last executing test programs: 54.270049021s ago: executing program 4 (id=160): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 54.154709994s ago: executing program 4 (id=162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000,hard\x00') r1 = accept(r0, 0x0, 0x0) close(r1) 53.412901302s ago: executing program 4 (id=168): mbind(&(0x7f00005b6000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x84, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4000004}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x4000845, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) 52.754459539s ago: executing program 4 (id=169): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@showexec}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 52.384045918s ago: executing program 4 (id=173): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x8008, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0xf, 0xb2, &(0x7f0000000180)="$eJzs1zFKA1EUBdA7U+i0NiJYWE/jGnQpYqmNWCmCOxA34lZcwvQWFtOGkB/ITAgJ6QITCOcUH+6/PHjt+539XH+3SflMSnv18lc2Xt/enx6ehzdJ7sKpqZOcJ2mS3FwM+f9+6Kqx7/qPx67fM3z2NfW6AADAAercbudFGT/m4xW4CpfrvtmZrybYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCYlgEAAP//jI4oyQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/59, 0x138000, 0x800, 0x9, 0x1}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 51.793308903s ago: executing program 4 (id=177): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9) 51.580971628s ago: executing program 32 (id=177): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9) 46.072867198s ago: executing program 2 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000090, 0x0, 0x20010}]}) 45.653140568s ago: executing program 2 (id=207): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x78, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000440), 0x200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 42.477540269s ago: executing program 2 (id=228): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1, 0x10000, 0x77) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 40.648153634s ago: executing program 2 (id=233): setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="50000000fe", @ANYRES16, @ANYBLOB="0000000000000013"], 0x50) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) 40.477795828s ago: executing program 2 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 40.208226115s ago: executing program 2 (id=238): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000081004e0086dd694fd2cd00383cfffe8000000000000000000000000000bbff0200000000000000000000000000018406"], 0x72) 25.138562796s ago: executing program 33 (id=238): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000081004e0086dd694fd2cd00383cfffe8000000000000000000000000000bbff0200000000000000000000000000018406"], 0x72) 4.902799796s ago: executing program 1 (id=453): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000280)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000300)=@file={0x1}, 0x6e) 4.723883901s ago: executing program 1 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x3c}}, 0x0) 4.238719883s ago: executing program 1 (id=461): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x8430}, {r1, 0x5303}], 0x2, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) keyctl$describe(0x6, 0x0, 0x0, 0x0) 3.843900793s ago: executing program 5 (id=464): set_mempolicy(0x2002, &(0x7f0000000080)=0x2, 0x6) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x64) 3.665130398s ago: executing program 3 (id=467): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x2f6fffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) openat$dir(0xffffffffffffff9c, 0x0, 0x20402, 0xb6) 3.486028912s ago: executing program 5 (id=469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) exit(0xfffffffffffffffb) sendto$inet(r0, &(0x7f0000000740)="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", 0x1000, 0x4004800, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/184, 0xb8, 0x0, 0x0}, &(0x7f0000000400)=0x40) 3.457540753s ago: executing program 3 (id=470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003d8430b085e047507545a070003010902120001010810010904d303fa"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0xa7}}]}, 0x3, 0x453, &(0x7f00000004c0)="$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") 3.259287318s ago: executing program 1 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f00000000c0)="ffff1870143f54e165e144554305010f32000000ff01000100333560", 0x1c) 2.662493142s ago: executing program 1 (id=474): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) close_range(r0, r2, 0x0) 2.541412256s ago: executing program 0 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[], 0x0) 2.465356828s ago: executing program 5 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3, 0x2, 0xfe03, 0x7f, 0x2, 0x7}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={0x1, @in={{0x2, 0x4e23, @private=0xa010102}}}, &(0x7f0000000300)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0xb4, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x1cc}}, 0x0) 2.402464409s ago: executing program 0 (id=477): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000300)={@desc={0x1, 0x0, @desc4}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.345431611s ago: executing program 6 (id=478): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x1, @none}, 0xe) 2.134530286s ago: executing program 1 (id=479): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x2, &(0x7f0000000080)={0x11, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.956889931s ago: executing program 0 (id=480): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x1, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.692516267s ago: executing program 6 (id=481): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10062, 0x0) 1.638242129s ago: executing program 0 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 1.535241441s ago: executing program 5 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1.491613632s ago: executing program 5 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.476846123s ago: executing program 0 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7a, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0xfffffffffffffffd]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.473409323s ago: executing program 6 (id=486): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000003c0)='GPL\x00', 0x101002, &(0x7f0000000400)={@align=0x1, {0x2, 0x8, 0xff, 0x9}}, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x41410) 1.356967415s ago: executing program 6 (id=487): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$P9_RVERSION(r1, &(0x7f00000006c0)={0x13, 0x65, 0xffff, 0xfb, 0x6, '9P2000'}, 0x13) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.326844386s ago: executing program 0 (id=488): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@pquota}, {@prjquota}, {@usrquota}, {@gquota}, {@discard}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x242, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x242, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0xc3) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x11000, 0x0, 0x0) write(r1, &(0x7f0000000000), 0x10000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x0, 0x10000, 0x1, 0x0, 0x0, [{{r1}}]}) 1.266752518s ago: executing program 5 (id=489): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}}, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x101) 1.246600689s ago: executing program 6 (id=490): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "01018f", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) 1.16797992s ago: executing program 3 (id=491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 1.118374842s ago: executing program 6 (id=492): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc16, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0x0, 0x4}}}}}]}}]}}, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 880.411447ms ago: executing program 3 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac1414bb08000100", @ANYRES32=r2], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) 410.715219ms ago: executing program 3 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x4, 0x62a, &(0x7f0000000440)="$eJzs3N1u29YdAPDD2KrVFA0GBFvTNEDZtBcZhriSsjgwsotoNG2zlUSBlAv3aggWuwtqt0C7AWtutmDAtgIbdrXrobvYxZ5g77Bn6TN4oET5O7bhpE2G/H6AdSjxT54/P3COJfCcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEKFlqtdpR6GWDtfX4yZKlIu+fsH66v/8cKA5o7HsNUQhR9ReazXBl8tGVy3uxP6xeroc3Ju/eCM2qaIZHr/3oB3cvz16oNmxEUTghoafQ2N3vq9XLzkyoP/j8wiSf3cgvv3r06f2trY0v6vfN/StfAivpICvzrN9dSeOszOPFhYXW+6vLZbyc9dLy43KU9uOkSLujvIhvJPdCCIu34nT+43xtsLLU7aXxjeTHcXtx8c7NTqu1EH8wP0y7RZkP3v9gvkxWs14vG6yMY6rVNztvhzvVjfhhNopHabMfx5sPtzZunZZkFdQ+S1DntKBOq9Nptzud9sLtxdt3Wq3m5Hb4V+eLMPlgtnVIOLzJ7Hd10/ICeyXsazimbdwrz6oNh/PaSf42LucOr5g5Gvr9ZAQAAAA8a9H4N/YohMbuN/6sl7YOxOxErz6X3AAAAIBnIwrj5+ui+sG8KyFaPvL9/974dbzeMysAAADwf+jPu2Ps5o4ZYxeiKJTDuWj6tX+4/l603a2Wutv14wJHxgmMlq9Gl+qdjIuF2fpdkl6L3pwEvTmN/rYuNg+O9WuEw3lERdGIHo8TCCHM7tV3tgRmxhv9JVydxFx9MCkf1HH1iMSLy1kvnU/y3t126HYvXRil66PffPbwtyEUxc7M14P+pShsPtzamP/l51sPxrk8rvbyeDua7C46OZe5sHcywq93xz3WoxvvHTzixviHmOqovx70L07qbe2/APVgxAtnvwDhj+GtScxbFyflxeman4zrbFZ1tuePOfr9WbSH6+9Nx4uc8cgPZXFtEnPtxrtV8e6Nek0j7GXROS2LTn3+f1ed/3OdiydkEfZlceu0LG7tvwsuHLwz97KoztZxWfg5DXh+Ng/3Qkf6/71+94n9zmRM/wlt7eaJI/nHXfjhWo78e/GrSTH67+tPbtHfmcS8c3V2r0c61KK3TmvRW9MWffbkfv34Fn02/Dtc/8ffQ1gL16fBx/Qr4z62qvevB3rVaPubaoNv6nr/+YedsRDqkeah7M1V1+TVu5P++6uZmw+373+y8cnGZ53OrYXWT1ut253QGB9GXRx/VWbC5eM6KgBeFmnxbXRx9KeoKLLhL9qLi+3uaDWNizz5MC6ypZU0zgajtEhWu4OVNB4W+ShP8l618FG2lJZxuTYc5sUoXs6LeJiX2fp45pe4nvqlTPvdwShLymEv7ZZpnOSDUTcZxUtZmcTDtZ/3snI1LcYbl8M0yZazpDvK8kFc5mtFks7HcZmm+wKzpXQwypazanEQD4us3y1m4o/y3lo/nVtKy6TIhqN8ssNpXdlgOS/61W6PdOIA8LL6MoxnsIt+H0I9ld3unHZnXQjNU2Ke9zECAAcd7qWPzAO4yxwAAAAAAAAAAAAAAADwvOwfrvezekqf8w4EPLLQPNdW0ynUzrxV8+An9147Lvjtpz+cZ7kQQph99On96SQ8T7XD6UxML8JxPf1CFEJ4AdI4+R77rhaap1zKRr3+vFVUJ/f04NermO+1GQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM/lfAAAA//8RzIVU") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 0s ago: executing program 3 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): eady [ 72.150115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.159807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.177763][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.201204][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.215639][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.227924][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.237858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.247644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.256811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.266655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.278284][ T4186] device veth1_vlan entered promiscuous mode [ 72.296772][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.306100][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.315181][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.324210][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.336832][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.347750][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.359167][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.369913][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.383655][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.416944][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.427693][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.442694][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.454923][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.463990][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.473255][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.482719][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.494718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.504695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.514243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.523536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.542250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.551523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.575441][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.586453][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.597412][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.608165][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.621854][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.662919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.678358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.705143][ T4186] device veth0_macvtap entered promiscuous mode [ 72.717074][ T4186] device veth1_macvtap entered promiscuous mode [ 72.727756][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.736921][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.745977][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.755787][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 72.758013][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.764513][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 72.777067][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 72.783430][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 72.798124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.808331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.817457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.825832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.834857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.842720][ T2300] Bluetooth: hci3: command 0x040f tx timeout [ 72.852959][ T4185] device veth0_vlan entered promiscuous mode [ 72.879570][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.894059][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.904350][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.915757][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.926075][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.937057][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.948676][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.965306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.973935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.982362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.990292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.000164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.017258][ T4185] device veth1_vlan entered promiscuous mode [ 73.033308][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.044980][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.055352][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.066720][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.077865][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.088615][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.101316][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.116182][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.130001][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.140054][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.154853][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.190123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.208946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.298187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.309671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.334723][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.343860][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.365534][ T4185] device veth0_macvtap entered promiscuous mode [ 73.378109][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.394512][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.397023][ T4185] device veth1_macvtap entered promiscuous mode [ 73.417790][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.428249][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.437705][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.447084][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.473388][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.481674][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.491914][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.504445][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.515497][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.526182][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.537164][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.547330][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.558881][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.570253][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.581201][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.593333][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.624424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.634771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.648770][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.656904][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.666315][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.678009][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.688844][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.699825][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.710502][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.722399][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.732508][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.743206][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.755225][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.775997][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.790244][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.799494][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.811108][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.818959][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.827642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.844060][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.857422][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.872400][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.872575][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.892803][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.901830][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934053][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.981994][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.023799][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.047841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.078255][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.096517][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.112988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.163519][ T4274] loop3: detected capacity change from 0 to 128 [ 74.193135][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.233203][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.252828][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.266332][ T4274] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 74.314584][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.328352][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.357016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.497070][ T154] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 74.658548][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.835907][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 74.858673][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 74.873175][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 74.890510][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 74.916707][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 75.311738][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.559005][ T4305] input: syz1 as /devices/virtual/input/input5 [ 75.706122][ T4307] loop0: detected capacity change from 0 to 8192 [ 75.765349][ T4309] loop3: detected capacity change from 0 to 4096 [ 75.779209][ T4263] loop0: p1 p2 p3 p4[DM] [ 75.786673][ T4263] loop0: p1 size 835329 extends beyond EOD, truncated [ 75.802478][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.820703][ T1107] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.845462][ T4263] loop0: p2 size 327680 extends beyond EOD, truncated [ 75.862207][ T4263] loop0: p3 start 1052673 is beyond EOD, truncated [ 75.878869][ T4263] loop0: p4 size 262144 extends beyond EOD, truncated [ 75.905729][ T4307] loop0: p1 p2 p3 p4[DM] [ 75.911935][ T4309] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 75.920146][ T4307] loop0: p1 size 835329 extends beyond EOD, truncated [ 75.935468][ T4307] loop0: p2 size 327680 extends beyond EOD, truncated [ 75.954324][ T4307] loop0: p3 start 1052673 is beyond EOD, truncated [ 75.957379][ T4309] ntfs3: loop3: Failed to load $Extend. [ 75.967268][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.975728][ T4307] loop0: p4 size 262144 extends beyond EOD, truncated [ 76.184859][ T4190] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 76.225232][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 76.255097][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 76.291644][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 76.351725][ T1107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 76.386829][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.396378][ T1107] usb 3-1: Product: syz [ 76.403622][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 76.403951][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 76.419809][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 76.440178][ T1107] usb 3-1: Manufacturer: syz [ 76.447036][ T1107] usb 3-1: SerialNumber: syz [ 76.470118][ T1107] usb 3-1: config 0 descriptor?? [ 76.511806][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.609072][ T4333] netlink: 'syz.1.24': attribute type 18 has an invalid length. [ 76.626414][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.639625][ T4333] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.648936][ T4333] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.658235][ T4333] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.667175][ T4333] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.689165][ T4333] netlink: 'syz.1.24': attribute type 18 has an invalid length. [ 