] ext4: Unknown parameter 'uid' [ 88.900405][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 88.937060][ T5285] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 88.969992][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.978257][ T5776] loop3: detected capacity change from 0 to 4096 [ 89.009183][ T5285] usb 3-1: Product: syz [ 89.057981][ T5285] usb 3-1: Manufacturer: syz [ 89.080338][ T5285] usb 3-1: SerialNumber: syz [ 89.086768][ T5780] capability: warning: `syz.5.163' uses deprecated v2 capabilities in a way that may be insecure [ 89.117711][ T5285] usb 3-1: config 0 descriptor?? [ 89.153251][ T5285] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 89.171307][ T5783] program syz.5.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.494624][ T5796] netlink: 4056 bytes leftover after parsing attributes in process `syz.4.169'. [ 89.515462][ T5796] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.607312][ T5794] netlink: 'syz.5.167': attribute type 2 has an invalid length. [ 89.787272][ T5807] netlink: 9 bytes leftover after parsing attributes in process `syz.1.173'. [ 89.803802][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.803844][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.827754][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.827791][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.860894][ T5286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.953671][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.974418][ T5814] loop4: detected capacity change from 0 to 512 [ 89.979744][ T5285] gspca_ov534_9: reg_w failed -71 [ 89.992144][ T5814] EXT4-fs: Ignoring removed oldalloc option [ 90.010460][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 90.018760][ T5814] EXT4-fs: Ignoring removed oldalloc option [ 90.029657][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.063563][ T5286] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.088528][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.101245][ T5814] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.119486][ T5286] usb 1-1: config 0 descriptor?? [ 90.160516][ T5814] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.258118][ T5814] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.177: invalid indirect mapped block 83886080 (level 1) [ 90.282251][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.288595][ T5814] EXT4-fs (loop4): Remounting filesystem read-only [ 90.314105][ T5814] EXT4-fs (loop4): 1 orphan inode deleted [ 90.319861][ T5814] EXT4-fs (loop4): 1 truncate cleaned up [ 90.327178][ T5814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.350747][ T5285] gspca_ov534_9: Unknown sensor 0000 [ 90.350898][ T5285] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 90.351226][ T5286] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 90.362045][ T5285] usb 3-1: USB disconnect, device number 3 [ 90.448253][ T5220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.566986][ T79] usb 1-1: USB disconnect, device number 2 [ 90.576539][ T79] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 90.698617][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.778957][ T5835] loop4: detected capacity change from 0 to 128 [ 90.797895][ T5832] loop2: detected capacity change from 0 to 2048 [ 90.856119][ T5836] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.979789][ T5836] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 91.007228][ T5836] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 91.031656][ T5836] Remounting filesystem read-only [ 91.039512][ T5223] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 91.197343][ T5827] loop5: detected capacity change from 0 to 32768 [ 91.312779][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.342785][ T5827] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 91.400524][ T5827] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.444473][ T5857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.194'. [ 91.545839][ T5827] XFS (loop5): Ending clean mount [ 91.672194][ T5827] XFS (loop5): Quotacheck needed: Please wait. [ 91.754712][ T5840] loop4: detected capacity change from 0 to 32768 [ 91.764573][ T5827] XFS (loop5): Quotacheck: Done. [ 91.830447][ T5286] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.853684][ T5221] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.894463][ T5840] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.008376][ T5872] loop1: detected capacity change from 0 to 64 [ 92.041815][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 92.060699][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.065781][ T5220] ocfs2: Unmounting device (7,4) on (node local) [ 92.089673][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.109550][ T5286] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 92.126482][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.167591][ T5286] usb 4-1: config 0 descriptor?? [ 92.371387][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.400817][ T5875] delete_channel: no stack [ 92.422763][ T5224] Bad inode number on dev loop1: 4160749571 is out of range [ 92.431246][ T5224] Bad inode number on dev loop1: 4160749571 is out of range [ 92.450504][ T5874] delete_channel: no stack [ 92.589641][ T5883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.682267][ T5862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.740181][ T5862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.774405][ T5286] hid (null): bogus close delimiter [ 92.986829][ T5286] usb 4-1: string descriptor 0 read error: -71 [ 92.996206][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.030113][ T5286] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 93.050099][ T5286] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 93.094948][ T2551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.111252][ T5286] usb 4-1: USB disconnect, device number 2 [ 93.350729][ T2551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.400419][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.613082][ T5879] loop5: detected capacity change from 0 to 32768 [ 93.657252][ T2551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.683648][ T5879] JBD2: Ignoring recovery information on journal [ 93.844820][ T2551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.864630][ T5879] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 93.875783][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.887298][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.901848][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.910575][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.918698][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.930795][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.950714][ T4614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.961368][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 94.030750][ T4614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.041681][ T5221] ocfs2: Unmounting device (7,5) on (node local) [ 94.048179][ T5891] loop0: detected capacity change from 0 to 32768 [ 94.061375][ T4614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.070141][ T4614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.077819][ T4614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.088336][ T4614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.143365][ T5891] JBD2: Ignoring recovery information on journal [ 94.512814][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.580658][ T5891] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.744765][ T29] audit: type=1800 audit(1727253884.641:44): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.209" name="file1" dev="loop0" ino=16946 res=0 errno=0 [ 94.844184][ T5926] Zero length message leads to an empty skb [ 94.862763][ T5219] ocfs2: Unmounting device (7,0) on (node local) [ 94.945046][ T2551] bridge_slave_1: left allmulticast mode [ 94.963544][ T2551] bridge_slave_1: left promiscuous mode [ 94.970615][ T2551] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.003212][ T5937] loop4: detected capacity change from 0 to 1024 [ 95.012224][ T5937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.044334][ T5937] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.068509][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.086598][ T2551] bridge_slave_0: left allmulticast mode [ 95.120752][ T2551] bridge_slave_0: left promiscuous mode [ 95.128330][ T2551] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.160478][ T5940] netlink: 'syz.3.230': attribute type 3 has an invalid length. [ 95.168581][ T5940] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.230'. [ 95.168961][ T5220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.253771][ T5944] loop2: detected capacity change from 0 to 4096 [ 95.357482][ T5949] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.379160][ T29] audit: type=1800 audit(1727253885.271:45): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 95.450424][ T29] audit: type=1800 audit(1727253885.291:46): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 95.475515][ T5951] loop5: detected capacity change from 0 to 64 [ 95.512542][ T5951] syz.5.233: attempt to access beyond end of device [ 95.512542][ T5951] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 95.554113][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.603507][ T5951] Buffer I/O error on dev loop5, logical block 512, async page read [ 95.642403][ T5951] syz.5.233: attempt to access beyond end of device [ 95.642403][ T5951] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 95.746899][ T5951] Buffer I/O error on dev loop5, logical block 56576, async page read [ 95.848853][ T5962] netlink: 172 bytes leftover after parsing attributes in process `syz.4.237'. [ 96.040409][ T5285] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.060495][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.270772][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 96.276121][ T53] Bluetooth: hci5: command tx timeout [ 96.300785][ T5285] usb 1-1: config 0 has an invalid interface number: 125 but max is 3 [ 96.309030][ T5285] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 96.319395][ T5285] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 96.328368][ T5285] usb 1-1: config 0 has no interface number 0 [ 96.334575][ T5285] usb 1-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.347753][ T5285] usb 1-1: config 0 interface 125 has no altsetting 0 [ 96.364746][ T5285] usb 1-1: Dual-Role OTG device on HNP port [ 96.370997][ T5285] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 96.380059][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.388281][ T5285] usb 1-1: Product: syz [ 96.392568][ T5285] usb 1-1: Manufacturer: syz [ 96.397227][ T5285] usb 1-1: SerialNumber: syz [ 96.406795][ T5285] usb 1-1: config 0 descriptor?? [ 96.421170][ T5285] hub 1-1:0.125: bad descriptor, ignoring hub [ 96.427316][ T5285] hub 1-1:0.125: probe with driver hub failed with error -5 [ 96.437426][ T5285] usb 1-1: Found UVC 15.ff device syz (17dc:0202) [ 96.444609][ T5285] usb 1-1: No valid video chain found. [ 96.464368][ T2551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.483688][ T2551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.497070][ T2551] bond0 (unregistering): Released all slaves [ 96.558006][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 96.590806][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.782076][ T5285] usb 1-1: USB disconnect, device number 3 [ 96.807014][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.815802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.073123][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.086151][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.106372][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.125737][ T5907] bridge_slave_0: entered allmulticast mode [ 97.133422][ T5992] loop2: detected capacity change from 0 to 4096 [ 97.157505][ T5992] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 97.167998][ T5907] bridge_slave_0: entered promiscuous mode [ 97.234897][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.243526][ T5992] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 97.262070][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.269314][ T5907] bridge_slave_1: entered allmulticast mode [ 97.306976][ T5907] bridge_slave_1: entered promiscuous mode [ 97.491872][ T11] ntfs3: loop2: ino=1a, ntfs3_write_inode failed, -22. [ 97.520390][ T5223] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 97.585088][ T5988] loop3: detected capacity change from 0 to 32768 [ 97.600259][ T5988] XFS: noikeep mount option is deprecated. [ 97.630956][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.642578][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.667099][ T5988] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.711663][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.752214][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.769157][ T5284] kernel write not supported for file /cpu/0/msr (pid: 5284 comm: kworker/0:4) [ 97.874681][ T5988] XFS (loop3): Ending clean mount [ 97.883477][ T5988] XFS (loop3): Quotacheck needed: Please wait. [ 97.952550][ T5988] XFS (loop3): Quotacheck: Done. [ 97.954030][ T5907] team0: Port device team_slave_0 added [ 97.985099][ T2551] hsr_slave_0: left promiscuous mode [ 97.985387][ T5988] XFS (loop3): User initiated shutdown received. [ 98.020705][ T5988] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:453). Shutting down filesystem. [ 98.036188][ T6024] loop5: detected capacity change from 0 to 8 [ 98.037922][ T6023] loop4: detected capacity change from 0 to 2048 [ 98.047316][ T5988] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 98.048925][ T2551] hsr_slave_1: left promiscuous mode [ 98.106104][ T2551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.135656][ T2551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.153895][ T5222] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 98.175921][ T6023] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xdd != 0xd4 [ 98.194760][ T6023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.205367][ T2551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.231631][ T2551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.361495][ T53] Bluetooth: hci5: command tx timeout [ 98.481593][ T2551] veth1_macvtap: left promiscuous mode [ 98.487372][ T2551] veth0_macvtap: left promiscuous mode [ 98.506115][ T2551] veth1_vlan: left promiscuous mode [ 98.518848][ T2551] veth0_vlan: left promiscuous mode [ 98.531189][ T6034] loop5: detected capacity change from 0 to 256 [ 98.676160][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.751257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.238423][ T6052] loop0: detected capacity change from 0 to 128 [ 99.644802][ T2551] team0 (unregistering): Port device team_slave_1 removed [ 99.679015][ T2551] team0 (unregistering): Port device team_slave_0 removed [ 99.746732][ T6050] loop5: detected capacity change from 0 to 32768 [ 99.762683][ T6050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.271 (6050) [ 99.802459][ T6050] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.823150][ T6050] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 99.831730][ T6050] BTRFS info (device loop5): using free-space-tree [ 100.052327][ T6050] BTRFS info (device loop5): space_info DATA+METADATA has 73728 free, is not full [ 100.062182][ T6050] BTRFS info (device loop5): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=3137536, readonly=0 zone_unusable=0 [ 100.076492][ T6050] BTRFS info (device loop5): global_block_rsv: size 1441792 reserved 1441792 [ 100.085523][ T6050] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 100.093273][ T6050] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 100.101006][ T6050] BTRFS info (device loop5): delayed_block_rsv: size 98304 reserved 98304 [ 100.109528][ T6050] BTRFS info (device loop5): delayed_refs_rsv: size 786432 reserved 786432 [ 100.227212][ T5907] team0: Port device team_slave_1 added [ 100.360242][ T5221] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.431857][ T53] Bluetooth: hci5: command tx timeout [ 100.456522][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.504687][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.614131][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.643702][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.679885][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.726496][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.751618][ T5285] net_ratelimit: 62 callbacks suppressed [ 100.751636][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.794154][ T6087] loop4: detected capacity change from 0 to 8 [ 100.891510][ T6087] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 101.122400][ T5907] hsr_slave_0: entered promiscuous mode [ 101.137541][ T6091] loop0: detected capacity change from 0 to 2048 [ 101.208754][ T6091] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 101.217375][ T5907] hsr_slave_1: entered promiscuous mode [ 101.235138][ T6091] UDF-fs: Scanning with blocksize 512 failed [ 101.247891][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.271066][ T6091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.286759][ T5907] Cannot create hsr debugfs directory [ 101.606175][ T6101] vlan2: entered allmulticast mode [ 101.668729][ T6101] gretap0: entered allmulticast mode [ 101.732600][ T6101] gretap0: left allmulticast mode [ 101.792876][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.902694][ T6112] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.292'. [ 101.935017][ T6112] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 101.960637][ T6112] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.292'. [ 102.000609][ T5285] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.240582][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 102.290583][ T5285] usb 5-1: config 0 has no interfaces? [ 102.346857][ T6124] loop0: detected capacity change from 0 to 64 [ 102.390916][ T5285] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.400834][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.408855][ T5285] usb 5-1: Product: syz [ 102.430573][ T5285] usb 5-1: Manufacturer: syz [ 102.435206][ T5285] usb 5-1: SerialNumber: syz [ 102.471597][ T5285] usb 5-1: config 0 descriptor?? [ 102.525564][ T53] Bluetooth: hci5: command tx timeout [ 102.542149][ T6124] Trying to free block not in datazone [ 102.548443][ T6124] Trying to free block not in datazone [ 102.587669][ T6124] Trying to free block not in datazone [ 102.626882][ T6124] Trying to free block not in datazone [ 102.637824][ T6124] Trying to free block not in datazone [ 102.643948][ T6124] minix_free_block (loop0:6): bit already cleared [ 102.650910][ T6124] Trying to free block not in datazone [ 102.656886][ T6124] Trying to free block not in datazone [ 102.705799][ T6134] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 102.720625][ T6134] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.302'. [ 102.730525][ T6134] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 102.738181][ T6134] netlink: 'syz.3.302': attribute type 2 has an invalid length. [ 102.738444][ T1841] usb 5-1: USB disconnect, device number 2 [ 102.832027][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.840186][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.002658][ T5907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.069871][ T5907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.170076][ T5907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.348293][ T6146] loop3: detected capacity change from 0 to 4096 [ 103.386038][ T6146] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 103.395493][ T5907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.599229][ T6154] loop5: detected capacity change from 0 to 256 [ 103.704336][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.764983][ T6163] binder: Binderfs stats mode cannot be changed during a remount [ 103.870855][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.928581][ T6146] ntfs3: loop3: failed to convert "c46c" to macturkish [ 103.969569][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 103.980993][ T6169] loop2: detected capacity change from 0 to 128 [ 104.018129][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.081997][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.089125][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.142051][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.149236][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.227373][ T79] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.396656][ T6181] loop3: detected capacity change from 0 to 256 [ 104.470060][ T79] usb 6-1: Using ep0 maxpacket: 8 [ 104.532943][ T5907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.685965][ T79] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 104.714445][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.753611][ T79] usb 6-1: Product: syz [ 104.758645][ T79] usb 6-1: Manufacturer: syz [ 104.764604][ T6190] loop0: detected capacity change from 0 to 2048 [ 104.773617][ T79] usb 6-1: SerialNumber: syz [ 104.796094][ T79] usb 6-1: config 0 descriptor?? [ 104.859107][ T79] gspca_main: se401-2.14.0 probing 047d:5003 [ 104.882624][ T6199] loop3: detected capacity change from 0 to 4096 [ 104.910890][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.006158][ T6206] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.071364][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.090428][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.099400][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.107966][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.116660][ T6209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.203295][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.217401][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 105.260668][ T29] audit: type=1800 audit(1727253895.151:47): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.330" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 105.300207][ T5907] veth0_vlan: entered promiscuous mode [ 105.314008][ T5907] veth1_vlan: entered promiscuous mode [ 105.357872][ T6199] syz.3.332 (6199) used greatest stack depth: 18192 bytes left [ 105.372247][ T5907] veth0_macvtap: entered promiscuous mode [ 105.388291][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.402332][ T5907] veth1_macvtap: entered promiscuous mode [ 105.437994][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.449538][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.465810][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.495182][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.555361][ T29] audit: type=1326 audit(1727253895.451:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 105.558356][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.597041][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.607335][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.625691][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.636139][ T29] audit: type=1326 audit(1727253895.491:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 105.662014][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.674487][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.688890][ T29] audit: type=1326 audit(1727253895.491:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 105.730555][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.758925][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.770057][ T29] audit: type=1326 audit(1727253895.491:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 105.798991][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.802129][ T79] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 105.828420][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.864676][ T29] audit: type=1326 audit(1727253895.491:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 105.873744][ T6230] loop4: detected capacity change from 0 to 24 [ 105.890500][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.903977][ T5283] net_ratelimit: 5 callbacks suppressed [ 105.903993][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.920170][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.931100][ T29] audit: type=1326 audit(1727253895.491:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 105.954470][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.968822][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.982709][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.999092][ T29] audit: type=1326 audit(1727253895.491:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 106.019662][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.060560][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.069358][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.093597][ T6232] loop0: detected capacity change from 0 to 2048 [ 106.094179][ T29] audit: type=1326 audit(1727253895.491:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 106.137497][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.150084][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 