last executing test programs: 1.778677636s ago: executing program 3 (id=270): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, 0x0) 1.207160392s ago: executing program 3 (id=283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540), &(0x7f00000004c0)=ANY=[], 0x36, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x26) 1.202987721s ago: executing program 3 (id=285): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1.134233937s ago: executing program 0 (id=288): setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) keyctl$instantiate(0xc, 0x0, 0x0, 0x30, 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099"], 0x28}}, 0x0) 1.098961303s ago: executing program 0 (id=290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x4, 0x7ff, 0x4, 0x4, 0x9, 0x3, 0x7, 0x5}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$binfmt_elf64(r1, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x7, 0x0, 0x3, 0x5, 0x2, 0x3d, 0x46d, 0x29, 0x40, 0x150, 0x87e, 0x5, 0x38, 0x1, 0x0, 0xa076, 0x1}, [{0x70000000, 0x7, 0x7, 0x910, 0x3, 0x3, 0x4, 0x3}]}, 0x78) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1.098001207s ago: executing program 0 (id=291): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102}}}}}}, 0x0) 1.027150902s ago: executing program 4 (id=292): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000007380)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 1.026902888s ago: executing program 0 (id=293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1.026182893s ago: executing program 0 (id=294): unshare(0x22020600) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) 1.011936754s ago: executing program 0 (id=295): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.000823365s ago: executing program 4 (id=296): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904"], 0x0) 639.200886ms ago: executing program 1 (id=302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x4, 0x7ff, 0x4, 0x4, 0x9, 0x3, 0x7, 0x5}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$binfmt_elf64(r1, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x7, 0x0, 0x3, 0x5, 0x2, 0x3d, 0x46d, 0x29, 0x40, 0x150, 0x87e, 0x5, 0x38, 0x1, 0x0, 0xa076, 0x1}, [{0x70000000, 0x7, 0x7, 0x910, 0x3, 0x3, 0x4, 0x3}]}, 0x78) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 638.261332ms ago: executing program 1 (id=304): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000280)="2cb4", 0x2, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) 467.104621ms ago: executing program 2 (id=305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 466.768011ms ago: executing program 1 (id=306): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x60, r0, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x60}}, 0x4004880) 466.667521ms ago: executing program 1 (id=307): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$unix(0x1, 0x2, 0x0) r1 = memfd_secret(0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 450.702789ms ago: executing program 4 (id=308): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 448.358367ms ago: executing program 2 (id=309): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xd6e, 0x80, 0x34325241, 0x3, [0x2, 0x0, r5, r5], [0x80ffff], [], [0x400000000000000]}) 420.780052ms ago: executing program 1 (id=310): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="1f000000190081054e81f782db4cb9040220cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14) 401.541638ms ago: executing program 4 (id=311): mq_open(&(0x7f0000000180)='%`\x01', 0x842, 0x57, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r1 = fanotify_init(0x0, 0x2) fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, 0x0) 400.343287ms ago: executing program 2 (id=312): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x8, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 351.440297ms ago: executing program 1 (id=313): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001d309024a00010110000009040000160202"], 0x0) 351.233435ms ago: executing program 2 (id=314): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Ca'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) 350.312656ms ago: executing program 4 (id=315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x4, 0x7ff, 0x4, 0x4, 0x9, 0x3, 0x7, 0x5}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$binfmt_elf64(r1, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x7, 0x0, 0x3, 0x5, 0x2, 0x3d, 0x46d, 0x29, 0x40, 0x150, 0x87e, 0x5, 0x38, 0x1, 0x0, 0xa076, 0x1}, [{0x70000000, 0x7, 0x7, 0x910, 0x3, 0x3, 0x4, 0x3}]}, 0x78) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 311.260786ms ago: executing program 2 (id=316): gettid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 310.400728ms ago: executing program 3 (id=317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) 291.1784ms ago: executing program 4 (id=318): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) 227.050914ms ago: executing program 3 (id=319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 220.612115ms ago: executing program 3 (id=320): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=321): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x2000480, &(0x7f0000000480)=ANY=[], 0xfd, 0x62f4, &(0x7f00000006c0)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxdZ+0k3ln7+XwkZ+a3z6z3mXx3dmc9M/sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA//MGPz1URceVX6YYTEZ+LfkQvYmlcr0TE0sqJvPwgIl6IzeZ4PiKGCxFVbnw24vWI+Ph4xP0Hd1bHN53fYz++/5d//uEnx370jz8Pz/zvr7f6b+y23O3bv/3v3+4+/voCAABAieq6rqv0Mf9k+nzf67pTAMBM5Pf/Osm3q+euXp+z/qjVarX6ENZN9WR3m0VErDfvM95ncDgeAA6Z9fik6y7QIfkXbRARx7ruBDDXqq47wIG4/+DOapXyrZrvBytb7flckB35r1fb13fsNp2mfY7JrJ5fG9GP53bpz9KM+jBPcv69dv5XttpHabmDzn9Wdst/tHXpU3Fy/v12/i1HJ//exPxLlfMf7Cv/vvwBAAAAAGCO5b//n+j4+O/Ck6/Knjzq+O/KjPoAAAAAAAAAAE/bk47/t60y/h8AAADMq/Fn9bHfHX94W/Nc/1HsvP1yFfFMa3mgMOlimeWu+wEAAAAAAAAAAAAAJRlsncN7uYoYRsQzy8t1XY9/mtr1fj3p/Q+70tcfStb1izwAAGz5+HjrWv4qYjEiLqfv+hsuLy/X9eLScr1cLy3k/dnRwmK91Phcm6fj2xZGe9ghHozq8S9bbNyvadrn5Wnt7d83fqxR3d9Dx2ajw8ABICK23o3ue0c6Yur62eh6L4fDwfZ/9Nj+2Yuun6cAAADAwavruq7S13mfTMf8e113CgCYifz+3z4uoFar1Wq1+ujVTfVkd5tFRKw37zPeZzAcPwAcMuvxSdddoEPyL9ogIl7ouhPAXKu67gAH4v6DO6tVyrdqvh+k8d3zuSA78l+vNu+X7z9pOk37HJNZPb82oh/P7dKf52fUh3mS8++187+y1T5Kyx10/rOyW/7j9TzRQX+6lvPvt/NvOTr59ybmX6qc/2Bf+fflDwAAAAAAcyz//f/EXB3/HT3u6kz1qOO/Kwf2qAAAAAAAAABwsO4/uLOar3vNx/+/MGE5138eTTn/Sv5Fyvn3Wvl/tbVcvzF/7+2H+f/nwZ3VP9769+fzdK/5L+SZKj2zqvSMqNIjVYM0fZK1+6yNYX80fqRh1esP0jk/9fDduBbXYy3O7li2l/4/Hraf29E+7ulws73ub7Wf39E+2G7P97+wo32YznSql3L76ViNn8f1eGezfdy2MGX9F6e011Pac/79p7b97+3bYG3/8yHnP2j8jPNfTu1Vazp276PeZ7b75nTS47x17Yu/OXvwqzPVRvS3161pvH4vddCfzf+TY6P45c21G6dvX71168a5SJMdt56PNHnKcv7D9LP9+v/yVnt+3W9ur/c+Gu07/3mxEYNd83+5MT9e31dm3Lcu5PxH6Sfn/05qn7z97yP/3p9mti7T5F2N3fJ/ddYdAgAAAAAAAAAAAAAAgCnqut68RPStiLiYrv/p6tpMAGC28vt/neTbZ1X3Z/x4avUhr6s5689M60/r+eqPWn0Y66Z6sjebRUT8vXmf8T7Dryf9MgBgnn0aEf/quhN0Rv4Fy9/3N56e6rozwEzd/ODDn169fn3txs2uewIAAAAAAAAAPK48/udKY/znU3Vdt0dx3jH+69ux8qTjvw7yzPYAo7sMVN3f/zo9ykZv1O81hht/MXYb/3u4Pfeo8b8HUx5vOKV9NKV9YUr74pT2iRd6NOT8X2yMd34qIk62hl9/7PFf58yjxn9uj3lfgpz/S43n8zj/r7SWa+Zf//4w59/bkf+ZW+//4szNDz587dr7V99be2/tZxfOnTt74eLFS5cunXn32vW1s1v/dtjjg5Xzz2NfOw+0LDn/nLn8y5Lz/1Kq5V+WnP+XUy3/suT88/6e/MuS88+ffeRflpz/K6mWf1ly/l9LtfzLkvN/NdXyL0vO/+upln9Zcv6vpVr+Zcn5n061/MuS8z+T6j3mv3TQ/WI2cv75CJftvyw5/3xmg/zLkvM/n2r5lyXnfyHV8i9Lzv/1VMu/LDn/b6Ra/mXJ+V9MtfzLkvP/ZqrlX5ac/6VUy78sOf9vpVr+Zcn5fzvV8i9Lzv+NVMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/m+mWv5lefj9/2bMmDGTZ7p+ZQIAAAAAAAAAAAAA2mZxOnHX6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl988YJiYGQv5O/CRvHhJBssuuX+IXWxYTXhreSEAp9wXa9a7PgN7x2CTSqHQVKJIxKK9