76.700186][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.712697][ T4333] Zero length message leads to an empty skb [ 76.741360][ T1107] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 76.761951][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.796135][ T4336] netlink: 'syz.1.25': attribute type 6 has an invalid length. [ 76.832185][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.857959][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.161680][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.180684][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.195702][ T4228] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 77.206585][ T4341] loop1: detected capacity change from 0 to 32768 [ 77.216796][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.232746][ T4228] usb 1-1: config 0 descriptor?? [ 77.248845][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.261396][ T4341] xfs: Unknown parameter 'smackfstransmute' [ 77.615193][ T4349] loop1: detected capacity change from 0 to 32768 [ 77.690858][ T1107] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 77.712659][ T1107] usb 3-1: USB disconnect, device number 2 [ 77.735452][ T4349] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (4349) [ 77.755271][ T4228] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 77.765393][ T4228] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 77.805287][ T4228] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 77.822670][ T4228] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 77.831331][ T4228] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 77.848176][ T4228] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 77.880890][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.904995][ T4349] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 77.932039][ T4349] BTRFS info (device loop1): turning off barriers [ 77.945413][ T4349] BTRFS info (device loop1): turning on async discard [ 77.960808][ T4349] BTRFS info (device loop1): doing ref verification [ 77.988733][ T4349] BTRFS info (device loop1): using free space tree [ 77.998904][ T4349] BTRFS info (device loop1): has skinny extents [ 78.220889][ T4349] BTRFS info (device loop1): enabling ssd optimizations [ 78.269482][ T4360] loop4: detected capacity change from 0 to 8192 [ 78.317412][ T4360] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 78.345030][ T4360] REISERFS (device loop4): using ordered data mode [ 78.370579][ T4360] reiserfs: using flush barriers [ 78.400795][ T4228] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (5), disabling calibration. [ 78.440867][ T4360] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.462123][ T4354] loop3: detected capacity change from 0 to 32768 [ 78.471833][ T4228] playstation 0003:054C:0DF2.0001: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 78.494520][ T4354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.31 (4354) [ 78.523949][ T4228] playstation 0003:054C:0DF2.0001: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 78.541797][ T4360] REISERFS (device loop4): checking transaction log (loop4) [ 78.571937][ T4228] playstation 0003:054C:0DF2.0001: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 78.590976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.632957][ T4228] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input6 [ 78.683142][ T4228] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input7 [ 78.721081][ T4228] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input8 [ 78.745805][ T4360] REISERFS (device loop4): Using tea hash to sort names [ 78.754276][ T4228] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 78.762945][ T4360] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 78.813582][ T4228] usb 1-1: USB disconnect, device number 2 [ 78.878994][ T4354] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.936139][ T4354] BTRFS info (device loop3): using free space tree [ 78.963206][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.978116][ T4354] BTRFS info (device loop3): has skinny extents [ 79.093489][ T4381] fido_id[4381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 79.243058][ T4354] BTRFS info (device loop3): enabling ssd optimizations [ 79.743135][ T4421] ======================================================= [ 79.743135][ T4421] WARNING: The mand mount option has been deprecated and [ 79.743135][ T4421] and is ignored by this kernel. Remove the mand [ 79.743135][ T4421] option from the mount to silence this warning. [ 79.743135][ T4421] ======================================================= [ 79.778063][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.901909][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 79.921638][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 79.944066][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 80.169039][ T4434] loop1: detected capacity change from 0 to 1764 [ 80.418637][ T4442] ipt_CLUSTERIP: Please specify destination IP [ 80.520548][ T4422] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.637081][ T2238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.945589][ T4422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.965339][ T4422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 80.990146][ T4422] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.026703][ T4422] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 81.044833][ T4422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.071785][ T4422] usb 4-1: config 0 descriptor?? [ 81.090937][ T2238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.101383][ T4438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.114353][ T2238] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.145917][ T4412] net_ratelimit: 2 callbacks suppressed [ 81.145932][ T4412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.300757][ T2238] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 81.310127][ T2300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.328216][ T2238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.350496][ T2238] usb 5-1: Product: syz [ 81.354986][ T2238] usb 5-1: Manufacturer: syz [ 81.422227][ T2238] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 81.445863][ T2238] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 81.591615][ T4422] gt683r_led 0003:1770:FF00.0002: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 81.652645][ T4443] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode 0 is invalid [ 81.673875][ T7] usb 5-1: USB disconnect, device number 2 [ 81.704854][ T7] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 81.720951][ T2300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.732822][ T7] iuu_phoenix 5-1:1.0: device disconnected [ 81.750759][ T2300] usb 2-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 81.770435][ T2300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.802117][ T2300] usb 2-1: config 0 descriptor?? [ 81.824568][ T4422] usb 4-1: USB disconnect, device number 2 [ 81.846618][ T2238] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 81.858438][ T2300] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 82.066263][ T4465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.158232][ T4467] netlink: 156 bytes leftover after parsing attributes in process `syz.2.52'. [ 82.168836][ T7] usb 2-1: USB disconnect, device number 2 [ 82.227862][ T4412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.558162][ T4484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.567254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.584478][ T4484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.597738][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.610571][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.619906][ T4484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.633746][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.647876][ T4484] nvme_tcp: queue 0: bad type returned 0 [ 82.771917][ T4493] loop2: detected capacity change from 0 to 512 [ 82.848097][ T4493] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 82.910991][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.911425][ T4507] capability: warning: `syz.0.68' uses deprecated v2 capabilities in a way that may be insecure [ 82.951259][ T4493] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.64: corrupted in-inode xattr [ 82.980809][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.997568][ T4493] EXT4-fs (loop2): Remounting filesystem read-only [ 83.003498][ T1107] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 83.021094][ T4493] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.64: couldn't read orphan inode 15 (err -117) [ 83.059622][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.068364][ T4493] EXT4-fs (loop2): Remounting filesystem read-only [ 83.076770][ T4493] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none. [ 83.171651][ T1107] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 83.178067][ T4493] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.64: Logical block already allocated [ 83.179330][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 83.203013][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 83.213053][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 83.223622][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 83.233526][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 83.247092][ T4493] EXT4-fs (loop2): Remounting filesystem read-only [ 83.294034][ T1107] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 83.318315][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 83.335794][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 83.382265][ T1107] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 83.721340][ T2238] usb 5-1: USB disconnect, device number 3 [ 83.745975][ T2238] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 83.762075][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.771183][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.778455][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.812693][ T2238] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 83.831900][ T2238] keyspan 5-1:1.0: device disconnected [ 83.906814][ T4543] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 83.913702][ T4543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.926318][ T4543] vhci_hcd vhci_hcd.0: Device attached [ 83.942429][ T4549] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 83.949019][ T4549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.957283][ T4549] vhci_hcd vhci_hcd.0: Device attached [ 83.971067][ T4543] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 83.977644][ T4543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.996059][ T4543] vhci_hcd vhci_hcd.0: Device attached [ 84.025848][ T4543] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 84.032421][ T4543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.100972][ T4543] vhci_hcd vhci_hcd.0: Device attached [ 84.124534][ T4549] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 84.131195][ T4549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.186846][ T4549] vhci_hcd vhci_hcd.0: Device attached [ 84.209705][ T4543] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(11) [ 84.216492][ T4543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.230963][ T4412] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 84.235481][ T4543] vhci_hcd vhci_hcd.0: Device attached [ 84.266603][ T4549] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 84.273280][ T4549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.290756][ T4549] vhci_hcd vhci_hcd.0: Device attached [ 84.302123][ T4569] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 84.312793][ T4564] vhci_hcd: connection closed [ 84.314904][ T4562] vhci_hcd: connection closed [ 84.319843][ T144] vhci_hcd: stop threads [ 84.329206][ T4559] vhci_hcd: connection closed [ 84.329408][ T4554] vhci_hcd: connection closed [ 84.334675][ T4550] vhci_hcd: connection closed [ 84.340058][ T4544] vhci_hcd: connection reset by peer [ 84.351729][ T144] vhci_hcd: release socket [ 84.368956][ T144] vhci_hcd: disconnect device [ 84.381737][ T4570] vhci_hcd: connection closed [ 84.387306][ T144] vhci_hcd: stop threads [ 84.403790][ T144] vhci_hcd: release socket [ 84.408966][ T144] vhci_hcd: disconnect device [ 84.429512][ T144] vhci_hcd: stop threads [ 84.450771][ T144] vhci_hcd: release socket [ 84.457581][ T144] vhci_hcd: disconnect device [ 84.469099][ T144] vhci_hcd: stop threads [ 84.490508][ T144] vhci_hcd: release socket [ 84.507440][ T144] vhci_hcd: disconnect device [ 84.526983][ T144] vhci_hcd: stop threads [ 84.531463][ T144] vhci_hcd: release socket [ 84.541298][ T144] vhci_hcd: disconnect device [ 84.547453][ T144] vhci_hcd: stop threads [ 84.552610][ T144] vhci_hcd: release socket [ 84.557221][ T144] vhci_hcd: disconnect device [ 84.563758][ T144] vhci_hcd: stop threads [ 84.568054][ T144] vhci_hcd: release socket [ 84.573461][ T144] vhci_hcd: disconnect device [ 84.606473][ T4580] loop2: detected capacity change from 0 to 7 [ 84.617675][ T4580] loop2: [ 84.621235][ T4580] loop2: partition table partially beyond EOD, truncated [ 84.922487][ T4592] loop0: detected capacity change from 0 to 2048 [ 84.977314][ T4592] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.010351][ T4598] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.248586][ T4609] syz.0.102 sent an empty control message without MSG_MORE. [ 85.342615][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.504872][ T4619] nbd2: detected capacity change from 0 to 63 [ 85.526927][ T4622] block nbd2: NBD_DISCONNECT [ 85.539909][ T4622] block nbd2: Disconnected due to user request. [ 85.548575][ T4622] block nbd2: shutting down sockets [ 85.577034][ C0] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.588177][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.596786][ C0] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.607722][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 85.615570][ C0] blk_update_request: I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.626424][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 85.634254][ C0] blk_update_request: I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.645134][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 85.653146][ T1474] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.664841][ T1474] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.675081][ T1474] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 85.686124][ T1474] Buffer I/O error on dev nbd2, logical block 1, async page read [ 85.694773][ T1474] Buffer I/O error on dev nbd2, logical block 2, async page read [ 85.702670][ T1474] Buffer I/O error on dev nbd2, logical block 3, async page read [ 85.713383][ T1474] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 85.724499][ T1474] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.733159][ T1474] Buffer I/O error on dev nbd2, logical block 1, async page read [ 85.741572][ T4422] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.760725][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.772300][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.787449][ T150] blk_update_request: I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.800593][ T4382] ldm_validate_partition_table(): Disk read failed. [ 85.848325][ T4382] Dev nbd2: unable to read RDB block 0 [ 85.868327][ T4382] nbd2: unable to read partition table [ 85.922631][ T4382] ldm_validate_partition_table(): Disk read failed. [ 85.932051][ T4382] Dev nbd2: unable to read RDB block 0 [ 85.939683][ T4382] nbd2: unable to read partition table [ 86.001852][ T4422] usb 4-1: Using ep0 maxpacket: 16 [ 86.040599][ T4230] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 86.049820][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 86.086384][ T4230] usb 5-1: Product: syz [ 86.091031][ T4230] usb 5-1: SerialNumber: syz [ 86.108604][ T4230] usb 5-1: config 0 descriptor?? [ 86.135689][ T4632] bridge0: port 3(vlan2) entered blocking state [ 86.142724][ T4422] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.153942][ T4632] bridge0: port 3(vlan2) entered disabled state [ 86.161361][ T4422] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.177773][ T4632] device vlan2 entered promiscuous mode [ 86.183573][ T4632] device geneve0 entered promiscuous mode [ 86.189574][ T4422] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.210886][ T4422] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 86.237460][ T4422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.270304][ T4422] usb 4-1: config 0 descriptor?? [ 86.288522][ T4624] loop0: detected capacity change from 0 to 32768 [ 86.361722][ T2300] net_ratelimit: 7 callbacks suppressed [ 86.361740][ T2300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.371423][ T4230] hso 5-1:0.0: Failed to find INT IN ep [ 86.431559][ T4624] XFS (loop0): Mounting V5 Filesystem [ 86.503698][ T4624] XFS (loop0): Ending clean mount [ 86.600729][ T4230] usb 5-1: USB disconnect, device number 4 [ 86.620197][ T23] cfg80211: failed to load regulatory.db [ 86.747512][ T4422] input: HID 172f:0500 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:172F:0500.0003/input/input9 [ 86.799554][ T4195] XFS (loop0): Unmounting Filesystem [ 86.866503][ T4422] waltop 0003:172F:0500.0003: input,hiddev0,hidraw0: USB HID vff.fe Device [HID 172f:0500] on usb-dummy_hcd.3-1/input0 [ 87.231313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.266746][ T4662] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 87.277865][ T26] audit: type=1800 audit(1791828354.452:2): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.122" name="streaming_maxpacket" dev="configfs" ino=35028 res=0 errno=0 [ 87.359699][ T4665] udc-core: couldn't find an available UDC or it's busy [ 87.370581][ T4665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.447571][ T4416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.696808][ T4677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.809570][ T4683] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4684] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4683] [ 87.896249][ T4687] Illegal XDP return value 4294967274, expect packet loss! [ 88.148405][ T4699] loop4: detected capacity change from 0 to 512 [ 88.197581][ T4705] loop1: detected capacity change from 0 to 512 [ 88.215322][ T4699] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.267121][ T4705] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.280934][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061978800: rx timeout, send abort [ 88.330263][ T4705] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.350957][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.362631][ T4705] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 88.385319][ T4705] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 88.399371][ T4705] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 88.416576][ T4705] System zones: 0-2, 18-18, 34-35 [ 88.443717][ T4705] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.468631][ T7] usb 4-1: USB disconnect, device number 3 [ 88.522390][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.580793][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.589568][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.598748][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.610198][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.669751][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.768786][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061ffb400: rx timeout, send abort [ 88.781915][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061978800: abort rx timeout. Force session deactivation [ 88.826965][ T4715] loop4: detected capacity change from 0 to 2048 [ 88.863992][ T4703] loop2: detected capacity change from 0 to 1024 [ 88.952452][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.019873][ T26] audit: type=1800 audit(1791828356.192:3): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.140" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=2 res=0 errno=0 [ 89.072924][ T4723] loop0: detected capacity change from 0 to 1024 [ 89.083702][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.104089][ T4723] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 89.148832][ T4723] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.178156][ T4723] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.205273][ T4723] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.147: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.277547][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061ffb400: abort rx timeout. Force session deactivation [ 89.286409][ T4723] EXT4-fs (loop0): 1 orphan inode deleted [ 89.306948][ T4723] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 89.330984][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 89.365106][ T4723] EXT4-fs error (device loop0): ext4_get_group_desc:277: comm syz.0.147: block_group >= groups_count - block_group = 1, groups_count = 1 [ 89.420623][ T4412] vhci_hcd: vhci_device speed not set [ 89.451083][ T4227] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 89.473657][ T4227] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.488167][ T4723] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4452: inode #40: comm syz.0.147: unable to read itable block [ 89.526433][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.543730][ T4227] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 89.580600][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.592839][ T4227] usb 2-1: config 0 descriptor?? [ 89.837004][ T4737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 89.878768][ T4742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.947504][ T4744] netlink: 7 bytes leftover after parsing attributes in process `syz.0.153'. [ 90.073262][ T4227] aureal 0003:0755:2626.0004: item fetching failed at offset 0/2 [ 90.088653][ T4227] aureal: probe of 0003:0755:2626.0004 failed with error -22 [ 90.146627][ T4727] loop2: detected capacity change from 0 to 40427 [ 90.179852][ T4727] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 90.225594][ T4727] F2FS-fs (loop2): invalid crc value [ 90.259642][ T4727] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.292545][ T4227] usb 