106.161280][ T29] audit: type=1326 audit(1727253895.491:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8377def9 code=0x7ffc0000 [ 106.184392][ T6232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.514501][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.711627][ T6236] loop0: detected capacity change from 0 to 32768 [ 106.719230][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.727223][ T79] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 106.734676][ T79] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 106.737601][ T6242] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 106.752345][ T6236] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.346 (6236) [ 106.769461][ T79] usb 6-1: USB disconnect, device number 4 [ 106.786138][ T6236] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.796510][ T6236] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 106.806972][ T6236] BTRFS info (device loop0): using free-space-tree [ 106.842487][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.880572][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.020818][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.705718][ T6289] loop2: detected capacity change from 0 to 4096 [ 107.734289][ T5219] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.819736][ T6290] wireguard0: entered promiscuous mode [ 107.872151][ T6290] wireguard0: entered allmulticast mode [ 107.931910][ T6301] loop3: detected capacity change from 0 to 128 [ 108.030962][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.101084][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.153763][ T6301] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 108.338032][ T5222] sysv_free_block: trying to free block not in datazone [ 108.385011][ T5222] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 108.430958][ T5319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.624504][ T6321] ipvlan2: entered promiscuous mode [ 108.648055][ T5319] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 108.670519][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.697554][ T5319] usb 1-1: config 0 descriptor?? [ 108.736658][ T5319] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 108.739801][ T6310] could not allocate digest TFM handle sha512-neon [ 108.911390][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.974911][ T5294] IPVS: starting estimator thread 0... [ 109.072898][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.080543][ T6333] IPVS: using max 16 ests per chain, 38400 per kthread [ 109.122582][ T5294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.139470][ T5319] cpia1 1-1:0.0: unexpected state after lo power cmd: 99 [ 109.291225][ T5294] usb 3-1: Using ep0 maxpacket: 16 [ 109.326024][ T5294] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 109.349338][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.377849][ T5294] usb 3-1: Product: syz [ 109.390387][ T5294] usb 3-1: Manufacturer: syz [ 109.408248][ T5294] usb 3-1: SerialNumber: syz [ 109.426434][ T5294] usb 3-1: config 0 descriptor?? [ 109.426538][ T6345] vivid-008: disconnect [ 109.448605][ T5294] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 109.466808][ T6344] vivid-008: reconnect [ 109.546233][ T5319] gspca_cpia1: usb_control_msg 02, error -71 [ 109.564437][ T5319] gspca_cpia1: usb_control_msg 05, error -71 [ 109.580587][ T5319] cpia1 1-1:0.0: unexpected systemstate: 99 [ 109.624027][ T5319] usb 1-1: USB disconnect, device number 4 [ 109.654633][ T5294] gp8psk: usb in 128 operation failed. [ 109.691438][ T5294] gp8psk: usb in 137 operation failed. [ 109.696950][ T5294] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.702626][ T6350] loop4: detected capacity change from 0 to 64 [ 109.757878][ T5294] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 109.789074][ T5294] usb 3-1: media controller created [ 109.852897][ T5294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.912347][ T5294] gp8psk_fe: Frontend revision 1 attached [ 109.923815][ T5294] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 109.940931][ T5294] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 110.112514][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.135517][ T6335] loop1: detected capacity change from 0 to 32768 [ 110.178623][ T6335] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.258693][ T5294] gp8psk: usb in 137 operation failed. [ 110.268762][ T5294] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 110.282218][ T5294] gp8psk: found Genpix USB device pID = 201 (hex) [ 110.292664][ T5294] usb 3-1: USB disconnect, device number 4 [ 110.418918][ T5294] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 110.642610][ T6335] XFS (loop1): Ending clean mount [ 110.779987][ T6378] loop5: detected capacity change from 0 to 2048 [ 110.811688][ T6335] syz.1.382 (6335) used greatest stack depth: 17872 bytes left [ 110.833320][ T6378] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.852903][ T5907] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.865191][ T6378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.151216][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.355688][ T6382] loop0: detected capacity change from 0 to 32768 [ 111.528274][ T6394] loop1: detected capacity change from 0 to 256 [ 111.535839][ T6394] exfat: Deprecated parameter 'namecase' [ 111.578309][ T6382] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.653941][ T6382] grow_buffers: requested out-of-range block 3472328296227680304 for device loop0 [ 111.683418][ T6382] (syz.0.399,6382,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 111.697421][ T6382] (syz.0.399,6382,1):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 3472328296227680304 failed -12 [ 111.708620][ T6382] (syz.0.399,6382,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 111.718115][ T6382] (syz.0.399,6382,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 111.728841][ T6382] (syz.0.399,6382,1):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 111.736885][ T6382] (syz.0.399,6382,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 111.759769][ T6394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 111.778795][ T5219] ocfs2: Unmounting device (7,0) on (node local) [ 111.900919][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 111.900941][ T29] audit: type=1800 audit(1727253901.791:59): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.400" name="bus" dev="loop1" ino=1048637 res=0 errno=0 [ 111.968181][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.190829][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.239993][ T6412] loop3: detected capacity change from 0 to 256 [ 112.302204][ T6412] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 113.045803][ T6429] random: crng reseeded on system resumption [ 113.231651][ T6418] loop1: detected capacity change from 0 to 40427 [ 113.257026][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.267772][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.280676][ T6418] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 113.287456][ T6418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.340359][ T6418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.492485][ T6410] loop2: detected capacity change from 0 to 32768 [ 113.502643][ T6436] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 113.535356][ T6418] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.542667][ T6436] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.419'. [ 113.578751][ T6418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.586781][ T6436] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 113.611514][ T6436] netlink: 'syz.0.419': attribute type 2 has an invalid length. [ 113.639380][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 113.656603][ T6418] syz.1.414: attempt to access beyond end of device [ 113.656603][ T6418] loop1: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 113.661494][ T29] audit: type=1800 audit(1727253903.551:60): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.414" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 113.672088][ T6418] syz.1.414: attempt to access beyond end of device [ 113.672088][ T6418] loop1: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 113.705796][ T6418] syz.1.414: attempt to access beyond end of device [ 113.705796][ T6418] loop1: rw=0, sector=53328, nr_sectors = 8 limit=40427 [ 113.722087][ T6444] syz.1.414: attempt to access beyond end of device [ 113.722087][ T6444] loop1: rw=2049, sector=53336, nr_sectors = 8 limit=40427 [ 113.842113][ T6410] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none [ 113.875279][ T6410] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 113.950934][ T5907] syz-executor: attempt to access beyond end of device [ 113.950934][ T5907] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.951024][ T5907] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.951931][ T6410] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 113.951961][ T6410] gen 0 oldest_gen 0 data_type journal [ 113.951976][ T6410] journal_seq 1 [ 113.951990][ T6410] need_discard 1 [ 113.952003][ T6410] need_inc_gen 1 [ 113.952017][ T6410] dirty_sectors 256 [ 113.952030][ T6410] stripe_sectors 0 [ 113.952044][ T6410] cached_sectors 0 [ 113.952057][ T6410] stripe 67108864 [ 113.952071][ T6410] stripe_redundancy 0 [ 113.952085][ T6410] io_time[READ] 1 [ 113.952098][ T6410] io_time[WRITE] 1 [ 113.952111][ T6410] fragmentation 0 [ 113.952124][ T6410] bp_start 8 [ 113.952138][ T6410] [ 113.952150][ T6410] invalid data type (got 2 should be 7): delete?, fixing [ 114.231056][ T6410] bcachefs (loop2): accounting_read... done [ 114.237304][ T6410] bcachefs (loop2): alloc_read... done [ 114.267110][ T6455] loop0: detected capacity change from 0 to 8 [ 114.280742][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.294543][ T6410] bcachefs (loop2): stripes_read... done [ 114.311891][ T6410] bcachefs (loop2): snapshots_read... done [ 114.352994][ T6410] bcachefs (loop2): going read-write [ 114.409193][ T6410] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 114.487682][ T6410] bcachefs (loop2): done starting filesystem [ 114.653650][ T29] audit: type=1800 audit(1727253904.551:61): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.411" name="file1" dev="loop2" ino=1073741824 res=0 errno=0 [ 114.826869][ T6467] loop5: detected capacity change from 0 to 2048 [ 114.927332][ T6476] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.942203][ T5223] bcachefs (loop2): shutting down [ 114.947518][ T5223] bcachefs (loop2): going read-only [ 114.992261][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.992814][ T5223] bcachefs (loop2): finished waiting for writes to stop [ 115.235612][ T6463] loop4: detected capacity change from 0 to 32768 [ 115.276454][ T6463] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.430 (6463) [ 115.316688][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.327168][ T6463] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.343470][ T6463] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 115.352245][ T6463] BTRFS info (device loop4): using free-space-tree [ 115.419957][ T6487] loop0: detected capacity change from 0 to 128 [ 115.468779][ T6487] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 115.512237][ T6492] input: syz1 as /devices/virtual/input/input6 [ 115.634883][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.847776][ T5220] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.188478][ T6479] loop3: detected capacity change from 0 to 32768 [ 116.290951][ T6479] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 116.325351][ T79] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.351125][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.370303][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.551537][ T79] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 116.561184][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.596184][ T79] usb 1-1: config 0 descriptor?? [ 116.645335][ T6479] XFS (loop3): Ending clean mount [ 116.651850][ T79] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 116.780894][ T5222] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 117.221886][ T79] gspca_cpia1: usb_control_msg 01, error -71 [ 117.227924][ T79] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 117.284694][ T79] usb 1-1: USB disconnect, device number 5 [ 117.318200][ T6550] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 117.395584][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.704971][ T6552] loop1: detected capacity change from 0 to 40427 [ 117.720119][ T6552] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.746589][ T6552] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.770851][ T6552] F2FS-fs (loop1): invalid crc value [ 117.793510][ T6552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.936502][ T6552] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.963040][ T6552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.979111][ T6572] IPVS: Error connecting to the multicast addr [ 118.430650][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.774575][ T6582] loop1: detected capacity change from 0 to 128 [ 118.812170][ T6582] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.832642][ T6582] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.000361][ T29] audit: type=1326 audit(1727253908.881:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.3.473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c6c37def9 code=0x0 [ 119.031381][ T5907] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.390744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.406179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.418506][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.474679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.523075][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.670929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.234737][ T6622] process 'syz.3.484' launched './file0' with NULL argv: empty string added [ 120.600910][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.824611][ T6633] loop5: detected capacity change from 0 to 1024 [ 120.911646][ T6633] syz.5.489: attempt to access beyond end of device [ 120.911646][ T6633] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 120.975344][ T6633] syz.5.489: attempt to access beyond end of device [ 120.975344][ T6633] loop5: rw=0, sector=2046, nr_sectors = 2 limit=1024 [ 121.019642][ T6633] syz.5.489: attempt to access beyond end of device [ 121.019642][ T6633] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 121.755611][ T6641] loop1: detected capacity change from 0 to 32768 [ 121.946298][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.972393][ T6643] loop3: detected capacity change from 0 to 32768 [ 122.072330][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.081095][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.089332][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.101409][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.110903][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.128023][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.148487][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.156888][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.168683][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.325988][ T6641] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.461245][ T6641] XFS (loop1): Ending clean mount [ 122.494569][ T6643] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.646721][ T6687] loop4: detected capacity change from 0 to 64 [ 122.649025][ T5907] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.706323][ T5222] ocfs2: Unmounting device (7,3) on (node local) [ 123.400716][ T6691] loop5: detected capacity change from 0 to 32768 [ 123.409476][ T6691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.512 (6691) [ 123.425785][ T6691] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.436149][ T6691] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 123.458697][ T6691] BTRFS info (device loop5): using free-space-tree [ 123.858200][ T6737] loop4: detected capacity change from 0 to 256 [ 123.895204][ T6732] loop1: detected capacity change from 0 to 1024 [ 123.913325][ T6737] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 123.973984][ T6737] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 124.112613][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 124.327454][ T5221] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.532213][ T29] audit: type=1326 audit(1727253914.421:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac45d7def9 code=0x7ffc0000 [ 124.610002][ T29] audit: type=1326 audit(1727253914.421:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac45d7def9 code=0x7ffc0000 [ 124.748557][ T29] audit: type=1326 audit(1727253914.421:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fac45d7def9 code=0x7ffc0000 [ 124.774063][ T6760] loop3: detected capacity change from 0 to 128 [ 124.789875][ T29] audit: type=1326 audit(1727253914.421:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac45d7def9 code=0x7ffc0000 [ 124.818890][ T6760] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.860736][ T6760] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 125.166127][ T6773] loop3: detected capacity change from 0 to 164 [ 125.188334][ T6767] loop5: detected capacity change from 0 to 4096 [ 125.324020][ T6767] ntfs3: loop5: failed to convert "0000" to iso8859-3 [ 125.369646][ T6767] ntfs3: loop5: failed to convert "0000" to iso8859-3 [ 125.510697][ T6782] loop1: detected capacity change from 0 to 1024 [ 125.538844][ T6782] EXT4-fs: Ignoring removed orlov option [ 125.570469][ T6782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.666705][ T6782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.723352][ T4614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 125.736970][ T4614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 125.747176][ T4614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.755406][ T4614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.957689][ T4614] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 125.970664][ T4614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.986664][ T6781] loop4: detected capacity change from 0 to 40427 [ 126.040943][ T6781] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 126.081638][ T6781] F2FS-fs (loop4): heap/no_heap options were deprecated [ 126.088737][ T6781] F2FS-fs (loop4): Image doesn't support compression [ 126.097640][ T6781] F2FS-fs (loop4): invalid crc value [ 126.127483][ T6781] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.182239][ T6799] loop5: detected capacity change from 0 to 2048 [ 126.230102][ T6799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.391065][ T6781] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.480060][ T6784] chnl_net:caif_netlink_parms(): no params data found [ 126.489142][ T5221] UDF-fs: error (device loop5): udf_read_inode: (ino 1416) failed !bh [ 126.490983][ T5220] syz-executor: attempt to access beyond end of device [ 126.490983][ T5220] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.512176][ T5221] UDF-fs: error (device loop5): udf_read_inode: (ino 1416) failed !bh [ 126.564504][ T5220] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 126.724456][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.732000][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.739275][ T6784] bridge_slave_0: entered allmulticast mode [ 126.746774][ T6784] bridge_slave_0: entered promiscuous mode [ 126.761696][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.777559][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.784945][ T6784] bridge_slave_1: entered allmulticast mode [ 126.792213][ T6784] bridge_slave_1: entered promiscuous mode [ 126.855581][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.871009][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.001121][ T2551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.039220][ T6784] team0: Port device team_slave_0 added [ 127.085279][ T6784] team0: Port device team_slave_1 added [ 127.133417][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.164613][ T5285] net_ratelimit: 1250 callbacks suppressed [ 127.164635][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.209326][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.211005][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.247790][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.249233][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.305936][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.395316][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.404206][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.427788][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.448693][ T2551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.491208][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.513562][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.539782][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.624588][ T2551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.851892][ T2551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.895948][ T6784] hsr_slave_0: entered promiscuous mode [ 127.929057][ T6784] hsr_slave_1: entered promiscuous mode [ 127.965182][ T6784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.973052][ T6784] Cannot create hsr debugfs directory [ 127.978617][ T6842] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 127.990755][ T6844] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 128.030952][ T6848] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 128.059914][ T4614] Bluetooth: hci6: command tx timeout [ 128.173891][ T6854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.221006][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.421116][ T5294] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.579578][ T2551] bridge_slave_1: left allmulticast mode [ 128.586866][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 128.604317][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.617993][ T5294] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.631769][ T2551] bridge_slave_1: left promiscuous mode [ 128.644136][ T5294] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.649839][ T2551] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.668837][ T5294] usb 1-1: config 1 has no interface number 1 [ 128.676246][ T5294] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 128.688304][ T2551] bridge_slave_0: left allmulticast mode [ 128.694438][ T5294] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.704800][ T2551] bridge_slave_0: left promiscuous mode [ 128.706908][ T5294] usb 1-1: config 1 interface 2 has no altsetting 0 [ 128.720807][ T5294] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.728666][ T2551] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.730123][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.748379][ T5294] usb 1-1: Product: syz [ 128.778704][ T5294] usb 1-1: Manufacturer: syz [ 128.790752][ T5294] usb 1-1: SerialNumber: syz [ 128.968673][ T6868] loop3: detected capacity change from 0 to 512 [ 128.979393][ T6868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.994064][ T6868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 129.002226][ T6868] System zones: 1-12 [ 129.015494][ T6868] EXT4-fs (loop3): 1 truncate cleaned up [ 129.030160][ T5294] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 129.030436][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.041228][ T5294] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 129.059524][ T5294] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 129.068308][ T5294] usb 1-1: selecting invalid altsetting 0 [ 129.111141][ T5294] usb 1-1: USB disconnect, device number 6 [ 129.165761][ T5465] udevd[5465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.211739][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.240313][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.244989][ T5222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.470475][ T4614] Bluetooth: hci2: command tx timeout [ 129.675787][ T53] Bluetooth: hci7: sending frame failed (-49) [ 129.683695][ T4614] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 129.716039][ T6880] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 129.789186][ T2551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.981752][ T2551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.043218][ T2551] bond0 (unregistering): Released all slaves [ 130.112822][ T4614] Bluetooth: hci6: command tx timeout [ 130.274671][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.298495][ T6784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.379906][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 130.711174][ T6784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.746947][ T6907] tipc: Started in network mode [ 130.775945][ T6907] tipc: Node identity FUNC_PRO, cluster identity 4711 [ 130.799292][ T6907] tipc: Enabling of bearer rejected, failed to enable media [ 131.062653][ T6784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.113985][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 131.346117][ T2551] hsr_slave_0: left promiscuous mode [ 131.351607][ T5285] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.362413][ T6917] loop4: detected capacity change from 0 to 32768 [ 131.371120][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.383884][ T6917] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.596 (6917) [ 131.416700][ T2551] hsr_slave_1: left promiscuous mode [ 131.434983][ T2551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.442670][ T2551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.449868][ T6917] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.460640][ T6917] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 131.469177][ T6917] BTRFS info (device loop4): using free-space-tree [ 131.499047][ T2551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.506884][ T2551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.526852][ T5285] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 131.536281][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.554789][ T4614] Bluetooth: hci2: command tx timeout [ 131.567829][ T5285] usb 4-1: Product: syz [ 131.572297][ T5285] usb 4-1: Manufacturer: syz [ 131.576913][ T5285] usb 4-1: SerialNumber: syz [ 131.585133][ T2551] veth1_macvtap: left promiscuous mode [ 131.591962][ T5285] usb 4-1: config 0 descriptor?? [ 131.605317][ T5285] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 131.614018][ T2551] veth0_macvtap: left promiscuous mode [ 131.619626][ T2551] veth1_vlan: left promiscuous mode [ 131.634591][ T2551] veth0_vlan: left promiscuous mode [ 131.641373][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.762148][ T6917] BTRFS info (device loop4): rebuilding free space tree [ 132.027318][ T5285] (null): failure reading functionality [ 132.068258][ T5285] i2c i2c-1: connected i2c-tiny-usb device [ 132.095957][ T5220] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.191713][ T4614] Bluetooth: hci6: command tx timeout [ 132.253294][ T5319] usb 4-1: USB disconnect, device number 3 [ 132.274409][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.281614][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.450818][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.712610][ T2551] team0 (unregistering): Port device team_slave_1 removed [ 132.747921][ T2551] team0 (unregistering): Port device team_slave_0 removed [ 133.215273][ T6784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.454856][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.481623][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.495417][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.522897][ T6825] bridge_slave_0: entered allmulticast mode [ 133.560486][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.589543][ T6825] bridge_slave_0: entered promiscuous mode [ 133.599848][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.607747][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.621847][ T6825] bridge_slave_1: entered allmulticast mode [ 133.630670][ T4614] Bluetooth: hci2: command tx timeout [ 133.682266][ T6825] bridge_slave_1: entered promiscuous mode [ 133.750468][ T1841] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.831985][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.884339][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.896872][ T6784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.908324][ T6784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.944440][ T1841] usb 4-1: Using ep0 maxpacket: 16 [ 133.961653][ T1841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.972004][ T1841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.985116][ T1841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.989502][ T6784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.997709][ T1841] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.011692][ T1841] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.026525][ T1841] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.027430][ T6784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.043965][ T1841] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.083939][ T1841] usb 4-1: Manufacturer: syz [ 134.108092][ T1841] usb 4-1: config 0 descriptor?? [ 134.156350][ T6825] team0: Port device team_slave_0 added [ 134.204946][ T6825] team0: Port device team_slave_1 added [ 134.270679][ T4614] Bluetooth: hci6: command tx timeout [ 134.336472][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.357514][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.439761][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.460526][ T1841] rc_core: IR keymap rc-hauppauge not found [ 134.466885][ T1841] Registered IR keymap rc-empty [ 134.485903][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.489766][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.504207][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.537350][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.545018][ T6968] loop3: detected capacity change from 0 to 164 [ 134.546701][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.570626][ T6968] ISOFS: Bad logical zone size 2055 [ 134.580653][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.611881][ T1841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 134.656941][ T1841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 134.716945][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.754913][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.790624][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.799607][ T6825] hsr_slave_0: entered promiscuous mode [ 134.814295][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.823960][ T6825] hsr_slave_1: entered promiscuous mode [ 134.840479][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.842596][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.864502][ T6825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.888208][ T6825] Cannot create hsr debugfs directory [ 134.904363][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.950554][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 135.000480][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 135.036617][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 135.076826][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 135.105524][ T1841] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 135.133957][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.161536][ T1841] mceusb 4-1:0.0: Registered with mce emulator interface version 78 [ 135.187144][ T1841] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.215977][ T1841] usb 4-1: USB disconnect, device number 4 [ 135.302348][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.381506][ T2551] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.388682][ T2551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.572303][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.579530][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.690311][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.724792][ T53] Bluetooth: hci2: command tx timeout [ 135.735753][ T5228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.746820][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.758935][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.778064][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.786504][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 135.794031][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 135.858066][ T6784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.326416][ T6825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.411580][ T6825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.462092][ T6825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.584152][ T6825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.657382][ T7011] loop4: detected capacity change from 0 to 32768 [ 136.668033][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.681448][ T5285] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.692232][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.767610][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.768595][ T7011] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 136.824044][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.841889][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.868577][ T5285] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 136.884038][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.891171][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.900606][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.907721][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.916102][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.930310][ T5285] usb 4-1: Product: syz [ 136.934581][ T5285] usb 4-1: Manufacturer: syz [ 136.939177][ T5285] usb 4-1: SerialNumber: syz [ 136.971589][ T5285] usb 4-1: config 0 descriptor?? [ 137.003543][ T6784] veth0_vlan: entered promiscuous mode [ 137.025984][ T6784] veth1_vlan: entered promiscuous mode [ 137.104801][ T7011] XFS (loop4): Ending clean mount [ 137.165632][ T6784] veth0_macvtap: entered promiscuous mode [ 137.234604][ T5220] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 137.280664][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 137.300667][ T6784] veth1_macvtap: entered promiscuous mode [ 137.320156][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.333572][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.343447][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.353977][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.363933][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.374478][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.384794][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.397236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.408430][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.420776][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.792161][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.803421][ T5285] usb 4-1: f81604_write: reg: 105 data: f2 failed: -EPROTO [ 137.814281][ T5285] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 137.829138][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.851133][ T5285] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 137.874886][ T4614] Bluetooth: hci7: command tx timeout [ 137.881708][ T5285] usb 4-1: USB disconnect, device number 5 [ 137.965553][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.990354][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.010329][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.026018][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.039164][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.058745][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.069538][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.089197][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.201541][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.231907][ T6784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.285990][ T6784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.295471][ T6784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.304648][ T6784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.495900][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.505611][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.523554][ T7005] bridge_slave_0: entered allmulticast mode [ 138.538328][ T7005] bridge_slave_0: entered promiscuous mode [ 138.578172][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.595867][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.647647][ T7005] bridge_slave_1: entered allmulticast mode [ 138.664780][ T7005] bridge_slave_1: entered promiscuous mode [ 138.690753][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.764784][ T7076] loop4: detected capacity change from 0 to 1024 [ 138.828987][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.855052][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.878559][ T7076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.925222][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.049635][ T7005] team0: Port device team_slave_0 added [ 139.112162][ T7005] team0: Port device team_slave_1 added [ 139.172150][ T6825] veth0_vlan: entered promiscuous mode [ 139.211895][ T7080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.220861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.244349][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.265492][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.349226][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.367070][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.404143][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.431381][ T6825] veth1_vlan: entered promiscuous mode [ 139.462602][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.488116][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.588113][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.725486][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.741140][ T7088] ubi0: attaching mtd0 [ 139.752519][ T7088] ubi0: scanning is finished [ 139.760952][ T7088] ubi0: empty MTD device detected [ 139.776541][ T7005] hsr_slave_0: entered promiscuous mode [ 139.807681][ T7005] hsr_slave_1: entered promiscuous mode [ 139.830571][ T7005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.840801][ T7005] Cannot create hsr debugfs directory [ 139.854072][ T6825] veth0_macvtap: entered promiscuous mode [ 139.884078][ T6825] veth1_macvtap: entered promiscuous mode [ 139.889977][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.938156][ T7088] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 139.951155][ T4614] Bluetooth: hci7: command tx timeout [ 139.954693][ T7088] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 139.993770][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.012768][ T7088] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 140.040361][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.052009][ T7088] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 140.059305][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.080035][ T7088] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 140.096236][ T7088] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 140.100313][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.108569][ T7088] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1263415366 [ 140.133414][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.137318][ T7088] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 140.152571][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.163737][ T7090] ubi0: background thread "ubi_bgt0d" started, PID 7090 [ 140.181976][ T7089] ubi0: detaching mtd0 [ 140.190701][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.220328][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.231530][ T7089] ubi0: mtd0 is detached [ 140.241034][ T7081] loop3: detected capacity change from 0 to 32768 [ 140.247548][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.272424][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.326265][ T7081] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 140.335441][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.346092][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.358010][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.457684][ T7081] XFS (loop3): Ending clean mount [ 140.493884][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.504788][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.546422][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.577313][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.591944][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.613721][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.639097][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.657124][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.667939][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.681537][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.713057][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.735316][ T5222] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 140.755737][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.845174][ T6825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.864247][ T7108] mkiss: ax0: crc mode is auto. [ 140.881075][ T6825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.910553][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.927138][ T6825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.944887][ T6825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.133328][ T7112] mkiss: ax0: crc mode is auto. [ 141.214341][ T7005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.293264][ T7101] loop4: detected capacity change from 0 to 40427 [ 141.353121][ T7101] F2FS-fs (loop4): invalid crc value [ 141.388137][ T7101] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.433742][ T7005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.575059][ T7101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.769579][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 141.786523][ T5220] syz-executor: attempt to access beyond end of device [ 141.786523][ T5220] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.803713][ T5220] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.915803][ T7005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.980437][ T1841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.040865][ T4614] Bluetooth: hci7: command tx timeout [ 142.226153][ T7005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.332339][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.363375][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.497504][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.526494][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.686683][ T7005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.767609][ T7005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.780447][ T5285] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.841276][ T7005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.897802][ T7005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.974777][ T5285] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 142.991730][ T5285] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 143.015056][ T5285] usb 4-1: Manufacturer: syz [ 143.038997][ T25] net_ratelimit: 1 callbacks suppressed [ 143.039015][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.067446][ T5285] usb 4-1: config 0 descriptor?? [ 143.228103][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.284088][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.334958][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.342127][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.417151][ T2551] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.424605][ T2551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.518022][ T5285] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 143.549232][ T7005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.570399][ T7005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.765607][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.802200][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.908058][ T7005] veth0_vlan: entered promiscuous mode [ 143.921177][ T7005] veth1_vlan: entered promiscuous mode [ 143.944681][ T5285] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 143.949066][ T7005] veth0_macvtap: entered promiscuous mode [ 143.983306][ T5285] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 143.987262][ T7005] veth1_macvtap: entered promiscuous mode [ 144.008723][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.019315][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.029246][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.040055][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.050107][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.060706][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.070773][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.081822][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.092698][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.103545][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.113569][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.120964][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.124176][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.144221][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.154201][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.164955][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.168697][ T4614] Bluetooth: hci7: command tx timeout [ 144.175284][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.175307][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.175322][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.175341][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.175364][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.175382][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.175400][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.175418][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.175437][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.175455][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.177510][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.302303][ T5285] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 144.350020][ T5285] usb 4-1: USB disconnect, device number 6 [ 144.373288][ T7005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.395824][ T7005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.446825][ T7195] loop4: detected capacity change from 0 to 1024 [ 144.493410][ T7005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.520516][ T7005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.771554][ T7195] Process accounting resumed [ 144.823746][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.836390][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.851609][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.924398][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.941711][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.071908][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 145.111759][ T6460] Allocator stuck? Waited for 30 seconds [ 145.111780][ T6460] Allocator debug: [ 145.111793][ T6460] capacity1536 [ 145.111805][ T6460] reserved 31232 [ 145.111817][ T6460] hidden 0 [ 145.111836][ T6460] btree 0 [ 145.111848][ T6460] data 0 [ 145.111861][ T6460] cached 0 [ 145.111873][ T6460] reserved 0 [ 145.111886][ T6460] online_reserved 0 [ 145.111898][ T6460] nr_inodes 0 [ 145.111911][ T6460] [ 145.111923][ T6460] freelist_wait waiting [ 145.111935][ T6460] open buckets allocated1 [ 145.111948][ T6460] open buckets total 1024 [ 145.111961][ T6460] open_buckets_wait empty [ 145.111973][ T6460] open_buckets_btree 0 [ 145.111986][ T6460] open_buckets_user 0 [ 145.111999][ T6460] btree reserve cache 0 [ 145.112011][ T6460] [ 145.112022][ T6460] Dev 0: [ 145.112034][ T6460] buckets sectors fragmented [ 145.112049][ T6460] free 0 0 0 [ 145.112064][ T6460] sb 0 0 0 [ 145.112079][ T6460] journal 0 0 0 [ 145.112094][ T6460] btree 0 0 0 [ 145.112109][ T6460] user 0 0 0 [ 145.112124][ T6460] cached 0 0 0 [ 145.112139][ T6460] parity 0 0 0 [ 145.112153][ T6460] stripe 0 0 0 [ 145.112169][ T6460] need_gc_gens 0 0 0 [ 145.112184][ T6460] need_discard 0 0 0 [ 145.112199][ T6460] unstriped 0 0 0 [ 145.112213][ T6460] capacity 128 [ 145.112226][ T6460] [ 145.112237][ T6460] reserves: [ 145.112249][ T6460] stripe 60 [ 145.112261][ T6460] normal 58 [ 145.112275][ T6460] copygc 56 [ 145.112288][ T6460] btree 28 [ 145.112300][ T6460] btree_copygc 0 [ 145.112313][ T6460] reclaim 0 [ 145.112326][ T6460] interior_updates 0 [ 145.112339][ T6460] [ 145.112350][ T6460] open buckets 0 [ 145.112363][ T6460] buckets to invalidate 0 [ 145.112376][ T6460] [ 145.112387][ T6460] Copygc debug: [ 145.112399][ T6460] running: 1 [ 145.112410][ T6460] copygc_wait:0 [ 145.112422][ T6460] copygc_wait_at:0 [ 145.112434][ T6460] Currently waiting for:0 B [ 145.112447][ T6460] Currently waiting since:640 KiB [ 145.112460][ T6460] Currently calculated wait:0 B [ 145.112473][ T6460] [ 145.112484][ T6460] Journal debug: [ 145.112496][ T6460] flags: running,may_skip_flush [ 145.112510][ T6460] dirty journal entries: 0/32768 [ 145.112524][ T6460] seq: 8 [ 145.112536][ T6460] seq_ondisk: 8 [ 145.112549][ T6460] last_seq: 9 [ 145.112562][ T6460] last_seq_ondisk: 8 [ 145.112575][ T6460] flushed_seq_ondisk: 8 [ 145.112588][ T6460] watermark: stripe [ 145.112601][ T6460] each entry reserved: 321 [ 145.112613][ T6460] nr flush writes: 1 [ 145.112626][ T6460] nr noflush writes: 0 [ 145.112639][ T6460] average write size: 1.23 KiB [ 145.112652][ T6460] nr direct reclaim: 0 [ 145.112665][ T6460] nr background reclaim: 0 [ 145.112678][ T6460] reclaim kicked: 0 [ 145.112691][ T6460] reclaim runs in: 0 ms [ 145.112704][ T6460] blocked: 0 [ 145.112717][ T6460] current entry