last executing test programs: 24.217791164s ago: executing program 0 (id=660): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 23.928953925s ago: executing program 0 (id=662): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0xffffffffffffffff, 0x0, 0x0, 0xc}) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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") syz_emit_ethernet(0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="aab2aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 23.616929477s ago: executing program 0 (id=663): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710360000000000000000000001ffe7ee00000000000000000200000000", 0x58}], 0x1) 23.401665418s ago: executing program 0 (id=664): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 22.364021785s ago: executing program 0 (id=676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 21.43367405s ago: executing program 0 (id=683): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="4d01000080000000002c00e50414090b009200ff", 0x14, 0x40080, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14) 20.883508344s ago: executing program 32 (id=683): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="4d01000080000000002c00e50414090b009200ff", 0x14, 0x40080, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14) 5.383445997s ago: executing program 2 (id=742): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0xfe, 0x61a7, &(0x7f0000012bc0)="$eJzs3U1vHVf9B/DfffRD/22tLqr+I4TctDyU0iROSggUaLuABZsuULYoketWESmgJKC0sogrb1iw4hWAkFgixBKx4AV0wZYdK1ZEspFAXXXQ2OfE45t7a6eO71z7fD6SM/ObM+N7xt879yF35p4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL73/vBSicirv08LViK+L/oRXQjFup6OSIWlpfy+v2IeC52muPZiBjMRdTb7/zzdMSrEfHRUxFb2+ur9eKLh+zHd//499/98Im3/vaHwfn//ulO77VJ6929+6v//Pne0fYZAAAASlNVVdVJb/PPpPf33bY7BQBMRX7+r5K8/NTXv/7nW3+Zpf6o1Wq1Wj2Fuqka716ziIiN5jb1awYfxwPACbMRH7fdBVok/6L1I+KJtjsBzLRO2x3gWGxtr692Ur6d5vPB8m57PhdkX/4bnQfXd0yaHmT0HJNp3b82oxfPTOjPwpT6MEty/t3R/K/ttg/Tesed/7RMyn+4e+lTcXL+vdH8R5ye/Ltj8y9Vzr//SPn35A8AAAAAADMs////Usuf/84dfVcO5dM+/12eUh8AAAAAAAAA4HE76vh/Dxj/DwAAAGZW/V699pun9pZN+i62evnVTsSTI+sDhUkXyyy23Q8AAAAAAAAAAAAAKEl/9xzeq52IQUQ8ubhYVVX90zRaP6qjbn/Slb7/ULK2H+QBAGDXR0+NXMvfiZiPiKvR3fmuv8Hi4mJVzS8sVovVwlx+PTucm68WGu9r87ReNjc8xAvi/rCqf9l8Y7umg94vH9Q++vvq2xpWvUN07DEZpL/mhOaWwgaAZPfZaMsz0ilTVU9PevEB+zj+T6GlWGr7fsXsa/tuCgAAABy/qqqqTvo67zNpfL9u250CAKYiP/+Pfi5wpLo7oT3i8fx+tVqtVqvVn6luqsa71ywiYqO5Tf2awXD8AHDCbMTHbXeBFsm/aP2IeK7tTgAzrdN2BzgWW9vrq52Ub6f5fJDGd8/nguzLf6Ozs13eftz0IKPnmEzr/rUZvXhmQn+enVIfZknOvzua/7Xd9mFa77jzn5ZJ+Q93LpkrT86/N5r/iNOTf3ds/qXK+fcfKf+e/AEAAAAAYIbl//9f8vlv3mUAAAAAAAAAOHG2ttdX83Wv+fP/z41Zz/Wfp1POv/Oo+S+kefmfaDn/7kj+Xx5Zr9eYv//m3vH/7+311d/f+df/5+lh85/LM510z+qke0Qn3VKnn6ZH2buHbQ56w/qWBp1ur5/O+akG78SNuBlrcWHfut3099hrX9nXXvd0sK/94r72/kPtl/a1D9L3DlQLuf1crMZP4ma8vdNet80dsP/zB7RXB7Tn/Hse/4uU8+83fur8F1N7Z2Rau/9h96Hjvjkddztv3Pj8Ly8c/+4caDN6D/atqd6/sy30Z+dv8sQwfnZ77da5u9fv3Lm1Emmyb+nFSJPHLOc/2PmZ23v8f2G3PT/uN4/X+x8OHzn/WbEZ/Yn5v9CYr/f3pSn3rQ05/2H6yfm/ndrHH/8nOf/Jx//LLfQHAAAAAAAAAAAAAAAAPk1VVTuXiL4REZfT9T9tXZsJAExXfv6vkrxcrVar1Wr16aubqvFebxYR8dfmNvVrhl+M+2UAwCz7JCL+0XYnaI38C5a/76+evth2Z4Cpuv3+Bz+6fvPm2q3bbfcEAAAAAAAAAPis8vify3vjP3/yYkQsjay3b/zXN2P5qON/9vPMgwFGH/NA3xNsdoe9bmO48edjZ3zuc5PG/z4bD4//ncfE7TX3Y4LBAe3DA9rnDmifH7t0L62xF3o05Pyfb4x3Xud/ZmT49RLGfx0d874EOf+zjftznf+XRtZr5l/9duby3zjsipvR3Zf/+Tvv/fT87fc/eOXGe9ffXXt37ceXVlYuXLp8+cqVK+ffuXFz7cLuv8fT6xmQ889jXzsPtCw5/5y5/MuS8/9CquVflpz/F1Mt/7Lk/PPrPfmXJeef3/vIvyw5/5dSLf+y5Py/kmr5l2Vre32uzv/lVMu/LPn4/2qq5V+WnP8rqZZ/WXL+51It/7Lk/M+n+hD5+3r4UyTnnz/hcvyXJee/kmr5lyXnfzHV8i9Lzv9SquVflpz/q6mWf1ly/l9LtfzLkvO/nGr5lyXn//VUy78sOf8rqZZ/WXL+30i1/MuS8/9mquVflpz/a6mWf1ly/t9KtfzLkvP/dqrlX5ac/3dSLf+y5PxfT7X8y7L3/f9mzJgxk2fafmQCAAAAAAAAAAAAAEZN43TitvcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcp3lHcDP7Ie9dggxEIKTGtgkJoRkya4/4g9aFxMI0AClQEKhH9iud20W/IXXLoEi2TRQImFUVFE1vWgLKGojVRVWxQWtKM1F1Y+r0l7Qm4qqElKjyqCAitRWNFvNnPd9PTM7OzPrHa9nz/v7ScmzO3POnHfOvOfsPLv+zwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZne+ee5ztaIo6v81/relKF5U/3rT5JbGbW+40SMEAAAAVuv/Gv9//pZ0w8E+Vmpa5u9e9Y9fX1xcXCw+MPq7419aXEx3TBbF+MaiaNwXXf73D9aalwmeKCZqI03fj/TY/GiP+8d63D/e4/4NPe7f2OP+iR73L9kBS2wqfx/TeLDtjS+3lLu0uLUYb9y3vcNaT9Q2jozE3+U01BrrLI4fK+aLE8VcMdOyfLlsrbH8N++sb+vtRdzWSNO2ttVnyA8/dTSOoRb28faWbV19zOj7byomf/TDTx3943NXbu9Ue+6Glscrx3nvXfVxfibcUo61VmxM+ySOc6RpnNs6vCajLeOsNdarf90+zuf7HOfo1WGuqfbXfKIYaXz97cZ+Gmv+tV7aT9vCbf99d1EUF68Ou32ZJdsqRorNLbeMXH19JsoZWX+M+lR6aTG2onl6Zx/ztF5nt7fO0/ZjIr7+d4b1xpYZQ/PL9P1Pb1jyuq90nkb1Z73csdI+Bwd9rAzLHIzz4tuNJ/1kxzm4PTz/T92z/BzsOHc6zMH0vJvm4F295uDIhtHGmNOLUGusc3UO7mhZfrSxpVqjPndP9zk4fe7kmemFT3zy9fMnjxyfOz53ateOHTO79uzZt2/f9LH5E3Mz5f+vcW8Pv83FSDoG7gr7Lh4Dr21btnmqLn5lcMfhRJfjcEvbsoM+Dsfan1xtbQ7IpXO6PDYere/0iUsjxTLHWOP1uW/1x2F63k3H4VjTcdjxZ0qH43Csj+OwvsyZ+/p7zzLW9F+nMVyvnwVbmuZg+/uR9jk46PcjwzIHJ8K8+Nf7lv9ZsC2M98mplb4fGV0yB9PTDeee+i3p/f7EvkbpNC/vqN9x04bi/MLc2QceP3Lu3NkdRShr4mVNc6V9vm5uek7Fkvk6suL5enD+VU/e0eH2LWFfTby+/r+JZV+r+jK7H+j+WjV+unXeny237ixCGbC13p+dfprX92fqJbvsz/oyn5le/Xvx1Jc2nX/Hlzn/xr7/hXJ76aGeGB0fK4/f0bR3xlvOx60v1Vjj3FVrbPv56f7Ox+Phv7U+H9/a5Xy8tW3ZQZ+Px9ufXDwf13r9tmN12l/PiTBPTsx0Px/Xl9m6c6Vzcqzr+fjuUGth/78udAqpL2qaO8vN27StsbHx8LzG4hZa5+muluXHQ29W39YzO69tnt57d/lYo+nZXbVW83SybdlBz9N0vlpuntZ6/fbt2rS/nhNhXty6q/s8rS/z7O7Vnzs3xS+bzp0bes3B8dEN9TGPp0lYnu8XN8U5+EBxtDhdnChmG/duaMynWmNbUw/2Nwc3hP/W+ly5tcscvLdt2UHPwfRzbLm5Vxtb+uQHoP31nAjz4qkHu8/B+jJv2TvY9673hlvSMk3vXdt/v7bc77zuaNtN1/N3XvVx/s3e7r+brS9zYt9K+8zu++n+cMtNHfZT+/G73DE1W6zNftoaxnll3/L7qT6e+jJf2t/nfDpYFMWFjz3U+H1v+PvKn5//ztdb/u7S6W86Fz720A9uPva3Kxk/AOvfC2XZXP6sa/rLVD9//wcAAADWhdj3j4Sa6P8BAACgMmLfH/9VeKL/BwAAgMqIff9YqEkm/f/Wt1yZf+FCkZL5i0G8P+2GR8rlYsZ1Jnw/uXhV/faHnp778V9e6G/bI0VR/OSR3+i4/NZH4rhKk2Gclx9uvX3pihf62v7hx64u15xf/3J4/Ph8+p0GnSK4M0VRfPOWLzS2M/nBS4367COHG/W9F598or7M8/vL7+P6z72sXP4PQvj34LEjLes/F/bD90KdeUfn/RHX+9ql123b+/6r24vr1e56ceNpP/Wh8nHj5+R88Yly+biflxv/X33+ma/Vl3/8NZ3Hf2Gk8/ifCY/79MNX5usz7n9eWS7f/BrUv4/rfTaMP27v6bD+A1/9VsfxX/5cufyZt5bLHQ41bv/e8P32t16Zb95fj9eOtDyv4m3lcnH7M9/57cb98fHi47ePf+LQpZb90T4/nv3n8nGm25aPt8ftRH/Rtv364zTPz7j9Z37rcMt+7rX9y+997pX1x23f/v1ty422rd/+iU1/+NkvdNxeHM/BPzvT8nwOviccx2H7T30ozMdw//9e/kLLdqPD72k9/8Tlv7zlQsvzid7+o3L7l994vFH/Y/LHv3/Ti25+8cVX1/ddUXz7feXj9dr+8T863TL+r9x2X+P1iPfHjH779pcTt3/241OnTi+cn59t2quNz855ZzmejRObNtfHe0s4t7Z/f+j0uQ/PnZ2cmZwpisnqfoTeNftqqD8oy8WVrn/fY+H1vOP3vrn5nn/6fLz9Xx4tb7/0jvLn1mvDcl8Mt28pX7/F2iq3/9SdtzWO79qz5fctOfYB2Lb9P/f1tWB4/u3vC+J8P/PyDzf2Q/2+xs+NeFyvcvzfnS0f5xthvy6GT2a+67ar22tePn42wqX3lcf7qvdfOM3F1/VPwuv9ru+Vjx/HFZ/vd8P7mG9tbT3fxfnxjQsj7Y/f+BSPi+F8Ulws749Lxf196fnbOg4vfg5JcfH2xve/kx7n9hU9zeUsfGJh+sT8qfOPT5+bWzg3vfCJTx46efr8qXOHGp/leegjvda/en7a3Dg/zc7t2V3MbCqK4nQxswYnrOsz/vpX/Y3/zGNHZ/fO3DM7d+zI+WPnHjszd/b40YWFo3OzC/ccOXZs7uO91p+fPbBj5/5de3dOHZ+fPbBv//5d+6fmT52uD6McVA97Zj46dersocYqCwd279/x4IO7Z6ZOnp6dO7B3ZmbqfK/1Gz+bpupr//rU2bkTR87Nn5ybWpj/5NyBHfv37NnZ89MAT545tjA5ffb8qenzC3Nnp8vnMnmucXP9Z1+v9ammhX8r38+2q5UfxFe8+/496fNZ657+9LIPVS7S9gGiV8Jn0fzDS87s6+f72PePh5pk0v8DAABADmLfvyHURP8PAAAAlRH7/o2hJvp/AAAAqIzY90+EmmTS/8v/y//3l/8v7x9k/r9Tfr6Q/x+q/P+Zj5W50vWe/4/5efn/PNzg/P+qty//L/9fvfx///n59T5++X/5f5Yatvx/7Ps3FUWW/T8AAADkIPb9m0NN9P8AAABQGbHvvynURP8PAAAAlRH7/heFmmTS/8v/95X/39krcFX9/P/gr/8v/y//vyb5//jiyP9nY8X5+/c/2vKt/H8g/y//L/8v/y//z6qNL3vPjcr/x77/5lCTTPp/AAAAyEHs+18caqL/BwAAgMqIff8toSb6fwAAAKiM2PdvCTXJpP+X/3f9f/l/+f9K5/9Xe/3/psHI/68Prv/fnfx/D9ec/5+Q/1+P+f/xwY5/uPP/PYcv/891MWzX/499/0tCTTLp/wEAACAHse9/aaiJ/h8AAAAqI/b9Lws10f8DAABAZcS+/9ZQk0z6f/l/+X/5f/l/+f/O2+99/f/yK/n/4SL/3538fw+u/59X/n/A4x/u/P+gr/8//nD7+vL/dDJs+f/Y97881CST/h8AAAByEPv+20JN+uv/J67PqAAAAIBBin3/K0JN/P0fAAAAKiP2/VtDTTLp/+X/5f/l/+X/5f87b793/r8k/z9c5P+7k//vQf5f/l/+v7/8f4c3v/L/dDJs+f/Y998eapJJ/w8AAAA5iH3/HaEm+n8AAACojNj3/1Soif4fAAAAKiP2/dtCTTLp/+X/5f/l//PK/9+/Qf5f/r/a5P+7k//vQf5f/l/+v8/r/y+1kvz/xl4PRmUMW/4/9v2vDDXJpP8HAACAHMS+/1WhJvp/AAAAqIzY97861ET/DwAAAJUR+/7JUJNM+n/5/2rl///0r596dSH/L//fY/sVzf/HaSD/nzn5/+7k/3uQ/5f/l/9fk/w/+Ri2/H/s++8MNcmk/wcAAIAcxL7/rlAT/T8AAABURuz77w410f8DAABAZcS+f3uoSSb9v/x/tfL/kfy//H+37Vc0/5/I/+dN/r+DpoNU/r8H+X/5/+zz//Hdr/w/gzFs+f/Y978m1CST/h8AAAByEPv+e0JN9P8AAABQGbHvf22oif4fAAAAKiP2/feGmmTS/8v/y//L/8v/y/933r78//ok/9/dSvP/G+T/5f/l/zPL/7v+P4M1bPn/2Pe/LtQkk/4fAAAAchD7/vtCTfT/AAAAUBnx32+W/+5V/w8AAABVFPv+qVCTTPp/+X/5/5zy/zX5f/l/+f/Kk//vzvX/e5D/l/+X/5f/Z6CGLf8f+/7Xh5pk0v8DAABADmLf/0Coif4fAAAAKiP2/dOhJvp/AAAAqIzY98+EmmTS/8v/36j8/yb5f9f/l/+X/097Vf5/cOT/u5P/70H+X/6/avn/opD/54Yatvx/7Pt3hJpk0v8DAABADmLfvzPURP8PAAAAlRH7/l2hJvp/AAAAqIzY9+8ONcmk/5f/d/1/+X/5f/n/ztuX/1+f5P+7k//vQf5f/r9q+X/X/+cGG7b8f+z7Hww1yaT/BwAAgBzEvn9PqIn+HwAAACoj9v17Q01C/9/p33UDAAAA60vs+/eFmmTy93/5/4rk/3/z71u2Lf8v/99t+4PJ/2+S/w9V/n+4VDT/335YXDP5/x7k/69bfr4YGcgQb9j45f/l/7k2w5b/j33//lCTTPp/AAAAyEHs+98QaqL/BwAAgMqIff9Ph5ro/wEAAKAyYt//M6EmmfT/8v8Vyf+3kf+X/++2fdf/l/+vsorm/wemUvn/Efn/9ZT/d/1/+f9e61NN1z//H7/qL/8f+/4DoSaZ9P8AAACQg9j3/2yoyXL9//hajAoAAAAYpNj3vzHUxN//AQAAoDJi338w1CST/l/+X/5f/l/+//rk/99YtBvG/H998sj/V8sQ5//7+heE8v+u/y//vybjb/9RM5Dxy//L/7PUsF3/P/b9bwo1yaT/BwAAgBzEvv+hUBP9PwAAAFRG7PvfHGqi/wcAAIDKiH3/W0JNMun/5f/l/+X/5f9d/7/z9uX/16chzv/3Rf5f/l/+f/2OX/5f/p+lhi3/H/v+h0NNMun/AQAAIAex739rqIn+HwAAACoj9v1vCzXR/wMAAEBlxL7/7aEmmfT/8v/y//L/8v/y/523L/+/Psn/dyf/34P8v/y//L/8PwM1bPn/2Pf/XKhJJv0/AAAA5CD2/Y+Emuj/AQAAoDJi3/+OUBP9PwAAAFRG7PvfGWqSSf8v/y//L/8v/y//33n78v/rk/x/d/L/Pcj/y//L/8v/M1DDlv+Pff+7Qk0y6f8BAAAgB7Hv//lQE/0/AAAAVEbs+98daqL/BwAAgMqIff8vhJpk0v/L/8v/D1f+f/FC83ry//L/xaDy//WV5P+zIP/fnfx/Dx3y/xvl/+X/5f/l/7lmw5b/j33/e0JNMun/AQAAIAex739vqIn+HwAAACoj9v3vCzXR/wMAAEBlxL7/0VCTTPp/+f8s8//pKQ9f/t/1/+X/Xf9f/n915P+7k//vwfX/5f/l/+X/Gahhy//Hvv+xUJNM+n8AAADIQez73x9qov8HAACAyoh9/y+Gmuj/AQAAoDJi3/+BUJNM+n/5/yzz/0N8/f+q5f/HWuZHTvn/iabXM81L+X/5/zUg/9+d/H8P8v/y/8Oc/w+zedMy68v/M4yGLf8f+/4Phppk0v8DAABADmLf/0uhJvp/AAAAqIzY9/9yqIn+HwAAACoj9v2/EmqSSf9fwfz/xUL+X/5/aPL/rfMjp/y/6/8vJf+/NuT/u5P/70H+X/5/mPP/Pcj/M4yGLf8f+/5fDTVZtvH7wX/18TQBAACAIRL7/g+FmmTy938AAADIQez7D4Wa6P8BAACgMmLffzjUJJP+v4L5/1Ve/z9eUVX+X/5/0Pn/Efl/+X/5/zUwuPz/K24uCvl/+X/5f/l/+X/5f1Zj2PL/se8/EmqSSf8PAAAAOYh9/6+Fmuj/AQAAoDJi33801ET/DwAAAJUR+/7ZUJNM+v8bmP8fH878v+v/X2v+/yfy/67/H8j/dyb/vzZc/787+f8e5P/l/+X/5f8ZqGHL/8e+fy7UJJP+HwAAACos/To49v3HQk30/wAAAFAZse8/Hmqi/wcAAIDKiH3/h0NNMun/Xf9f/t/1/29E/n+sZXn5/5L8v/z/IMj/dyf/34P8v/y//L/8PwM1bPn/2PfPh5pk0v8DAABADmLf/5FQE/0/AAAAVEbs+z8aaqL/BwAAgMqIff+JUJNM+n/5f/n/3PP/taK46Pr/8v+dti//vz7J/3cn/9+D/L/8v/y//D8DNWz5/9j3nww1yaT/BwAAgBz8P3v30STXed1xuE2DCOWF/RG89spLe0V/BG+9c5XXThKVA0nlLFE5ByrnnBOVc86ZyjlSkVIVVBycc4DBNG4DM43pe9/zPJtjoAhPQxzS9Tf0qzd3///ELfY/AAAADCN3///GLfY/AAAADCN3///FLU32v/5f/9+9/1/t5P3//X+9/v8c/b/+fxsO9Pcn1v91l4rCL9n///O/XP+f+n/9v/5/kv5f/6//52Jz6/9z9/9/3NJk/wMAAEAHufvvErfY/wAAADCM3P13jVvsfwAAABhG7v7r45Ym+1//r//X/+v/9/X/t+r/9f/L5v3/afr/DfT/+n/9v/6frZpb/5+7/25xS5P9DwAAAB3k7r973GL/AwAAwDBy998jbrH/AQAAYBi5++8ZtzTZ//p//b/+fyn9/0nv/1/0+9H/6//X0f9P0/9voP/X/+v/9f9s1dz6/9z994pbmux/AAAA6CB3/73jFvsfAAAAhpG7/z5xi/0PAAAAw8jdf9+4pcn+1//r//X/S+n/j+n9f/2//n/hblmd/3eC/v8g/f8GG/r/1Ur/P+Wy+/n1v73lfP5L0P/r/zlobv1/7v77xS3/tlqdPOxvEgAAAJiV3P33j1ua/Pk/AAAAdJC7/4a4xf4HAACAWTrMf18/d/+NcUuT/a//1//r//X/+v/1X1//v0ze/5929P7/n/7hv/+rb//v/f9p3v/fdv9/53eG/p9lm1v/n7v/prilyf4HAACADnL3PyBusf8BAABgGLn7Hxi32P8AAAAwjNz9D4pbmux//f9o/f/f7vt1F/T/e7WL/l//r//X/49O/z/N+/8b7P1r7kz9UP+v//f+v/6fo5lb/5+7/8FxS5P9DwAAAB3k7n9I3GL/AwAAwDBy9z80brH/AQAAYBi5+x8WtzTZ//r/0fr//b/O+//6/3VfX/+v/x+Z/n+a/n+DUd7/P+R3za77+aPa9efX/+v/OWhu/X/u/ofHLU32PwAAAHSQu/8RcYv9DwAAAMPI3f/IuMX+BwAAgGHk7n9U3NJk/+v/j6//P7HS/x++/8+voP/X/1/9/j/p/5dJ/z9N/7/BKP3/Ie26n1/659f/6/85aG79f+7+R8ctTfY/AAAAdJC7/zFxi/0PAAAAw8jd/9i4xf4HAACAYeTuf1zc0mT/6/+9/7+M/t/7//p/7//r/y+P/n+a/n8D/b/+X/+v/2er5tb/5+6/OW5psv8BAACgg9z9j49b7H8AAAAYRu7+J8Qt9j8AAAAMI3f/E+OWJvtf/6//1//r//X/67++/n+Z9P/T9P8bNO//Vzfq//X/+n+2a0b9/wW/6vTqSXFLk/0PAAAAHeTuf3LcYv8DAADAMHL3PyVusf8BAABgGLn7nxq3NNn/+v/Z9P97Od9Y/f+Z1Wql/1817f/PXPD3s74v9f/6/2Og/5+m/9+gef+/635+6Z9f/6//56AZ9f97P87d/7S4pcn+BwAAgA5y9z89brH/AQAAYBi5+58Rt9j/AAAAMIzc/c+MW5rsf/3/bPr/PWP1/97/v/j7o1P/7/3/g/T/x0P/P03/v4H+X/+v/9f/s1Vz6/9z9z8rbjp57aF/iwAAAMDM5O5/dtzS5M//AQAAoIPc/c+JW+x/AAAAWKibD/xM7v7nxi1N9r/+f7v9/8kLfk7/r/+/+PtD/6//1/9fffr/afr/DfT/+n/9v/6frZpb/5+7/3lxS5P9DwAAAB3k7r8lbrH/AQAAYBi5+58ft9j/AAAAMIzc/S+IW5rsf/2/9//1//r/Tf3/+edQ9f/6//nT/0/T/2+g/9f/77b/P3X+f9T/M4Yr6P/Pnj17w1Xv/3P3vzBuabL/AQAAoIPc/S+KW+x/AAAAGEbu/hfHLfY/AAAADCN3/0vilib7X//ftP/Pb/Vl9f83rlb6f+//6//1/9P0/9P0/xvo//X/3v/X/7NVc3v/P3f/S+OWJvsfAAAAOsjd/7K4xf4HAACAYeTuf3ncYv8DAADAMHL3vyJuabL/9f9N+3/v/+v/9f/H3f/fsdL/H4tF9P9nLv31597/36T/1/9PaNf///u/7vuh/l//z0Fz6/9z978ybmmy/wEAAKCD3P2vilvsfwAAABhG7v5Xxy32PwAAAAwjd/9r4qYTTfa//l//r//X/+v/13/9Y37//+RqtdL/b8Ei+v8Jc+//t/P+/8X/lJ+n/9f/L/nz6//1/xw0t/4/d/9r45Ym+x8AAAA6yN3/urjF/gcAAIBh5O5/fdxi/wMAAMAwcve/IW5psv/1//p//b/+f/j+/6ZF9P/e/98S/f+0efT/l6b/1/8v+fPr//X/XL5d9f+5+98YtzTZ/wAAANBB7v43xS32PwAAAAwjd/+b4xb7HwAAAIaRu/8tcUuT/a//1/9fSf+fn1P/P1b/f2p2/f/pff/7mrz/r//fEv3/NP3/Bvp//b/+/2b9P9s0t/f/c/e/NW5psv8BAACgg9z9b4tb/69b+x8AAACGkbv/7XGL/Q8AAADDyN3/jrilyf7X/+v/vf+v/x/+/X/9fyv6/2n6/w30//p//b/3/9mqufX/ufvfGbc02f8AAADQQe7+d8Ut9j8AAAAMI3f/u+MW+x8AAACGkbv/1rilyf7X/+v/9f/6f/3/ub+H+v8x6P+nHU//f0b/r/+vfv5v4p8C/b/+f9OvZ0xz6/9z978nbmmy/wEAAKCD3P3vjVvsfwAAABhG7v73xS32PwAAACzSiTU/l7v//XFLk/2v/9f/6//1//r/9V9f/79MO+n/85tC/+/9/9Cn///HfT9a2vv/F//fL/2//p/tm1v/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMHL3fyhusf8BAABgGLn7Pxy3NNn/+n/9v/5f/6//X//19f/L5P3/afr/DfT/O30/f+mfX/+v/+egufX/ufs/Erc02f8AAADQQe7+j8Yt9j8AAAAMI3f/x+IW+x8AAACGsbf7My5ruP/1//p//b/+X/+//uvr/5dJ/z9N/7+B/l//r//X/7NVc+v/P773q06vPhG3NNn/AAAA0EHu/k/GLfY/AAAADCN3/6fiFvsfAAAAhpG7/9NxS5P9r//X/y+j/z979uwN+n/9//7fz/n+/zb9P0X/P03/v4H+X/+v/9f/s1Vz6/9z938mbmmy/wEAAKCD3P2fjVvsfwAAABhG7v7PxS32PwAAAAwjd//n45Ym+1//P4P+/7T+3/v/+v+V9/8P9v/XnPuXsv7/yuj/p+n/Nxix/z99+b/9XffzR7Xrz6//1/9z0Nz6/9z9X4hbmux/AAAA6CB3/xfjFvsfAAAAhpG7/0txi/0PAAAAw8jd/+W4pcn+1/8fX/9/5392Xd7/P7Na//n1//p//b/3/682/f80/f8GI/b/V2DX/fzSP7/+X//PQXPr/3P3fyVu2T/8rr2y3yUAAAAwJ7n7vxq3NPnzfwAAAOggd//X4hb7HwAAAIaRu//rcUuT/a//n8H7/wP2/97/X//9of+fdf9/jf5/DPr/afr/DfT/+n/9/5b6//xu1v93N7f+P3f/N+KWJvsfAAAAOsjd/824xf4HAACAYeTu/1bcYv8DAADAMHL33xa3XLD/17Xdo9D/6//1//p//f/6r6//Xyb9/7TL7f9PrY7W/yf9v/5f/9+1//f+P+fMrf/P3f/tuMWf/wMAAMDiXHuJn8/d/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uuf2aXX2kY6X/1//r//X/+v/1X1//v0z6/2ld3v//O/3/oWypn79O/z9G/79a6f85urn1/7n7vx+3+PN/AAAAGEbu/h/ELfY/AAAADCN3/w/jFvsfAAAAhpG7/0dxS5P9r//X/x+x/99LM/X/5+j/z9H/r6f/Px76/2ld+n/v/x/Orvv5pX/+0fp/7/+zDXPr/3P3/zhuabL/AQAAoIPc/T+JW+x/AAAAGEbu/p/GLfY/AAAADCN3/8/ilib7f2f9f/xHrf9ffP/v/X/9v/5f/z8r+v9p+v8N9P/6f/2//p+tmlv/n7v/53FLk/0PAAAAHeTu/0XcYv8DAADAMHL3/zJusf8BAABgGLn7fxW3NNn/3v/X/8+r/z+t/9f/6//1/0ei/5+m/1+v/kbp//X/+n/9P1s1t/4/d/+v45Ym+x8AAAA6yN3/m7jF/gcAAIBh5O6/PW6x/wEAAGAYuft/G7c02f/6f/3/vPp/7//r//X/+v+j0f9P22X//x9/v/nLev9/5/1/fgT9v/5f/89WzK3/z93/u7ilyf4HAACADnL3/z5usf8BAABgGLn7/xC32P8AAAAwjNz9f4xbmuz/Df3/qfoL9f+T9P/7P7/+f/33h/5f/6//v/r0/9O8/7+B/t/7//p//T9bNbf+P3f/n+KWJvsfAAAAOsjdf0fcYv8DAADAMHL3/zlusf8BAABgGLn7/xK3NNn/3v9fUv9/nf5f/6//1//r/zfQ/0/T/2+g/9f/6//1/2zV3Pr/3P1/DQAA///r4E2k") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x80) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) r0 = open(&(0x7f0000000080)='./file1\x00', 0x143142, 0x27) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) 4.570274582s ago: executing program 5 (id=743): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000400)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x31, 0x74, 0x39, 0x0]}}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x32]}}, {@barrier}, {@nospace_cache}], [{@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x101042, 0x300) pwrite64(r0, &(0x7f00000003c0)="7f", 0x1, 0xf00) symlink(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.322945104s ago: executing program 2 (id=745): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/152, 0x98) 4.244465644s ago: executing program 3 (id=746): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.068940375s ago: executing program 3 (id=747): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.017570146s ago: executing program 3 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3.972833186s ago: executing program 2 (id=749): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000280), 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f00000000c0)='./file0/file0\x00') unshare(0x600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000b00)={{r0}, 0x0, 0x0, @unused=[0x8, 0x821, 0xc, 0x6], @subvolid=0x800001ffe000}) 3.939601186s ago: executing program 3 (id=750): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 3.448088219s ago: executing program 5 (id=754): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000670000000800010002"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x400c810) 2.918157303s ago: executing program 2 (id=756): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.582489064s ago: executing program 5 (id=757): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000fc0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=cp932,errors=continue,iocharset=maciceland,usrquota,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=0xee01, @ANYBLOB=',\x00'], 0x21, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) rename(0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) 2.113824297s ago: executing program 2 (id=759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(r0, 0x0, 0x0, 0x4fed0) 1.963682188s ago: executing program 1 (id=760): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x4b3, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.7201627s ago: executing program 3 (id=761): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/152, 0x98) 1.60910085s ago: executing program 5 (id=763): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x5, 0x0, 0x10cf, 0xc5, 0x8b, 0x2, 0x3, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000400)=[{}, {@none}]}) 1.492509201s ago: executing program 4 (id=764): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x8000) 1.293845272s ago: executing program 3 (id=765): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000400)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x31, 0x74, 0x39, 0x0]}}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x32]}}, {@barrier}, {@nospace_cache}], [{@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x101042, 0x300) pwrite64(r0, &(0x7f00000003c0)="7f", 0x1, 0xf00) symlink(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.213807933s ago: executing program 4 (id=766): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1.016997384s ago: executing program 1 (id=767): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 930.262084ms ago: executing program 4 (id=768): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = dup3(r0, r2, 0x80000) ioctl$NBD_DO_IT(r3, 0xab03) 886.745744ms ago: executing program 5 (id=769): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x2000806, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00arset=macceltic,umask=00000000000000000400011,anchor=00000000000000065535,gid=forget,volume00000000000001023,novrs,novrs,lastblock=00000000000000000000,iocharset=macromanian,\x00\x00\x00\x00\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1b) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 886.561875ms ago: executing program 2 (id=770): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)="85ded893a458610652c0c9f7d09437ae2bbc837fd4b6b529711323d1c3fd020dedbe1704d7e0c0159c9a10dfa147436eb08330fec9b6cb7b57c8f9ae3a3e37c2e9dcd1c2efd92e8671f5783632b611699e7167150bad63f7960c791051fa9d966fd5ccbbe8043fe8765ec11a873c18dbdb4fde6351e5d360be6d597ad5dd315502485a0f371f4d17016639e7e139c2312cee65b67560c0bed872bc8df5a07f0b9ecba57217ffbe986ab9a3", 0xab}, {&(0x7f0000000240)="d1b3d3a84a9e553654ce18409bb8561366240b3beac0ab9372d192bb9438b2a70d86d6b1b1341fc9914bf682cf02570b183dbe3e2a04fa387a5d70314fc11600a94dedf7e867c8573844a7f0be22cb898832c1b112b414a18f6e0947c67f9c78d33a0a49b1d2bbf6c5e311609350a8ef03061e8bd0b3b153c28f3855eb8d2397d139c7da970366244a25d5d8e347d649c0a33a60efb835a1dbeb64a1b27aba251155514036ab914062ce7d539db1847c9be5e22fcd4f20104924b31588b3bc1a1c3f7df930253722eaf838db1247a37611f3bdfb00728b61003c57f0dff9f24fa8d8cb3d4e8040a2ce988201694fb361569c0177e9", 0xf5}, {&(0x7f0000000340)="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", 0x55a}], 0x3}}], 0x1, 0xf4) 681.823946ms ago: executing program 1 (id=771): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x7302, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 598.626796ms ago: executing program 4 (id=772): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) close_range(r0, 0xffffffffffffffff, 0x0) 512.485197ms ago: executing program 1 (id=773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 432.607128ms ago: executing program 5 (id=774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r3, 0x0, 0x80, 0x8) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) 337.770868ms ago: executing program 4 (id=775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x2005}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x653, 0xb}, 0x90) 273.334418ms ago: executing program 1 (id=776): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/152, 0x98) 154µs ago: executing program 1 (id=777): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) write$P9_ROPEN(r0, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x3}, 0x3}}, 0x18) 0s ago: executing program 4 (id=778): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 56.367894][ T4253] cgroup: Unknown subsys name 'net' [ 56.539844][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.986982][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.402125][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.414491][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.415315][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.425096][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.439729][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.444175][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.457124][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.463791][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.472277][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.480033][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.487462][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.497328][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.505437][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.512631][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.521237][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.539198][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.539735][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.546841][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.557517][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.573823][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.574127][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.581736][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.591598][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.598240][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.606793][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.621859][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.644567][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.652877][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.663502][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.684724][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.117905][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 60.165800][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 60.237438][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 60.337398][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 60.377976][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 60.390904][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.399772][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.409104][ T4266] device bridge_slave_0 entered promiscuous mode [ 60.452256][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.461902][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.472650][ T4266] device bridge_slave_1 entered promiscuous mode [ 60.485865][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.493806][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.502357][ T4268] device bridge_slave_0 entered promiscuous mode [ 60.542725][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.553609][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.562101][ T4268] device bridge_slave_1 entered promiscuous mode [ 60.611405][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.621396][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.628930][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.638522][ T4273] device bridge_slave_0 entered promiscuous mode [ 60.673565][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.683763][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.692038][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.701400][ T4273] device bridge_slave_1 entered promiscuous mode [ 60.710835][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.760184][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.771523][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.781185][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.793323][ T4280] device bridge_slave_0 entered promiscuous mode [ 60.801629][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.809766][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.817673][ T4267] device bridge_slave_0 entered promiscuous mode [ 60.828510][ T4266] team0: Port device team_slave_0 added [ 60.860934][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.869435][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.879704][ T4280] device bridge_slave_1 entered promiscuous mode [ 60.887488][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.895715][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.905171][ T4267] device bridge_slave_1 entered promiscuous mode [ 60.916232][ T4266] team0: Port device team_slave_1 added [ 60.924973][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.938258][ T4268] team0: Port device team_slave_0 added [ 60.978876][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.990653][ T4268] team0: Port device team_slave_1 added [ 61.013517][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.020868][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.048062][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.081645][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.103246][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.114581][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.122285][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.150575][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.181339][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.192142][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.201953][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.233079][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.252284][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.269500][ T4273] team0: Port device team_slave_0 added [ 61.286450][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.294682][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.323510][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.363136][ T4273] team0: Port device team_slave_1 added [ 61.380466][ T4280] team0: Port device team_slave_0 added [ 61.391901][ T4267] team0: Port device team_slave_0 added [ 61.418518][ T4280] team0: Port device team_slave_1 added [ 61.427868][ T4267] team0: Port device team_slave_1 added [ 61.484254][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.491885][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.521714][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.536676][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.544861][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.576492][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.591753][ T4268] device hsr_slave_0 entered promiscuous mode [ 61.599573][ T4268] device hsr_slave_1 entered promiscuous mode [ 61.626841][ T4266] device hsr_slave_0 entered promiscuous mode [ 61.634787][ T4266] device hsr_slave_1 entered promiscuous mode [ 61.642068][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.651451][ T4266] Cannot create hsr debugfs directory [ 61.675844][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.684279][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.717992][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.731494][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.742021][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 61.742030][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 61.749728][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 61.757709][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 61.764162][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 61.780072][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.811681][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.853713][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.861535][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.891197][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.904445][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.912013][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.941943][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.972035][ T4273] device hsr_slave_0 entered promiscuous mode [ 61.980256][ T4273] device hsr_slave_1 entered promiscuous mode [ 61.987926][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.997532][ T4273] Cannot create hsr debugfs directory [ 62.109886][ T4280] device hsr_slave_0 entered promiscuous mode [ 62.118349][ T4280] device hsr_slave_1 entered promiscuous mode [ 62.126387][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.135527][ T4280] Cannot create hsr debugfs directory [ 62.179921][ T4267] device hsr_slave_0 entered promiscuous mode [ 62.189289][ T4267] device hsr_slave_1 entered promiscuous mode [ 62.198094][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.206949][ T4267] Cannot create hsr debugfs directory [ 62.514979][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.535729][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.550418][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.563807][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.585662][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.613326][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.624522][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.649041][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.709631][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.748777][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.778925][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.801193][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.875333][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.887786][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.902254][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.930811][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.944616][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.988174][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.014774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.027477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.047197][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.058794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.067893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.086906][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.105946][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.122800][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.137140][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.147982][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.159169][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.168670][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.180478][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.205520][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.231797][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.242386][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.258002][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.267775][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.275610][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.284626][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.295570][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.306104][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.314374][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.324148][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.335719][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.345903][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.354582][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.378252][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.421911][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.435105][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.446600][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.458092][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.468101][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.483943][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.497557][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.507991][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.518519][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.528470][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.538523][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.548954][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.559034][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.569576][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.578401][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.591673][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.601020][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.622731][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.634470][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.651624][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.665268][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.695174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.706824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.717296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.728384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.740118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.750260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.762548][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.777216][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.806160][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.813419][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 63.813480][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 63.813522][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 63.813622][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 63.813648][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 63.860290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.870248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.888209][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.896934][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.914575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.924507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.935593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.951495][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.970371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.991070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.009897][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.018676][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.038819][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.060166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.088468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.114071][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.122333][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.187971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.201393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.215325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.227242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.240853][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.248578][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.258046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.269742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.280122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.301988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.311386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.328424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.342853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.359244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.371883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.388242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.427040][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.446364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.462677][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.472560][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.484861][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.496105][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.506311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.520709][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.533873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.546507][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.567140][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.578710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.589427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.620171][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.636721][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.651561][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.678007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.687581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.696529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.707113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.718991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.729266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.748722][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.771871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.793808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.805989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.817066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.830140][ T4266] device veth0_vlan entered promiscuous mode [ 64.858424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.877619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.913888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.927050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.941420][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.949256][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.965704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.985789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.015002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.026853][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.034204][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.079915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.099485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.118016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.129681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.160135][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.180977][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.226175][ T4266] device veth1_vlan entered promiscuous mode [ 65.236940][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.248348][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.259360][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.268037][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.276414][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.285879][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.296647][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.306316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.315789][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.325555][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.335635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.344544][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.354005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.362405][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.372532][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.383811][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.394357][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.406983][ T4268] device veth0_vlan entered promiscuous mode [ 65.434735][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.447444][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.520116][ T4266] device veth0_macvtap entered promiscuous mode [ 65.540451][ T4268] device veth1_vlan entered promiscuous mode [ 65.570608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.593392][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.610036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.624151][ T4266] device veth1_macvtap entered promiscuous mode [ 65.661810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.672093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.688517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.759089][ T4268] device veth0_macvtap entered promiscuous mode [ 