2-1: USB disconnect, device number 3 [ 90.395180][ T4727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.711525][ T4801] loop3: detected capacity change from 0 to 1024 [ 90.829839][ T4801] EXT4-fs (loop3): Ignoring removed oldalloc option [ 90.860594][ T4801] EXT4-fs (loop3): Ignoring removed orlov option [ 90.918503][ T4801] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 90.941564][ T4814] loop1: detected capacity change from 0 to 256 [ 90.948396][ T4801] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.026135][ T4817] CIFS: Attempting to mount \\127.0.0.1\share [ 91.087042][ T4801] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.158: Freeing blocks not in datazone - block = 0, count = 16 [ 91.124704][ T4767] loop0: detected capacity change from 0 to 32768 [ 91.142881][ T4185] attempt to access beyond end of device [ 91.142881][ T4185] loop2: rw=2049, want=45112, limit=40427 [ 91.200078][ T4801] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.158: bg 0: block 112: padding at end of block bitmap is not set [ 91.288979][ T4791] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.340130][ T4791] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.340130][ T4791] [ 91.361332][ T4791] EXT4-fs (loop3): Total free blocks count 0 [ 91.376623][ T4791] EXT4-fs (loop3): Free/Dirty block details [ 91.390988][ T4227] net_ratelimit: 317 callbacks suppressed [ 91.391005][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.414931][ T4791] EXT4-fs (loop3): free_blocks=16 [ 91.420074][ T4791] EXT4-fs (loop3): dirty_blocks=16 [ 91.427137][ T4791] EXT4-fs (loop3): Block reservation details [ 91.438254][ T4791] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 91.528882][ T4817] CIFS: VFS: cifs_mount failed w/return code = -112 [ 91.632026][ T4416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.766240][ T4835] loop0: detected capacity change from 0 to 256 [ 91.875234][ T4835] FAT-fs (loop0): Directory bread(block 64) failed [ 91.890635][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.907056][ T3558] ODEBUG: Out of memory. ODEBUG disabled [ 91.913861][ T4835] FAT-fs (loop0): Directory bread(block 65) failed [ 91.955016][ T4835] FAT-fs (loop0): Directory bread(block 66) failed [ 92.004257][ T4835] FAT-fs (loop0): Directory bread(block 67) failed [ 92.059061][ T4835] FAT-fs (loop0): Directory bread(block 68) failed [ 92.083765][ T4835] FAT-fs (loop0): Directory bread(block 69) failed [ 92.100609][ T4835] FAT-fs (loop0): Directory bread(block 70) failed [ 92.107257][ T4835] FAT-fs (loop0): Directory bread(block 71) failed [ 92.131403][ T4835] FAT-fs (loop0): Directory bread(block 72) failed [ 92.138016][ T4835] FAT-fs (loop0): Directory bread(block 73) failed [ 92.160533][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 92.280789][ T4227] usb 4-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 92.300093][ T4227] usb 4-1: config 46 has 0 interfaces, different from the descriptor's value: 2 [ 92.387257][ T4844] loop4: detected capacity change from 0 to 128 [ 92.530829][ T4227] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.550208][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.580022][ T4227] usb 4-1: Product: syz [ 92.597576][ T4227] usb 4-1: Manufacturer: syz [ 92.612822][ T4227] usb 4-1: SerialNumber: syz [ 92.670897][ T4412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.694225][ T4186] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 92.717192][ T4186] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 93.196530][ T4849] loop0: detected capacity change from 0 to 32768 [ 93.263753][ T4849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.170 (4849) [ 93.281756][ T4227] usb 4-1: USB disconnect, device number 4 [ 93.304626][ T4791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.339010][ T4849] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.359563][ T4849] BTRFS info (device loop0): setting nodatasum [ 93.379034][ T4849] BTRFS info (device loop0): force zlib compression, level 3 [ 93.419674][ T4849] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 93.430016][ T4849] BTRFS info (device loop0): use lzo compression, level 0 [ 93.444893][ T4849] BTRFS info (device loop0): turning on flush-on-commit [ 93.471863][ T4791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.507026][ T4849] BTRFS info (device loop0): enabling auto defrag [ 93.517637][ T4849] BTRFS info (device loop0): max_inline at 4096 [ 93.529784][ T4412] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.540562][ T4849] BTRFS info (device loop0): using free space tree [ 93.559965][ T4873] loop2: detected capacity change from 0 to 1024 [ 93.567811][ T4849] BTRFS info (device loop0): has skinny extents [ 93.590367][ T4791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.705158][ T4791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.716380][ T4416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.918846][ T4896] netlink: 'syz.2.180': attribute type 2 has an invalid length. [ 93.961026][ T4412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.971162][ T4412] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 93.981596][ T4412] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 93.982540][ T4849] BTRFS info (device loop0): enabling ssd optimizations [ 93.992084][ T4412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.091569][ T4412] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 94.149006][ T26] audit: type=1800 audit(1791828361.322:4): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 94.356919][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 94.477088][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.656541][ T4904] loop3: detected capacity change from 0 to 32768 [ 94.751676][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.823149][ T4904] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.182 (4904) [ 94.913939][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.088274][ T4904] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 95.121408][ T4904] BTRFS info (device loop3): using free space tree [ 95.128096][ T4904] BTRFS info (device loop3): has skinny extents [ 95.235005][ T4911] chnl_net:caif_netlink_parms(): no params data found [ 95.462768][ T4944] loop2: detected capacity change from 0 to 128 [ 95.476156][ T4904] BTRFS info (device loop3): enabling ssd optimizations [ 95.522316][ T4944] FAT-fs (loop2): bogus number of reserved sectors [ 95.528890][ T4944] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 95.543451][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.567500][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.597199][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.622167][ T4944] FAT-fs (loop2): Can't find a valid FAT filesystem [ 95.635789][ T4911] device bridge_slave_0 entered promiscuous mode [ 95.689736][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.706085][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.745730][ T4911] device bridge_slave_1 entered promiscuous mode [ 95.940527][ T4262] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.011237][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.101432][ T4911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.157844][ T4911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.242607][ T4977] FAULT_INJECTION: forcing a failure. [ 96.242607][ T4977] name failslab, interval 1, probability 0, space 0, times 1 [ 96.267746][ T4977] CPU: 0 PID: 4977 Comm: syz.3.189 Not tainted syzkaller #0 [ 96.275113][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.285229][ T4977] Call Trace: [ 96.288578][ T4977] [ 96.291557][ T4977] dump_stack_lvl+0x188/0x250 [ 96.296315][ T4977] ? show_regs_print_info+0x20/0x20 [ 96.301646][ T4977] ? load_image+0x410/0x410 [ 96.306189][ T4977] ? __lock_acquire+0x13b3/0x7d40 [ 96.311286][ T4977] should_fail+0x383/0x4b0 [ 96.315757][ T4977] should_failslab+0x5/0x20 [ 96.320304][ T4977] slab_pre_alloc_hook+0x51/0xc0 [ 96.325287][ T4977] kmem_cache_alloc_trace+0x47/0x290 [ 96.330653][ T4977] ? tipc_group_create+0x97/0x4e0 [ 96.335720][ T4977] tipc_group_create+0x97/0x4e0 [ 96.340617][ T4977] tipc_sk_join+0x256/0x6a0 [ 96.342496][ T4911] team0: Port device team_slave_0 added [ 96.345161][ T4977] ? __tipc_sendstream+0x1280/0x1280 [ 96.356421][ T4977] tipc_setsockopt+0x6b8/0x960 [ 96.361255][ T4977] ? tipc_shutdown+0x4d0/0x4d0 [ 96.366072][ T4977] ? aa_sock_opt_perm+0x74/0x100 [ 96.371063][ T4977] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 96.376670][ T4977] ? security_socket_setsockopt+0x7a/0xa0 [ 96.382436][ T4977] ? tipc_shutdown+0x4d0/0x4d0 [ 96.382468][ T4911] team0: Port device team_slave_1 added [ 96.387259][ T4977] __sys_setsockopt+0x2bf/0x3d0 [ 96.397702][ T4977] __x64_sys_setsockopt+0xb1/0xc0 [ 96.402785][ T4977] do_syscall_64+0x4c/0xa0 [ 96.407238][ T4977] ? clear_bhb_loop+0x30/0x80 [ 96.411955][ T4977] ? clear_bhb_loop+0x30/0x80 [ 96.416681][ T4977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.422640][ T4977] RIP: 0033:0x7f06b63de1d9 [ 96.427105][ T4977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.428555][ T4262] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.446747][ T4977] RSP: 002b:00007f06b4636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.446779][ T4977] RAX: ffffffffffffffda RBX: 00007f06b6665fa0 RCX: 00007f06b63de1d9 [ 96.446794][ T4977] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 96.446807][ T4977] RBP: 00007f06b6475888 R08: 0000000000000010 R09: 0000000000000000 [ 96.446820][ T4977] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 96.493826][ T4977] R13: 00007f06b6666038 R14: 00007f06b6665fa0 R15: 00007fff7f60d958 [ 96.501948][ T4977] [ 96.505079][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.513453][ T4262] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 96.530686][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.543830][ T4262] usb 1-1: config 0 descriptor?? [ 96.549265][ T4408] Bluetooth: hci1: command 0x0409 tx timeout [ 96.556362][ T13] usb 2-1: USB disconnect, device number 4 [ 96.586776][ T13] idmouse 2-1:1.0: disconnected [ 96.648879][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.666227][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.692228][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.699263][ T4911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.727819][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.747883][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.787612][ T4911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.865829][ T4911] device hsr_slave_0 entered promiscuous mode [ 96.872331][ T4408] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.881165][ T4911] device hsr_slave_1 entered promiscuous mode [ 96.888301][ T4911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.907749][ T4911] Cannot create hsr debugfs directory [ 96.961922][ T4791] device hsr_slave_0 left promiscuous mode [ 96.984164][ T4791] device hsr_slave_1 left promiscuous mode [ 96.998351][ T4791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.010682][ T4791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.031053][ T4791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.038534][ T4791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.077613][ T4791] device bridge_slave_1 left promiscuous mode [ 97.079425][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.104045][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.113114][ T4262] usbhid 1-1:0.0: can't add hid device: -71 [ 97.119143][ T4262] usbhid: probe of 1-1:0.0 failed with error -71 [ 97.130591][ T4408] usb 3-1: Using ep0 maxpacket: 8 [ 97.152092][ T4262] usb 1-1: USB disconnect, device number 3 [ 97.161966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.183863][ T4996] ip_tables: iptables: counters copy to user failed while replacing table [ 97.211874][ T4791] device bridge_slave_0 left promiscuous mode [ 97.228735][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.271927][ T4998] loop3: detected capacity change from 0 to 512 [ 97.328534][ T4791] device veth1_macvtap left promiscuous mode [ 97.352696][ T4791] device veth0_macvtap left promiscuous mode [ 97.365590][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.407511][ T4791] device veth1_vlan left promiscuous mode [ 97.411194][ T4998] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.428271][ T4791] device veth0_vlan left promiscuous mode [ 97.472110][ T4408] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 97.481713][ T4998] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #4: block 16: comm syz.3.193: lblock 0 mapped to illegal pblock 16 (length 1) [ 97.505675][ T4408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.536037][ T4408] usb 3-1: Product: syz [ 97.541247][ T4408] usb 3-1: Manufacturer: syz [ 97.545946][ T4408] usb 3-1: SerialNumber: syz [ 97.569148][ T4998] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 97.592079][ T4408] usb 3-1: config 0 descriptor?? [ 97.850710][ T4408] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.006891][ T4791] team0 (unregistering): Port device team_slave_1 removed [ 98.042972][ T4791] team0 (unregistering): Port device team_slave_0 removed [ 98.067590][ T4791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.088199][ T4791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.121908][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.180942][ T4408] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 98.214309][ T4408] usb 3-1: USB disconnect, device number 3 [ 98.280700][ T4791] bond0 (unregistering): Released all slaves [ 98.353431][ T5000] device syzkaller1 entered promiscuous mode [ 98.590801][ T4408] Bluetooth: hci1: command 0x041b tx timeout [ 98.672078][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.863805][ T4911] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.905788][ T4911] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.952895][ T4911] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.020647][ T4911] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.035952][ T5030] loop3: detected capacity change from 0 to 8192 [ 99.112311][ T5030] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 99.161792][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.214325][ T5030] REISERFS (device loop3): using ordered data mode [ 99.260707][ T5030] reiserfs: using flush barriers [ 99.269524][ T5030] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.293151][ T5030] REISERFS (device loop3): checking transaction log (loop3) [ 99.461747][ T4911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.505823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.534390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.591434][ T5030] REISERFS (device loop3): Using tea hash to sort names [ 99.598803][ T4911] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.631589][ T5030] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 99.645994][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.663841][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.701196][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.708367][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.766694][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.796699][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.825572][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.866275][ T5030] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 99.881614][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.881734][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.956893][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.008104][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.037352][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.080391][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.118392][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.178482][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.202587][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.264661][ T5069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.284597][ T4911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.335553][ T4911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.337868][ T5076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.431814][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.440055][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.509804][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.531790][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.554167][ T5057] loop2: detected capacity change from 0 to 32768 [ 100.561637][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.584090][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.618313][ T5057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.207 (5057) [ 100.681964][ T5086] cramfs: checking physical address 0x0000000023ca5000 for linear cramfs image [ 100.682147][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 100.698798][ T5057] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 100.718336][ T5086] cramfs: wrong magic [ 100.723053][ T5057] BTRFS info (device loop2): setting nodatacow, compression disabled [ 100.761622][ T5057] BTRFS info (device loop2): disabling tree log [ 100.768297][ T5086] cramfs: wrong magic [ 100.796656][ T5057] BTRFS info (device loop2): turning on async discard [ 100.840550][ T5057] BTRFS info (device loop2): max_inline at 0 [ 100.850853][ T5057] BTRFS info (device loop2): using free space tree [ 100.871186][ T5080] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input10 [ 100.881660][ T5057] BTRFS info (device loop2): has skinny extents [ 101.044883][ T5102] loop0: detected capacity change from 0 to 128 [ 101.126267][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.142748][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.203839][ T5089] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input11 [ 101.241854][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.321246][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.349520][ T4911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.373379][ T5102] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.470674][ T5102] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.866231][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 102.026320][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.068372][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.154750][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.183879][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.248897][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.273698][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.281345][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.308743][ T4911] device veth0_vlan entered promiscuous mode [ 102.379112][ T4911] device veth1_vlan entered promiscuous mode [ 102.422870][ T5154] loop0: detected capacity change from 0 to 8192 [ 102.489056][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.520416][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.573249][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.625083][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.682735][ T4911] device veth0_macvtap entered promiscuous mode [ 102.762824][ T4911] device veth1_macvtap entered promiscuous mode [ 102.848128][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.905028][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.946366][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.969513][ T5165] Bluetooth: hci1: command 0x0419 tx timeout [ 102.975683][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.010564][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.029054][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.048993][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.060027][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.090648][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.101532][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.117606][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.164528][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.216070][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.258751][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.289970][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.312566][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.339109][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.365753][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.450990][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.503579][ T5180] loop1: detected capacity change from 0 to 128 [ 103.557783][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.576102][ T5176] loop0: detected capacity change from 0 to 32768 [ 103.608892][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.650288][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.682753][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.719984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.749723][ T5180] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 103.752724][ T5176] (syz.0.229,5176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.780406][ T5176] (syz.0.229,5176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.799392][ T5180] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.831187][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.884194][ T5176] JBD2: Ignoring recovery information on journal [ 103.891534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.905739][ T4911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.915137][ T4911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.924707][ T4911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.933757][ T4911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.989030][ T5176] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.241622][ T4795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.257886][ T4795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.297738][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.342864][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.351338][ T4408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.360656][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.369109][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.398947][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.654624][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 