qGi7aAUJubCqviglaAcoFaVaoE7QW9QVSoXERVQAGpUltBtpo5z/PszOzszK53dn3mnM9Hsn/emTPnPOfMM2f2t+vvHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2R1vnP10LcuyWq2W37Aly26o1+smtjRued21HR8AAACwdr9o/P3CTemGQyt4UNMy/3j7d762sLCwkL1/+E9GP7+wkO6YyLLRTVnWuC+68sMP1JqXCZ7MxmtDTV8P9dj8cI/7R3rcP9rj/rEe92/qcf94j/uXHIAlrstqaWU7Gv/ckh/S7OZstHHfjg6PerK2aah+7NJjs1rjMQujx7O57GQ2m023LJ8vW2ss/4076tt6Wxa3NdS0rW31GfLTx4/FMdTCMd7Rsq3FdUY/fkM28bOfPn7sr84/f2un2vMwtKwvH+fd2+vj/GS4JR9rLduUjkkc51DTOLd1eE6GW8ZZazyu/u/2cb6wwnEOLw5zQ7U/5+PZUOPf320cp5Fa1uE4bQu3/fedWZZdWhx2+zJLtpUNZZtbbhlafH7G8xlZX0d9Kr0sG+k+TxdqLfP0jhXM03qd2dE6T9tfE/H5vyM8bmSZMTQ/TT9+Yqzpef/5wtXM06i+18u9VtrnYL9fK0WZg3FefLex0091nIM7wv4/ftfyc7Dj3OkwB9N+N83B7b3m4NDYcGPM6UmoNR6zOAd3tiw/3NhSrVGfu6v7HJw6f+rs1PzHP3Hf3KmjJ2ZPzJ7evXPn9O69e/fv3z91fO7k7HT+91Ue7eLbnA2l18D2cOzia+A1bcs2T9WFL40tOf9e7etwvMvrcEvbsv1+HY6071xtY16QS+d0/tp4b/2gj18eypZ5jTWen3vW/jpM+930Ohxpeh12fE/p8DocWcHrsL7M2XtW9j3LSNOfTmNY/r1gbXNwS9McbP9+pH0O9vv7kaLMwfEwL75/z/LvBdvCeJ+aXO33I8NL5mDa3XDuqd+Svt8f398oneblbfU7rh/LLszPnrv/saPnz5/bmYWyIV7eNFfa5+vmpn3KlszXoVXP10Nztz91W4fbt4RjNX5f/a/xZZ+r+jJ77u/+XDXe3Tofz5Zbd2Wh9Fk4ngubNuh4dno3rx/PsSz7wrefePibj3/hjcsez3q/+cmptX8vnvrSpvPv6DLn39j3v5hvL63qyeHRkfz1O5yOzmjL+bj1qRppnLtqjW2/MLWy8/Fo+LPR5+Obu5yPt7Yt2+/z8Wj7zsXzca3XTzvWpv35HA/z5OR09/NxfZmtu1Y7J0e6no/vDLUWjv9rQ6eQ+qKmubPcvE3bGhkZDfs1ErfQOk93tyw/Gnqz+rae2XV18/TuO/N1Dae9W7RR83Sibdl+z9P0s6/l5mmt10/frk778zke5sXNu7vP0/oyz+5Z+7nzuvjPpnPnWK85ODo8Vh/zaJqEjfN9tnBdnIP3Z8eyM9nJbKZx71hjPtUa25p8YGVzcCz82ehz5dYuc/DutmX7PQfT+9hyc682snTn+6D9+RwP8+LpB7rPwfoyb9rX3+9d7w63pGWavndt//nacj/zuq3tMK3XXBkJ4/z2vu4/m60vc3L/avvM7sfp3nDL9R2OU/vrd7nX1Ey2Mcdpaxjn8/uXP0718dSX+fyBFc6nQ1mWXfzog42f94bfr/zthe99reX3Lp1+p3Pxow/+5CXH/2E14wdg8L2Yl835e13Tb6ZW8vt/AAAAYCDEvn8o1ET/DwAAAKUR+/74v8IT/T8AAACURuz7R0JNKtL/b33T83MvXsxSMn8hiPenw/BQvlzMuE6HrycWFtVvf/Ars//19xdXtu2hLMt+/tDvdVx+60NxXLmJMM4rb269fYmv3beibR959GLabnN+/Yth/XF/VjoNOkVwp7Ms+8ZNn21sZ+IDlxv12YeONOrDl556sr7MCwfyr+Pjn3t5vvyfh/DvoeNHWx7/XDgOPwp1+u2dj0d83Fcvv3bbvvctbi8+rrb9xsZuP/3BfL3xc3I+92S+fDzOy43/m5955qv15R97defxXxzqPP5nwnq/Eur/vDJfvvk5qH8dH/epMP64vfi4+7/8rY7jv/LpfPmzb8mXOxJq3P7d4esdb3l+rvl4PVY72rJf2Vvz5eL2p7/3h4374/ri+tvHP374csvxaJ8fz/5rvp6ptuXj7XE70d+1bb++nub5Gbf/zB8caTnOvbZ/5eHnXllfb/v2721b7uxH72lsf3F9rZ/Y9Bef+mzH7cXxHPqbsy37c+g94XUctv/0B8N8DPf/75V8fe2frnDkPa3nn7j8F7dcbNmf6G0/y7d/5fUnGnXT+HWbr7/hJTdeelX92GXZdzfl6+u1/RN/eaZl/F+6JT8e8f6Y0W/f/nLi9s99bPL0mfkLczPpqD5+U+Ozc96RjyeO96Zwbm3/+vCZ8x+aPTcxPTGdZRPl/Qi9q/blUH+Sl0vdl15Ycga959HwfN72Z9/YfNe/fCbe/m/vzW+//Pb8fes1YbnPhdu3hOdvddtf6uk7bmm8vmvPhhEuLP284