65.769951][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.784487][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.803932][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.830985][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.855313][ T4268] device veth1_macvtap entered promiscuous mode [ 65.869502][ T4280] device veth0_vlan entered promiscuous mode [ 65.888290][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.896919][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 65.903411][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 65.903806][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 65.909867][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 65.916222][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 65.936416][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.949085][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.961069][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.977720][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.988478][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.998837][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.011666][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.031541][ T4280] device veth1_vlan entered promiscuous mode [ 66.063749][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.096916][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.114102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.132716][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.149566][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.159825][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.169640][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.186819][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.198755][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.212267][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.232002][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.254400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.266195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.276979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.287970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.299188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.309762][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.321751][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.335122][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.346225][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.357713][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.398102][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.408363][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.419224][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.431098][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.446588][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.458835][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.480119][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.490463][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.526406][ T4280] device veth0_macvtap entered promiscuous mode [ 66.568778][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.577656][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.586737][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.613940][ T4280] device veth1_macvtap entered promiscuous mode [ 66.632252][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.646538][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.656437][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.670104][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.680374][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.714967][ T4267] device veth0_vlan entered promiscuous mode [ 66.751360][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.771704][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.786589][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.800903][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.814337][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.846864][ T4267] device veth1_vlan entered promiscuous mode [ 66.865088][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.874794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.884785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.895463][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.905564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.917964][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.928917][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.941949][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.959032][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.961287][ T4273] device veth0_vlan entered promiscuous mode [ 66.976377][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.986055][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.994603][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.002403][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.025219][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.039110][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.056413][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.072034][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.082023][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.091302][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.101765][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.111926][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.128575][ T4273] device veth1_vlan entered promiscuous mode [ 67.148521][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.159338][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.172027][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.182344][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222092][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.235333][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.244990][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.255499][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.288682][ T4267] device veth0_macvtap entered promiscuous mode [ 67.301033][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.310953][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.312561][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.332739][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.364158][ T4267] device veth1_macvtap entered promiscuous mode [ 67.373562][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.387082][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.399263][ T4273] device veth0_macvtap entered promiscuous mode [ 67.412438][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.437993][ T4273] device veth1_macvtap entered promiscuous mode [ 67.445607][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.489063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.500889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.515286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.554244][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.568835][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.582754][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.595890][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.606277][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.617772][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.631864][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.646001][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.661808][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.674422][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.680777][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.696244][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.707943][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.720284][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.732032][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.745826][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.769001][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.782605][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.799946][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.839820][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.863177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.882119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.896394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.906652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.918295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.937250][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.949839][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.961386][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.973334][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.973866][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 67.984511][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 67.991151][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 67.998832][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 68.011276][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 68.021953][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.036595][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.048220][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060232][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.072498][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.128716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.172653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.183719][ T4382] loop1: detected capacity change from 0 to 256 [ 68.199099][ T4382] exfat: Deprecated parameter 'namecase' [ 68.216673][ T4382] exfat: Deprecated parameter 'namecase' [ 68.225183][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.246263][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.258448][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.282800][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.287193][ T4382] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 68.305329][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.354378][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.401065][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.433565][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.475716][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.501960][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.519670][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.536259][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.548692][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.559301][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.570363][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.597895][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.621975][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.652751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.682222][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.787098][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.854925][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.873314][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 68.907495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.944575][ T22] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 68.948688][ T4394] loop0: detected capacity change from 0 to 512 [ 68.971411][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.978393][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.981986][ T4394] ======================================================= [ 68.981986][ T4394] WARNING: The mand mount option has been deprecated and [ 68.981986][ T4394] and is ignored by this kernel. Remove the mand [ 68.981986][ T4394] option from the mount to silence this warning. [ 68.981986][ T4394] ======================================================= [ 69.014079][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.040586][ T22] usb 4-1: Product: syz [ 69.056567][ T22] usb 4-1: Manufacturer: syz [ 69.061556][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.086689][ T4396] input: syz1 as /devices/virtual/input/input5 [ 69.106617][ T22] usb 4-1: SerialNumber: syz [ 69.111951][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.128654][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.150842][ T22] usb 4-1: config 0 descriptor?? [ 69.175950][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.177234][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.266149][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.299547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.385969][ T4401] loop4: detected capacity change from 0 to 1024 [ 69.408361][ T4394] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.0.1: corrupted xattr block 95 [ 69.443286][ T4394] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 69.463008][ T4394] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1: bg 0: block 7: invalid block bitmap [ 69.497557][ T4401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.528830][ T4394] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 69.559507][ T4394] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2935: inode #11: comm syz.0.1: corrupted xattr block 95 [ 69.615051][ T4394] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 69.622638][ T4401] EXT4-fs (loop4): shut down requested (1) [ 69.625258][ T4394] EXT4-fs (loop0): 1 orphan inode deleted [ 69.637382][ T4394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.662191][ T22] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 69.663608][ T4408] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.688697][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 69.716571][ T22] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 69.761477][ T22] usb 4-1: media controller created [ 69.828208][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 69.901512][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 70.095480][ T4414] loop2: detected capacity change from 0 to 2048 [ 70.099144][ T4394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.122873][ T4394] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 70.149768][ T4414] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.238635][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 70.288445][ T4417] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.358277][ T4419] block nbd0: Unsupported socket: should be TCP or UNIX. [ 70.434662][ T22] zl10353_read_register: readreg error (reg=127, ret==0) [ 70.457866][ T22] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 70.473037][ T22] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 70.556507][ T22] usb 4-1: USB disconnect, device number 2 [ 70.699446][ T22] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 71.025072][ T4340] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.094252][ T4350] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.122301][ T4437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.21'. [ 71.194795][ T4426] loop1: detected capacity change from 0 to 32768 [ 71.243904][ T4340] usb 3-1: Using ep0 maxpacket: 16 [ 71.273254][ T4340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.295307][ T4350] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.322448][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.323721][ T4340] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 71.335085][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.355283][ T4350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 71.373697][ T4350] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 71.384484][ T4350] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 71.401211][ T4350] usb 1-1: Manufacturer: syz [ 71.422884][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.430913][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.444291][ T4350] usb 1-1: config 0 descriptor?? [ 71.457597][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.502379][ T4340] usb 3-1: config 0 descriptor?? [ 71.520265][ T4426] XFS (loop1): Mounting V5 Filesystem [ 71.534642][ T4340] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 71.652688][ T4426] XFS (loop1): Ending clean mount [ 71.749349][ T3623] bcm5974 3-1:0.0: could not read from device [ 71.778645][ T4340] bcm5974 3-1:0.0: could not read from device [ 71.783219][ T4426] XFS (loop1): User initiated shutdown received. [ 71.808176][ T3623] bcm5974 3-1:0.0: could not read from device [ 71.842688][ T4426] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 71.844434][ T4340] input: failed to attach handler mousedev to device input6, error: -5 [ 71.943337][ T3623] bcm5974 3-1:0.0: could not read from device [ 71.975541][ T4340] usb 3-1: USB disconnect, device number 2 [ 72.003154][ T4426] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 72.209793][ T4266] XFS (loop1): Unmounting Filesystem [ 72.399378][ T4449] loop3: detected capacity change from 0 to 32768 [ 72.507554][ T4449] XFS (loop3): Mounting V5 Filesystem [ 72.635975][ T4449] XFS (loop3): Ending clean mount [ 72.700264][ T4449] XFS (loop3): Quotacheck needed: Please wait. [ 72.863000][ C1] sched: RT throttling activated [ 72.913399][ T4449] XFS (loop3): Quotacheck: Done. [ 73.059579][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 73.314048][ T4268] XFS (loop3): Unmounting Filesystem [ 73.747538][ T4457] loop4: detected capacity change from 0 to 262144 [ 73.771355][ T4350] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 73.786007][ T4350] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 73.802347][ T4457] F2FS-fs (loop4): invalid crc value [ 73.832474][ T4350] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 73.858119][ T4457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.909050][ T4457] F2FS-fs (loop4): Start checkpoint disabled! [ 73.928921][ T4350] usb 1-1: USB disconnect, device number 2 [ 74.012051][ T4457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.291207][ T4477] fido_id[4477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 74.357371][ T4481] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.767889][ T4491] netlink: 'syz.4.33': attribute type 34 has an invalid length. [ 75.103043][ T4340] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.313445][ T4340] usb 3-1: Using ep0 maxpacket: 8 [ 75.324875][ T4340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 75.365163][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.393083][ T4340] usb 3-1: Product: syz [ 75.399060][ T4340] usb 3-1: Manufacturer: syz [ 75.428433][ T4340] usb 3-1: SerialNumber: syz [ 75.706854][ T4340] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 75.730286][ T4519] loop3: detected capacity change from 0 to 4096 [ 75.770729][ T4523] loop1: detected capacity change from 0 to 256 [ 75.783524][ T4519] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 75.936260][ T4519] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 75.970935][ T26] audit: type=1800 audit(1761761965.801:2): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file0" dev="loop1" ino=1048595 res=0 errno=0 [ 76.086513][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.391287][ T4533] netlink: 'syz.0.54': attribute type 10 has an invalid length. [ 76.445414][ T4533] device syz_tun entered promiscuous mode [ 76.481395][ T4311] usb 3-1: USB disconnect, device number 3 [ 76.513821][ T4533] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.532177][ T4537] loop1: detected capacity change from 0 to 64 [ 76.538712][ T129] cfg80211: failed to load regulatory.db [ 76.548986][ T4311] usblp0: removed [ 77.225873][ T4548] loop3: detected capacity change from 0 to 4096 [ 77.673030][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.827906][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.838870][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.866584][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 77.878764][ T22] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 77.897190][ T22] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 77.917447][ T22] usb 1-1: Product: syz [ 77.923523][ T4564] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.943179][ T22] usb 1-1: Manufacturer: syz [ 77.958604][ T22] usb 1-1: SerialNumber: syz [ 77.990126][ T22] usb 1-1: config 0 descriptor?? [ 78.269504][ T129] usb 1-1: USB disconnect, device number 3 [ 78.462807][ T4579] loop4: detected capacity change from 0 to 8 [ 78.463430][ T4581] capability: warning: `syz.3.74' uses deprecated v2 capabilities in a way that may be insecure [ 78.559509][ T4579] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.603058][ T4579] SQUASHFS error: Failed to read block 0x9b: -5 [ 78.610755][ T4579] SQUASHFS error: Unable to read metadata cache entry [99] [ 78.647061][ T4579] SQUASHFS error: Unable to read inode 0x127 [ 78.839787][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058a76000: rx timeout, send abort [ 78.884897][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058a76000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 79.137545][ T4577] loop1: detected capacity change from 0 to 32768 [ 79.226066][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.259591][ T4577] XFS (loop1): Mounting V5 Filesystem [ 79.356079][ T4577] XFS (loop1): Ending clean mount [ 79.405508][ T4577] XFS (loop1): Quotacheck needed: Please wait. [ 79.423032][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 79.432896][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.478228][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.499392][ T4594] loop3: detected capacity change from 0 to 32768 [ 79.523291][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.571630][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.623164][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.651006][ T4594] XFS (loop3): Mounting V5 Filesystem [ 79.699558][ T7] usb 1-1: config 0 descriptor?? [ 79.783306][ T4577] XFS (loop1): Quotacheck: Done. [ 79.811075][ T4594] XFS (loop3): Ending clean mount [ 79.850639][ T4594] XFS (loop3): Quotacheck needed: Please wait. [ 79.922321][ T4591] loop2: detected capacity change from 0 to 32768 [ 79.986931][ T4594] XFS (loop3): Quotacheck: Done. [ 80.046699][ T4591] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.79 (4591) [ 80.046813][ T4266] XFS (loop1): Unmounting Filesystem [ 80.162054][ T7] HID 045e:07da: Invalid code 65791 type 1 [ 80.283034][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input7 [ 80.296748][ T4595] loop4: detected capacity change from 0 to 32768 [ 80.314946][ T7] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 80.383198][ T4268] XFS (loop3): Unmounting Filesystem [ 80.404190][ T4591] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 80.439752][ T4595] XFS (loop4): Mounting V5 Filesystem [ 80.464831][ T4591] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 80.476029][ T4591] BTRFS info (device loop2): enabling auto defrag [ 80.482892][ T4591] BTRFS info (device loop2): force clearing of disk cache [ 80.491531][ T4591] BTRFS info (device loop2): enabling disk space caching [ 80.499037][ T4591] BTRFS info (device loop2): max_inline at 0 [ 80.506296][ T4591] BTRFS info (device loop2): disk space caching is enabled [ 80.551779][ T129] usb 1-1: USB disconnect, device number 4 [ 80.732891][ T4595] XFS (loop4): Ending clean mount [ 80.874926][ T4591] BTRFS info (device loop2): enabling ssd optimizations [ 80.920865][ T4591] BTRFS info (device loop2): rebuilding free space tree [ 80.964595][ T4643] syz.3.83 uses obsolete (PF_INET,SOCK_PACKET) [ 80.981751][ T4643] vxcan1: tx address claim with dest, not broadcast [ 81.046230][ T4267] XFS (loop4): Unmounting Filesystem [ 81.183062][ T4340] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.190092][ T4645] loop3: detected capacity change from 0 to 512 [ 81.201300][ T4591] BTRFS info (device loop2): disabling free space tree [ 81.243787][ T4591] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.310128][ T4645] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 81.333259][ T4591] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.371189][ T4340] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.382709][ T4645] EXT4-fs (loop3): invalid journal inode [ 81.397306][ T4645] EXT4-fs (loop3): can't get journal size [ 81.412801][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.433144][ T4645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c198, mo2=0002] [ 81.448661][ T4340] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.462432][ T4645] System zones: 1-12, 13-13 [ 81.471111][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.489016][ T4340] usb 2-1: Product: syz [ 81.499929][ T4645] EXT4-fs (loop3): 1 truncate cleaned up [ 81.506300][ T4645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.516045][ T4340] usb 2-1: Manufacturer: syz [ 81.521497][ T4340] usb 2-1: SerialNumber: syz [ 81.547773][ T4340] usb 2-1: config 0 descriptor?? [ 81.673569][ T4340] usb 2-1: selecting invalid altsetting 0 [ 81.698010][ T26] audit: type=1804 audit(1761761971.531:3): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.79" name="/newroot/10/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 81.756081][ T4591] syz.2.79 (4591) used greatest stack depth: 20592 bytes left [ 81.868440][ T4340] usb 2-1: USB disconnect, device number 2 [ 81.979367][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 82.168038][ T4273] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 82.472120][ T4664] Bluetooth: MGMT ver 1.22 [ 82.889766][ T4683] device batadv_slave_1 entered promiscuous mode [ 82.924500][ T4681] device batadv_slave_1 left promiscuous mode [ 83.011267][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'. [ 83.230075][ T4695] device ipvlan1 entered promiscuous mode [ 83.237780][ T4695] device ipvlan1 left promiscuous mode [ 83.249564][ T4697] loop4: detected capacity change from 0 to 512 [ 83.326405][ T4697] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 83.419397][ T4697] System zones: 0-2, 18-18, 34-35 [ 83.437826][ T22] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 83.465667][ T4697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.538436][ T4697] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.591760][ T4706] loop0: detected capacity change from 0 to 256 [ 83.635431][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.660856][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.694244][ T4706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 83.713586][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.740663][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 83.753257][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.776372][ T4694] loop3: detected capacity change from 0 to 40427 [ 83.828860][ T4694] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 83.852100][ T4694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.891731][ T4694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.911428][ T4711] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.035117][ T22] usb 3-1: usb_control_msg returned -32 [ 84.051900][ T4694] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.054803][ T22] usbtmc 3-1:16.0: can't read capabilities [ 84.067018][ T4694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.336761][ T4268] syz-executor: attempt to access beyond end of device [ 84.336761][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.668341][ T4671] usb 3-1: USB disconnect, device number 4 [ 85.043040][ T129] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 85.078881][ T4732] loop3: detected capacity change from 0 to 8192 [ 85.162682][ T4732] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.244915][ T129] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 85.263292][ T129] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 85.285282][ T129] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.301590][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.302600][ T4732] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 85.348001][ T4726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.369979][ T4726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.388507][ T4732] REISERFS (device loop3): using journaled data mode [ 85.410034][ T4732] reiserfs: using flush barriers [ 85.457182][ T4732] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.529332][ T4732] REISERFS (device loop3): checking transaction log (loop3) [ 85.617502][ T4732] REISERFS (device loop3): Using r5 hash to sort names [ 85.648326][ T4732] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.696454][ T22] usb 1-1: USB disconnect, device number 5 [ 85.750929][ T4732] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 85.998596][ T4734] loop1: detected capacity change from 0 to 40427 [ 86.073309][ T4734] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 86.107202][ T4734] F2FS-fs (loop1): invalid crc value [ 86.129752][ T4734] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.273910][ T4734] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.629207][ T4734] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xe5/0x610 [ 86.938332][ T4266] syz-executor: attempt to access beyond end of device [ 86.938332][ T4266] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.154170][ T4756] loop2: detected capacity change from 0 to 131072 [ 87.178075][ T4756] F2FS-fs (loop2): invalid crc value [ 87.252707][ T4756] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.299565][ T4756] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 87.303639][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 87.331779][ T4756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.392720][ T4766] device veth0_macvtap left promiscuous mode [ 87.577977][ T4752] loop4: detected capacity change from 0 to 32768 [ 87.713149][ T4759] loop3: detected capacity change from 0 to 32768 [ 87.865681][ T4759] XFS (loop3): Mounting V5 Filesystem [ 87.963509][ T4752] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 87.978677][ T4759] XFS (loop3): Ending clean mount [ 87.997539][ T4759] XFS (loop3): Quotacheck needed: Please wait. [ 88.117834][ T4759] XFS (loop3): Quotacheck: Done. [ 88.197370][ T26] audit: type=1800 audit(1761761978.031:4): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.125" name="bus" dev="loop3" ino=9290 res=0 errno=0 [ 88.219682][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.336522][ T4752] (syz.4.124,4752,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 88.430009][ T4268] XFS (loop3): Unmounting Filesystem [ 88.766962][ T4267] ocfs2: Unmounting device (7,4) on (node local) [ 89.060906][ T4775] loop0: detected capacity change from 0 to 32768 [ 89.236612][ T4775] XFS (loop0): Mounting V5 Filesystem [ 89.364332][ T4802] loop4: detected capacity change from 0 to 512 [ 89.447775][ T4808] raw_sendmsg: syz.3.138 forgot to set AF_INET. Fix it! [ 89.522025][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.567117][ T4812] loop3: detected capacity change from 0 to 1024 [ 89.575056][ T4812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.579230][ T4775] XFS (loop0): Ending clean mount [ 89.584859][ T4802] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.592340][ T4812] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.670561][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 89.782900][ T4280] XFS (loop0): Unmounting Filesystem [ 89.853509][ T4812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 89.870146][ T4812] System zones: 0-1, 3-36 [ 89.937980][ T4812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.221885][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 90.293335][ T4821] loop9: detected capacity change from 0 to 7 [ 90.325782][ T4422] Dev loop9: unable to read RDB block 7 [ 90.342391][ T4422] loop9: AHDI p1 p2 [ 90.347669][ T4422] loop9: partition table partially beyond EOD, truncated [ 90.372897][ T4422] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 90.467111][ T4821] Dev loop9: unable to read RDB block 7 [ 90.500282][ T4821] loop9: AHDI p1 p2 [ 90.521200][ T4821] loop9: partition table partially beyond EOD, truncated [ 90.567289][ T4821] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 90.606402][ T4829] loop0: detected capacity change from 0 to 64 [ 90.695995][ T4422] udevd[4422]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 90.733370][ T4829] UBIFS error (pid: 4829): cannot open "./file0", error -22 [ 90.803069][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.829810][ T4422] udevd[4422]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 90.831750][ T4833] loop1: detected capacity change from 0 to 64 [ 91.044937][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 91.056588][ T22] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 91.095984][ T22] usb 5-1: config 0 has no interface number 0 [ 91.127677][ T22] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 91.161130][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.180280][ T22] usb 5-1: Product: syz [ 91.191138][ T22] usb 5-1: Manufacturer: syz [ 91.200549][ T22] usb 5-1: SerialNumber: syz [ 91.251801][ T22] usb 5-1: config 0 descriptor?? [ 91.304590][ T22] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 91.514183][ T22] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 91.555150][ T4827] loop2: detected capacity change from 0 to 32768 [ 91.566491][ T22] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 91.665500][ T4827] XFS (loop2): Mounting V5 Filesystem [ 91.835501][ T4827] XFS (loop2): Ending clean mount [ 91.863268][ T4827] XFS (loop2): Quotacheck needed: Please wait. [ 91.944904][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.955907][ T22] usb 5-1: USB disconnect, device number 2 [ 91.988401][ T4827] XFS (loop2): Quotacheck: Done. [ 91.995357][ T22] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 92.065753][ T22] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 92.114015][ T22] quatech2 5-1:0.51: device disconnected [ 92.143749][ T4827] XFS (loop2): User initiated shutdown received. [ 92.161216][ T4827] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 92.203290][ T4827] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 92.248266][ T4853] loop1: detected capacity change from 0 to 32768 [ 92.326330][ T4273] XFS (loop2): Unmounting Filesystem [ 92.492828][ T4853] XFS (loop1): Mounting V5 Filesystem [ 92.614786][ T4853] XFS (loop1): Ending clean mount [ 92.615358][ T4864] loop3: detected capacity change from 0 to 32768 [ 92.672067][ T4853] XFS (loop1): Quotacheck needed: Please wait. [ 92.702485][ T4864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.156 (4864) [ 92.796876][ T4853] XFS (loop1): Quotacheck: Done. [ 92.815285][ T4864] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.893998][ T4864] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 92.903417][ T4864] BTRFS info (device loop3): using free space tree [ 93.211653][ T4864] BTRFS info (device loop3): enabling ssd optimizations [ 93.433060][ T4671] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.518973][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.577405][ T4266] XFS (loop1): Unmounting Filesystem [ 93.645642][ T4671] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 93.666036][ T4671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.690869][ T4915] loop4: detected capacity change from 0 to 2048 [ 93.701822][ T4671] usb 3-1: config 0 descriptor?? [ 93.722578][ T4917] loop0: detected capacity change from 0 to 47 [ 93.727353][ T4671] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 93.766090][ T4915] loop4: p1 < > p4 [ 93.800413][ T4915] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.875730][ T26] audit: type=1800 audit(1761761983.711:5): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="file1" dev="loop0" ino=8 res=0 errno=0 [ 94.057807][ T4422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4422) [ 94.551851][ T4671] gspca_stv06xx: I2C: Read error writing address: -71 [ 94.574880][ T4671] usb 3-1: USB disconnect, device number 5 [ 94.883727][ T4944] loop4: detected capacity change from 0 to 4096 [ 95.232294][ T4267] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 95.252578][ T4267] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 95.455241][ T4938] loop0: detected capacity change from 0 to 32768 [ 95.598785][ T4938] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.725880][ T4957] Illegal XDP return value 4294967274 on prog (id 24) dev N/A, expect packet loss! [ 95.951608][ T4280] ocfs2: Unmounting device (7,0) on (node local) [ 96.161385][ T4950] loop1: detected capacity change from 0 to 40427 [ 96.189228][ T4950] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 96.239904][ T4950] F2FS-fs (loop1): invalid crc value [ 96.267762][ T26] audit: type=1326 audit(1761761986.101:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.306007][ T4950] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.371817][ T26] audit: type=1326 audit(1761761986.101:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.426897][ T26] audit: type=1326 audit(1761761986.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.457340][ T4950] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.491896][ T26] audit: type=1326 audit(1761761986.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.564692][ T4951] loop2: detected capacity change from 0 to 32768 [ 96.601387][ T26] audit: type=1326 audit(1761761986.101:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.647441][ T4975] input: syz0 as /devices/virtual/input/input8 [ 96.731380][ T26] audit: type=1326 audit(1761761986.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.809241][ T2945] kworker/u4:5: attempt to access beyond end of device [ 96.809241][ T2945] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 96.839374][ T26] audit: type=1326 audit(1761761986.101:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 96.878323][ T4950] VFS:Filesystem freeze failed [ 96.949862][ T26] audit: type=1326 audit(1761761986.101:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 97.009727][ T4980] loop3: detected capacity change from 0 to 16 [ 97.037930][ T4980] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.129022][ T26] audit: type=1326 audit(1761761986.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deed8efc9 code=0x7ffc0000 [ 97.496113][ T4993] loop2: detected capacity change from 0 to 512 [ 97.557753][ T4993] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 97.613642][ T4993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 97.821368][ T4993] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.198: corrupted in-inode xattr [ 97.855510][ T4993] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.198: couldn't read orphan inode 15 (err -117) [ 97.909604][ T4993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.146347][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 98.353230][ T4923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.554462][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.592348][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.613285][ T4923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.629551][ T5001] loop0: detected capacity change from 0 to 32768 [ 98.647858][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 98.655389][ T4991] loop4: detected capacity change from 0 to 40427 [ 98.662520][ T4923] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.682494][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.701957][ T4991] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 98.735512][ T4923] usb 2-1: config 0 descriptor?? [ 98.747553][ T5001] XFS (loop0): Mounting V5 Filesystem [ 98.758842][ T4991] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.804755][ T4991] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 98.826766][ T4991] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 98.895978][ T5032] loop2: detected capacity change from 0 to 128 [ 98.918715][ T5032] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 98.924769][ T5001] XFS (loop0): Ending clean mount [ 98.931816][ T4991] F2FS-fs (loop4): invalid crc value [ 98.938133][ T5032] hpfs: filesystem error: improperly stopped [ 98.981554][ T4991] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.029032][ T5032] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 99.055552][ T4991] F2FS-fs (loop4): Start checkpoint disabled! [ 99.070918][ T5032] hpfs: You really don't want any checks? You are crazy... [ 99.106647][ T5032] hpfs: hpfs_map_sector(): read error [ 99.112167][ T5032] hpfs: code page support is disabled [ 99.141632][ T4991] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.173607][ T4991] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 99.183318][ T4923] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 99.201239][ T4923] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 99.241073][ T5032] hpfs: hpfs_map_4sectors(): unaligned read [ 99.265108][ T5032] hpfs: hpfs_map_4sectors(): unaligned read [ 99.285450][ T5032] hpfs: filesystem error: unable to find root dir [ 99.293646][ T4923] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 99.393579][ T4280] XFS (loop0): Unmounting Filesystem [ 99.456570][ T4991] F2FS-fs (loop4) : inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x13b/0x9e0 [ 99.582379][ T4350] usb 2-1: USB disconnect, device number 3 [ 99.791974][ T5042] fido_id[5042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.870911][ T41] kworker/u4:2: attempt to access beyond end of device [ 99.870911][ T41] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 100.021225][ T5051] loop0: detected capacity change from 0 to 64 [ 100.087929][ T5053] loop3: detected capacity change from 0 to 512 [ 100.171621][ T5053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.255281][ T5053] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.218: bad orphan inode 13 [ 100.337382][ T5059] loop0: detected capacity change