104.692388][ T5199] loop5: detected capacity change from 0 to 1024 [ 104.814821][ T5199] EXT4-fs (loop5): Ignoring removed bh option [ 104.898378][ T5199] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 104.937251][ T5204] x86/PAT: syz.2.235:5204 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 105.134840][ T5199] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.267448][ T5227] loop0: detected capacity change from 0 to 128 [ 105.361445][ T5227] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.390934][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.409500][ T5227] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.464922][ T5227] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 105.480838][ T5227] CacheFiles: File cache on loop0 registered [ 105.511909][ T5227] CacheFiles: File cache on loop0 unregistering [ 105.540608][ T5227] FS-Cache: Withdrawing cache "CacheFiles" [ 105.722991][ T5238] loop1: detected capacity change from 0 to 4096 [ 105.758693][ T5238] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.836757][ T5238] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 105.961590][ T5257] loop5: detected capacity change from 0 to 7 [ 105.971698][ T5252] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 105.985376][ T5238] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.242: corrupted inode contents [ 105.985618][ T5257] loop5: p1 < > p3 p4 [ 106.041086][ T5238] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #15: comm syz.1.242: mark_inode_dirty error [ 106.069126][ T5252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.076245][ T5257] loop5: partition table partially beyond EOD, truncated [ 106.098265][ T5238] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.242: corrupted inode contents [ 106.112038][ T5238] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.242: mark_inode_dirty error [ 106.125425][ T5257] loop5: p1 start 168 is beyond EOD, truncated [ 106.132550][ T5238] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.242: corrupted inode contents [ 106.145091][ T5257] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 106.152907][ T5238] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.242: mark_inode_dirty error [ 106.168990][ T5257] loop5: p4 start 33554432 is beyond EOD, truncated [ 106.185826][ T5238] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.242: corrupted inode contents [ 106.209133][ T5238] EXT4-fs error (device loop1): ext4_truncate:4286: inode #15: comm syz.1.242: mark_inode_dirty error [ 106.231515][ T5238] EXT4-fs error (device loop1): ext4_evict_inode:295: comm syz.1.242: couldn't truncate inode 15 (err -117) [ 106.291127][ T5262] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 106.324892][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 106.403137][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 106.441723][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.790594][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.164614][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.205523][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.228590][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.276665][ T13] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.297694][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.374344][ T13] usb 6-1: config 0 descriptor?? [ 107.412848][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.489350][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.843281][ T13] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 107.891594][ T5303] loop0: detected capacity change from 0 to 32768 [ 107.912394][ T13] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 108.006469][ T5303] XFS (loop0): Mounting V5 Filesystem [ 108.175520][ T5303] XFS (loop0): Ending clean mount [ 108.298756][ T5339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.354887][ T5343] 9pnet: p9_fd_create_unix (5343): problem connecting socket: ./file0: -5 [ 108.425937][ T4195] XFS (loop0): Unmounting Filesystem [ 108.528709][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.608288][ T5350] loop1: detected capacity change from 0 to 1024 [ 108.702980][ T5350] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.167252][ T5367] loop0: detected capacity change from 0 to 128 [ 109.564942][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.852037][ T5388] loop5: detected capacity change from 0 to 512 [ 109.922582][ T5392] loop0: detected capacity change from 0 to 128 [ 110.043887][ T4408] usb 6-1: USB disconnect, device number 2 [ 110.114097][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.125001][ T5392] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.192491][ T5388] EXT4-fs (loop5): 1 orphan inode deleted [ 110.198386][ T5388] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,dax=never,min_batch_time=0x0000000000000076,,errors=continue. Quota mode: writeback. [ 110.355133][ T5388] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.430700][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.591716][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.551084][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.630974][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.290078][ T5453] loop1: detected capacity change from 0 to 512 [ 112.408336][ T5453] EXT4-fs (loop1): Ignoring removed oldalloc option [ 112.553225][ T5453] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.290: bg 0: block 5: invalid block bitmap [ 112.670911][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.679517][ T5453] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 112.733152][ T5453] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.290: invalid indirect mapped block 3 (level 2) [ 112.802074][ T5453] EXT4-fs (loop1): 1 orphan inode deleted [ 112.807886][ T5453] EXT4-fs (loop1): 1 truncate cleaned up [ 112.877585][ T5453] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 112.939567][ T5452] loop3: detected capacity change from 0 to 32768 [ 113.057247][ T5452] XFS (loop3): Mounting V5 Filesystem [ 113.327286][ T5452] XFS (loop3): Ending clean mount [ 113.532371][ T4190] XFS (loop3): Unmounting Filesystem [ 113.772506][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.804981][ T5465] loop5: detected capacity change from 0 to 4096 [ 113.842231][ T5467] overlayfs: upper fs does not support file handles, falling back to index=off. [ 113.917047][ T5465] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 114.336614][ T4239] ntfs3: loop5: ino=1b, Internal error [ 114.352681][ T4239] ntfs3: loop5: ntfs3_write_inode r=1b failed, -22. [ 114.525665][ T5481] loop0: detected capacity change from 0 to 256 [ 114.590927][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.759701][ T26] audit: type=1800 audit(1791828381.932:5): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.300" name="bMaxPacketSize0" dev="configfs" ino=37868 res=0 errno=0 [ 114.850108][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.916295][ T5494] digital: digital_start_poll: Unknown protocol [ 115.060543][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.175782][ T4231] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.368107][ T5502] loop3: detected capacity change from 0 to 256 [ 115.442540][ T5502] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 115.476369][ T5502] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 115.505702][ T5502] exFAT-fs (loop3): Filesystem has been set read-only [ 115.527534][ T5502] exFAT-fs (loop3): failed to initialize root inode [ 115.543440][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.551688][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.570523][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.571910][ T4231] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.600759][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.700763][ T4231] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.723755][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.746693][ T4231] usb 6-1: SerialNumber: syz [ 115.801079][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 115.812949][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.845884][ T21] usb 2-1: Product: syz [ 115.850138][ T21] usb 2-1: Manufacturer: syz [ 115.873105][ T21] usb 2-1: SerialNumber: syz [ 115.898761][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.086202][ T4231] usb 6-1: 0:2 : does not exist [ 116.208919][ T4231] usb 6-1: USB disconnect, device number 3 [ 116.216698][ T21] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 116.494627][ T13] usb 2-1: USB disconnect, device number 5 [ 116.518735][ T13] usblp0: removed [ 116.532616][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.910831][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.049975][ T5530] device pim6reg1 entered promiscuous mode [ 117.269488][ T5537] Set syz1 is full, maxelem 2 reached [ 117.630766][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.846220][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.920677][ T5164] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.961488][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.091822][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 118.111659][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 118.118352][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 118.211271][ T4231] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 118.219780][ T4231] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.232271][ T4231] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.252652][ T4231] usb 1-1: config 250 has no interface number 0 [ 118.265695][ T4231] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.310372][ T4231] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.330485][ T4231] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 118.358155][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.360710][ T4231] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.400498][ T4231] usb 1-1: config 250 interface 228 has no altsetting 0 [ 118.520736][ T4231] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 118.540256][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 118.560533][ T4231] usb 1-1: Product: syz [ 118.564793][ T4231] usb 1-1: SerialNumber: syz [ 118.576556][ T5164] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.606856][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.621826][ T4231] hub 1-1:250.228: bad descriptor, ignoring hub [ 118.628149][ T4231] hub: probe of 1-1:250.228 failed with error -5 [ 118.637963][ T5164] usb 2-1: Product: syz [ 118.650553][ T5164] usb 2-1: Manufacturer: syz [ 118.666170][ T5164] usb 2-1: SerialNumber: syz [ 118.824475][ T5565] nvme_tcp: queue 0: data digest mismatch host: disabled ctrl: enabled [ 118.850069][ T4231] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 118.984680][ T5569] device-mapper: dirty region log: region count exceeds limit of 4294967295 [ 118.994738][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.013530][ T5569] device-mapper: table: 248:1: mirror: Error creating mirror dirty log [ 119.022714][ T5569] device-mapper: ioctl: error adding target to table [ 119.170823][ T5573] udc-core: couldn't find an available UDC or it's busy [ 119.177840][ T5573] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.211020][ C0] Unknown status report in ack skb [ 119.240602][ C0] usblp0: nonzero read bulk status received: -71 [ 119.368288][ T5575] loop5: detected capacity change from 0 to 2048 [ 119.467321][ T5575] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.488704][ T5575] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.560521][ C0] usblp0: nonzero write bulk status received: -71 [ 119.832746][ T5164] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 119.852950][ T5164] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 119.880822][ T5164] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 119.963568][ T5596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.336'. [ 120.012862][ T5596] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.021946][ T5596] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.030886][ T5596] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.039666][ T5596] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.049975][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.069931][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 120.079633][ T5596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.336'. [ 120.182989][ T5601] syz.5.337[5601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.183704][ T5601] syz.5.337[5601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.193522][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 120.232970][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 120.265209][ T5164] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 120.386328][ T5164] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 120.486815][ T5164] usb 2-1: USB disconnect, device number 6 [ 120.526945][ T5164] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 120.650894][ T4803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.665403][ T4407] usb 1-1: USB disconnect, device number 4 [ 120.671489][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.695439][ T4407] usblp0: removed [ 120.755567][ T26] audit: type=1326 audit(1791828387.932:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.0.339" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f33c9e9ef57 code=0x0 [ 120.860395][ T4803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.939799][ T4803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.982617][ T5619] loop1: detected capacity change from 0 to 8192 [ 121.042949][ T4803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.084233][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.239856][ T5605] chnl_net:caif_netlink_parms(): no params data found [ 121.547540][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.585593][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.622298][ T5605] device bridge_slave_0 entered promiscuous mode [ 121.668305][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.691000][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.717717][ T5605] device bridge_slave_1 entered promiscuous mode [ 121.781380][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.828745][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.885511][ T26] audit: type=1326 audit(1791828389.062:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.5.343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce39fe1d9 code=0x0 [ 121.904345][ T5605] team0: Port device team_slave_0 added [ 121.958165][ T5605] team0: Port device team_slave_1 added [ 122.014927][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.034639][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.092493][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.111394][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.126358][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.140218][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.191391][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.236463][ T5667] gadgetfs: bound to dummy_udc driver [ 122.270710][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 122.294489][ T26] audit: type=1800 audit(1791828389.472:8): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.347" name="ep1in-bulk" dev="gadgetfs" ino=38601 res=0 errno=0 [ 122.344912][ T5605] device hsr_slave_0 entered promiscuous mode [ 122.369067][ T5605] device hsr_slave_1 entered promiscuous mode [ 122.386977][ T5605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.396171][ T5605] Cannot create hsr debugfs directory [ 122.431389][ T4227] Bluetooth: hci0: command 0x0409 tx timeout [ 122.818986][ T4803] device hsr_slave_0 left promiscuous mode [ 122.825807][ T4803] device hsr_slave_1 left promiscuous mode [ 122.853273][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.870329][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.896308][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.925615][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.958817][ T4803] device vlan2 left promiscuous mode [ 122.972943][ T5695] loop5: detected capacity change from 0 to 2048 [ 122.981827][ T4803] device geneve0 left promiscuous mode [ 122.987657][ T4803] bridge0: port 3(vlan2) entered disabled state [ 123.014114][ T4803] device bridge_slave_1 left promiscuous mode [ 123.020403][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.049577][ T4803] device bridge_slave_0 left promiscuous mode [ 123.077729][ T5695] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.090614][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.137881][ T4803] device veth1_macvtap left promiscuous mode [ 123.148323][ T4803] device veth0_macvtap left promiscuous mode [ 123.160772][ T4803] device veth1_vlan left promiscuous mode [ 123.163626][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.182303][ T4803] device veth0_vlan left promiscuous mode [ 123.191687][ T5704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.568760][ T4803] team0 (unregistering): Port device team_slave_1 removed [ 123.586734][ T4803] team0 (unregistering): Port device team_slave_0 removed [ 123.603226][ T4803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.619132][ T4803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.695053][ T4803] bond0 (unregistering): Released all slaves [ 123.711932][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.831215][ T5605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.882889][ T5605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.923042][ T5605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.948378][ T5605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.020315][ T5732] GRED: Warning: Destroying shadowed VQ 0xe [ 124.185000][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.200946][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.209501][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.266068][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.286663][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.308486][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.374003][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.409254][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.435194][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.442502][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.499217][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.510592][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 124.540742][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.549550][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.574119][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.581308][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.601057][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.630588][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.651654][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.673223][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.732544][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.752312][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.779903][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.802666][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.820855][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.880141][ T5605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.921832][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.970835][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.983945][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.992234][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.241493][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.249787][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.405050][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.431784][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.466704][ T5801] loop0: detected capacity change from 0 to 512 [ 125.466722][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.610015][ T5801] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.678565][ T5801] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.159027][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.196947][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.215414][ T5824] APIC base relocation is unsupported by KVM [ 126.257787][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.276119][ T4408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.298113][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.306049][ T4408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.329532][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.374418][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.417774][ T5605] device veth0_vlan entered promiscuous mode [ 126.462697][ T5605] device veth1_vlan entered promiscuous mode [ 126.511579][ T5835] loop1: detected capacity change from 0 to 512 [ 126.563254][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.590693][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 126.618011][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.650248][ T5835] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 126.681347][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.730965][ T5835] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.751225][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.762791][ T5605] device veth0_macvtap entered promiscuous mode [ 126.789835][ T5605] device veth1_macvtap entered promiscuous mode [ 126.891623][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.931599][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.951818][ T5835] capability: warning: `syz.1.384' uses 32-bit capabilities (legacy support in use) [ 