sectors: 256 [ 145.112730][ T6460] current entry error: ok [ 145.112743][ T6460] current entry: closed [ 145.112756][ T6460] unwritten entries: [ 145.112768][ T6460] last buf closed [ 145.112780][ T6460] space: [ 145.112792][ T6460] discarded 256:1536 [ 145.112805][ T6460] clean ondisk 256:1536 [ 145.112818][ T6460] clean 256:1536 [ 145.112837][ T6460] total 256:2048 [ 145.112850][ T6460] dev 0: [ 145.112862][ T6460] nr 8 [ 145.112875][ T6460] bucket size 256 [ 145.112887][ T6460] available 6:248 [ 145.112900][ T6460] discard_idx 0 [ 145.112912][ T6460] dirty_ondisk 0 (seq 8) [ 145.112925][ T6460] dirty_idx 0 (seq 8) [ 145.112938][ T6460] cur_idx 0 (seq 8) [ 145.112951][ T6460] [ 145.261209][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.680675][ T25] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 145.689754][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.698209][ T25] usb 3-1: Product: syz [ 145.702755][ T25] usb 3-1: Manufacturer: syz [ 145.707379][ T25] usb 3-1: SerialNumber: syz [ 145.728000][ T25] usb 3-1: config 0 descriptor?? [ 145.983021][ T25] speedtch 3-1:0.0: speedtch_bind: wrong device class 141 [ 146.013356][ T25] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 146.055126][ T7222] loop3: detected capacity change from 0 to 1024 [ 146.089879][ T7214] loop4: detected capacity change from 0 to 32768 [ 146.142659][ T7222] hfsplus: small file entry [ 146.158337][ T7214] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.234444][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.272499][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.314089][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.363765][ T7236] loop5: detected capacity change from 0 to 256 [ 146.577607][ T7214] XFS (loop4): Ending clean mount [ 146.612604][ T7236] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 146.669201][ T7236] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 146.778235][ T7236] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000006) [ 146.791503][ T7214] XFS (loop4): Quotacheck needed: Please wait. [ 146.825431][ T7236] exFAT-fs (loop5): Filesystem has been set read-only [ 146.881439][ T7214] XFS (loop4): Quotacheck: Done. [ 146.883655][ T7247] kernel profiling enabled (shift: 6) [ 146.959494][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.978241][ T5347] usb 3-1: USB disconnect, device number 5 [ 147.173909][ T7256] program syz.1.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.311515][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.386124][ T5220] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.707318][ T5347] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.920398][ T5347] usb 3-1: Using ep0 maxpacket: 32 [ 147.931595][ T5347] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 147.956703][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.001341][ T5347] usb 3-1: config 0 descriptor?? [ 148.058099][ T5347] gspca_main: sunplus-2.14.0 probing 041e:400b [ 148.351220][ T5294] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.373424][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.509964][ T7269] loop5: detected capacity change from 0 to 32768 [ 148.520772][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 148.548006][ T7269] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.719 (7269) [ 148.548699][ T5294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.608315][ T7269] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 148.641725][ T5294] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 148.649124][ T7269] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 148.679997][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.710495][ T5294] usb 1-1: Product: syz [ 148.714756][ T5294] usb 1-1: Manufacturer: syz [ 148.719395][ T5294] usb 1-1: SerialNumber: syz [ 148.719439][ T7269] BTRFS info (device loop5): using free-space-tree [ 148.780240][ T5294] usb 1-1: config 0 descriptor?? [ 148.865885][ T5347] gspca_sunplus: reg_r err -71 [ 148.891170][ T5347] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 148.993615][ T5347] usb 3-1: USB disconnect, device number 6 [ 149.240393][ T29] audit: type=1800 audit(1727253939.121:67): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.719" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 149.264409][ T5294] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 149.286740][ T5294] usb 1-1: No valid video chain found. [ 149.392586][ T5227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.445261][ T6825] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 149.543245][ T5294] usb 1-1: USB disconnect, device number 7 [ 149.660486][ T7322] delete_channel: no stack [ 149.885913][ T7317] loop3: detected capacity change from 0 to 32768 [ 149.941567][ T7295] loop4: detected capacity change from 0 to 40427 [ 149.960392][ T5227] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 149.983810][ T29] audit: type=1800 audit(1727253939.881:68): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.735" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 150.042179][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.052389][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.092951][ T7295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.132463][ T5227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.143339][ T5227] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.160817][ T5227] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.177879][ T5227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.202770][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.212852][ T5227] usb 6-1: config 0 descriptor?? [ 150.220951][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 150.248570][ T25] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 150.267459][ T25] usb 2-1: config 0 has no interface number 0 [ 150.277749][ T7295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.279174][ T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 150.345277][ T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 150.375828][ T25] usb 2-1: config 0 interface 126 has no altsetting 0 [ 150.391238][ T25] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 150.395915][ T5220] syz-executor: attempt to access beyond end of device [ 150.395915][ T5220] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.400488][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.400520][ T25] usb 2-1: Product: syz [ 150.400541][ T25] usb 2-1: Manufacturer: syz [ 150.400563][ T25] usb 2-1: SerialNumber: syz [ 150.403299][ T25] usb 2-1: config 0 descriptor?? [ 150.438751][ T5220] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 150.445481][ T7326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.457928][ T7326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.481127][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.489892][ T5319] usb 6-1: USB disconnect, device number 5 [ 150.858445][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.882207][ T25] ir_usb 2-1:0.126: IR Dongle converter detected [ 151.130615][ T25] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 151.308650][ T5319] usb 2-1: USB disconnect, device number 2 [ 151.348276][ T5319] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 151.358221][ T5319] ir_usb 2-1:0.126: device disconnected [ 151.560769][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.593058][ T7376] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 151.674977][ T7379] capability: warning: `syz.5.760' uses 32-bit capabilities (legacy support in use) [ 152.579890][ T7417] netlink: 296 bytes leftover after parsing attributes in process `syz.3.777'. [ 152.590656][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.597857][ T7417] unsupported nlmsg_type 40 [ 153.070733][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.172389][ T7438] block nbd3: shutting down sockets [ 153.426664][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.792'. [ 153.630603][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.743884][ T7468] program syz.5.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.140515][ T5283] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.218091][ T7488] loop5: detected capacity change from 0 to 256 [ 154.227802][ T7490] loop4: detected capacity change from 0 to 64 [ 154.261486][ T7488] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 154.339225][ T5283] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 154.364087][ T7492] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 154.368839][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.381477][ T7492] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.813'. [ 154.395387][ T7492] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 154.405451][ T5283] usb 2-1: Product: syz [ 154.409464][ T7492] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 154.410151][ T5283] usb 2-1: Manufacturer: syz [ 154.423872][ T5283] usb 2-1: SerialNumber: syz [ 154.431729][ T5283] usb 2-1: config 0 descriptor?? [ 154.655936][ T5283] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 154.674682][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.111580][ T5283] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 155.200759][ T7502] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 155.208453][ T7502] netlink: 228 bytes leftover after parsing attributes in process `syz.3.819'. [ 155.271162][ T7509] loop5: detected capacity change from 0 to 512 [ 155.399565][ T7509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.470189][ T5283] usb 2-1: USB disconnect, device number 3 [ 155.501434][ T7509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.560577][ T7509] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.730508][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.776652][ T7509] EXT4-fs error (device loop5): ext4_rename:3814: inode #16: comm syz.5.821: target of rename is already freed [ 156.044740][ T6825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.111083][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.361111][ T7520] loop3: detected capacity change from 0 to 32768 [ 156.470229][ T7548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.562570][ T7549] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 156.801637][ T7533] loop4: detected capacity change from 0 to 32768 [ 156.822059][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.039494][ T7533] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 157.160604][ T7533] XFS (loop4): Ending clean mount [ 157.195127][ T7533] XFS (loop4): Quotacheck needed: Please wait. [ 157.640593][ T7533] XFS (loop4): Quotacheck: Done. [ 157.886546][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.053930][ T5220] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 158.562337][ T5319] kernel write not supported for file /dsp1 (pid: 5319 comm: kworker/1:7) [ 158.572440][ T7600] loop5: detected capacity change from 0 to 64 [ 158.930925][ T5319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.124635][ T7616] loop5: detected capacity change from 0 to 1024 [ 159.180085][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.216953][ T7620] netlink: 6 bytes leftover after parsing attributes in process `syz.1.863'. [ 159.300009][ T7621] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.383897][ T7621] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.972670][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.438714][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.807730][ T7667] loop3: detected capacity change from 0 to 1024 [ 160.879829][ T7667] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.904188][ T7667] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 160.934248][ T7667] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.959284][ T7667] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.889: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.998683][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.017974][ T7678] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.080580][ T7667] EXT4-fs (loop3): 1 orphan inode deleted [ 161.106803][ T7667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.365642][ T5222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.379067][ T7691] tipc: Failed to obtain node identity [ 161.384737][ T7691] tipc: Enabling of bearer rejected, failed to enable media [ 162.030633][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.170869][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 162.192856][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.793359][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 162.979887][ T7743] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.921'. [ 162.990521][ T7743] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 163.087578][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.135735][ T7747] loop3: detected capacity change from 0 to 1024 [ 163.198621][ T7708] loop4: detected capacity change from 0 to 32768 [ 163.590649][ T5347] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.696065][ T7725] loop5: detected capacity change from 0 to 32768 [ 163.760579][ T5347] usb 1-1: Using ep0 maxpacket: 16 [ 163.777895][ T5347] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.786967][ T29] audit: type=1800 audit(1727253953.671:69): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.910" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 163.826555][ T5347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.866892][ T5347] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.910338][ T5347] usb 1-1: config 1 has no interface number 1 [ 163.916464][ T5347] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 163.945243][ T5347] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.832162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.940217][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 268.947209][ C0] rcu: 1-...!: (0 ticks this GP) idle=600c/1/0x4000000000000000 softirq=22691/22691 fqs=0 [ 268.958580][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P36/1:b..l [ 268.966512][ C0] rcu: (detected by 0, t=10502 jiffies, g=20557, q=434 ncpus=2) [ 268.974239][ C0] Sending NMI from CPU 0 to CPUs 1: [ 268.974271][ C1] NMI backtrace for cpu 1 [ 268.974283][ C1] CPU: 1 UID: 0 PID: 7771 Comm: syz.1.931 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 268.974308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 268.974321][ C1] RIP: 0010:debug_object_deactivate+0x15d/0x390 [ 268.974360][ C1] Code: 48 0f af c8 48 c1 e9 2f 83 e1 f8 48 8d 9c c9 c0 80 58 9a 48 8d bc c9 c8 80 58 9a 48 89 7c 24 10 e8 08 f1 0b 07 48 89 44 24 08 <48> 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 cd 54 3c fd [ 268.974379][ C1] RSP: 0018:ffffc90000a18c40 EFLAGS: 00000046 [ 268.974398][ C1] RAX: 0000000000000046 RBX: ffffffff9a669db0 RCX: 0000000000000001 [ 268.974414][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000a18b20 [ 268.974430][ C1] RBP: ffffc90000a18d30 R08: 0000000000000003 R09: fffff52000143164 [ 268.974447][ C1] R10: dffffc0000000000 R11: fffff52000143164 R12: ffffc90000a18c80 [ 268.974464][ C1] R13: ffff888025ebb340 R14: dffffc0000000000 R15: 1ffff9200014318c [ 268.974485][ C1] FS: 00007fcb105236c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 268.974505][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.974521][ C1] CR2: 000000110c2b3215 CR3: 000000002892a000 CR4: 0000000000350ef0 [ 268.974539][ C1] Call Trace: [ 268.974547][ C1] [ 268.974557][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 268.974593][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 268.974629][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 268.974667][ C1] ? nmi_handle+0x2a/0x5a0 [ 268.974701][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 268.974731][ C1] ? nmi_handle+0x151/0x5a0 [ 268.974753][ C1] ? nmi_handle+0x2a/0x5a0 [ 268.974776][ C1] ? debug_object_deactivate+0x15d/0x390 [ 268.974807][ C1] ? default_do_nmi+0x63/0x160 [ 268.974843][ C1] ? exc_nmi+0x123/0x1f0 [ 268.974876][ C1] ? end_repeat_nmi+0xf/0x53 [ 268.974912][ C1] ? debug_object_deactivate+0x15d/0x390 [ 268.974944][ C1] ? debug_object_deactivate+0x15d/0x390 [ 268.974976][ C1] ? debug_object_deactivate+0x15d/0x390 [ 268.975007][ C1] [ 268.975015][ C1] [ 268.975026][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 268.975059][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.975090][ C1] ? timerqueue_add+0x260/0x290 [ 268.975120][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 268.975150][ C1] debug_deactivate+0x1b/0x220 [ 268.975175][ C1] __hrtimer_run_queues+0x305/0xd50 [ 268.975197][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 268.975239][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 268.975262][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.975291][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 268.975326][ C1] hrtimer_interrupt+0x396/0x990 [ 268.975363][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 268.975388][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 268.975414][ C1] [ 268.975422][ C1] [ 268.975431][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.975458][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 268.975485][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 fe 5f 30 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 02 95 f5 65 8b 05 24 d5 35 74 85 c0 74 43 48 c7 04 24 0e 36 [ 268.975504][ C1] RSP: 0018:ffffc900209578c0 EFLAGS: 00000206 [ 268.975523][ C1] RAX: 11d04035b6bb1200 RBX: 1ffff9200412af1c RCX: ffffffff9a3bf903 [ 268.975541][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aca40 RDI: 0000000000000001 [ 268.975557][ C1] RBP: ffffc90020957958 R08: ffffffff901ce56f R09: 1ffffffff2039cad [ 268.975574][ C1] R10: dffffc0000000000 R11: fffffbfff2039cae R12: dffffc0000000000 [ 268.975592][ C1] R13: 1ffff9200412af18 R14: ffffc900209578e0 R15: 0000000000000246 [ 268.975620][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.975650][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.975683][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.975712][ C1] ? __wake_up_locked_key+0xea/0x160 [ 268.975750][ C1] timerfd_clock_was_set+0x1e0/0x2f0 [ 268.975772][ C1] ? timerfd_clock_was_set+0x31/0x2f0 [ 268.975797][ C1] clock_was_set+0x78e/0x810 [ 268.975837][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 268.975871][ C1] ? __asan_memcpy+0x40/0x70 [ 268.975905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.975934][ C1] ? timekeeping_update+0x3e5/0x450 [ 268.975963][ C1] ? do_adjtimex+0x51d/0xae0 [ 268.975992][ C1] timekeeping_inject_offset+0x4e8/0x580 [ 268.976019][ C1] ? do_adjtimex+0x51d/0xae0 [ 268.976051][ C1] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 268.976081][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 268.976111][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.976141][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.976176][ C1] do_adjtimex+0x51d/0xae0 [ 268.976208][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 268.976238][ C1] ? __pfx___might_resched+0x10/0x10 [ 268.976268][ C1] ? __might_fault+0xaa/0x120 [ 268.976302][ C1] ? __pfx_lock_release+0x10/0x10 [ 268.976342][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.976371][ C1] ? __might_fault+0xc6/0x120 [ 268.976408][ C1] __x64_sys_clock_adjtime+0x1e3/0x290 [ 268.976439][ C1] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 268.976486][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.976521][ C1] ? do_syscall_64+0x100/0x230 [ 268.976551][ C1] ? do_syscall_64+0xb6/0x230 [ 268.976581][ C1] do_syscall_64+0xf3/0x230 [ 268.976613][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.976644][ C1] RIP: 0033:0x7fcb0f77def9 [ 268.976663][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.976681][ C1] RSP: 002b:00007fcb10523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 268.976703][ C1] RAX: ffffffffffffffda RBX: 00007fcb0f936058 RCX: 00007fcb0f77def9 [ 268.976720][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 268.976735][ C1] RBP: 00007fcb0f7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 268.976749][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.976764][ C1] R13: 0000000000000000 R14: 00007fcb0f936058 R15: 00007ffdfe806fc8 [ 268.976790][ C1] [ 268.977263][ C0] task:kworker/u8:3 state:R running task stack:22360 pid:36 tgid:36 ppid:2 flags:0x00004000 [ 269.595842][ C0] Workqueue: bat_events batadv_nc_worker [ 269.601506][ C0] Call Trace: [ 269.604968][ C0] [ 269.607919][ C0] __schedule+0x1895/0x4b30 [ 269.612470][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.618126][ C0] ? look_up_lock_class+0x77/0x170 [ 269.623263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.628919][ C0] ? __pfx___schedule+0x10/0x10 [ 269.633811][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.639465][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 269.645484][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 269.650790][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 269.655919][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 269.661679][ C0] irqentry_exit+0x5e/0x90 [ 269.666111][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.672119][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 269.677421][ C0] Code: c7 e0 d6 93 8e e8 40 92 79 03 eb cd 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 08 45 89 7e e8 fb cf 49 0a 89 [ 269.697037][ C0] RSP: 0018:ffffc90000ac7b50 EFLAGS: 00000202 [ 269.703121][ C0] RAX: 0000000000000000 RBX: ffff88802fec92c0 RCX: ffff88801dadbc00 [ 269.711100][ C0] RDX: ffff88801dadbc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 269.719082][ C0] RBP: ffff888025cb47d0 R08: ffffffff8b8e18f1 R09: 1ffffffff284d0f8 [ 269.727066][ C0] R10: dffffc0000000000 R11: fffffbfff284d0f9 R12: ffff88802da14cc0 [ 269.735047][ C0] R13: 00000000000000fa R14: 0000000000000001 R15: dffffc0000000000 [ 269.743034][ C0] ? batadv_nc_worker+0x101/0x610 [ 269.748083][ C0] batadv_nc_worker+0x10b/0x610 [ 269.752944][ C0] ? batadv_nc_worker+0xcb/0x610 [ 269.757899][ C0] ? process_scheduled_works+0x976/0x1850 [ 269.763813][ C0] process_scheduled_works+0xa65/0x1850 [ 269.769408][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.775416][ C0] ? assign_work+0x364/0x3d0 [ 269.780036][ C0] worker_thread+0x870/0xd30 [ 269.784664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.790324][ C0] ? __kthread_parkme+0x169/0x1d0 [ 269.795377][ C0] ? __pfx_worker_thread+0x10/0x10 [ 269.800510][ C0] kthread+0x2f2/0x390 [ 269.804592][ C0] ? __pfx_worker_thread+0x10/0x10 [ 269.809810][ C0] ? __pfx_kthread+0x10/0x10 [ 269.814413][ C0] ret_from_fork+0x4d/0x80 [ 269.818860][ C0] ? __pfx_kthread+0x10/0x10 [ 269.823469][ C0] ret_from_fork_asm+0x1a/0x30 [ 269.828272][ C0] [ 269.831297][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g20557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 269.843627][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=10563 [ 269.851518][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g20557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 269.862898][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 269.872872][ C0] rcu: RCU grace-period kthread stack dump: [ 269.878768][ C0] task:rcu_preempt state:I stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 269.889064][ C0] Call Trace: [ 269.892346][ C0] [ 269.895288][ C0] __schedule+0x1895/0x4b30 [ 269.899831][ C0] ? __pfx___schedule+0x10/0x10 [ 269.904706][ C0] ? __pfx_lock_release+0x10/0x10 [ 269.909755][ C0] ? __asan_memset+0x23/0x50 [ 269.914376][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 269.920207][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.926561][ C0] ? schedule+0x90/0x320 [ 269.930816][ C0] schedule+0x14b/0x320 [ 269.934988][ C0] schedule_timeout+0x1be/0x310 [ 269.939854][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 269.945243][ C0] ? __pfx_process_timeout+0x10/0x10 [ 269.950553][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.956205][ C0] ? prepare_to_swait_event+0x330/0x350 [ 269.961779][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 269.966641][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 269.971856][ C0] ? rcu_gp_init+0x1256/0x1630 [ 269.976641][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 269.981586][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 269.987495][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 269.992788][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 269.998705][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.004356][ C0] ? finish_swait+0xd4/0x1e0 [ 270.008972][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 270.013664][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 270.018873][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 270.024791][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.030447][ C0] ? __kthread_parkme+0x169/0x1d0 [ 270.035498][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 270.040708][ C0] kthread+0x2f2/0x390 [ 270.044788][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 270.049997][ C0] ? __pfx_kthread+0x10/0x10 [ 270.054596][ C0] ret_from_fork+0x4d/0x80 [ 270.059035][ C0] ? __pfx_kthread+0x10/0x10 [ 270.063638][ C0] ret_from_fork_asm+0x1a/0x30 [ 270.068442][ C0]