from 0 to 64 [ 100.350026][ T5053] ext4_test_bit(bit=12, block=18) = 1 [ 100.389536][ T5053] is_bad_inode(inode)=0 [ 100.413369][ T5053] NEXT_ORPHAN(inode)=2130706432 [ 100.418600][ T5053] max_ino=32 [ 100.447958][ T5053] i_nlink=1 [ 100.480023][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.581847][ T5053] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 100.628133][ T5060] loop1: detected capacity change from 0 to 4096 [ 100.704774][ T5053] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 100.793774][ T5068] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.218: bg 0: block 248: padding at end of block bitmap is not set [ 100.830925][ C1] sd 0:0:1:0: [sda] tag#4545 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 100.842072][ C1] sd 0:0:1:0: [sda] tag#4545 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 100.861254][ T5068] Quota error (device loop3): write_blk: dquota write failed [ 100.881548][ T5068] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 100.940126][ T5068] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.218: Failed to acquire dquot type 1 [ 101.128299][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 101.479117][ T5065] loop4: detected capacity change from 0 to 32768 [ 101.506670][ T5065] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.217 (5065) [ 101.541069][ T5087] kernel read not supported for file /eth0 (pid: 5087 comm: syz.2.231) [ 101.573851][ T5065] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 101.607599][ T26] audit: type=1800 audit(1761761991.431:15): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.231" name="eth0" dev="mqueue" ino=35213 res=0 errno=0 [ 101.642093][ T5065] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 101.662597][ T5065] BTRFS info (device loop4): using free space tree [ 101.801387][ T5105] loop1: detected capacity change from 0 to 128 [ 101.857320][ T5114] loop2: detected capacity change from 0 to 512 [ 101.865818][ T5114] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.893318][ T5114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.935424][ T5114] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.236: bad orphan inode 131083 [ 102.021961][ T5114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.023225][ T129] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.034462][ T4266] FAT-fs (loop1): error, invalid access to FAT (entry 0x266f0005) [ 102.051534][ T4266] FAT-fs (loop1): Filesystem has been set read-only [ 102.078858][ T5065] BTRFS info (device loop4): enabling ssd optimizations [ 102.103094][ T4350] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.111516][ T26] audit: type=1800 audit(1761761991.941:16): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 102.333205][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 102.338882][ T4350] usb 4-1: Using ep0 maxpacket: 8 [ 102.352342][ T4350] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.374217][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.389246][ T4350] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.400029][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.418518][ T4350] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.438707][ T129] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 102.444906][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 102.464019][ T4350] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.484559][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.519128][ T129] usb 1-1: config 0 descriptor?? [ 102.524947][ T4350] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.550177][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.648332][ T5133] loop1: detected capacity change from 0 to 16 [ 102.686004][ T5133] erofs: (device loop1): mounted with root inode @ nid 36. [ 102.705932][ T4267] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.797123][ T4350] usb 4-1: GET_CAPABILITIES returned 0 [ 102.812692][ T4350] usbtmc 4-1:16.0: can't read capabilities [ 102.842768][ T5136] loop2: detected capacity change from 0 to 128 [ 102.907392][ T5136] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.966936][ T5136] hpfs: filesystem error: improperly stopped [ 102.972248][ T129] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 102.999281][ T5136] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 103.031805][ T5136] hpfs: You really don't want any checks? You are crazy... [ 103.104996][ T5136] hpfs: hpfs_map_sector(): read error [ 103.110953][ T5136] hpfs: code page support is disabled [ 103.136715][ T5136] hpfs: hpfs_map_4sectors(): unaligned read [ 103.158219][ T5136] hpfs: hpfs_map_4sectors(): unaligned read [ 103.188648][ T5136] hpfs: filesystem error: unable to find root dir [ 103.237101][ T4921] usb 1-1: USB disconnect, device number 6 [ 103.312694][ T5137] fido_id[5137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 103.543869][ T129] usb 4-1: USB disconnect, device number 3 [ 103.866790][ T5154] team0: Port device bridge1 added [ 103.900420][ T5155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 103.930635][ T5155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 104.093191][ T129] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.283069][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 104.299600][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 104.313890][ T5166] loop2: detected capacity change from 0 to 8192 [ 104.321685][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.341855][ T129] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.342115][ T5166] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.358713][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 104.379097][ T129] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 104.390309][ T129] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 104.403163][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.429585][ T129] usb 4-1: config 0 descriptor?? [ 104.437226][ T5166] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 104.482056][ T4285] Bluetooth: hci5: urb ffff88802de61400 submission failed (90) [ 104.504273][ T5166] REISERFS (device loop2): using ordered data mode [ 104.516653][ T5166] reiserfs: using flush barriers [ 104.604217][ T5166] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.646889][ T5166] REISERFS (device loop2): checking transaction log (loop2) [ 104.686201][ T5166] REISERFS (device loop2): Using r5 hash to sort names [ 104.726490][ T5166] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 104.771742][ T5180] loop0: detected capacity change from 0 to 1024 [ 104.785900][ T129] usb 4-1: USB disconnect, device number 4 [ 104.991714][ T5183] loop4: detected capacity change from 0 to 8 [ 105.222354][ T5180] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 105.279836][ T5180] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 105.296130][ T4267] SQUASHFS error: Unable to read directory block [631:43] [ 105.300751][ T5188] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 105.325966][ T5188] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 105.353403][ T4267] SQUASHFS error: Unable to read directory block [631:43] [ 105.481739][ T11] hfsplus: b-tree write err: -5, ino 4 [ 105.517050][ T5192] input: syz0 as /devices/virtual/input/input9 [ 105.526695][ T11] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 105.574621][ T4922] kernel write not supported for file /snd/midiC2D0 (pid: 4922 comm: kworker/0:15) [ 106.060440][ T5216] process 'syz.2.271' launched './file0' with NULL argv: empty string added [ 106.092482][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 106.342113][ T5222] loop0: detected capacity change from 0 to 4096 [ 106.411341][ T5231] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.513305][ T4920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.713245][ T4920] usb 5-1: Using ep0 maxpacket: 8 [ 106.720154][ T4920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.789011][ T4920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.819952][ T4920] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 106.821980][ T5245] loop2: detected capacity change from 0 to 2048 [ 106.850396][ T4920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.889679][ T4920] usb 5-1: config 0 descriptor?? [ 106.941745][ T5245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.000101][ T5245] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.284: bit already cleared for inode 15 [ 107.058006][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 107.319326][ T4920] lenovo 0003:17EF:6009.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 107.511931][ T5257] loop2: detected capacity change from 0 to 32768 [ 107.532681][ T4920] usb 5-1: USB disconnect, device number 3 [ 107.608839][ T5257] XFS (loop2): Mounting V5 Filesystem [ 107.738485][ T5257] XFS (loop2): Ending clean mount [ 107.951558][ T4273] XFS (loop2): Unmounting Filesystem [ 107.991891][ T5262] loop0: detected capacity change from 0 to 32768 [ 108.016911][ T5262] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.290 (5262) [ 108.048003][ T5262] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.092081][ T5262] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 108.128990][ T5262] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.157133][ T5262] BTRFS info (device loop0): use zstd compression, level 3 [ 108.165265][ T5262] BTRFS info (device loop0): using free space tree [ 108.434786][ T5262] BTRFS info (device loop0): enabling ssd optimizations [ 108.548357][ T26] audit: type=1800 audit(1761761998.381:17): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 108.693035][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.695109][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 108.739282][ T4920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.923229][ T4920] usb 5-1: Using ep0 maxpacket: 32 [ 108.961020][ T4920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.969893][ T4280] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.978207][ T4920] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 108.995702][ T5313] loop3: detected capacity change from 0 to 128 [ 109.002243][ T4920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.010602][ T5313] FAT-fs (loop3): Directory bread(block 414) failed [ 109.074211][ T4920] usb 5-1: config 0 descriptor?? [ 109.097753][ T5313] FAT-fs (loop3): Directory bread(block 415) failed [ 109.119079][ T5313] FAT-fs (loop3): Directory bread(block 416) failed [ 109.128472][ T5313] FAT-fs (loop3): Directory bread(block 417) failed [ 109.135362][ T5313] FAT-fs (loop3): Directory bread(block 418) failed [ 109.142725][ T5313] FAT-fs (loop3): Directory bread(block 419) failed [ 109.150345][ T5313] FAT-fs (loop3): Directory bread(block 420) failed [ 109.158015][ T5313] FAT-fs (loop3): Directory bread(block 421) failed [ 109.192861][ T5313] FAT-fs (loop3): Directory bread(block 414) failed [ 109.210558][ T5313] FAT-fs (loop3): Directory bread(block 415) failed [ 109.519266][ T4920] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 109.719306][ T5320] input: syz1 as /devices/virtual/input/input10 [ 110.102195][ T4920] corsair-cpro: probe of 0003:1B1C:0C10.0006 failed with error -71 [ 110.158684][ T4920] usb 5-1: USB disconnect, device number 4 [ 110.411028][ T5336] fido_id[5336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 110.657964][ T5324] loop1: detected capacity change from 0 to 32768 [ 110.820848][ T5324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.340778][ T5353] loop4: detected capacity change from 0 to 40427 [ 111.365152][ T5353] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 111.387485][ T5347] loop0: detected capacity change from 0 to 32768 [ 111.408553][ T5353] F2FS-fs (loop4): invalid crc value [ 111.424192][ T5347] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.313 (5347) [ 111.480596][ T5353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.487675][ T5347] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 111.515387][ T5347] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.563100][ T5347] BTRFS info (device loop0): using free space tree [ 111.622447][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 111.642267][ T5353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.921532][ T5353] syz.4.316: attempt to access beyond end of device [ 111.921532][ T5353] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 111.932004][ T5347] BTRFS info (device loop0): enabling ssd optimizations [ 112.065796][ T26] audit: type=1804 audit(1761762001.901:18): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.317" name=2F6E6577726F6F742F36322F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=36649 res=1 errno=0 [ 112.152041][ T4267] syz-executor: attempt to access beyond end of device [ 112.152041][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.292508][ T4280] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 112.475646][ T4921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.704973][ T4921] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.730184][ T5380] loop3: detected capacity change from 0 to 32768 [ 113.715008][ T5424] loop4: detected capacity change from 0 to 128 [ 113.730285][ T5423] overlayfs: failed to clone upperpath [ 113.814447][ T5424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.833600][ T5424] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.927748][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 113.974613][ T5428] loop1: detected capacity change from 0 to 512 [ 114.041656][ T5428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.087448][ T5410] loop0: detected capacity change from 0 to 32768 [ 114.103227][ T5428] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.218583][ T5410] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 114.230996][ T5410] XFS (loop0): Mounting V5 Filesystem [ 114.340603][ T5410] XFS (loop0): Ending clean mount [ 114.371047][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 114.420760][ T5410] XFS (loop0): Quotacheck needed: Please wait. [ 114.438461][ T5450] netlink: 'syz.3.341': attribute type 12 has an invalid length. [ 114.580213][ T5410] XFS (loop0): Quotacheck: Done. [ 114.808048][ T5457] loop1: detected capacity change from 0 to 1024 [ 114.813005][ T4280] XFS (loop0): Unmounting Filesystem [ 114.844836][ T5457] EXT4-fs: Ignoring removed orlov option [ 114.917353][ T5457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.225668][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 115.334025][ T5436] loop4: detected capacity change from 0 to 40427 [ 115.371039][ T5436] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 115.381926][ T5436] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 115.402322][ T5436] F2FS-fs (loop4): invalid crc value [ 115.457915][ T5436] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.644541][ T5436] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 115.651900][ T5436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.073225][ T4267] syz-executor: attempt to access beyond end of device [ 116.073225][ T4267] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 116.283204][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 116.326724][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 116.813115][ T4921] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.013116][ T4921] usb 1-1: Using ep0 maxpacket: 32 [ 117.028186][ T4921] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 117.042842][ T4921] usb 1-1: config 0 has no interface number 0 [ 117.060945][ T4921] usb 1-1: config 0 interface 89 has no altsetting 0 [ 117.094481][ T4921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 117.113762][ T4921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.136325][ T5522] loop1: detected capacity change from 0 to 64 [ 117.164981][ T4921] usb 1-1: Product: syz [ 117.175089][ T4921] usb 1-1: Manufacturer: syz [ 117.180362][ T5524] loop3: detected capacity change from 0 to 128 [ 117.198525][ T4921] usb 1-1: SerialNumber: syz [ 117.219811][ T5524] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 117.226961][ T5520] loop2: detected capacity change from 0 to 2048 [ 117.251919][ T4921] usb 1-1: config 0 descriptor?? [ 117.258726][ T5524] hpfs: filesystem error: improperly stopped [ 117.271093][ T4921] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 117.291807][ T5520] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 117.298666][ T5524] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 117.311470][ T4921] em28xx 1-1:0.89: Video interface 89 found: bulk [ 117.314584][ T5524] [ 117.332116][ T5520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.392479][ T5524] hpfs: You really don't want any checks? You are crazy... [ 117.434572][ T5524] hpfs: hpfs_map_sector(): read error [ 117.440093][ T5524] hpfs: code page support is disabled [ 117.480691][ T5524] hpfs: hpfs_map_4sectors(): unaligned read [ 117.493932][ T5524] hpfs: hpfs_map_4sectors(): unaligned read [ 117.510364][ T5524] hpfs: filesystem error: unable to find root dir [ 117.843069][ T4922] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 117.881443][ T4921] em28xx 1-1:0.89: chip ID is em28174 [ 118.055114][ T4922] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 118.070917][ T4922] usb 3-1: config 0 has no interface number 0 [ 118.092253][ T4922] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 58178, setting to 64 [ 118.145900][ T4922] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 118.165863][ T4922] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 118.199171][ T4922] usb 3-1: Manufacturer: syz [ 118.233850][ T4922] usb 3-1: config 0 descriptor?? [ 118.240504][ T5520] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.263379][ T4922] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input11 [ 118.368135][ T4921] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 118.386380][ T5546] loop1: detected capacity change from 0 to 2048 [ 118.403184][ T4921] em28xx 1-1:0.89: board has no eeprom [ 118.470811][ T5546] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 118.503057][ T4921] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 118.515629][ T5546] UDF-fs: Scanning with blocksize 512 failed [ 118.525323][ T4921] em28xx 1-1:0.89: analog set to bulk mode. [ 118.537877][ T4257] usb 3-1: USB disconnect, device number 6 [ 118.560281][ T4922] em28xx 1-1:0.89: Registering V4L2 extension [ 118.586574][ T5546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.607905][ T4921] usb 1-1: USB disconnect, device number 7 [ 118.633625][ T4921] em28xx 1-1:0.89: Disconnecting em28xx [ 118.788500][ T4922] usb 1-1: Decoder not found [ 118.803082][ T4922] em28xx 1-1:0.89: failed to create media graph [ 118.820411][ T4922] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 118.920283][ T4922] em28xx 1-1:0.89: Registering snapshot button... [ 119.004748][ T4922] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input12 [ 119.086840][ T4922] em28xx 1-1:0.89: Remote control support is not available for this card. [ 119.123762][ T4921] em28xx 1-1:0.89: Closing input extension [ 119.156560][ T4921] em28xx 1-1:0.89: Deregistering snapshot button [ 119.338733][ T4921] em28xx 1-1:0.89: Freeing device [ 119.736832][ T5570] overlayfs: failed to clone upperpath [ 119.770866][ T5568] batman_adv: batadv0: Adding interface: gretap1 [ 119.811322][ T5568] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.853047][ T5568] batman_adv: batadv0: Interface activated: gretap1 [ 119.871366][ T5548] loop3: detected capacity change from 0 to 32768 [ 120.019100][ T5548] XFS (loop3): Mounting V5 Filesystem [ 120.231151][ T5548] XFS (loop3): Ending clean mount [ 120.392084][ T5548] syz.3.381 (5548) used greatest stack depth: 19680 bytes left [ 120.574724][ T4268] XFS (loop3): Unmounting Filesystem [ 120.713925][ T5583] loop2: detected capacity change from 0 to 32768 [ 120.958009][ T5583] XFS (loop2): Mounting V5 Filesystem [ 121.144389][ T5583] XFS (loop2): Ending clean mount [ 121.264975][ T5583] XFS (loop2): Quotacheck needed: Please wait. [ 121.276803][ T5622] loop4: detected capacity change from 0 to 64 [ 121.391753][ T5583] XFS (loop2): Quotacheck: Done. [ 121.522736][ T4267] Trying to free block not in datazone [ 121.567917][ T4267] Trying to free block not in datazone [ 121.596035][ T4267] Trying to free block not in datazone [ 121.602795][ T4267] Trying to free block not in datazone [ 121.614720][ T5626] loop0: detected capacity change from 0 to 1024 [ 121.631674][ T4267] Trying to free block not in datazone [ 121.653378][ T4267] Trying to free block not in datazone [ 121.693631][ T4267] Trying to free block not in datazone [ 121.700017][ T4267] Trying to free block not in datazone [ 121.711584][ T4267] Trying to free block not in datazone [ 121.761673][ T4267] Trying to free block not in datazone [ 121.770328][ T4267] Trying to free block not in