126.997189][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.022434][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.043760][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.079062][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.099490][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.112746][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.133523][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.160583][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.201257][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.219699][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.232583][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.250185][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.262416][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.272953][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.284756][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.296833][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.308178][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.320402][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.352386][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.395059][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.426366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.466537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.513440][ T5605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.533060][ T5605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.573573][ T5605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.596764][ T5605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.710604][ T4417] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.857743][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.891289][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.910606][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.921985][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.953074][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.982115][ T5868] device bridge_slave_0 left promiscuous mode [ 128.010485][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.055060][ T5868] device bridge_slave_1 left promiscuous mode [ 128.070701][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.094618][ T5868] bond0: (slave bond_slave_0): Releasing backup interface [ 128.169746][ T5868] bond0: (slave bond_slave_1): Releasing backup interface [ 128.276729][ T4417] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 128.296968][ T4417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.312023][ T5868] team0: Port device team_slave_0 removed [ 128.314928][ T4417] usb 4-1: Product: syz [ 128.331617][ T4417] usb 4-1: Manufacturer: syz [ 128.344414][ T4417] usb 4-1: SerialNumber: syz [ 128.362998][ T21] net_ratelimit: 4 callbacks suppressed [ 128.363035][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.380781][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.402840][ T4417] usb 4-1: config 0 descriptor?? [ 128.421176][ T5863] loop5: detected capacity change from 0 to 32768 [ 128.421789][ T5868] team0: Port device team_slave_1 removed [ 128.471412][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.489152][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.525314][ T5863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.395 (5863) [ 128.548279][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.579544][ T5863] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 128.588446][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.619569][ T5863] BTRFS info (device loop5): disabling tree log [ 128.660544][ T5863] BTRFS info (device loop5): using free space tree [ 128.681156][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 128.698170][ T4417] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 005 [ 128.708488][ T5863] BTRFS info (device loop5): has skinny extents [ 128.737596][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.848911][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.888213][ T4786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.937360][ T4786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.969171][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.030979][ T5863] BTRFS info (device loop5): enabling ssd optimizations [ 129.179353][ T5915] loop1: detected capacity change from 0 to 512 [ 129.300796][ T5915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 129.343453][ T5915] System zones: 1-12 [ 129.395855][ T5915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.400: missing EA_INODE flag [ 129.418782][ T4408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.504777][ T5915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.400: error while reading EA inode 12 err=-117 [ 129.565492][ T5915] EXT4-fs (loop1): 1 orphan inode deleted [ 129.583043][ T5915] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 129.649242][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.801806][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.089950][ T5885] loop0: detected capacity change from 0 to 32768 [ 130.192769][ T5885] xfs: Unknown parameter 'nobarrier' [ 130.380576][ T5939] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.430761][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.622707][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 130.680869][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.746377][ T5939] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 130.766219][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.803660][ T5939] usb 2-1: config 0 descriptor?? [ 130.836904][ T5943] loop5: detected capacity change from 0 to 32768 [ 130.883114][ T5939] gspca_main: sunplus-2.14.0 probing 041e:400b [ 130.926308][ T5946] loop6: detected capacity change from 0 to 32768 [ 130.968814][ T5943] XFS (loop5): Mounting V5 Filesystem [ 131.013379][ T5946] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 131.044947][ T5946] JBD2: Ignoring recovery information on journal [ 131.072816][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.162329][ T5943] XFS (loop5): Ending clean mount [ 131.355934][ T5946] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 131.442860][ T4911] XFS (loop5): Unmounting Filesystem [ 131.530800][ T5939] gspca_sunplus: reg_r err -71 [ 131.535791][ T5939] sunplus: probe of 2-1:0.0 failed with error -71 [ 131.567685][ T5939] usb 2-1: USB disconnect, device number 7 [ 131.757111][ T5920] i2c i2c-1: failure sending STOP [ 131.837428][ T4417] usb 4-1: USB disconnect, device number 5 [ 132.017146][ T5605] ocfs2: Unmounting device (7,6) on (node local) [ 132.181025][ T5983] loop0: detected capacity change from 0 to 512 [ 132.217017][ T5983] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.365284][ T5983] EXT4-fs (loop0): 1 truncate cleaned up [ 132.406654][ T5983] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 132.669921][ T5980] loop3: detected capacity change from 0 to 32768 [ 132.687813][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.694227][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.758972][ T5980] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.405 (5980) [ 132.856633][ T5980] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 132.941964][ T5980] BTRFS info (device loop3): enabling disk space caching [ 132.977473][ T5980] BTRFS info (device loop3): use zlib compression, level 3 [ 133.005371][ T5980] BTRFS info (device loop3): use no compression [ 133.030335][ T5980] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 133.091987][ T5980] BTRFS error (device loop3): cannot disable free space tree [ 133.157394][ T5980] BTRFS error (device loop3): open_ctree failed: -22 [ 133.560667][ C1] net_ratelimit: 43 callbacks suppressed [ 133.568483][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.603057][ T5989] loop1: detected capacity change from 0 to 32768 [ 133.718114][ T5989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.409 (5989) [ 133.785460][ T6033] loop5: detected capacity change from 0 to 128 [ 133.813797][ T5989] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 133.860541][ T5989] BTRFS info (device loop1): using free space tree [ 133.870857][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.891893][ T5989] BTRFS info (device loop1): has skinny extents [ 134.010767][ T4407] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 134.179040][ T5989] BTRFS info (device loop1): enabling ssd optimizations [ 134.300540][ T4407] usb 7-1: Using ep0 maxpacket: 8 [ 134.341395][ T5989] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.374952][ T6033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.382506][ T5989] BTRFS info (device loop1): use zstd compression, level 15 [ 134.394679][ T6066] FAULT_INJECTION: forcing a failure. [ 134.394679][ T6066] name failslab, interval 1, probability 0, space 0, times 0 [ 134.407962][ T6066] CPU: 0 PID: 6066 Comm: syz.3.424 Not tainted syzkaller #0 [ 134.415284][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.415346][ T6066] Call Trace: [ 134.415356][ T6066] [ 134.415367][ T6066] dump_stack_lvl+0x188/0x250 [ 134.429195][ T6066] ? show_regs_print_info+0x20/0x20 [ 134.436911][ T6066] ? load_image+0x410/0x410 [ 134.446634][ T6066] should_fail+0x383/0x4b0 [ 134.451095][ T6066] should_failslab+0x5/0x20 [ 134.451119][ T6066] slab_pre_alloc_hook+0x51/0xc0 [ 134.451144][ T6066] ? inet_bind_bucket_create+0x2b/0x230 [ 134.451169][ T6066] kmem_cache_alloc+0x3d/0x280 [ 134.451188][ T6066] ? mark_lock+0x94/0x320 [ 134.461046][ T6066] inet_bind_bucket_create+0x2b/0x230 [ 134.461084][ T6066] inet_csk_get_port+0xa0d/0x10d0 [ 134.471431][ T6066] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.471467][ T6066] ? lockdep_hardirqs_on+0x94/0x140 [ 134.481167][ T6066] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.481191][ T6066] ? inet_csk_update_fastreuse+0xaa0/0xaa0 [ 134.491603][ T6066] ? do_raw_spin_unlock+0x11d/0x230 [ 134.491635][ T6066] __inet_bind+0x575/0xad0 [ 134.502341][ T6066] __sys_bind+0x2e9/0x3e0 [ 134.502371][ T6066] ? __ia32_sys_socketpair+0xb0/0xb0 [ 134.513544][ T6066] __x64_sys_bind+0x76/0x80 [ 134.513582][ T6066] do_syscall_64+0x4c/0xa0 [ 134.522466][ T6066] ? clear_bhb_loop+0x30/0x80 [ 134.522496][ T6066] ? clear_bhb_loop+0x30/0x80 [ 134.532409][ T6066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.532447][ T6066] RIP: 0033:0x7f06b63de1d9 [ 134.532469][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.532489][ T6066] RSP: 002b:00007f06b4636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 134.542076][ T6066] RAX: ffffffffffffffda RBX: 00007f06b6665fa0 RCX: 00007f06b63de1d9 [ 134.542098][ T6066] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.542112][ T6066] RBP: 00007f06b6475888 R08: 0000000000000000 R09: 0000000000000000 [ 134.542128][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.542142][ T6066] R13: 00007f06b6666038 R14: 00007f06b6665fa0 R15: 00007fff7f60d958 [ 134.542175][ T6066] [ 134.669816][ T6033] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.690812][ T4407] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 134.711500][ T4407] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.752795][ T4407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.800485][ T4407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.850873][ T4407] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.881807][ T6033] syz.5.417 (pid 6033) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 134.918547][ T4407] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.950654][ T4407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.098735][ T6033] fscrypt (loop5, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 136.026793][ T6081] loop3: detected capacity change from 0 to 131072 [ 136.052141][ T4407] usb 7-1: GET_CAPABILITIES returned 0 [ 136.058138][ T4407] usbtmc 7-1:16.0: can't read capabilities [ 136.077524][ T4407] usb 7-1: USB disconnect, device number 2 [ 136.100533][ T6081] F2FS-fs (loop3): invalid crc value [ 136.185276][ T6081] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.279503][ T6081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 136.424832][ T26] audit: type=1800 audit(1791828403.602:9): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.425" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 138.008418][ T6148] loop0: detected capacity change from 0 to 128 [ 138.054115][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 138.147288][ T6148] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 138.389615][ T4795] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 138.503533][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 138.584981][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 138.650513][ T5930] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 138.680756][ C1] net_ratelimit: 70 callbacks suppressed [ 138.693352][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.900610][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 138.906370][ T6137] loop1: detected capacity change from 0 to 32768 [ 138.945003][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 139.006629][ T6137] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.437 (6137) [ 139.020813][ T5930] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.028874][ T5930] usb 7-1: config 0 has no interface number 0 [ 139.049605][ T6170] loop8: detected capacity change from 0 to 16384 [ 139.072565][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 139.153916][ T6137] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.183131][ T6137] BTRFS info (device loop1): setting nodatacow, compression disabled [ 139.212173][ T6137] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 139.241132][ T5930] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 139.267291][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.297164][ T5930] usb 7-1: Product: syz [ 139.320816][ T5930] usb 7-1: Manufacturer: syz [ 139.325476][ T5930] usb 7-1: SerialNumber: syz [ 139.350649][ T6176] loop_set_status: loop8 () has still dirty pages (nrpages=192) [ 139.352613][ T6137] BTRFS error (device loop1): open_ctree failed: -22 [ 139.393985][ T5930] usb 7-1: config 0 descriptor?? [ 139.461248][ T5930] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 139.498387][ T6170] print_req_error: 133 callbacks suppressed [ 139.498401][ T6170] blk_update_request: I/O error, dev loop8, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 139.520357][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 139.535899][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 139.566715][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 139.618242][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 139.717336][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 139.730318][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 139.884814][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 139.926854][ T6197] loop0: detected capacity change from 0 to 1024 [ 139.929817][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 139.952980][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 140.486375][ T6220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.457'. [ 140.765663][ T5930] gspca_spca1528: reg_w err -71 [ 140.772449][ T5930] spca1528: probe of 7-1:0.1 failed with error -71 [ 140.822679][ T5930] usb 7-1: USB disconnect, device number 3 [ 140.944422][ T6229] loop0: detected capacity change from 0 to 4096 [ 141.045109][ T6229] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.069733][ T6229] ntfs3: loop0: Failed to load $Extend. [ 141.209840][ T4195] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 141.677623][ T6267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.930581][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.973967][ T6271] batman_adv: batadv0: Adding interface: syzkaller0 [ 142.016269][ T6271] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.099548][ T6271] batman_adv: batadv0: Interface activated: syzkaller0 [ 142.130062][ T6262] loop6: detected capacity change from 0 to 32768 [ 142.181014][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 142.196997][ T6270] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 142.214785][ T6262] JBD2: Ignoring recovery information on journal [ 142.273772][ T6270] batman_adv: batadv0: Removing interface: syzkaller0 [ 142.298295][ T6262] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 142.340658][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.378613][ T6282] device ipip0 entered promiscuous mode [ 142.420944][ T5923] usb 4-1: config 1 has an invalid interface number: 211 but max is 0 [ 142.430521][ T5923] usb 4-1: config 1 has no interface number 0 [ 142.436658][ T5923] usb 4-1: too many endpoints for config 1 interface 211 altsetting 3: 250, using maximum allowed: 30 [ 142.499070][ T5923] usb 4-1: config 1 interface 211 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 142.548948][ T5923] usb 4-1: config 1 interface 211 has no altsetting 0 [ 142.701087][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 142.713908][ T5923] usb 4-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 142.738469][ T5923] usb 4-1: Manufacturer: syz [ 142.759949][ T5923] usb 4-1: SerialNumber: syz [ 142.787908][ T6297] loop0: detected capacity change from 0 to 1024 [ 142.846806][ T5605] ocfs2: Unmounting device (7,6) on (node local) [ 142.898176][ T6297] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.984573][ T6297] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none. [ 143.029296][ T6297] EXT4-fs (loop0): shut down requested (1) [ 143.055628][ T6266] loop3: detected capacity change from 0 to 512 [ 143.073244][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 143.114742][ T6266] EXT4-fs (loop3): inline encryption not supported [ 143.116166][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 143.130580][ T6266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.154115][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 143.173633][ T6266] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.184872][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 143.192918][ T6266] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.470: inode #15: comm syz.3.470: iget: illegal inode # [ 143.250529][ T4229] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 143.267976][ T6266] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.470: couldn't read orphan inode 15 (err -117) [ 143.281100][ T6266] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,stripe=0x00000000000000a7,,errors=continue. Quota mode: none. [ 143.366783][ T5923] usb 4-1: USB disconnect, device number 6 [ 143.861082][ T4229] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 143.870584][ C1] net_ratelimit: 89 callbacks suppressed [ 143.884288][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.920229][ T4229] usb 2-1: Product: syz [ 143.932519][ T4229] usb 2-1: Manufacturer: syz [ 143.957027][ T4229] usb 2-1: SerialNumber: syz [ 143.971489][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.011873][ T4229] usb 2-1: config 0 descriptor?? [ 144.054381][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 144.095217][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 144.200360][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.272320][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 144.290871][ T4229] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 008 [ 144.345716][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 144.380581][ T5923] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 144.457943][ T6334] loop0: detected capacity change from 0 to 32768 [ 144.468263][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 144.533052][ T6336] loop5: detected capacity change from 0 to 32768 [ 144.549662][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 144.576052][ T6336] (syz.5.489,6336,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.597752][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 144.617275][ T6336] (syz.5.489,6336,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.631088][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 144.647562][ T6334] XFS (loop0): Mounting V5 Filesystem [ 144.701517][ T6357] loop3: detected capacity change from 0 to 736 [ 144.716424][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 144.751192][ T5923] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 144.763029][ T6336] JBD2: Ignoring recovery information on journal [ 144.777383][ T5923] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.805276][ T5923] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.830597][ T5923] usb 7-1: config 0 interface 0 has no altsetting 0 [ 144.837336][ T5923] usb 7-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.00 [ 144.846589][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.865430][ T5923] usb 7-1: config 0 descriptor?? [ 144.884681][ T6334] XFS (loop0): Ending clean mount [ 144.933885][ T6336] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 144.962525][ T6334] XFS (loop0): Quotacheck needed: Please wait. [ 145.125621][ T6334] XFS (loop0): Quotacheck: Done. [ 145.252867][ T6362] i2c i2c-1: failure reading status [ 145.270350][ T4229] usb 2-1: USB disconnect, device number 8 [ 145.390608][ T4407] Bluetooth: hci0: command 0x0405 tx timeout [ 145.474365][ T6336] [ 145.475979][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 145.476754][ T6336] ====================================================== [ 145.476764][ T6336] WARNING: possible circular locking dependency detected [ 145.484380][ C1] No more buffers in queue [ 145.491189][ T6336] syzkaller #0 Not tainted [ 145.491200][ T6336] ------------------------------------------------------ [ 145.498559][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 145.502834][ T6336] syz.5.489/6336 is trying to acquire lock: [ 145.502846][ T6336] ffff88802743a990 (jbd2_handle [ 145.507280][ C1] No more buffers in queue [ 145.514297][ T6336] ){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 145.520190][ C1] tcp_in_window: START [ 145.526021][ T6336] [ 145.526021][ T6336] but task is already holding lock: [ 145.526029][ T6336] ffff88806033fce8 (&journal->j_trans_barrier){.+.+}-{3:3} [ 145.526060][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 145.526057][ T6336] , at: ocfs2_start_trans+0x3a6/0x6f0 [ 145.526082][ T6336] [ 145.526082][ T6336] which lock already depends on the new lock. [ 145.526082][ T6336] [ 145.526089][ T6336] [ 145.526089][ T6336] the existing dependency chain (in reverse order) is: [ 145.531009][ C1] tcp_in_window: [ 145.535360][ T6336] [ 145.535360][ T6336] -> #5 ( [ 145.542579][ C1] seq=3966730355 ack=1501086166+(0) sack=1501086166+(0) win=24567 end=3966730355 [ 145.546615][ T6336] &journal->j_trans_barrier){.+.+}-{3:3} [ 145.554069][ C1] tcp_in_window: sender end=3966730355 maxend=3969873907 maxwin=3144576 scale=7 receiver end=1501086166 maxend=1504230134 maxwin=3143552 scale=7 [ 145.561193][ T6336] : [ 145.561213][ T6336] down_read+0x44/0x2e0 [ 145.568581][ C1] tcp_in_window: [ 145.573953][ T6336] ocfs2_start_trans+0x3a6/0x6f0 [ 145.573979][ T6336] ocfs2_modify_bh+0xe0/0x4c0 [ 145.584610][ C1] seq=3966730355 ack=1501086166+(0) sack=1501086166+(0) win=24567 end=3966730355 [ 145.593565][ T6336] ocfs2_local_read_info+0x1499/0x1820 [ 145.593600][ T6336] dquot_load_quota_sb+0x72f/0xa80 [ 145.597246][ C1] tcp_in_window: sender end=3966730355 maxend=3969873907 maxwin=3144576 scale=7 receiver end=1501086166 maxend=1504230134 maxwin=3143552 scale=7 [ 145.602362][ T6336] dquot_load_quota_inode+0x2d3/0x5c0 [ 145.602390][ T6336] ocfs2_enable_quotas+0x1c0/0x4a0 [ 145.611550][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 145.617138][ T6336] ocfs2_fill_super+0x3c84/0x50a0 [ 145.631856][ C1] tcp_in_window: res=1 sender end=3966730355 maxend=3969873907 maxwin=3144576 receiver end=1501086166 maxend=1504230742 maxwin=3143552 [ 145.634236][ T6336] mount_bdev+0x28a/0x3c0 [ 145.639134][ C1] tcp_conntracks: [ 145.642938][ T6336] legacy_get_tree+0xe6/0x180 [ 145.642962][ T6336] vfs_get_tree+0x88/0x270 [ 145.648431][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 145.653625][ T6336] do_new_mount+0x247/0xa40 [ 145.653648][ T6336] __se_sys_mount+0x2e3/0x3d0 [ 145.663183][ C1] nf_conntrack: normal packet for ffff888025ed6180 [ 145.668724][ T6336] do_syscall_64+0x4c/0xa0 [ 145.674391][ C1] tcp_in_window: START [ 145.689021][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.694981][ C1] tcp_in_window: [ 145.700557][ T6336] [ 145.700557][ T6336] -> #4 (sb_internal#5){.+.+}-{0:0} [ 145.705865][ C1] seq=1501086166 ack=3966730355+(0) sack=3966730355+(0) win=24559 end=1501086222 [ 145.711426][ T6336] : [ 145.711433][ T6336] ocfs2_start_trans+0x2a7/0x6f0 [ 145.725279][ C1] tcp_in_window: sender end=1501086166 maxend=1504230742 maxwin=3143552 scale=7 receiver end=3966730355 maxend=3969873907 maxwin=3144576 scale=7 [ 145.730121][ T6336] ocfs2_acquire_dquot+0x6c0/0xb30 [ 145.733888][ C1] tcp_in_window: [ 145.739044][ T6336] dqget+0x713/0xbb0 [ 145.739050][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 145.739073][ T6336] __dquot_initialize+0x3a9/0xd00 [ 145.744084][ C1] seq=1501086166 ack=3966730355+(0) sack=3966730355+(0) win=24559 end=1501086222 [ 145.749415][ T6336] ocfs2_get_init_inode+0x144/0x1b0 [ 145.754483][ C1] tcp_in_window: sender end=1501086166 maxend=1504230742 maxwin=3143552 scale=7 receiver end=3966730355 maxend=3969873907 maxwin=3144576 scale=7 [ 145.759651][ T6336] ocfs2_mknod+0x90e/0x2460 [ 145.766202][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 145.771099][ T6336] ocfs2_create+0x192/0x420 [ 145.771120][ T6336] path_openat+0x120a/0x2fb0 [ 145.775190][ C1] tcp_in_window: res=1 sender end=1501086222 maxend=1504230742 maxwin=3143552 receiver end=3966730355 maxend=3969873907 maxwin=3144576 [ 145.781604][ T6336] do_filp_open+0x1df/0x400 [ 145.781627][ T6336] do_sys_openat2+0x14b/0x500 [ 145.785262][ C1] tcp_conntracks: [ 145.792629][ T6336] __x64_sys_open+0x11b/0x140 [ 145.792649][ T6336] do_syscall_64+0x4c/0xa0 [ 145.801803][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 145.804197][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.809896][ C1] No more buffers in queue [ 145.824337][ T6336] [ 145.824337][ T6336] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 145.824371][ T6336] down_write+0x38/0x60 [ 145.830025][ C1] eth0: xmit ffff888058bf0868 42:01:0a:80:00:01 [ 145.833664][ T6336] ocfs2_create_local_dquot+0x199/0x18d0 [ 145.833692][ T6336] ocfs2_acquire_dquot+0x822/0xb30 [ 145.838131][ C1] Added buffer head 14 to ffff8880240c9a00 [ 145.838203][ C1] virtqueue callback for ffff8880240c9a00 (ffffffff854980c0) [ 145.845485][ T6336] dqget+0x713/0xbb0 [ 145.851197][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 145.860226][ T6336] __dquot_initialize+0x3a9/0xd00 [ 145.880619][ T6336] ocfs2_get_init_inode+0x144/0x1b0 [ 145.880643][ T6336] ocfs2_mknod+0x90e/0x2460 [ 145.888221][ C1] Sent skb ffff888058bf0868 [ 145.891061][ T6336] ocfs2_create+0x192/0x420 [ 145.891085][ T6336] path_openat+0x120a/0x2fb0 [ 145.896220][ C1] No more buffers in queue [ 145.901238][ T6336] do_filp_open+0x1df/0x400 [ 145.901260][ T6336] do_sys_openat2+0x14b/0x500 [ 145.915115][ C1] No more buffers in queue [ 145.920118][ T6336] __x64_sys_open+0x11b/0x140 [ 145.925458][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 145.929042][ T6336] do_syscall_64+0x4c/0xa0 [ 145.934342][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 145.939181][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.944744][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 145.951121][ T6336] [ 145.951121][ T6336] -> #2 (&dquot->dq_lock){+.+.}-{3:3} [ 145.955570][ C1] No more buffers in queue [ 145.964429][ T6336] : [ 145.964437][ T6336] __mutex_lock_common+0x1e5/0x2400 [ 145.969246][ C1] tcp_in_window: START [ 145.975412][ T6336] mutex_lock_nested+0x17/0x20 [ 145.975434][ T6336] dquot_commit+0x5a/0x410 [ 145.981631][ C1] tcp_in_window: [ 145.987248][ T6336] ext4_write_dquot+0x1f0/0x360 [ 145.987273][ T6336] mark_all_dquot_dirty+0xf9/0x400 [ 145.993138][ C1] seq=3966730355 ack=1501086166+(0) sack=1501086166+(0) win=24567 end=3966730356 [ 146.000465][ T6336] __dquot_free_space+0x7c3/0xb80 [ 146.004936][ C1] tcp_in_window: sender end=3966730355 maxend=3969873907 maxwin=3144576 scale=7 receiver end=1501086222 maxend=1504230742 maxwin=3143552 scale=7 [ 146.012687][ T6336] ext4_free_blocks+0x1b1b/0x24c0 [ 146.012724][ T6336] ext4_ext_remove_space+0x22bd/0x41a0 [ 146.018311][ C1] tcp_in_window: [ 146.024065][ T6336] ext4_ext_truncate+0x182/0x230 [ 146.024098][ T6336] ext4_truncate+0xa41/0x1190 [ 146.024116][ T6336] ext4_evict_inode+0xb0f/0x1050 [ 146.024134][ T6336] evict+0x4b6/0x8b0 [ 146.024155][ T6336] do_unlinkat+0x3e7/0x710 [ 146.029308][ C1] seq=3966730355 ack=1501086166+(0) sack=1501086166+(0) win=24567 end=3966730356 [ 146.033825][ T6336] __x64_sys_unlinkat+0xd1/0xe0 [ 146.033853][ T6336] do_syscall_64+0x4c/0xa0 [ 146.038923][ C1] tcp_in_window: sender end=3966730355 maxend=3969873907 maxwin=3144576 scale=7 receiver end=1501086222 maxend=1504230742 maxwin=3143552 scale=7 [ 146.044037][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.044067][ T6336] [ 146.044067][ T6336] -> #1 ( [ 146.048494][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 146.053523][ T6336] &ei->i_data_sem){++++}-{3:3}: [ 146.053545][ T6336] down_read+0x44/0x2e0 [ 146.058747][ C1] tcp_in_window: res=1 sender end=3966730356 maxend=3969873907 maxwin=3144576 receiver end=1501086222 maxend=1504230742 maxwin=3143552 [ 146.063185][ T6336] ext4_map_blocks+0x350/0x1a50 [ 146.063209][ T6336] ext4_append+0x22d/0x560 [ 146.068406][ C1] tcp_conntracks: [ 146.074295][ T6336] ext4_init_new_dir+0x2a7/0x910 [ 146.074316][ T6336] ext4_mkdir+0x4c3/0xc90 [ 146.079262][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 146.085090][ T6336] vfs_mkdir+0x386/0x570 [ 146.085113][ T6336] do_mkdirat+0x1dd/0x5c0 [ 146.091645][ C1] tcp_in_window: START [ 146.097360][ T6336] __x64_sys_mkdir+0x6a/0x80 [ 146.104967][ C1] tcp_in_window: [ 146.109340][ T6336] do_syscall_64+0x4c/0xa0 [ 146.111812][ C1] seq=3966730355 ack=1501086166+(0) sack=1501086166+(0) win=24567 end=3966730356 [ 146.117495][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.121629][ C1] tcp_in_window: sender end=3966730356 maxend=3969873907 maxwin=3144576 scale=7 receiver end=1501086222 maxend=1504230742 maxwin=3143552 scale=7 [ 146.126855][ T6336] [ 146.126855][ T6336] -> #0 ( [ 146.131825][ C1] tcp_in_window: [ 146.135427][ T6336] jbd2_handle){++++}-{0:0} [ 146.140817][ C1] seq=3966730355 ack=1501086166+(0) sack=1501086166+(0) win=24567 end=3966730356 [ 146.146431][ T6336] : [ 146.146437][ T6336] __lock_acquire+0x38f7/0x7d40 [ 146.155570][ C1] tcp_in_window: sender end=3966730356 maxend=3969873907 maxwin=3144576 scale=7 receiver end=1501086222 maxend=1504230742 maxwin=3143552 scale=7 [ 146.161079][ T6336] lock_acquire+0x19f/0x400 [ 146.161105][ T6336] wait_transaction_locked+0x1bb/0x270 [ 146.175870][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 146.181299][ T6336] add_transaction_credits+0x104/0xcb0 [ 146.181324][ T6336] start_this_handle+0x723/0x1560 [ 146.187300][ C1] tcp_in_window: res=1 sender end=3966730356 maxend=3969873907 maxwin=3144576 receiver end=1501086222 maxend=1504230742 maxwin=3143552 [ 146.190927][ T6336] jbd2__journal_start+0x2b7/0x5a0 [ 146.190950][ T6336] jbd2_journal_start+0x26/0x30 [ 146.196413][ C1] tcp_conntracks: [ 146.201631][ T6336] ocfs2_start_trans+0x3b2/0x6f0 [ 146.201657][ T6336] ocfs2_write_begin_nolock+0x294f/0x44b0 [ 146.207110][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 146.211534][ T6336] ocfs2_write_begin+0x1b4/0x310 [ 146.211558][ T6336] generic_perform_write+0x2b6/0x550 [ 146.216520][ C1] tcp_conntracks: [ 146.225587][ T6336] __generic_file_write_iter+0x261/0x4e0 [ 146.225608][ T6336] ocfs2_file_write_iter+0x171a/0x1ee0 [ 146.231464][ C1] syn=0 ack=0 fin=0 rst=1 old=6 new=8 [ 146.236494][ T6336] vfs_write+0x748/0xd70 [ 146.251970][ C1] nf_conntrack: normal packet for ffff888025ed6180 [ 146.257778][ T6336] ksys_write+0x153/0x260 [ 146.262978][ C1] tcp_in_window: START [ 146.268190][ T6336] do_syscall_64+0x4c/0xa0 [ 146.273117][ C1] tcp_in_window: [ 146.277753][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.291734][ C1] seq=1501086222 ack=3966730356+(0) sack=3966730356+(0) win=24559 end=1501086222 [ 146.297078][ T6336] [ 146.297078][ T6336] other info that might help us debug this: [ 146.297078][ T6336] [ 146.297088][ T6336] Chain exists of: [ 146.297088][ T6336] [ 146.302088][ C1] tcp_in_window: sender end=1501086222 maxend=1504230742 maxwin=3143552 scale=7 receiver end=3966730356 maxend=3969873907 maxwin=3144576 scale=7 [ 146.305753][ T6336] jbd2_handle --> [ 146.311260][ C1] tcp_in_window: [ 146.316073][ T6336] sb_internal#5 [ 146.321478][ C1] seq=1501086222 ack=3966730356+(0) sack=3966730356+(0) win=24559 end=1501086222 [ 146.326207][ T6336] --> &journal->j_trans_barrier [ 146.331100][ C1] tcp_in_window: sender end=1501086222 maxend=1504230742 maxwin=3143552 scale=7 receiver end=3966730356 maxend=3969873907 maxwin=3144576 scale=7 [ 146.335136][ T6336] [ 146.335136][ T6336] [ 146.335143][ T6336] Possible unsafe locking scenario: [ 146.335143][ T6336] [ 146.340255][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 146.343907][ T6336] CPU0 CPU1 [ 146.343916][ T6336] ---- ---- [ 146.343921][ T6336] rlock(&journal->j_trans_barrier); [ 146.343937][ T6336] lock(sb_internal#5); [ 146.343957][ T6336] lock(&journal->j_trans_barrier [ 146.348929][ C1] tcp_in_window: res=1 sender end=1501086222 maxend=1504230742 maxwin=3143552 receiver end=3966730356 maxend=3969873908 maxwin=3144576 [ 146.358067][ T6336] ); [ 146.358077][ T6336] lock(jbd2_handle); [ 146.358092][ T6336] [ 146.358092][ T6336] *** DEADLOCK *** [ 146.358092][ T6336] [ 146.358098][ T6336] 7 locks held by syz.5.489/6336: [ 146.364563][ C1] tcp_conntracks: [ 146.379181][ T6336] #0: ffff88807765f270 (&f->f_pos_lock){+.+.}-{3:3} [ 146.384371][ C1] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 146.387969][ T6336] , at: __fdget_pos+0x2bf/0x370 [ 146.392679][ C1] No more buffers in queue [ 146.401502][ T6336] #1: ffff88802466a460 (sb_writers [ 146.403955][ C1] eth0: xmit ffff88807c49b8c0 42:01:0a:80:00:01 [ 146.409325][ T6336] #26){.+.+}-{0:0} [ 146.424076][ C1] Added buffer head 14 to ffff8880240c9a00 [ 146.424125][ C1] virtqueue callback for ffff8880240c9a00 (ffffffff854980c0) [ 146.429006][ T6336] , at: vfs_write+0x296/0xd70 [ 146.435084][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 146.440287][ T6336] #2: ffff88805fd25f48 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x437/0x1ee0 [ 146.468041][ T6340] kcov: kcov_task_exit: t = ffff88802d4cbb80, kcov->t = ffff88802d4cbb80 [ 146.471459][ T6336] #3: ffff88805fd25be0 [ 146.478723][ C1] Sent skb ffff88807c49b8c0 [ 146.480577][ T6336] (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_write_begin+0x193/0x310 [ 146.486141][ C1] No more buffers in queue [ 146.492322][ T6336] #4: ffff888072775f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3} [ 146.497739][ C1] No more buffers in queue [ 146.503194][ T6336] , at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 146.503223][ T6336] #5: [ 146.509123][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 146.512753][ T6336] ffff88802466a650 (sb_internal#5){.+.+}-{0:0} [ 146.518945][ C1] No more buffers in queue [ 146.524920][ T6336] , at: ocfs2_write_begin_nolock+0x294f/0x44b0 [ 146.524949][ T6336] #6: [ 146.530399][ C1] tcp_conntracks: [ 146.535091][ T6336] ffff88806033fce8 [ 146.541628][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 146.546445][ T6336] (&journal->j_trans_barrier [ 146.564074][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 146.565579][ T6336] ){.+.+}-{3:3} [ 146.574700][ C1] kcov: kcov_start: t = ffff88807a44bb80, size = 262144, area = ffffc900020a9000 [ 146.584960][ T6336] , at: ocfs2_start_trans+0x3a6/0x6f0 [ 146.591184][ C1] kcov: kcov_move_area: ffffc90012c35000 1048576 <= ffffc900020a9000 34 [ 146.605693][ T6336] [ 146.605693][ T6336] stack backtrace: [ 146.605703][ T6336] CPU: 0 PID: 6336 Comm: syz.5.489 Not tainted syzkaller #0 [ 146.647175][ T6371] kcov: kcov_start: t = ffff888062c1d940, size = 524288, area = ffffc900056f9000 [ 146.649885][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.732142][ T6373] kcov: kcov_start: t = ffff888062c18000, size = 524288, area = ffffc90006681000 [ 146.737452][ T6336] Call Trace: [ 146.758509][ T6334] kcov: kcov_task_exit: t = ffff888059d18000, kcov->t = ffff888059d18000 [ 146.763630][ T6336] [ 146.768467][ T6307] kcov: kcov_task_exit: t = ffff88802abb8000, kcov->t = ffff88802abb8000 [ 146.773180][ T6336] dump_stack_lvl+0x188/0x250 [ 146.813774][ T6363] kcov: kcov_task_exit: t = ffff88802a400000, kcov->t = ffff88802a400000 [ 146.816564][ T6336] ? load_image+0x410/0x410 [ 146.832906][ T6371] kcov: kcov_task_exit: t = ffff888062c1d940, kcov->t = ffff888062c1d940 [ 146.833699][ T6336] ? show_regs_print_info+0x20/0x20 [ 146.847466][ T6369] kcov: kcov_task_exit: t = ffff888027cf5940, kcov->t = ffff888027cf5940 [ 146.847800][ T6336] ? print_circular_bug+0x12b/0x1a0 [ 146.855944][ T6374] kcov: kcov_start: t = ffff888062c1bb80, size = 524288, area = ffffc9000ec29000 [ 146.857106][ T6336] check_noncircular+0x2f8/0x400 [ 146.875177][ T6362] kcov: kcov_task_exit: t = ffff88802a413b80, kcov->t = ffff88802a413b80 [ 146.879788][ T6336] ? print_deadlock_bug+0x5d0/0x5d0 [ 146.931545][ T6373] kobject: 'switch-0' (ffff888073a68280): kobject_add_internal: parent: 'xprt-switches', set: 'sunrpc' [ 146.934572][ T6336] ? lockdep_lock+0x15c/0x1f0 [ 146.934610][ T6336] ? mark_lock+0x94/0x320 [ 146.963773][ T6373] kobject: 'switch-0' (ffff888073a68280): kobject_uevent_env [ 146.967017][ T6336] ? _find_first_zero_bit+0xd1/0xf0 [ 146.967051][ T6336] __lock_acquire+0x38f7/0x7d40 [ 147.008698][ T6373] kobject: 'switch-0' (ffff888073a68280): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 147.012625][ T6336] ? verify_lock_unused+0x140/0x140 [ 147.012660][ T6336] ? verify_lock_unused+0x140/0x140 [ 147.033000][ T6373] kobject: 'xprt-0-tcp' (ffff888073a68f00): kobject_add_internal: parent: 'switch-0', set: 'sunrpc' [ 147.039369][ T6336] ? rwsem_write_trylock+0x135/0x1c0 [ 147.039405][ T6336] ? mark_lock+0x94/0x320 [ 147.057979][ T6373] kobject: 'xprt-0-tcp' (ffff888073a68f00): kobject_uevent_env [ 147.058674][ T6336] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.068126][ T6373] kobject: 'xprt-0-tcp' (ffff888073a68f00): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp' [ 147.072337][ T6336] lock_acquire+0x19f/0x400 [ 147.072368][ T6336] ? wait_transaction_locked+0x19f/0x270 [ 147.090183][ T6373] kobject: 'clnt-0' (ffff888073a68880): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc' [ 147.092430][ T6336] ? wait_transaction_locked+0x17c/0x270 [ 147.092464][ T6336] ? __lock_acquire+0x7d40/0x7d40 [ 147.101285][ T6373] kobject: 'clnt-0' (ffff888073a68880): kobject_uevent_env [ 147.105085][ T6336] ? read_lock_is_recursive+0x10/0x10 [ 147.105136][ T6336] wait_transaction_locked+0x1bb/0x270 [ 147.110212][ T6373] kobject: 'clnt-0' (ffff888073a68880): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 147.121265][ T6336] ? wait_transaction_locked+0x19f/0x270 [ 147.121297][ T6336] ? add_transaction_credits+0xcb0/0xcb0 [ 147.121319][ T6336] ? __kernel_text_address+0x9a/0x100 [ 147.130471][ T4193] nf_conntrack: new packet for ffff888025ed7080 [ 147.131749][ T6336] ? init_wait_entry+0xd0/0xd0 [ 147.142785][ T4193] tcp_new: sender end=738928215 maxend=738928215 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 147.147817][ T6336] ? stack_trace_save+0xf0/0xf0 [ 147.152226][ T4193] tcp_in_window: START [ 147.159726][ T6336] ? arch_stack_walk+0xf2/0x140 [ 147.165749][ T4193] tcp_in_window: [ 147.178033][ T6336] add_transaction_credits+0x104/0xcb0 [ 147.182576][ T4193] seq=738928214 ack=0+(0) sack=0+(0) win=65495 end=738928215 [ 147.188197][ T6336] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 147.199017][ T4193] tcp_in_window: sender end=738928215 maxend=738928215 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 147.204576][ T6336] ? __lock_acquire+0x13b3/0x7d40 [ 147.209639][ T4193] tcp_in_window: [ 147.216870][ T6336] ? read_lock_is_recursive+0x10/0x10 [ 147.216896][ T6336] ? __kasan_slab_alloc+0xa9/0xc0 [ 147.222300][ T4193] seq=738928214 ack=0+(0) sack=0+(0) win=65495 end=738928215 [ 147.227741][ T6336] ? __kasan_slab_alloc+0x92/0xc0 [ 147.238479][ T4193] tcp_in_window: sender end=738928215 maxend=738928215 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 147.244062][ T6336] ? slab_post_alloc_hook+0x4c/0x380 [ 147.244087][ T6336] ? jbd2__journal_start+0x13c/0x5a0 [ 147.249719][ T4193] tcp_in_window: I=1 II=1 III=1 IV=1 [ 147.255087][ T6336] ? jbd2_journal_start+0x26/0x30 [ 147.255110][ T6336] ? ocfs2_start_trans+0x3b2/0x6f0 [ 147.261399][ T4193] tcp_in_window: res=1 sender end=738928215 maxend=738928215 maxwin=65495 receiver end=0 maxend=65495 maxwin=0 [ 147.266131][ T6336] ? ocfs2_write_begin+0x1b4/0x310 [ 147.278429][ T4193] tcp_conntracks: [ 147.283228][ T6336] ? generic_perform_write+0x2b6/0x550 [ 147.287315][ T4193] syn=1 ack=0 fin=0 rst=0 old=0 new=1 [ 147.292164][ T6336] ? __generic_file_write_iter+0x261/0x4e0 [ 147.292189][ T6336] ? vfs_write+0x748/0xd70 [ 147.296750][ T4193] nf_conntrack: nf_ct_destroy(ffff888025ed7080) [ 147.301302][ T6336] start_this_handle+0x723/0x1560 [ 147.301342][ T6336] ? jbd2__journal_start+0x5a0/0x5a0 [ 147.308711][ T4193] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed7080 to slab [ 147.315391][ T6336] ? slab_post_alloc_hook+0x68/0x380 [ 147.315416][ T6336] ? jbd2__journal_start+0x13c/0x5a0 [ 147.349851][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 147.354381][ T6336] ? rcu_is_watching+0x11/0xa0 [ 147.359421][ C1] kcov: kcov_start: t = ffff88802bb01dc0, size = 262144, area = ffffc900020a9000 [ 147.371754][ T6336] ? jbd2__journal_start+0x13c/0x5a0 [ 147.377208][ C1] kcov: kcov_move_area: ffffc90012c35000 1048576 <= ffffc900020a9000 34 [ 147.382338][ T6336] ? kmem_cache_alloc+0x189/0x280 [ 147.409958][ T4229] usb usb2-port1: debounce total 100ms stable 100ms status 0x100 [ 147.414625][ T6336] jbd2__journal_start+0x2b7/0x5a0 [ 147.414657][ T6336] jbd2_journal_start+0x26/0x30 [ 147.414679][ T6336] ocfs2_start_trans+0x3b2/0x6f0 [ 147.432234][ T4229] kcov: kcov_move_area: ffffc90012c35000 1048576 <= ffffc90015c3c000 137941 [ 147.435055][ T6336] ? ocfs2_recovery_exit+0x50/0x50 [ 147.459755][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 147.464123][ T6336] ? rcu_is_watching+0x11/0xa0 [ 147.487074][ C1] No more buffers in queue [ 147.487660][ T6336] ? ocfs2_write_begin_nolock+0xf78/0x44b0 [ 147.496921][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 147.502084][ T6336] ? kfree+0x4a/0x2a0 [ 147.502111][ T6336] ocfs2_write_begin_nolock+0x294f/0x44b0 [ 147.510559][ C1] No more buffers in queue [ 147.515544][ T6336] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 147.523630][ C1] No more buffers in queue [ 147.528326][ T6336] ? __lock_acquire+0x13b3/0x7d40 [ 147.533246][ C1] eth0: xmit ffff88807b4f5280 42:01:0a:80:00:01 [ 147.538154][ T6336] ? ocfs2_inode_lock_full_nested+0x149/0x1b10 [ 147.546913][ C1] Added buffer head 14 to ffff8880240c9a00 [ 147.546972][ C1] virtqueue callback for ffff8880240c9a00 (ffffffff854980c0) [ 147.551948][ T6336] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 147.564073][ T6336] ? handle_mm_fault+0x2be3/0x4440 [ 147.564103][ T6336] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 147.572998][ C1] Sent skb ffff88807b4f5280 [ 147.574363][ T6336] ? do_user_addr_fault+0x69f/0xc90 [ 147.580210][ C1] No more buffers in queue [ 147.584159][ T6336] ? rwsem_write_trylock+0x135/0x1c0 [ 147.584186][ T6336] ? clear_nonspinnable+0x60/0x60 [ 147.624971][ T4229] kcov: kcov_remote_start: handle = 100000000000002, context: task [ 147.627850][ T6336] ? exc_page_fault+0x88/0x100 [ 147.635345][ T4229] kcov: kcov_start: t = ffff88801edb9dc0, size = 1048576, area = ffffc90015c3c000 [ 147.641344][ T6336] ? lockdep_hardirqs_on+0x94/0x140 [ 147.653687][ T6373] kobject: 'switch-0' (ffff888073a68280): kobject_uevent_env [ 147.656964][ T6336] ? exc_page_fault+0x88/0x100 [ 147.667842][ T6374] kcov: kcov_task_exit: t = ffff888062c1bb80, kcov->t = ffff888062c1bb80 [ 147.671908][ T6336] ocfs2_write_begin+0x1b4/0x310 [ 147.679197][ T6373] kobject: 'switch-0' (ffff888073a68280): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 147.684943][ T6336] ? ocfs2_readahead+0x190/0x190 [ 147.684975][ T6336] ? __get_user_nocheck_1+0x6/0x10 [ 147.690804][ T4229] hub 2-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 147.698960][ T6336] ? fault_in_readable+0xf6/0x150 [ 147.705252][ T6373] kernfs switch-0: removing [ 147.711568][ T6336] generic_perform_write+0x2b6/0x550 [ 147.711604][ T6336] ? grab_cache_page_write_begin+0xa0/0xa0 [ 147.722039][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 147.724817][ T6336] ? file_remove_privs+0x5d0/0x5d0 [ 147.729797][ C1] kcov: kcov_start: t = ffff888017a91dc0, size = 262144, area = ffffc900020a9000 [ 147.740995][ T6336] ? __rwlock_init+0x140/0x140 [ 147.746144][ C1] kcov: kcov_move_area: ffffc90012c35000 1048576 <= ffffc900020a9000 34 [ 147.751155][ T6336] ? __up_read+0x2b4/0x6b0 [ 147.791832][ T4229] kcov: kcov_move_area: ffffc90012c35000 1048576 <= ffffc90015c3c000 46149 [ 147.800641][ T6336] __generic_file_write_iter+0x261/0x4e0 [ 147.813401][ T6373] kcov: kcov_task_exit: t = ffff888062c18000, kcov->t = ffff888062c18000 [ 147.813746][ T6336] ? ocfs2_inode_unlock+0x11a/0x140 [ 147.822627][ T4229] hub 2-0:1.0: hub_suspend [ 147.826763][ T6336] ocfs2_file_write_iter+0x171a/0x1ee0 [ 147.826796][ T6336] ? verify_lock_unused+0x140/0x140 [ 147.861209][ T6336] ? ocfs2_file_read_iter+0xa80/0xa80 [ 147.866623][ T6336] ? aa_file_perm+0x38b/0xe80 [ 147.871178][ T4408] kernfs switch: removing [ 147.871358][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 147.871352][ T6336] ? rcu_read_lock_any_held+0xb0/0x130 [ 147.871382][ C1] kcov: kcov_start: t = ffff88801ede0000, size = 262144, area = ffffc900020a9000 [ 147.871385][ T6336] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 147.871417][ T6336] ? end_current_label_crit_section+0x14b/0x170 [ 147.871418][ C1] kcov: kcov_move_area: ffffc90012c35000 1048576 <= ffffc900020a9000 11 [ 147.871443][ T6336] ? memset+0x1e/0x40 [ 147.871462][ T6336] ? iov_iter_init+0xb4/0x170 [ 147.871484][ T6336] vfs_write+0x748/0xd70 [ 147.871509][ T6336] ? file_end_write+0x250/0x250 [ 147.871538][ T6336] ? mutex_lock_nested+0x17/0x20 [ 147.871559][ T6336] ? __fdget_pos+0x2bf/0x370 [ 147.871578][ T6336] ? ksys_write+0x70/0x260 [ 147.871599][ T6336] ksys_write+0x153/0x260 [ 147.871620][ T6336] ? __ia32_sys_read+0x80/0x80 [ 147.871642][ T6336] ? lockdep_hardirqs_on+0x94/0x140 [ 147.871668][ T6336] do_syscall_64+0x4c/0xa0 [ 147.871688][ T6336] ? clear_bhb_loop+0x30/0x80 [ 147.871710][ T6336] ? clear_bhb_loop+0x30/0x80 [ 147.871733][ T6336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.871758][ T6336] RIP: 0033:0x7fdce39fe1d9 [ 147.871777][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.871796][ T6336] RSP: 002b:00007fdce1c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.871819][ T6336] RAX: ffffffffffffffda RBX: 00007fdce3c85fa0 RCX: 00007fdce39fe1d9 [ 147.871836][ T6336] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 147.871850][ T6336] RBP: 00007fdce3a95888 R08: 0000000000000000 R09: 0000000000000000 [ 147.871864][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.871875][ T6336] R13: 00007fdce3c86038 R14: 00007fdce3c85fa0 R15: 00007fffb63df3c8 [ 147.871897][ T6336] [ 147.871946][ C0] sched: RT throttling activated [ 147.871995][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 147.872036][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 147.872049][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 147.872881][ T6336] kcov: kcov_task_exit: t = ffff888059d1bb80, kcov->t = ffff888059d1bb80 [ 147.897812][ T6336] syz.5.489 (6336) used greatest stack depth: 19136 bytes left [ 147.939221][ T4229] usb usb2: bus auto-suspend, wakeup 1 [ 147.949600][ T5930] nf_conntrack: normal packet for ffff888076a56900 [ 147.996131][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 6) [ 148.012004][ T5932] Added buffer head 0 to ffff88801f2fce00 [ 148.056431][ T4229] usb usb2: dummy_bus_suspend [ 148.061411][ C0] No more buffers in queue [ 148.082285][ T4408] kobject: 'clnt-0' (ffff888073a68880): kobject_uevent_env [ 148.082757][ C0] eth0: xmit ffff888077d9cc80 ff:ff:ff:ff:ff:ff [ 148.098270][ T4408] kobject: 'clnt-0' (ffff888073a68880): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 148.105697][ C0] Added buffer head 1 to ffff8880240c9800 [ 148.105767][ C0] virtqueue callback for ffff8880240c9800 (ffffffff854980c0) [ 148.148314][ T4408] kernfs clnt-0: removing [ 148.185971][ T4408] kobject: 'clnt-0' (ffff888073a68880): kobject_cleanup, parent 0000000000000000 [ 148.186728][ C0] wireguard: wg1: Retrying handshake with peer 10 (127.0.0.1:20003) because we stopped hearing back after 15 seconds [ 148.207619][ C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 148.208159][ T4795] nf_conntrack: normal packet for ffff888076a56f00 [ 148.226258][ C0] Sent skb ffff888077d9cc80 [ 148.230865][ C0] No more buffers in queue [ 148.236004][ T5938] nf_conntrack: normal packet for ffff888078016480 [ 148.242814][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 148.250289][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 148.257270][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 148.265202][ T5938] nf_conntrack: clean_from_lists(ffff888025ed6780) [ 148.269600][ T4408] kobject: 'clnt-0' (ffff888073a68880): calling ktype release [ 148.271844][ T5938] nf_conntrack: nf_ct_destroy(ffff888025ed6780) [ 148.271865][ T5938] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed6780 to slab [ 148.277693][ T5938] nf_conntrack: clean_from_lists(ffff888076a57080) [ 148.290321][ T4408] kobject: 'clnt-0': free name [ 148.293925][ T5938] nf_conntrack: nf_ct_destroy(ffff888076a57080) [ 148.311573][ T5938] nf_conntrack: nf_ct_destroy: returning ct=ffff888076a57080 to slab [ 148.321939][ T5930] Added buffer head 0 to ffff88801f2fce00 [ 148.327850][ T5932] nf_conntrack: normal packet for ffff888078016900 [ 148.335853][ T5933] nf_conntrack: clean_from_lists(ffff888076a57e00) [ 148.342510][ T5933] nf_conntrack: nf_ct_destroy(ffff888076a57e00) [ 148.348803][ T5933] nf_conntrack: nf_ct_destroy: returning ct=ffff888076a57e00 to slab [ 148.360572][ C1] nf_conntrack: new packet for ffff888025ed7080 [ 148.365994][ T5930] nf_conntrack: clean_from_lists(ffff888021ee3500) [ 148.366957][ C1] tcp_new: sender end=738928215 maxend=738928215 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 148.373689][ T5933] nf_conntrack: normal packet for ffff888025ed6900 [ 148.385205][ C1] tcp_in_window: START [ 148.391970][ T5930] nf_conntrack: nf_ct_destroy(ffff888021ee3500) [ 148.395856][ C1] tcp_in_window: [ 148.402131][ C1] seq=738928214 ack=0+(0) sack=0+(0) win=65495 end=738928215 [ 148.402163][ C0] dummy_hcd dummy_hcd.6: no ep configured for urb ffff88802bf04200 [ 148.405808][ C1] tcp_in_window: sender end=738928215 maxend=738928215 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 148.413215][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 148.421151][ C1] tcp_in_window: [ 148.433358][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 148.441560][ C1] seq=738928214 ack=0+(0) sack=0+(0) win=65495 end=738928215 [ 148.445225][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 10 [ 148.454337][ C1] tcp_in_window: sender end=738928215 maxend=738928215 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 148.463609][ T5923] usbhid 7-1:0.0: can't add hid device: -71 [ 148.470037][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 148.486995][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee3500 to slab [ 148.488226][ C1] tcp_in_window: res=1 sender end=738928215 maxend=738928215 maxwin=65495 receiver end=0 maxend=65495 maxwin=0 [ 148.504860][ T5923] kobject: '(null)' (ffff888075f3d938): kobject_cleanup, parent 0000000000000000 [ 148.513432][ C1] tcp_conntracks: [ 148.522585][ C1] syn=1 ack=0 fin=0 rst=0 old=0 new=1 [ 148.522727][ T5923] kobject: '(null)' (ffff888075f3d938): calling ktype release [ 148.526534][ C1] nf_conntrack: nf_ct_destroy(ffff888025ed7080) [ 148.532064][ T5923] usbhid: probe of 7-1:0.0 failed with error -71 [ 148.539244][ C1] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed7080 to slab [ 148.564083][ T4229] kobject: 'xprt-0-tcp' (ffff888073a68f00): kobject_uevent_env [ 148.567261][ T5923] kernfs 7-1:0.0: removing [ 148.582298][ T4195] XFS (loop0): Unmounting Filesystem [ 148.591565][ T4229] kobject: 'xprt-0-tcp' (ffff888073a68f00): fill_kobj_path: path = '/switch-0/xprt-0-tcp' [ 148.611045][ T5923] kernfs driver: removing [ 148.616465][ T4229] kobject: 'switch-0' (ffff888073a68280): kobject_cleanup, parent 0000000000000000 [ 148.618817][ T5923] device: 'ep_81': device_add [ 148.637719][ T5923] kobject: 'ep_81' (ffff888078bc3010): kobject_add_internal: parent: '7-1:0.0', set: 'devices' [ 148.643731][ T4229] kobject: 'switch-0' (ffff888073a68280): calling ktype release [ 148.655337][ T5923] ep_81: No ACPI support [ 148.661246][ T5923] PM: Adding info for No Bus:ep_81 [ 148.666974][ T5923] kobject: 'ep_81' (ffff888078bc3010): kobject_uevent_env [ 148.677148][ T5923] kobject: 'ep_81' (ffff888078bc3010): kobject_uevent_env: filter function caused the event to drop! [ 148.682972][ T4229] kobject: 'switch-0': free name [ 148.699385][ T4229] kobject: 'xprt-0-tcp' (ffff888073a68f00): kobject_cleanup, parent 0000000000000000 [ 148.712614][ T4229] kobject: 'xprt-0-tcp' (ffff888073a68f00): calling ktype release [ 148.722241][ T4229] kobject: 'xprt-0-tcp': free name [ 148.733646][ T5923] driver: 'usb': driver_bound: bound to device '7-1' [ 148.743113][ T5923] kobject: '7-1' (ffff888061bfe0a8): kobject_uevent_env [ 148.750191][ T5923] kobject: '7-1' (ffff888061bfe0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.6/usb7/7-1' [ 148.769397][ T5923] bus: 'usb': really_probe: bound device 7-1 to driver usb [ 148.785694][ T5923] device: 'ep_00': device_add [ 148.790853][ T5923] kobject: 'ep_00' (ffff888078bc1010): kobject_add_internal: parent: '7-1', set: 'devices' [ 148.801408][ T5923] ep_00: No ACPI support [ 148.806102][ T5923] PM: Adding info for No Bus:ep_00 [ 148.813225][ T5923] kobject: 'ep_00' (ffff888078bc1010): kobject_uevent_env [ 148.822997][ T5923] kobject: 'ep_00' (ffff888078bc1010): kobject_uevent_env: filter function caused the event to drop! [ 148.834142][ T5923] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc90013c37000 476962 [ 148.852203][ T5923] kcov: kcov_remote_start: handle = 100000000000007, context: task [ 148.860256][ T5923] kcov: kcov_start: t = ffff88802a700000, size = 1048576, area = ffffc90013c37000 [ 148.876308][ T5923] hub 7-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 148.889434][ T5923] dummy_hcd dummy_hcd.6: port status 0x00010100 has changes [ 148.897413][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 148.905634][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 148.914867][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 117 [ 148.924758][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 148.933010][ C0] kcov: kcov_start: t = ffff888028771dc0, size = 262144, area = ffffc900020a9000 [ 148.942207][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 42 [ 148.956639][ T5933] nf_conntrack: clean_from_lists(ffff888078016600) [ 148.963922][ T5933] nf_conntrack: nf_ct_destroy(ffff888078016600) [ 148.970338][ C0] net_ratelimit: 51 callbacks suppressed [ 148.970357][ C0] wireguard: wg2: Receiving keepalive packet from peer 6 (127.0.0.1:20002) [ 148.984784][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 148.993016][ C0] kcov: kcov_start: t = ffff888023e61dc0, size = 262144, area = ffffc900020a9000 [ 149.002238][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 34 [ 149.010696][ T5923] usb usb7-port1: status 0100, change 0001, 12 Mb/s [ 149.017353][ T5923] usb 7-1: USB disconnect, device number 4 [ 149.023249][ T5933] nf_conntrack: nf_ct_destroy: returning ct=ffff888078016600 to slab [ 149.031411][ T5923] usb 7-1: unregistering device [ 149.036368][ T5923] usb 7-1: unregistering interface 7-1:0.0 [ 149.042615][ T5923] device: 'ep_81': device_unregister [ 149.048375][ T5923] kernfs runtime_status: removing [ 149.053533][ T5923] kernfs control: removing [ 149.058011][ T5923] kernfs runtime_suspended_time: removing [ 149.063889][ T5923] kernfs runtime_active_time: removing [ 149.069439][ T5923] kernfs autosuspend_delay_ms: removing [ 149.075162][ T5923] kernfs power: removing [ 149.079472][ T5923] kernfs uevent: removing [ 149.083922][ T5923] kernfs bLength: removing [ 149.088387][ T5923] kernfs bEndpointAddress: removing [ 149.093729][ T5923] kernfs bmAttributes: removing [ 149.098672][ T5923] kernfs bInterval: removing [ 149.103459][ T5923] kernfs wMaxPacketSize: removing [ 149.108547][ T5923] kernfs interval: removing [ 149.114306][ T5923] kernfs type: removing [ 149.118529][ T5923] kernfs direction: removing [ 149.123445][ T5923] PM: Removing info for No Bus:ep_81 [ 149.129056][ T5923] kobject: 'ep_81' (ffff888078bc3010): kobject_uevent_env [ 149.137017][ T5923] kobject: 'ep_81' (ffff888078bc3010): kobject_uevent_env: filter function caused the event to drop! [ 149.149932][ T5923] kernfs ep_81: removing [ 149.155337][ T5923] kobject: 'ep_81' (ffff888078bc3010): kobject_cleanup, parent 0000000000000000 [ 149.164884][ T5923] kobject: 'ep_81' (ffff888078bc3010): calling ktype release [ 149.172554][ T5923] kobject: 'ep_81': free name [ 149.178025][ T5923] kernfs power: removing [ 149.182761][ T5923] kernfs uevent: removing [ 149.187162][ T5923] kernfs bInterfaceNumber: removing [ 149.192746][ T5923] kernfs bAlternateSetting: removing [ 149.198168][ T5923] kernfs bNumEndpoints: removing [ 149.205482][ T4911] kernfs filecheck: removing [ 149.210258][ T5933] nf_conntrack: normal packet for ffff888025ed6d80 [ 149.213817][ T4911] kobject: 'filecheck' (ffff8880264a5430): kobject_cleanup, parent 0000000000000000 [ 149.217760][ T5930] nf_conntrack: normal packet for ffff888076a56a80 [ 149.232864][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.241289][ C0] wireguard: wg1: Receiving keepalive packet from peer 39 ([::1]:20001/0%0) [ 149.246184][ T4911] kobject: 'filecheck' (ffff8880264a5430): calling ktype release [ 149.250059][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 149.260461][ T4911] kobject: 'filecheck': free name [ 149.265211][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 149.270612][ T4911] kernfs loop5: removing [ 149.277264][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 149.279873][ C0] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 149.289372][ T4911] kobject: 'loop5' (ffff888056d34750): kobject_cleanup, parent 0000000000000000 [ 149.297688][ T5932] nf_conntrack: normal packet for ffff888021ee3080 [ 149.313256][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.329071][ T4911] kobject: 'loop5' (ffff888056d34750): calling ktype release [ 149.336193][ T7] nf_conntrack: clean_from_lists(ffff888078016d80) [ 149.338379][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.343163][ T5923] kernfs bInterfaceClass: removing [ 149.356368][ T7] nf_conntrack: nf_ct_destroy(ffff888078016d80) [ 149.361501][ T4911] kobject: 'loop5' (ffff888056d34750): kset_release [ 149.362785][ T7] nf_conntrack: nf_ct_destroy: returning ct=ffff888078016d80 to slab [ 149.369531][ T4911] kobject: 'loop5': free name [ 149.377514][ C0] wireguard: wg1: Retrying handshake with peer 22 (127.0.0.1:20003) because we stopped hearing back after 15 seconds [ 149.379617][ T5923] kernfs bInterfaceSubClass: removing [ 149.384630][ T4239] wireguard: wg1: Sending handshake initiation to peer 22 (127.0.0.1:20003) [ 149.395166][ T5923] kernfs bInterfaceProtocol: removing [ 149.410965][ C1] wireguard: wg2: Receiving keepalive packet from peer 23 ([::1]:20001/0%0) [ 149.424371][ T5923] kernfs modalias: removing [ 149.429279][ T5923] kernfs supports_autosuspend: removing [ 149.444908][ C1] wireguard: wg2: Receiving keepalive packet from peer 5 ([::1]:20001/0%0) [ 149.449176][ T5923] kernfs authorized: removing [ 149.453630][ C1] wireguard: wg2: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) [ 149.468364][ T4239] nf_conntrack: normal packet for ffff888025ed7500 [ 149.475136][ T5923] kernfs subsystem: removing [ 149.476176][ T4911] ocfs2: Unmounting device (7,5) on (node local) [ 149.479960][ T5923] kernfs 7-1:0.0: removing [ 149.492665][ T5923] bus: 'usb': remove device 7-1:0.0 [ 149.497979][ T5923] PM: Removing info for usb:7-1:0.0 [ 149.503530][ T5923] kobject: '7-1:0.0' (ffff888078bc4030): kobject_uevent_env [ 149.513204][ T5923] kobject: '7-1:0.0' (ffff888078bc4030): fill_kobj_path: path = '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0' [ 149.527277][ T5923] kernfs 7-1:0.0: removing [ 149.533533][ T5923] kobject: '7-1:0.0' (ffff888078bc4030): kobject_cleanup, parent 0000000000000000 [ 149.543172][ T5923] kobject: '7-1:0.0' (ffff888078bc4030): calling ktype release [ 149.552436][ T5923] kobject: '7-1:0.0': free name [ 149.557374][ T5923] usb 7-1: usb_disable_device nuking all URBs [ 149.563960][ T5923] kernfs port: removing [ 149.568200][ T5923] kernfs device: removing [ 149.570767][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 149.573800][ T5923] device: 'ep_00': device_unregister [ 149.581600][ T4911] kernfs backing_file: removing [ 149.593535][ T7] Added buffer head 0 to ffff88801f2fce00 [ 149.599981][ T5930] nf_conntrack: clean_from_lists(ffff888025ed6c00) [ 149.608452][ T5930] nf_conntrack: nf_ct_destroy(ffff888025ed6c00) [ 149.615713][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed6c00 to slab [ 149.625129][ T5923] kernfs runtime_status: removing [ 149.630261][ T5923] kernfs control: removing [ 149.634869][ T5923] kernfs runtime_suspended_time: removing [ 149.642462][ T4911] kernfs offset: removing [ 149.646921][ T4911] kernfs sizelimit: removing [ 149.650358][ T5930] nf_conntrack: clean_from_lists(ffff888025ed7680) [ 149.655800][ T4911] kernfs autoclear: removing [ 149.658685][ T5930] nf_conntrack: nf_ct_destroy(ffff888025ed7680) [ 149.663120][ T4911] kernfs partscan: removing [ 149.674426][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed7680 to slab [ 149.682684][ T5923] kernfs runtime_active_time: removing [ 149.688231][ T5923] kernfs autosuspend_delay_ms: removing [ 149.693974][ T5923] kernfs power: removing [ 149.698297][ T4911] kernfs dio: removing [ 149.706217][ T4911] kernfs loop: removing [ 149.711928][ T4911] kobject: 'loop5' (ffff888017c0c6c0): kobject_uevent_env [ 149.711933][ T5923] kernfs uevent: removing [ 149.711985][ T4911] kobject: 'loop5' (ffff888017c0c6c0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 149.719099][ T5923] kernfs bLength: removing [ 149.725195][ T4911] kobject: 'loop5' (ffff888017c0c6c0): kobject_uevent_env [ 149.740150][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 149.753934][ T4911] kobject: 'loop5' (ffff888017c0c6c0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 149.754235][ T5923] kernfs bEndpointAddress: removing [ 149.769899][ T5923] kernfs bmAttributes: removing [ 149.778095][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 149.786993][ T5923] kernfs bInterval: removing [ 149.791710][ T5923] kernfs wMaxPacketSize: removing [ 149.796780][ T5923] kernfs interval: removing [ 149.802599][ T5923] kernfs type: removing [ 149.806811][ T5923] kernfs direction: removing [ 149.811642][ T5923] PM: Removing info for No Bus:ep_00 [ 149.816973][ T5923] kobject: 'ep_00' (ffff888078bc1010): kobject_uevent_env [ 149.824460][ T5923] kobject: 'ep_00' (ffff888078bc1010): kobject_uevent_env: filter function caused the event to drop! [ 149.835589][ T5923] kernfs ep_00: removing [ 149.839896][ T5923] kobject: 'ep_00' (ffff888078bc1010): kobject_cleanup, parent 0000000000000000 [ 149.849763][ T5923] kobject: 'ep_00' (ffff888078bc1010): calling ktype release [ 149.858546][ T5923] kobject: 'ep_00': free name [ 149.864285][ T5923] kernfs autosuspend: removing [ 149.869923][ T5923] kernfs level: removing [ 149.876613][ T5923] kernfs connected_duration: removing [ 149.884243][ T5923] kernfs active_duration: removing [ 149.889425][ T5923] kernfs persist: removing [ 149.895396][ T5923] kernfs descriptors: removing [ 149.900208][ T5923] kernfs runtime_status: removing [ 149.906299][ T5923] kernfs control: removing [ 149.912170][ T5923] kernfs runtime_suspended_time: removing [ 149.917938][ T5923] kernfs runtime_active_time: removing [ 149.924473][ T5923] kernfs autosuspend_delay_ms: removing [ 149.930071][ T5923] kernfs power: removing [ 149.939139][ T5930] nf_conntrack: clean_from_lists(ffff88802127d800) [ 149.947123][ T5923] kernfs 189:771: removing [ 149.951771][ C0] wireguard: wg2: Retrying handshake with peer 12 (127.0.0.1:20002) because we stopped hearing back after 15 seconds [ 149.961901][ T3520] sd 0:0:1:0: cmd ffff8880254a4128 CDB: 0x2a [ 149.964942][ T5930] nf_conntrack: nf_ct_destroy(ffff88802127d800) [ 149.970275][ T3520] Added buffer head 33 to ffff888022c34800 [ 149.982999][ T5923] kernfs dev: removing [ 149.987233][ T5923] kernfs uevent: removing [ 149.987246][ C1] virtqueue callback for ffff888022c34800 (ffffffff8506e140) [ 149.991763][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127d800 to slab [ 149.998974][ C1] sd 0:0:1:0: cmd ffff8880254a4128 response 0 status 0x0 sense_len 0 [ 150.007218][ T5923] kernfs removable: removing [ 150.015193][ C1] No more buffers in queue [ 150.016657][ T1474] sd 0:0:1:0: cmd ffff888022ede128 CDB: 0x35 [ 150.026100][ T5923] kernfs configuration: removing [ 150.030333][ T1474] Added buffer head 33 to ffff888022c34800 [ 150.036099][ T5923] kernfs bNumInterfaces: removing [ 150.041329][ C1] virtqueue callback for ffff888022c34800 (ffffffff8506e140) [ 150.053695][ C1] sd 0:0:1:0: cmd ffff888022ede128 response 0 status 0x0 sense_len 0 [ 150.053802][ T5923] kernfs bConfigurationValue: removing [ 150.061793][ C1] No more buffers in queue [ 150.066950][ T1474] sd 0:0:1:0: cmd ffff8880254a4528 CDB: 0x2a [ 150.076762][ T5923] kernfs bmAttributes: removing [ 150.078105][ T1474] Added buffer head 33 to ffff888022c34800 [ 150.085205][ T5923] kernfs bMaxPower: removing [ 150.090594][ C1] virtqueue callback for ffff888022c34800 (ffffffff8506e140) [ 150.097815][ T5923] kernfs urbnum: removing [ 150.100767][ C1] sd 0:0:1:0: cmd ffff8880254a4528 response 0 status 0x0 sense_len 0 [ 150.100793][ C1] No more buffers in queue [ 150.117884][ T5923] kernfs idVendor: removing [ 150.122464][ T5923] kernfs idProduct: removing [ 150.127109][ T5923] kernfs bcdDevice: removing [ 150.131963][ T5923] kernfs bDeviceClass: removing [ 150.136886][ T5923] kernfs bDeviceSubClass: removing [ 150.142085][ T5923] kernfs bDeviceProtocol: removing [ 150.147226][ T5923] kernfs bNumConfigurations: removing [ 150.152998][ T5923] kernfs bMaxPacketSize0: removing [ 150.158154][ T5923] kernfs speed: removing [ 150.162690][ T5923] kernfs rx_lanes: removing [ 150.167260][ T5923] kernfs tx_lanes: removing [ 150.171993][ T5923] kernfs busnum: removing [ 150.176663][ T5923] kernfs devnum: removing [ 150.181980][ T5923] kernfs devpath: removing [ 150.186433][ T5923] kernfs version: removing [ 150.191348][ T5923] kernfs maxchild: removing [ 150.195912][ T5923] kernfs quirks: removing [ 150.200249][ T5923] kernfs avoid_reset_quirk: removing [ 150.205699][ T5923] kernfs authorized: removing [ 150.210464][ T5923] kernfs remove: removing [ 150.216028][ T5923] kernfs ltm_capable: removing [ 150.220879][ T5923] kernfs devspec: removing [ 150.225341][ T5923] kernfs subsystem: removing [ 150.229948][ T5923] kernfs 7-1: removing [ 150.234142][ T5923] bus: 'usb': remove device 7-1 [ 150.239032][ T5923] kernfs 7-1: removing [ 150.243182][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 150.243226][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 150.243238][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 150.264771][ T5923] kernfs driver: removing [ 150.269149][ T5923] kobject: '7-1' (ffff888061bfe0a8): kobject_uevent_env [ 150.276535][ T5923] kobject: '7-1' (ffff888061bfe0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.6/usb7/7-1' [ 150.288421][ T5923] PM: Removing info for usb:7-1 [ 150.293392][ T5923] kobject: '7-1' (ffff888061bfe0a8): kobject_uevent_env [ 150.300838][ T5923] kobject: '7-1' (ffff888061bfe0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.6/usb7/7-1' [ 150.312397][ T5923] kernfs 7-1: removing [ 150.316733][ T5923] kobject: '7-1' (ffff888061bfe0a8): kobject_cleanup, parent 0000000000000000 [ 150.325683][ T5923] kobject: '7-1' (ffff888061bfe0a8): calling ktype release [ 150.333023][ T5923] kobject: '7-1': free name [ 150.337628][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.345781][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.354934][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 26 [ 150.363837][ T5930] nf_conntrack: clean_from_lists(ffff888076a56780) [ 150.370374][ T5930] nf_conntrack: nf_ct_destroy(ffff888076a56780) [ 150.376698][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888076a56780 to slab [ 150.386138][ T5930] Added buffer head 0 to ffff88801f2fce00 [ 150.393324][ T7] nf_conntrack: clean_from_lists(ffff88802127c180) [ 150.399910][ T7] nf_conntrack: nf_ct_destroy(ffff88802127c180) [ 150.406405][ T5930] nf_conntrack: normal packet for ffff888021ee3200 [ 150.413344][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.421517][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.430709][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 34 [ 150.439140][ T7] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127c180 to slab [ 150.450624][ T5930] nf_conntrack: clean_from_lists(ffff88802127c780) [ 150.457162][ T5930] nf_conntrack: nf_ct_destroy(ffff88802127c780) [ 150.463676][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127c780 to slab [ 150.480607][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.488934][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.498123][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 34 [ 150.512248][ T5930] nf_conntrack: clean_from_lists(ffff888078016f00) [ 150.518918][ T5930] nf_conntrack: nf_ct_destroy(ffff888078016f00) [ 150.525229][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888078016f00 to slab [ 150.535596][ T5930] nf_conntrack: clean_from_lists(ffff888076a57380) [ 150.542158][ T5930] nf_conntrack: nf_ct_destroy(ffff888076a57380) [ 150.548513][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888076a57380 to slab [ 150.557144][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.565343][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.574554][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 34 [ 150.585521][ T5930] nf_conntrack: clean_from_lists(ffff888025ed7c80) [ 150.592072][ T5930] nf_conntrack: nf_ct_destroy(ffff888025ed7c80) [ 150.598403][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed7c80 to slab [ 150.607926][ T7] nf_conntrack: clean_from_lists(ffff888025ed7380) [ 150.614645][ T7] nf_conntrack: nf_ct_destroy(ffff888025ed7380) [ 150.621074][ T7] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed7380 to slab [ 150.630973][ T5930] nf_conntrack: clean_from_lists(ffff888021ee3980) [ 150.637514][ T5930] nf_conntrack: nf_ct_destroy(ffff888021ee3980) [ 150.644010][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.652209][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.661501][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 34 [ 150.670082][ T5923] usb usb7-port1: debounce total 100ms stable 100ms status 0x100 [ 150.678021][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee3980 to slab [ 150.686186][ T5923] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc90013c37000 1048575 [ 150.696639][ T5923] kcov: kcov_remote_start: handle = 100000000000007, context: task [ 150.704610][ T5923] kcov: kcov_start: t = ffff88802a700000, size = 1048576, area = ffffc90013c37000 [ 150.714023][ T5923] hub 7-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 150.720654][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.728840][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.738012][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 26 [ 150.746528][ T5923] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc90013c37000 5894 [ 150.758082][ T5930] nf_conntrack: clean_from_lists(ffff88802127c600) [ 150.764723][ T5930] nf_conntrack: nf_ct_destroy(ffff88802127c600) [ 150.771047][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127c600 to slab [ 150.779198][ T5930] hub 7-0:1.0: hub_suspend [ 150.784063][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 150.792261][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc900020a9000 [ 150.801464][ C0] kcov: kcov_move_area: ffffc90017841000 1048576 <= ffffc900020a9000 19 [ 150.809867][ T5930] usb usb7: bus auto-suspend, wakeup 1 [ 150.815382][ T5930] usb usb7: dummy_bus_suspend [ 150.821376][ T5923] nf_conntrack: clean_from_lists(ffff888025ed6a80) [ 150.827924][ T5923] nf_conntrack: nf_ct_destroy(ffff888025ed6a80) [ 150.834257][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed6a80 to slab [ 150.842800][ T5923] nf_conntrack: clean_from_lists(ffff888078016c00) [ 150.849360][ T5923] nf_conntrack: nf_ct_destroy(ffff888078016c00) [ 150.855695][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888078016c00 to slab [ 150.866672][ T5923] nf_conntrack: clean_from_lists(ffff888021ee2d80) [ 150.873246][ T5923] nf_conntrack: nf_ct_destroy(ffff888021ee2d80) [ 150.879519][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee2d80 to slab [ 150.888601][ T5923] nf_conntrack: clean_from_lists(ffff888078016a80) [ 150.895426][ T5923] nf_conntrack: nf_ct_destroy(ffff888078016a80) [ 150.901765][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888078016a80 to slab [ 150.910742][ T5923] nf_conntrack: clean_from_lists(ffff888021ee2480) [ 150.917388][ T5923] nf_conntrack: nf_ct_destroy(ffff888021ee2480) [ 150.923715][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee2480 to slab [ 150.933455][ T5923] nf_conntrack: clean_from_lists(ffff888076a57200) [ 150.940064][ T5923] nf_conntrack: nf_ct_destroy(ffff888076a57200) [ 150.946397][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888076a57200 to slab [ 150.973761][ T5923] nf_conntrack: clean_from_lists(ffff88802127cd80) [ 150.980310][ T5923] nf_conntrack: nf_ct_destroy(ffff88802127cd80) [ 150.986645][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127cd80 to slab [ 150.997004][ T5923] nf_conntrack: clean_from_lists(ffff888078017200) [ 151.003602][ T5923] nf_conntrack: nf_ct_destroy(ffff888078017200) [ 151.009867][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888078017200 to slab [ 151.021177][ T5923] nf_conntrack: clean_from_lists(ffff888078016300) [ 151.027736][ T5923] nf_conntrack: nf_ct_destroy(ffff888078016300) [ 151.034044][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888078016300 to slab [ 151.045934][ T5923] nf_conntrack: clean_from_lists(ffff888025ed7e00) [ 151.052936][ T5923] nf_conntrack: nf_ct_destroy(ffff888025ed7e00) [ 151.059201][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888025ed7e00 to slab [ 151.071624][ T5923] nf_conntrack: clean_from_lists(ffff888076a57b00) [ 151.078223][ T5923] nf_conntrack: nf_ct_destroy(ffff888076a57b00) [ 151.084611][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888076a57b00 to slab [ 151.098470][ T5923] nf_conntrack: clean_from_lists(ffff88802127db00) [ 151.105056][ T5923] nf_conntrack: nf_ct_destroy(ffff88802127db00) [ 151.111527][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127db00 to slab [ 151.124254][ T5923] nf_conntrack: clean_from_lists(ffff88802127cf00) [ 151.130817][ T5923] nf_conntrack: nf_ct_destroy(ffff88802127cf00) [ 151.137063][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127cf00 to slab [ 151.148684][ T5923] nf_conntrack: clean_from_lists(ffff888021ee2f00) [ 151.155358][ T5923] nf_conntrack: nf_ct_destroy(ffff888021ee2f00) [ 151.161738][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee2f00 to slab [ 151.170685][ T5923] nf_conntrack: clean_from_lists(ffff88802127cc00) [ 151.177355][ T5923] nf_conntrack: nf_ct_destroy(ffff88802127cc00) [ 151.183710][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff88802127cc00 to slab [ 151.193095][ T5923] nf_conntrack: clean_from_lists(ffff888021ee3b00) [ 151.199926][ T5923] nf_conntrack: nf_ct_destroy(ffff888021ee3b00) [ 151.206313][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee3b00 to slab [ 151.217853][ T5923] nf_conntrack: clean_from_lists(ffff88802504c000) [ 151.224444][ T5923] nf_conntrack: nf_ct_destroy(ffff88802504c000) [ 151.231219][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff88802504c000 to slab [ 151.242676][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 151.250103][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 151.257060][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 151.264168][ T5930] Added buffer head 0 to ffff88801f2fce00 [ 151.284853][ T5923] nf_conntrack: clean_from_lists(ffff888021ee3380) [ 151.291604][ T5930] nf_conntrack: normal packet for ffff888076a56900 [ 151.298242][ T5923] nf_conntrack: nf_ct_destroy(ffff888021ee3380) [ 151.304949][ T5923] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee3380 to slab [ 151.325698][ T5930] nf_conntrack: clean_from_lists(ffff888021ee2600) [ 151.332571][ T5930] nf_conntrack: nf_ct_destroy(ffff888021ee2600) [ 151.338834][ T5930] nf_conntrack: nf_ct_destroy: returning ct=ffff888021ee2600 to slab [ 151.357138][ T5930] nf_conntrack: normal packet for ffff888078016480 [ 151.553518][ T4195] kernfs log: removing [ 151.557711][ T4195] kobject: 'log' (ffff888060f69380): kobject_cleanup, parent 0000000000000000 [ 151.568297][ T4195] kobject: 'log' (ffff888060f69380): calling ktype release [ 151.575619][ T4195] kobject: 'log': free name [ 151.599465][ T4195] kernfs default: removing [ 151.604014][ T4195] kobject: 'default' (ffff8880535e6960): kobject_cleanup, parent 0000000000000000 [ 151.613394][ T4195] kobject: 'default' (ffff8880535e6960): calling ktype release [ 151.621018][ T4195] kobject: 'default': free name [ 151.625975][ T4195] kernfs EIO: removing [ 151.630077][ T4195] kobject: 'EIO' (ffff8880535e6a08): kobject_cleanup, parent 0000000000000000 [ 151.639088][ T4195] kobject: 'EIO' (ffff8880535e6a08): calling ktype release [ 151.646445][ T4195] kobject: 'EIO': free name [ 151.652274][ T4195] kernfs ENOSPC: removing [ 151.656666][ T4195] kobject: 'ENOSPC' (ffff8880535e6ab0): kobject_cleanup, parent 0000000000000000 [ 151.665958][ T4195] kobject: 'ENOSPC' (ffff8880535e6ab0): calling ktype release [ 151.673546][ T4195] kobject: 'ENOSPC': free name [ 151.678417][ T4195] kernfs ENODEV: removing [ 151.683118][ T4195] kobject: 'ENODEV' (ffff8880535e6b58): kobject_cleanup, parent 0000000000000000 [ 151.693232][ T4195] kobject: 'ENODEV' (ffff8880535e6b58): calling ktype release [ 151.700785][ T4195] kobject: 'ENODEV': free name [ 151.705583][ T4195] kernfs metadata: removing [ 151.710266][ T4195] kobject: 'metadata' (ffff8880535e68c8): kobject_cleanup, parent 0000000000000000 [ 151.720153][ T4195] kobject: 'metadata' (ffff8880535e68c8): calling ktype release [ 151.728122][ T4195] kobject: 'metadata': free name [ 151.733160][ T4195] kernfs error: removing [ 151.737455][ T4195] kobject: 'error' (ffff8880535e6830): kobject_cleanup, parent 0000000000000000 [ 151.746708][ T4195] kobject: 'error' (ffff8880535e6830): calling ktype release [ 151.754175][ T4195] kobject: 'error': free name [ 151.758882][ T4195] kernfs stats: removing [ 151.764721][ T4195] kobject: 'stats' (ffff8880535e6c08): kobject_cleanup, parent 0000000000000000 [ 151.773980][ T4195] kobject: 'stats' (ffff8880535e6c08): calling ktype release [ 151.781421][ T4195] kobject: 'stats': free name [ 151.786138][ T4195] kernfs loop0: removing [ 151.791454][ T4195] kobject: 'loop0' (ffff8880535e6798): kobject_cleanup, parent 0000000000000000 [ 151.800631][ T4195] kobject: 'loop0' (ffff8880535e6798): calling ktype release [ 151.808277][ T4195] kobject: 'loop0': free name [ 151.871026][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 151.879464][ T4195] kernfs backing_file: removing [ 151.890727][ T4195] kernfs offset: removing [ 151.895137][ T4195] kernfs sizelimit: removing [ 151.899776][ T4195] kernfs autoclear: removing [ 151.904665][ T4195] kernfs partscan: removing [ 151.909230][ T4195] kernfs dio: removing [ 151.913549][ T4195] kernfs loop: removing [ 151.917891][ T4195] kobject: 'loop0' (ffff888017c08c00): kobject_uevent_env [ 151.925669][ T4195] kobject: 'loop0' (ffff888017c08c00): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 151.936307][ T3851] Insert table=255 a9fe9014/32 [ 151.943143][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 151.951446][ T4195] kobject: 'loop0' (ffff888017c08c00): kobject_uevent_env [ 151.958973][ T4195] kobject: 'loop0' (ffff888017c08c00): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 151.966120][ T3851] In tnode_resize ffff88802c447520 inflate_threshold=50 threshold=25 [ 151.979084][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 151.990210][ T3851] In tnode_resize ffff8880193cc9a0 inflate_threshold=50 threshold=25 [ 151.999567][ T3851] In tnode_resize ffff88802b383f20 inflate_threshold=50 threshold=25 [ 152.008296][ T3851] Insert table=255 a9feffff/32 [ 152.013499][ T3851] Insert table=255 a9feffff/32 [ 152.018516][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.144.20 in wq:ffffffff974d9858 [ 152.040726][ T3851] Insert table=254 a9fe0000/16 [ 152.242626][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 152.250058][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 152.257035][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 152.264185][ T5930] Added buffer head 0 to ffff88801f2fce00 [ 152.270768][ T5930] nf_conntrack: normal packet for ffff888076a56a80 [ 152.277341][ T5930] nf_conntrack: normal packet for ffff888025ed6d80 [ 152.351846][ T5930] nf_conntrack: normal packet for ffff888021ee3080 [ 152.530539][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.144.20 for cmd:0 at entry:ffff888056ccaf00 [ 152.583521][ T3851] Insert table=255 a9fe1aaf/32 [ 152.588406][ T3851] In tnode_resize ffff88802c447520 inflate_threshold=50 threshold=25 [ 152.596670][ T3851] In tnode_resize ffff8880193cc9a0 inflate_threshold=50 threshold=25 [ 152.604920][ T3851] In tnode_resize ffff88802b383f20 inflate_threshold=50 threshold=25 [ 152.613478][ T3851] Insert table=255 a9feffff/32 [ 152.618350][ T3851] Insert table=255 a9feffff/32 [ 152.623276][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.26.175 in wq:ffffffff974d9858 [ 152.635560][ T3851] Insert table=254 a9fe0000/16 [ 152.793874][ T3851] Insert table=255 a9fedd69/32 [ 152.798730][ T3851] In tnode_resize ffff888020efdb20 inflate_threshold=50 threshold=25 [ 152.807182][ T3851] In tnode_resize ffff88802c447520 inflate_threshold=50 threshold=25 [ 152.816233][ T3851] In tnode_resize ffff8880193cc9a0 inflate_threshold=50 threshold=25 [ 152.824528][ T3851] In tnode_resize ffff88802b383f20 inflate_threshold=50 threshold=25 [ 152.832987][ T3851] Insert table=255 a9feffff/32 [ 152.838226][ T3851] Insert table=255 a9feffff/32 [ 152.843264][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.221.105 in wq:ffffffff974d9858 [ 152.854837][ T3851] Insert table=254 a9fe0000/16 [ 153.140511][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.26.175 for cmd:0 at entry:ffff88802790d900 [ 153.154349][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.221.105 for cmd:0 at entry:ffff88801f923500 [ 153.160496][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 153.172711][ T3851] Insert table=255 a9fef8bc/32 [ 153.185504][ T3851] AT ffff8880625fe900 s=40 16 [ 153.190273][ T3851] In tnode_resize ffff8880625fe920 inflate_threshold=50 threshold=25 [ 153.198502][ T3851] In inflate [ 153.201790][ T3851] AT ffff888019396200 s=40 32 [ 153.206557][ T3851] In tnode_resize ffff88802c447520 inflate_threshold=50 threshold=25 [ 153.214761][ T3851] In tnode_resize ffff8880193cc9a0 inflate_threshold=50 threshold=25 [ 153.223082][ T3851] In tnode_resize ffff88802b383f20 inflate_threshold=50 threshold=25 [ 153.233038][ T3851] Insert table=255 a9feffff/32 [ 153.237943][ T3851] Insert table=255 a9feffff/32 [ 153.242785][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 153.242837][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 153.242850][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 153.264857][ T5931] Added buffer head 0 to ffff88801f2fce00 [ 153.271262][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.248.188 in wq:ffffffff974d9858 [ 153.282829][ T3851] Insert table=254 a9fe0000/16 [ 153.426348][ T3851] Insert table=255 a9fedd69/32 [ 153.431526][ T3851] Insert table=255 a9feffff/32 [ 153.436504][ T3851] Insert table=255 a9feffff/32 [ 153.441583][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.221.105 in wq:ffffffff974d9858 [ 153.456825][ T3851] Insert table=254 a9fe0000/16 [ 153.461692][ C1] virtqueue callback for ffff8880240c9900 (ffffffff85497fd0) [ 153.461877][ C1] No more buffers in queue [ 153.461929][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 153.461954][ C1] No more buffers in queue [ 153.462086][ C1] No more buffers in queue [ 153.462094][ C1] eth0: xmit ffff88802538ddc0 42:01:0a:80:00:01 [ 153.462113][ C1] Added buffer head 14 to ffff8880240c9a00 [ 153.462157][ C1] virtqueue callback for ffff8880240c9a00 (ffffffff854980c0) [ 153.462357][ C1] Sent skb ffff88802538ddc0 [ 153.462378][ C1] No more buffers in queue [ 153.661136][ T3851] Insert table=255 a9fefc01/32 [ 153.666061][ T3851] In tnode_resize ffff888019396220 inflate_threshold=50 threshold=25 [ 153.674479][ T3851] In tnode_resize ffff88802c447520 inflate_threshold=50 threshold=25 [ 153.684741][ T3851] In tnode_resize ffff8880193cc9a0 inflate_threshold=50 threshold=25 [ 153.692979][ T3851] In tnode_resize ffff88802b383f20 inflate_threshold=50 threshold=25 [ 153.701513][ T3851] Insert table=255 a9feffff/32 [ 153.706539][ T3851] Insert table=255 a9feffff/32 [ 153.711539][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.252.1 in wq:ffffffff974d9858 [ 153.723880][ T3851] Insert table=254 a9fe0000/16 [ 153.790866][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.248.188 for cmd:0 at entry:ffff8880625fec00 [ 153.800500][ C1] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 153.804900][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.221.105 for cmd:0 at entry:ffff8880213f8300 [ 153.819305][ T4795] nf_conntrack: normal packet for ffff888076a56f00 [ 153.830508][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.252.1 for cmd:0 at entry:ffff888027908500 [ 154.242543][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 154.250044][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 154.256981][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 154.264249][ T5930] Added buffer head 0 to ffff88801f2fce00 [ 154.360709][ C0] net_ratelimit: 78 callbacks suppressed [ 154.360725][ C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 154.377221][ T5931] nf_conntrack: normal packet for ffff888076a56900 [ 154.383858][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.393665][ C1] wireguard: wg2: Receiving keepalive packet from peer 11 ([::1]:20001/0%0) [ 154.430786][ C0] wireguard: wg0: Sending keepalive packet to peer 32 ([::1]:20003/0%0) [ 154.442515][ T5931] nf_conntrack: normal packet for ffff888078016480 [ 154.449163][ C0] wireguard: wg2: Receiving keepalive packet from peer 35 ([::1]:20001/0%0) [ 154.479708][ T3851] Insert table=255 a9fedd69/32 [ 154.485065][ T3851] Insert table=255 a9feffff/32 [ 154.490106][ T3851] Insert table=255 a9feffff/32 [ 154.495081][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.221.105 in wq:ffffffff974d9858 [ 154.506601][ T3851] Insert table=254 a9fe0000/16 [ 154.590485][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 154.598945][ T4408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.607262][ C1] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 154.910526][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 154.918958][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 155.010438][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.221.105 for cmd:0 at entry:ffff888066909180 [ 155.069077][ T3851] Insert table=255 a9fedd69/32 [ 155.073947][ C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 155.080464][ C0] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 155.094074][ T3851] Insert table=255 a9feffff/32 [ 155.098408][ C0] wireguard: wg2: Retrying handshake with peer 24 (127.0.0.1:20002) because we stopped hearing back after 15 seconds [ 155.103255][ T3851] Insert table=255 a9feffff/32 [ 155.118158][ T7] nf_conntrack: normal packet for ffff888021ee3080 [ 155.121554][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.221.105 in wq:ffffffff974d9858 [ 155.127806][ T4803] nf_conntrack: normal packet for ffff888025ed7500 [ 155.143973][ T3851] Insert table=254 a9fe0000/16 [ 155.242487][ C0] virtqueue callback for ffff88801f2fce00 (ffffffff84450960) [ 155.249934][ C0] virtqueue interrupt with no work for ffff88801f2fcd00 [ 155.256877][ C0] virtqueue interrupt with no work for ffff88801f2fcc00 [ 155.263998][ T5931] Added buffer head 0 to ffff88801f2fce00 [ 155.313322][ T5931] nf_conntrack: normal packet for ffff888025ed6d80 [ 155.320054][ T5931] nf_conntrack: normal packet for ffff888076a56a80