datazone [ 121.777992][ T4267] Trying to free block not in datazone [ 121.784388][ T4267] Trying to free block not in datazone [ 121.791087][ T4267] Trying to free block not in datazone [ 121.950826][ T5631] loop1: detected capacity change from 0 to 256 [ 121.957390][ T5624] hfsplus: invalid extended attribute record [ 122.011197][ T5634] loop4: detected capacity change from 0 to 16 [ 122.014557][ T4273] XFS (loop2): Unmounting Filesystem [ 122.053316][ T5631] exfat: Deprecated parameter 'namecase' [ 122.059955][ T5634] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.089367][ T5631] exfat: Deprecated parameter 'utf8' [ 122.189097][ T5631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 122.235296][ T75] hfsplus: b-tree write err: -5, ino 4 [ 122.561069][ T4267] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 122.633598][ T4267] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 122.665070][ T4267] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 122.973167][ T4922] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.173091][ T4922] usb 4-1: Using ep0 maxpacket: 32 [ 123.181133][ T4922] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.220589][ T4922] usb 4-1: config 0 has no interface number 0 [ 123.266797][ T4922] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.293247][ T4922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.310445][ T4922] usb 4-1: Product: syz [ 123.316476][ T4922] usb 4-1: Manufacturer: syz [ 123.321248][ T4922] usb 4-1: SerialNumber: syz [ 123.336378][ T4922] usb 4-1: config 0 descriptor?? [ 123.373924][ T4922] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.570594][ T4922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.621275][ T4922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.010900][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.018225][ T5676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 124.025134][ T4921] usb 4-1: USB disconnect, device number 5 [ 124.061240][ T4921] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.112357][ T4921] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.166201][ T4921] quatech2 4-1:0.51: device disconnected [ 124.218049][ T5660] loop1: detected capacity change from 0 to 32768 [ 124.259938][ T5660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.411 (5660) [ 124.343701][ T5660] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.363263][ T5660] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 124.391160][ T5660] BTRFS info (device loop1): turning on flush-on-commit [ 124.419591][ T5660] BTRFS info (device loop1): max_inline at 0 [ 124.436624][ T5660] BTRFS info (device loop1): enabling disk space caching [ 124.462974][ T5660] BTRFS info (device loop1): setting nodatasum [ 124.492470][ T5660] BTRFS info (device loop1): turning off barriers [ 124.535596][ T5660] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.551726][ T5660] BTRFS info (device loop1): use zstd compression, level 3 [ 124.638929][ T5660] BTRFS info (device loop1): enabling ssd optimizations [ 124.678088][ T5660] BTRFS info (device loop1): force clearing of disk cache [ 124.723042][ T5660] BTRFS info (device loop1): max_inline at 0 [ 124.729667][ T5660] BTRFS info (device loop1): disk space caching is enabled [ 125.081323][ T5660] BTRFS info (device loop1): rebuilding free space tree [ 125.117002][ T5718] loop2: detected capacity change from 0 to 8 [ 125.216032][ T5660] BTRFS info (device loop1): disabling free space tree [ 125.237022][ T5718] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.244685][ T5660] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.300433][ T5718] SQUASHFS error: Failed to read block 0x9b: -5 [ 125.321609][ T5660] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.323626][ T5718] SQUASHFS error: Unable to read metadata cache entry [99] [ 125.341817][ T5721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.424'. [ 125.465440][ T5718] SQUASHFS error: Unable to read inode 0x127 [ 125.634786][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.970595][ T5730] loop4: detected capacity change from 0 to 4096 [ 126.057984][ T5730] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 126.152430][ T26] audit: type=1800 audit(1761762015.981:19): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.429" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 126.443011][ T5398] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.639360][ T5398] usb 1-1: Using ep0 maxpacket: 32 [ 126.650811][ T5398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.677186][ T5398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.697619][ T5398] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 126.732051][ T5398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.752203][ T5398] usb 1-1: config 0 descriptor?? [ 127.178247][ T5398] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 127.455192][ T5398] usb 1-1: USB disconnect, device number 8 [ 127.692195][ T5777] loop3: detected capacity change from 0 to 256 [ 128.042468][ T5783] loop3: detected capacity change from 0 to 1024 [ 128.128059][ T5769] loop4: detected capacity change from 0 to 32768 [ 128.340967][ T5769] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 128.353695][ T5769] XFS (loop4): Mounting V5 Filesystem [ 128.413735][ T5799] loop3: detected capacity change from 0 to 8 [ 128.435544][ T5799] unable to read fragment index table [ 128.502671][ T5769] XFS (loop4): Ending clean mount [ 128.510634][ T26] audit: type=1326 audit(1761762018.351:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016498efc9 code=0x7ffc0000 [ 128.533695][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.544511][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 128.617764][ T26] audit: type=1326 audit(1761762018.351:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016498efc9 code=0x7ffc0000 [ 128.719853][ T26] audit: type=1326 audit(1761762018.351:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f016498efc9 code=0x7ffc0000 [ 128.750951][ T4267] XFS (loop4): Unmounting Filesystem [ 128.799197][ T26] audit: type=1326 audit(1761762018.441:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016498efc9 code=0x7ffc0000 [ 128.836085][ T26] audit: type=1326 audit(1761762018.441:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016498efc9 code=0x7ffc0000 [ 128.966116][ T26] audit: type=1804 audit(1761762018.451:25): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.443" name="/newroot/101/file0/file1" dev="loop4" ino=6150 res=1 errno=0 [ 129.108990][ T5809] loop1: detected capacity change from 0 to 32768 [ 129.143251][ T5809] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.460 (5809) [ 129.201231][ T5809] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.212406][ T5809] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.221846][ T5809] BTRFS info (device loop1): force clearing of disk cache [ 129.229481][ T5809] BTRFS info (device loop1): enabling ssd optimizations [ 129.236778][ T5809] BTRFS info (device loop1): using spread ssd allocation scheme [ 129.244621][ T5809] BTRFS info (device loop1): using free space tree [ 129.523661][ T5803] loop2: detected capacity change from 0 to 32768 [ 129.704486][ T5803] XFS (loop2): Mounting V5 Filesystem [ 129.725724][ T5809] BTRFS info (device loop1): rebuilding free space tree [ 129.804493][ T5803] XFS (loop2): Ending clean mount [ 129.825965][ T5808] loop3: detected capacity change from 0 to 40427 [ 129.834534][ T5840] loop4: detected capacity change from 0 to 16 [ 129.840702][ T5808] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.851139][ T5808] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.851319][ T5840] erofs: (device loop4): mounted with root inode @ nid 36. [ 129.861944][ T5808] F2FS-fs (loop3): invalid crc value [ 129.882323][ T5803] XFS (loop2): User initiated shutdown received. [ 129.952812][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 129.955012][ T5803] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 129.974367][ T5840] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 129.993438][ T26] audit: type=1800 audit(1761762019.831:26): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.458" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 130.035187][ T4266] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.060668][ T5840] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 130.075492][ T5840] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 130.104738][ T5808] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.130948][ T5803] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 130.338914][ T5808] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.393316][ T5808] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.409343][ T5850] loop0: detected capacity change from 0 to 1024 [ 130.647092][ T4273] XFS (loop2): Unmounting Filesystem [ 131.077687][ T5859] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 131.335486][ T5863] loop0: detected capacity change from 0 to 256 [ 131.368386][ T5863] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.440180][ T5863] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 131.491010][ T5863] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 132.217248][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 132.240053][ T4922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.260736][ T5894] loop2: detected capacity change from 0 to 1764 [ 132.264220][ T4922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.295493][ T4921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.353039][ T4923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.448602][ T4921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.565333][ T4923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.595666][ T4923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.616460][ T4923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.675755][ T4923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.711227][ T4923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.747111][ T4923] usb 4-1: config 0 descriptor?? [ 132.857611][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865331][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.212858][ T4923] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 133.225533][ T5914] input: syz0 as /devices/virtual/input/input13 [ 133.259447][ T4922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.270371][ T4923] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 133.498571][ T4921] usb 4-1: USB disconnect, device number 6 [ 133.634194][ T5923] fido_id[5923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 134.043118][ T5398] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 134.229460][ T5398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 134.257895][ T5954] loop2: detected capacity change from 0 to 512 [ 134.292675][ T5954] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.502: iget: bad i_size value: 38620345925642 [ 134.310450][ T5954] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.502: couldn't read orphan inode 15 (err -117) [ 134.317560][ T5398] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 134.333090][ T5954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.420854][ T5398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.445213][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 134.512308][ T5398] usb 2-1: config 0 descriptor?? [ 134.568520][ T5938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.833923][ T5967] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 [ 134.872738][ T5969] loop4: detected capacity change from 0 to 1024 [ 134.938046][ T5969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.001638][ T5398] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 135.097533][ T5977] loop0: detected capacity change from 0 to 256 [ 135.145276][ T5979] loop2: detected capacity change from 0 to 64 [ 135.410793][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 135.534496][ T5951] loop3: detected capacity change from 0 to 65536 [ 135.650376][ T5991] loop2: detected capacity change from 0 to 2048 [ 135.697937][ T5991] Alternate GPT is invalid, using primary GPT. [ 135.704638][ T5991] loop2: p1 p2 p3 [ 135.789229][ T5951] XFS (loop3): Mounting V5 Filesystem [ 135.833196][ T5398] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 135.950801][ T5951] XFS (loop3): Ending clean mount [ 136.024608][ T5398] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.072190][ T5398] usb 1-1: config 0 has no interface number 0 [ 136.082957][ T5398] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 136.153130][ T5398] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 136.213080][ T5398] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.239223][ T5398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.267484][ T4746] udevd[4746]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 136.282615][ T4748] udevd[4748]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 136.302523][ T5398] usb 1-1: config 0 descriptor?? [ 136.308174][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 136.334806][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.353876][ T5398] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 136.373108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.523363][ T5993] loop4: detected capacity change from 0 to 32768 [ 136.641725][ T5733] usb 1-1: USB disconnect, device number 9 [ 136.647773][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 136.728335][ T5993] XFS (loop4): Mounting V5 Filesystem [ 136.845694][ T5993] XFS (loop4): Ending clean mount [ 136.936317][ T4268] XFS (loop3): Unmounting Filesystem [ 136.978331][ T4922] usb 2-1: USB disconnect, device number 4 [ 137.024868][ T5993] XFS (loop4): User initiated shutdown received. [ 137.074617][ T5993] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 137.103039][ T5993] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 137.286138][ T4267] XFS (loop4): Unmounting Filesystem [ 137.572953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 137.977866][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 138.043839][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.518'. [ 138.103506][ T6044] Zero length message leads to an empty skb [ 138.471679][ T6034] loop1: detected capacity change from 0 to 40427 [ 138.527072][ T6034] F2FS-fs (loop1): invalid crc value [ 138.568835][ T6034] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.719426][ T6034] F2FS-fs (loop1): Start checkpoint disabled! [ 138.753355][ T6034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 139.153623][ T11] kworker/u4:1: attempt to access beyond end of device [ 139.153623][ T11] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 139.389738][ T6056] loop4: detected capacity change from 0 to 32768 [ 139.467052][ T6056] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 139.672402][ T6060] loop2: detected capacity change from 0 to 32768 [ 139.784401][ T4422] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 139.896988][ T6060] XFS (loop2): Mounting V5 Filesystem [ 139.930328][ T6065] loop3: detected capacity change from 0 to 32768 [ 140.160235][ T6060] XFS (loop2): Ending clean mount [ 140.178237][ T6065] XFS (loop3): Mounting V5 Filesystem [ 140.189312][ T6060] XFS (loop2): Quotacheck needed: Please wait. [ 140.425863][ T6060] XFS (loop2): Quotacheck: Done. [ 140.460837][ T6065] XFS (loop3): Ending clean mount [ 140.484267][ T6073] loop0: detected capacity change from 0 to 32768 [ 140.493503][ T6065] XFS (loop3): Quotacheck needed: Please wait. [ 140.583350][ T6065] XFS (loop3): Quotacheck: Done. [ 140.727172][ T4273] XFS (loop2): Unmounting Filesystem [ 140.821446][ T6073] overlayfs: upper fs needs to support d_type. [ 140.917423][ T6073] overlayfs: upper fs does not support tmpfile. [ 141.000408][ T6073] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.059213][ T4268] XFS (loop3): Unmounting Filesystem [ 141.177080][ T6073] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 141.177080][ T6073] [ 141.213424][ T6073] ERROR: (device loop0): remounting filesystem as read-only [ 141.273406][ T6073] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 141.280989][ T6073] overlayfs: failed to verify upper root origin [ 141.436028][ T6129] loop1: detected capacity change from 0 to 2048 [ 141.543911][ T6130] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.583273][ T6129] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 141.672986][ T6134] loop2: detected capacity change from 0 to 8 [ 141.674471][ T6129] Remounting filesystem read-only [ 141.760487][ T6134] SQUASHFS error: zlib decompression failed, data probably corrupt [ 141.783659][ T6134] SQUASHFS error: Failed to read block 0x9b: -5 [ 141.800087][ T6134] SQUASHFS error: Unable to read metadata cache entry [99] [ 141.808022][ T6134] SQUASHFS error: Unable to read inode 0x127 [ 141.985182][ T6137] loop3: detected capacity change from 0 to 128 [ 142.008464][ T6137] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.073046][ T6137] hpfs: filesystem error: improperly stopped [ 142.092986][ T6137] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.143679][ T6137] hpfs: You really don't want any checks? You are crazy... [ 142.151367][ T6137] hpfs: hpfs_map_sector(): read error [ 142.237423][ T6137] hpfs: code page support is disabled [ 142.271622][ T6137] hpfs: hpfs_map_4sectors(): unaligned read [ 142.280943][ T6126] loop4: detected capacity change from 0 to 32768 [ 142.289706][ T6137] hpfs: hpfs_map_4sectors(): unaligned read [ 142.308586][ T6137] hpfs: filesystem error: unable to find root dir [ 142.357190][ T6137] hpfs: hpfs_map_4sectors(): unaligned read [ 142.390229][ T6137] hpfs: hpfs_map_sector(): read error [ 142.390513][ T6150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.412604][ T6151] hpfs: hpfs_map_4sectors(): unaligned read [ 142.414939][ T6126] JBD2: Ignoring recovery information on journal [ 142.501105][ T6126] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 142.845387][ T4267] ocfs2: Unmounting device (7,4) on (node local) [ 142.934689][ T6169] loop3: detected capacity change from 0 to 512 [ 143.007934][ T6169] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.555: inode has both inline data and extents flags [ 143.133234][ T6169] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.555: couldn't read orphan inode 15 (err -117) [ 143.280038][ T6169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.689589][ T6156] loop1: detected capacity change from 0 to 32768 [ 143.794131][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 143.837905][ T6156] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.202019][ T6203] loop0: detected capacity change from 0 to 40427 [ 144.216823][ T6203] F2FS-fs (loop0): invalid crc value [ 144.224674][ T6203] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.262416][ T6203] F2FS-fs (loop0): Start checkpoint disabled! [ 144.284368][ T6203] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 144.353664][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 144.662397][ T4368] kworker/u4:7: attempt to access beyond end of device [ 144.662397][ T4368] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.808269][ T4920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.984428][ T4922] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 145.013167][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.024922][ T4920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.039781][ T4920] usb 4-1: config 0 has no interface number 0 [ 145.053061][ T4922] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.094369][ T4920] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 145.128589][ T4920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.167927][ T4920] usb 4-1: Product: syz [ 145.172148][ T4920] usb 4-1: Manufacturer: syz [ 145.187699][ T4920] usb 4-1: SerialNumber: syz [ 145.217134][ T4920] usb 4-1: config 0 descriptor?? [ 145.351627][ T6215] loop2: detected capacity change from 0 to 40427 [ 145.423048][ T6215] F2FS-fs (loop2): invalid crc value [ 145.458816][ T4920] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 145.468240][ T6215] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.514386][ T4920] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.539984][ T6235] loop0: detected capacity change from 0 to 512 [ 145.550528][ T4920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 145.590586][ T4920] usb 4-1: media controller created [ 145.602178][ T6235] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.577: inode has both inline data and extents flags [ 145.627493][ T6215] F2FS-fs (loop2): Start checkpoint disabled! [ 145.651386][ T4920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.697960][ T6215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 145.706555][ T6235] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.577: couldn't read orphan inode 15 (err -117) [ 145.780344][ T6235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.930710][ T4920] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 146.055401][ T4920] usb 4-1: USB disconnect, device number 7 [ 146.072432][ T6243] team0: Device ipvlan2 failed to register rx_handler [ 146.106272][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 146.146330][ T50] kworker/u4:3: attempt to access beyond end of device [ 146.146330][ T50] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.277744][ T6246] loop4: detected capacity change from 0 to 512 [ 146.311527][ T6246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.417642][ T6246] EXT4-fs (loop4): 1 truncate cleaned up [ 146.493166][ T6246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.604348][ T6246] EXT4-fs (loop4): shut down requested (1) [ 146.635529][ T6246] syz.4.582 (pid 6246) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 146.755797][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 147.441261][ T6262] loop0: detected capacity change from 0 to 32768 [ 147.478927][ T6262] XFS: ikeep mount option is deprecated. [ 147.578035][ T6262] XFS (loop0): Mounting V5 Filesystem [ 147.762662][ T6262] XFS (loop0): Ending clean mount [ 147.771953][ T6292] sctp: [Deprecated]: syz.3.596 (pid 6292) Use of int in max_burst socket option deprecated. [ 147.771953][ T6292] Use struct sctp_assoc_value instead [ 147.795167][ T6262] XFS (loop0): Quotacheck needed: Please wait. [ 147.841557][ T6271] loop1: detected capacity change from 0 to 32768 [ 147.883811][ T6262] XFS (loop0): Quotacheck: Done. [ 147.952578][ T6271] overlayfs: upper fs needs to support d_type. [ 148.006058][ T6271] overlayfs: upper fs does not support tmpfile. [ 148.042290][ T6271] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.091751][ T6271] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 148.091751][ T6271] [ 148.152721][ T6271] ERROR: (device loop1): remounting filesystem as read-only [ 148.190030][ T6271] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 148.190699][ T4280] XFS (loop0): Unmounting Filesystem [ 148.217820][ T6271] overlayfs: failed to verify upper root origin [ 148.502526][ T6279] loop4: detected capacity change from 0 to 40427 [ 148.549602][ T6279] F2FS-fs (loop4): invalid crc value [ 148.618586][ T6279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.723075][ T5733] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.840737][ T6279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.928059][ T5733] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 148.952410][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.961170][ T4267] syz-executor: attempt to access beyond end of device [ 148.961170][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 148.983389][ T5733] usb 4-1: config 0 descriptor?? [ 149.620509][ T5733] usb 4-1: Cannot set autoneg [ 149.627055][ T5733] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 149.674337][ T5733] usb 4-1: USB disconnect, device number 8 [ 149.765046][ T6324] loop2: detected capacity change from 0 to 64 [ 150.101157][ T6337] loop1: detected capacity change from 0 to 256 [ 150.144982][ T6339] input: syz0 as /devices/virtual/input/input14 [ 150.159838][ T6337] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.247885][ T6337] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 150.279731][ T6337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x262da998, utbl_chksum : 0xe619d30d) [ 150.428167][ T6337] exFAT-fs (loop1): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 150.453110][ T6337] exFAT-fs (loop1): Filesystem has been set read-only [ 150.674639][ T6353] fuse: Invalid group_id [ 150.820221][ T6341] loop0: detected capacity change from 0 to 40427 [ 150.838749][ T6341] F2FS-fs (loop0): invalid crc value [ 150.859772][ T6341] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.027304][ T6341] F2FS-fs (loop0): Start checkpoint disabled! [ 151.059572][ T6341] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 151.275732][ T6361] loop3: detected capacity change from 0 to 8192 [ 151.312036][ T6361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.378758][ T2945] kworker/u4:5: attempt to access beyond end of device [ 151.378758][ T2945] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.393808][ T6361] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 151.413482][ T6361] REISERFS (device loop3): using ordered data mode [ 151.430234][ T6361] reiserfs: using flush barriers [ 151.448196][ T6361] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.533432][ T6361] REISERFS (device loop3): checking transaction log (loop3) [ 151.596080][ T6361] REISERFS (device loop3): Using r5 hash to sort names [ 151.623524][ T6361] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 151.685360][ T6371] loop2: detected capacity change from 0 to 1024 [ 151.737259][ T6371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.833846][ T6371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.976690][ T26] audit: type=1800 audit(1761762041.811:27): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.630" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 152.030267][ T6371] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #11: comm syz.2.630: missing EA_INODE flag [ 152.122874][ T6371] EXT4-fs (loop2): Remounting filesystem read-only [ 152.173532][ T6371] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.630: error while reading EA inode 11 err=-117 [ 152.248656][ T6371] EXT4-fs (loop2): Remounting filesystem read-only [ 152.340013][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 152.601822][ T6390] loop2: detected capacity change from 0 to 8192 [ 152.635149][ T6390] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.657147][ T6390] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 152.678179][ T6390] REISERFS (device loop2): using ordered data mode [ 152.691910][ T6379] loop0: detected capacity change from 0 to 32768 [ 152.712424][ T6390] reiserfs: using flush barriers [ 152.726060][ T6390] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.744331][ T6390] REISERFS (device loop2): checking transaction log (loop2) [ 152.794180][ T6395] loop3: detected capacity change from 0 to 64 [ 152.949032][ T6390] REISERFS (device loop2): Using rupasov hash to sort names [ 152.973371][ T6390] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 153.741000][ T6397] loop3: detected capacity change from 0 to 32768 [ 153.764096][ T6397] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.639 (6397) [ 153.800414][ T6397] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 153.829827][ T6397] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 153.859711][ T6397] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 153.893505][ T6397] BTRFS info (device loop3): use lzo compression, level 0 [ 153.918083][ T6397] BTRFS info (device loop3): using free space tree [ 154.003490][ T6403] loop2: detected capacity change from 0 to 32768 [ 154.041398][ T6403] overlayfs: upper fs needs to support d_type. [ 154.047885][ T6403] overlayfs: upper fs does not support tmpfile. [ 154.067674][ T6403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.068357][ T6397] BTRFS info (device loop3): enabling ssd optimizations [ 154.082796][ T6403] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 154.082796][ T6403] [ 154.103133][ T6403] ERROR: (device loop2): remounting filesystem as read-only [ 154.115040][ T6433] loop1: detected capacity change from 0 to 1024 [ 154.117896][ T5398] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.131153][ T6433] EXT4-fs: Ignoring removed oldalloc option [ 154.138157][ T6433] EXT4-fs: Ignoring removed bh option [ 154.146797][ T6403] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 154.154864][ T6433] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.191907][ T6403] overlayfs: failed to verify upper root origin [ 154.230129][ T6433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.327795][ T26] audit: type=1800 audit(1761762044.161:28): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.639" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 154.352989][ T5398] usb 1-1: Using ep0 maxpacket: 8 [ 154.359789][ T5398] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.380568][ T5398] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.404287][ T5398] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 154.439898][ T5398] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 154.451064][ T5398] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.503015][ T5398] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.532567][ T5398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.591671][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 154.684288][ T4268] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.779907][ T5398] usb 1-1: GET_CAPABILITIES returned 0 [ 154.785952][ T5398] usbtmc 1-1:16.0: can't read capabilities [ 154.799126][ T6442] netlink: 164 bytes leftover after parsing attributes in process `syz.1.649'. [ 154.928195][ T4422] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4422) [ 155.060943][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.142593][ T7] usb 1-1: USB disconnect, device number 10 [ 155.179927][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 155.487928][ T6456] loop1: detected capacity change from 0 to 128 [ 155.533095][ T6440] loop4: detected capacity change from 0 to 40427 [ 155.579809][ T6456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.645404][ T6456] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.688497][ T6463] loop3: detected capacity change from 0 to 2048 [ 155.693897][ T6440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.745878][ T6465] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.804921][ T6463] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 155.846021][ T6463] Remounting filesystem read-only [ 155.878525][ T6440] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 155.893947][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 155.921379][ T6463] NILFS (loop3): mounting fs with errors [ 155.934299][ T6440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.287607][ T4267] syz-executor: attempt to access beyond end of device [ 156.287607][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.300225][ T6471] loop1: detected capacity change from 0 to 1764 [ 156.461436][ T6471] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 156.699889][ T6480] loop0: detected capacity change from 0 to 256 [ 156.738456][ T6478] loop1: detected capacity change from 0 to 2048 [ 156.821082][ T6481] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.929991][ T6481] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 156.957833][ T6481] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 157.021837][ T6481] Remounting filesystem read-only [ 157.041420][ T6482] NILFS (loop1): mounting fs with errors [ 157.089918][ T6478] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 157.129364][ T6478] Remounting filesystem read-only [ 157.237064][ T4266] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 157.420971][ T6473] loop3: detected capacity change from 0 to 32768 [ 157.491390][ T6473] overlayfs: upper fs needs to support d_type. [ 157.509956][ T6473] overlayfs: upper fs does not support tmpfile. [ 157.514070][ T4285] block nbd2: Receive control failed (result -32) [ 157.537585][ T6473] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.558525][ T6473] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 157.558525][ T6473] [ 157.580276][ T6473] ERROR: (device loop3): remounting filesystem as read-only [ 157.588988][ T6492] block nbd2: shutting down sockets [ 157.627406][ T6473] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 157.635547][ T6473] overlayfs: failed to verify upper root origin [ 158.031030][ T6488] loop4: detected capacity change from 0 to 32768 [ 158.069060][ T6488] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 158.143717][ T6506] device syzkaller1 entered promiscuous mode [ 158.473865][ T4377] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 158.917881][ T6515] loop2: detected capacity change from 0 to 32768 [ 158.953836][ T6253] bond0: (slave syz_tun): Releasing backup interface [ 158.977927][ T6515] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.047275][ T6515] (syz.2.678,6515,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 159.076500][ T6515] (syz.2.678,6515,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 159.144815][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 159.195049][ T6524] loop4: detected capacity change from 0 to 16 [ 159.251298][ T6524] erofs: (device loop4): mounted with root inode @ nid 36. [ 159.335134][ T4368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.415271][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.498623][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.534447][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.541612][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.689234][ T4368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.728375][ T6534] ptrace attach of "./syz-executor exec"[4273] was attempted by ""[6534] [ 159.749556][ T6539] loop1: detected capacity change from 0 to 1024 [ 159.898938][ T4368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.977881][ T41] hfsplus: b-tree write err: -5, ino 4 [ 160.065377][ T6541] loop4: detected capacity change from 0 to 2048 [ 160.072210][ T26] audit: type=1326 audit(1761762049.901:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.1.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016498efc9 code=0x0 [ 160.159075][ T6541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.207357][ T26] audit: type=1800 audit(1761762050.041:30): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.691" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 160.238039][ T4368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.323183][ T4919] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.382595][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.404867][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.415549][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.426103][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.440419][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.448710][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.535270][ T4919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.562961][ T4919] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.582593][ T4919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.628830][ T4919] usb 4-1: config 0 descriptor?? [ 161.066242][ T6555] loop2: detected capacity change from 0 to 32768 [ 161.324747][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 161.465188][ T6574] netlink: 'syz.1.698': attribute type 3 has an invalid length. [ 161.474343][ T6574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.698'. [ 161.526020][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.543261][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.575132][ T6552] device bridge_slave_0 entered promiscuous mode [ 161.595401][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.608275][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.618198][ T6552] device bridge_slave_1 entered promiscuous mode [ 161.654289][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.667766][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.706666][ T6552] team0: Port device team_slave_0 added [ 161.721833][ T6552] team0: Port device team_slave_1 added [ 161.741815][ T4919] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 161.756046][ T4919] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input15 [ 161.783268][ T6555] XFS (loop2): Mounting V5 Filesystem [ 161.863420][ T6555] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 161.979746][ T6555] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30 [ 162.075931][ T6584] loop3: detected capacity change from 0 to 4096 [ 162.112487][ T6555] XFS (loop2): Ending clean mount [ 162.141332][ T6555] XFS (loop2): Quotacheck needed: Please wait. [ 162.169468][ T6584] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 162.203529][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.219126][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.289563][ T5181] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 162.303050][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.350254][ T5181] XFS (loop2): Unmount and run xfs_repair [ 162.377819][ T5181] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 162.406030][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.423489][ T5181] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 162.486124][ T5181] 00000010: 00 00 00 00 00 00 7e 00 00 00 00 01 00 00 00 10 ......~......... [ 162.525878][ T5181] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 162.536062][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 162.556176][ T6558] loop4: detected capacity change from 0 to 262144 [ 162.566314][ T5181] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 162.575551][ T5181] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 162.584661][ T6558] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.696 (6558) [ 162.592854][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.604026][ T5181] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 162.613134][ T5181] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 162.622827][ T5181] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 162.640612][ T6558] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 162.651074][ T6558] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 162.660378][ T6558] BTRFS info (device loop4): using free space tree [ 162.667241][ T5181] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74 [ 162.673270][ T6584] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 162.716020][ T5181] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 162.737085][ T6584] ntfs3: loop3: Failed to load $Extend. [ 162.770045][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.794672][ T5181] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 162.807944][ T4919] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 162.838906][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.850631][ T6555] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 163.205322][ T6558] BTRFS info (device loop4): enabling ssd optimizations [ 163.263257][ T4273] XFS (loop2): Unmounting Filesystem [ 163.493703][ T5733] usb 4-1: USB disconnect, device number 9 [ 163.551569][ T6552] device hsr_slave_0 entered promiscuous mode [ 163.597195][ T6552] device hsr_slave_1 entered promiscuous mode [ 163.659425][ T6552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.680547][ T6552] Cannot create hsr debugfs directory [ 163.734716][ T6558] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512 [ 163.835900][ T4267] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 164.613110][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 164.679367][ T6623] loop1: detected capacity change from 0 to 40427 [ 164.703827][ T6628] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 164.755338][ T6623] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.775439][ T6628] netlink: 'syz.2.703': attribute type 7 has an invalid length. [ 164.822485][ T6628] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.703'. [ 165.011661][ T6623] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 165.069267][ T6623] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.381732][ T4266] syz-executor: attempt to access beyond end of device [ 165.381732][ T4266] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.524383][ T6649] loop2: detected capacity change from 0 to 1024 [ 165.668554][ T6649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.689325][ T6649] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.706769][ T6649] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 165.795184][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 165.795342][ T6632] loop4: detected capacity change from 0 to 32768 [ 165.809384][ T6632] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.705 (6632) [ 165.847373][ T4368] device hsr_slave_0 left promiscuous mode [ 165.884868][ T6632] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.916827][ T4368] device hsr_slave_1 left promiscuous mode [ 165.925986][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.931372][ T6632] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 165.981059][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.008610][ T6632] BTRFS info (device loop4): enabling auto defrag [ 166.047266][ T6632] BTRFS info (device loop4): use no compression [ 166.071419][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.112574][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.133927][ T4368] device bridge_slave_1 left promiscuous mode [ 166.145358][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.153083][ T6632] BTRFS info (device loop4): max_inline at 4096 [ 166.159648][ T6632] BTRFS info (device loop4): using free space tree [ 166.362745][ T4368] device bridge_slave_0 left promiscuous mode [ 166.393933][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state Stopping sshd: [ 166.525704][ T6632] BTRFS info (device loop4): enabling ssd optimizations [ 166.588649][ T4368] device veth1_macvtap left promiscuous mode [ 166.630754][ T4368] device veth1_vlan left promiscuous mode [ 166.674165][ T4368] device veth0_vlan left promiscuous mode [ 166.693152][ T4269] Bluetooth: hci4: command 0x040f tx timeout stopped /usr/sbin/sshd (pid 4029) OK [ 166.823619][ T4267] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.112427][ T6703] loop3: detected capacity change from 0 to 512 Stopping crond: [ 167.238358][ T6703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. stopped /usr/sbin/crond (pid 4011) OK Stopping dhcpcd... [ 167.769113][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 167.945568][ T6712] loop4: detected capacity change from 0 to 8192 stopped /sbin/dhcpcd (pid 3932) [ 168.024307][ T26] audit: type=1804 audit(1761762057.851:31): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.715" name="/newroot/150/file2/bus" dev="loop4" ino=1048620 res=1 errno=0 [ 168.098904][ T26] audit: type=1800 audit(1761762057.881:32): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.715" name="bus" dev="loop4" ino=1048620 res=0 errno=0 Stopping network: [ 168.507608][ T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.713566][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 168.723808][ T126] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 168.733280][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.741409][ T126] usb 5-1: Product: syz [ 168.748387][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 168.749878][ T126] usb 5-1: Manufacturer: syz [ 168.762107][ T126] usb 5-1: SerialNumber: syz [ 168.769318][ T126] usb 5-1: config 0 descriptor?? [ 168.781408][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 168.814060][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 168.881831][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.948969][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.218152][ T126] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 169.231279][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.241417][ T126] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 169.250063][ T126] usb 5-1: media controller created [ 169.284000][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.720009][ T4368] bond0 (unregistering): Released all slaves [ 169.815012][ T6552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.824861][ T6552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.853402][ T126] zl10353_read_register: readreg error (reg=127, ret==0) [ 169.860520][ T126] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 169.892755][ T126] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 169.955259][ T126] usb 5-1: USB disconnect, device number 5 [ 169.980158][ T26] audit: type=1326 audit(1761762059.811:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672678efc9 code=0x0 [ 169.981985][ T6730] loop1: detected capacity change from 0 to 128 [ 170.014010][ T6730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.032076][ T6730] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.127518][ T126] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 170.259899][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 170.269062][ T6552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.330652][ T6552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.741549][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.809810][ T4340] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 170.823892][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.869330][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.929790][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.034522][ T4340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.062053][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.091642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.092957][ T4340] usb 4-1: config 1 has no interface number 0 [ 171.131097][ T4340] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.135411][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.149379][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.167505][ T4340] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 171.203404][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.218533][ T4340] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 171.243320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.251675][ T4340] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 171.273600][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.282517][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.293046][ T4340] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.329961][ T4340] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 OK [ 171.355692][ T6765] IPVS: Scheduler module ip_vs_sip not found [ 171.369813][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.378554][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.398779][ T4340] usb 4-1: Product: syz [ 171.420656][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.433976][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.448504][ T4340] usb 4-1: Manufacturer: syz [ 171.453358][ T4340] usb 4-1: SerialNumber: syz [ 171.487923][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.501369][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.543225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.598618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.647103][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready Stopping iptables: [ 171.687320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.754348][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.769583][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.784296][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.833690][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.875817][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready OK [ 171.956194][ T6552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.985148][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 Stopping system message bus: [ 172.354041][ T6761] loop4: detected capacity change from 0 to 40427 [ 172.381824][ T6761] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 172.415907][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.427446][ T6761] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.437705][ T4340] cdc_ncm 4-1:1.1: bind() failure [ 172.473360][ T6761] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 172.481732][ T6761] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 172.509447][ T6761] F2FS-fs (loop4): invalid crc value [ 172.539401][ T6761] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.682231][ T6761] F2FS-fs (loop4): Start checkpoint disabled! [ 172.714093][ T4271] usb 4-1: USB disconnect, device number 10 [ 172.731050][ T6761] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 172.748131][ T6761] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 172.801191][ T6773] loop1: detected capacity change from 0 to 40427 [ 172.853882][ T6773] F2FS-fs (loop1): invalid crc value [ 172.870647][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.881906][ T6773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.900928][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.928858][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.066239][ T6773] F2FS-fs (loop1): Start checkpoint disabled! done [ 173.115020][ T6773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 173.301730][ T41] kworker/u4:2: attempt to access beyond end of device [ 173.301730][ T41] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 173.593657][ T75] kworker/u4:4: attempt to access beyond end of device [ 173.593657][ T75] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 174.094870][ T6821] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.102230][ T6821] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.197916][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.239098][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.281058][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.290482][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.298834][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 174.303166][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 174.362714][ T6552] device veth0_vlan entered promiscuous mode [ 174.390300][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.404208][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.440065][ T6552] device veth1_vlan entered promiscuous mode [ 174.480585][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.497380][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.532428][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.542225][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.553610][ T6552] device veth0_macvtap entered promiscuous mode [ 174.563031][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.566115][ T6552] device veth1_macvtap entered promiscuous mode [ 174.590080][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.601768][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.627652][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.648713][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.673480][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.692406][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.709462][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.720386][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.723050][ T4340] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.745817][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.760618][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.770984][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.774691][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.784951][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.801829][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.809269][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.826150][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.871098][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.882052][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.893857][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 killall: can't k[ 174.905871][ T126] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 ill pid 4388: No such process killall: can't kill pid 4422: No such process killall: can't kill pid 4424: No such process killall: can't kill[ 174.928635][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! pid 4624: No such process killall: can't kill pid 4746: No such process killall: can't kill pid 4748: No such process [ 174.952087][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.955791][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.960234][ T4340] usb 2-1: Using ep0 maxpacket: 16 [ 174.977545][ T126] usb 4-1: config 0 descriptor?? [ 175.001296][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.009832][ T4340] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 175.030043][ T6842] loop4: detected capacity change from 0 to 8192 [ 175.040845][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.052981][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.061122][ T4340] usb 2-1: Product: syz [ 175.067730][ T4340] usb 2-1: Manufacturer: syz [ 175.074488][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.082947][ T4340] usb 2-1: SerialNumber: syz [ 175.091333][ T4340] usb 2-1: config 0 descriptor?? [ 175.101054][ T6842] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.133761][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.142592][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.161815][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.185846][ T6552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.213350][ T6552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.222206][ T6552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 Stopping klogd: [ 175.254105][ T6552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.270930][ T6842] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 175.333096][ T6842] FAT-fs (loop4): Filesystem has been set read-only [ 175.363653][ T6842] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 175.405523][ T126] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 175.423563][ T6842] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 175.438922][ T126] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 175.468836][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.501355][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.514967][ T4340] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 175.534264][ T4340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.551062][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.554572][ T4340] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 175.571253][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready OK [ 175.594044][ T4340] usb 2-1: media controller created [ 175.599760][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.630137][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.637631][ T4340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.662319][ T4267] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 175.685953][ T4667] usb 4-1: USB disconnect, device number 11 Stopping acpid: [ 176.018023][ T6846] loop2: detected capacity change from 0 to 32768 [ 176.076649][ T6846] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 176.076649][ T6846] [ 176.203158][ T4340] zl10353_read_register: readreg error (reg=127, ret==0) [ 176.214816][ T4340] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 176.247772][ T4340] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 176.277131][ T4340] usb 2-1: USB disconnect, device number 5 [ 176.328927][ T4340] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 176.387803][ T5733] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 176.567264][ T6858] loop5: detected capacity change from 0 to 32768 [ 176.594507][ T6858] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.743 (6858) [ 176.607213][ T5733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.627097][ T5733] usb 5-1: config 1 has no interface number 0 [ 176.631600][ T6858] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.643017][ T5733] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.648267][ T6858] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 176.663542][ T6858] BTRFS info (device loop5): enabling auto defrag [ 176.670082][ T6858] BTRFS info (device loop5): use no compression [ 176.675796][ T6872] Bluetooth: hci5: Frame reassembly failed (-84) [ 176.680341][ T6858] BTRFS info (device loop5): max_inline at 4096 [ 176.689404][ T6858] BTRFS info (device loop5): using free space tree [ 176.690593][ T5733] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 176.717339][ T2945] Bluetooth: hci5: Frame reassembly failed (-84) [ 176.726222][ T5733] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 176.741552][ T5733] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 176.758861][ T5733] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.783755][ T5733] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.793986][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.802094][ T5733] usb 5-1: Product: syz [ 176.806854][ T5733] usb 5-1: Manufacturer: syz [ 176.811510][ T5733] usb 5-1: SerialNumber: syz [ 176.833244][ T6860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.857585][ T6858] BTRFS info (device loop5): enabling ssd optimizations [ 176.938242][ T6871] loop2: detected capacity change from 0 to 32768 [ 176.947100][ T6871] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.749 (6871) [ 176.963177][ T6871] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.980504][ T6871] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 176.990151][ T6871] BTRFS info (device loop2): using free space tree [ 177.060748][ T6860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.080649][ T6552] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.087198][ T6899] loop1: detected capacity change from 0 to 512 OK [ 177.251506][ T6871] BTRFS info (device loop2): enabling ssd optimizations [ 177.276483][ T6860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 Stopping syslogd: stopped /sbin/syslogd (pid 3620) OK [ 177.595738][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.624586][ T6916] loop1: detected capacity change from 0 to 2048 [ 177.696120][ T6916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.709545][ T6860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.743459][ T5733] cdc_ncm 5-1:1.1: bind() failure [ 177.818877][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.754'. [ 177.893577][ T26] audit: type=1800 audit(1761762067.721:34): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.755" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 178.043493][ T5733] usb 5-1: USB disconnect, device number 6 umount: can't remount debugfs read-only [ 178.600430][ T6921] loop5: detected capacity change from 0 to 32768 [ 178.644807][ T6931] loop1: detected capacity change from 0 to 512 [ 178.689878][ T6931] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.760: inode has both inline data and extents flags [ 178.694019][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.703636][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 178.873070][ T6931] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.760: couldn't read orphan inode 15 (err -117) [ 178.908261][ T6931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.297148][ T6944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 179.351759][ T6947] 9pnet: p9_errstr2errno: server reported unknown error [ 179.556487][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 179.739690][ T6956] loop5: detected capacity change from 0 to 2048 [ 179.763230][ T4285] block nbd4: Receive control failed (result -32) [ 179.777932][ T6951] block nbd4: shutting down sockets [ 179.791731][ T6956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.823581][ T26] audit: type=1800 audit(1761762069.661:35): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.769" name="file1" dev="loop5" ino=1367 res=0 errno=0 [ 179.916228][ T6948] loop3: detected capacity change from 0 to 32768 [ 179.967304][ T6948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.765 (6948) [ 180.010885][ T6948] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.053109][ T6948] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 180.061814][ T6948] BTRFS info (device loop3): enabling auto defrag [ 180.103156][ T6948] BTRFS info (device loop3): use no compression [ 180.109548][ T6948] BTRFS info (device loop3): max_inline at 4096 [ 180.123633][ T6948] BTRFS info (device loop3): using free space tree [ 180.311566][ T6988] overlayfs: failed to clone lowerpath [ 180.526071][ T6948] BTRFS info (device loop3): enabling ssd optimizations umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounte[ 180.546780][ T6992] loop1: detected capacity change from 0 to 8192 d read-only umount: can't remount /dev/root read-only [ 180.578670][ T6992] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 180.595319][ T6992] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 180.604878][ T6992] REISERFS (device loop1): using ordered data mode The system is g[ 180.611502][ T6992] reiserfs: using flush barriers oing down NOW! [ 180.624935][ T6992] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 Sent SIGTERM to all processes [ 180.711455][ T6992] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (73728 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. Connection to 10.128.1.183 closed by remote host. [ 180.913199][ T4923] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.091681][ T4268] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.967224][ T2945] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.057567][ T2945] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes [ 182.131001][ T2945] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 182.226407][ T2945] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.155054][ T6998] kvm: exiting hardware virtualization [ 183.190328][ T6998] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 183.229211][ T6998] ACPI: PM: Preparing to enter system sleep state S5 [ 183.240977][ T6998] reboot: Power down serialport: VM disconnected.