LXYtuM/969owbD/7d8XxPl+9hUfahyH+n2N9434ul7j+H8wk6/n6+G4LoRPZt5+y+L2mpePn41w+ZH89b7m4xdOc/F5/evwfL/zR/n647ji/v4gfB/zra2t57s4P75+cah9/Y1P8bgUzifZpfz+uFQ83pdfuKXj8OLnkGSXbm18/cdpPbeuajeXM//x+amTc6cvPDZ1fnb+/NT8xz9x+NSZC6fPH258lufhD/d6/OL5aXPj/DQzu3dP1jhbncnLOrvW4z/76LGZfdN3zcweP3rh+PlHz86eO3Fsfv7Y7Mz8XUePH5/9WK/Hz80c3LnrwO59uyZPzM0c3H/gwO4Dk3Onz9SHkQ+qh73TH5k8fe5w4yHzB/cc2PnAA3umJ0+dmZk9uG96evJCr8c33psm64/+3clzsyePnp87NTs5P/eJ2YM7D+zdu6vnpwGeOnt8fmLq3IXTUxfmZ89N5fsycb5xc/29r9fjKaf5f8+/n21Xyz+IL3v3vXvT57PWfeWJZVeVL9L2AaLPh8+i+aeXnt2/kq9j3z8aalKR/h8AAACqIPb9Y6Em+n8AAAAojdj3bwo10f8DAABAacS+fzzUpCL9f+ny/1svrmj78v/y/83HS/6/Yvn/R4qW/8/PF/L//bHW/L38fyD/L/8v/3+N8v/Xrzr/vxDekOT/KaKi5f9j339dllWy/wcAAIAqiH3/5lAT/T8AAACURuz7rw810f8DAABAacS+/4ZQk4r0/yvN/4/I/3cl/986fvn/zvND/l/+X/5//cn/dyf/34P8/1RWrfz/pX6O3/X/5f9Zqmj5/9j3vyTUpCL9PwAAAFRB7PtvDDXR/wMAAEBpxL7/plAT/T8AAACURuz7t4SaVKT/d/1/+X/5f/l/+f/O25f/H0xFyf9nV7l9+X/5/2ud/3f9f/l/+X/6qWj5/9j3vzTUpCL9PwAAAFRB7PtfFmqi/wcAAIDiGbm6h8W+/+WhJkv6/6vcAAAAAHDNxb7/5qwtCF6R3/+XL/9/w4q2Lf8/SPn/Tek++X/5/6yQ+f/hTP6/OIqS/3f9/6sbv/y//P8gj1/+X/6fpYqW/2/0/dl49opQk4r0/wAAAFAFse+/JdRE/w8AAAClEfv+/xdqov8HAACA0oh9/9ZQk4r0/+XL/7v+fzZg+f/RtrG7/v/i4+T/c8XP/7v+f5HI/3cn/9+D/L/8v/y//D99VbT8f+z7bw01qUj/DwAAAFUQ+/7bQk30/wAAAFAase///6Em+n8AAAAojdj3bws1qUj/L/9f8Px/TI6WOP/f+/r/8v/y//L/8v8rJ//fnfx/D/L/8v/y//L/9FXR8v+x739lqElF+n8AAACogtj33x5qov8HAACA0oh9/6tCTfT/AAAAUBqx758INalI/y//X/D8f56DHyvz9f/l/+X/5f/l//tJ/r87+f8ewmnux1mWyf/L/8v/y/+zdkXL/8e+/45Qk4r0/wAAAFAFse/fHmqi/wcAAIDSiH3/naEm+n8AAAAojdj37wg1qUj/L/8/EPn/TP5f/l/+vzz5/z+6Pv96JssWLsr/9538f3fy/z24/r/8v/y//D99VbT8f+z7Xx1qUpH+HwAAAKog9v13hZro/wEAAKA0Yt//mlAT/T8AAACURuz77w41qUj/L/8v/1+w/P9Q8+Pk/+X/sxLm/13/f33J/3cn/9+D/L/8v/y//D99VbT8f+z7XxtqUpH+HwAAAKog9v33hJro/wEAAKA0Yt9/b6iJ/h8AAABKI/b9k6EmFen/5f/l/wuW/3f9f/l/+X/5/zWR/+9O/r8H+X/5f/l/+X/6qmj5/9j33xdqUpH+HwAAAKog9v33h5ro/wEAAKA0Yt8/FWqi/wcAAIDSiH3/dKhJRfp/+X/5f/l/+f9V5f9ftbhe+f+c/H+xyP93J//fg/y//P81z/+Pyv9TKkXL/8e+f2eoSWr8xq5iLwEAAIAiiX3/rlCTivz+HwAAAKog9v27Q030/wAAAFAase/fE2pSkf5f/l/+X/5f/t/1/ztvX/5/MMn/d9f//H/cRfl/+X/5f9f/l/9nqaLl/2Pf/0CoSUX6fwAAAKiC2PfvDTXR/wMAAEBpxL5/X6iJ/h8AAABKI/b9+0NNKtL/y//L/8v/y//L/3fevvz/YJL/7871/3soXv7/9c0P38j8f31b8v/y//L/rN4jv9/8VdHy/7HvPxBqUpH+HwAAAKog9v2vCzXR/wMAAEBpxL7/l0JNuvf/m9Z3VAAAAEA/xb7/l0NNKvL7f/l/+X/5f/l/+f/O25f/H0zy/93J//dQvPx/C9f/L/b45f/l/1mqaPn/2PcfDDWpSP8PAAAAA679V0gdxb7/V0JN9P8AAABQGrHvf32oif4fAAAASiP2/YdCDTrFuUtJ/l/+fzDz/+Py//L/pcv/j8X1yv+vifx/d/L/PaxH/n+8Zf3y/+voWo9f/l/+n6WKlv+Pff8bQk38/h8AAABKI/b9D4aa6P8BAACgNGLf/8ZQE/0/AAAAlEbs+98UalKR/l/+X/5/MPP/rv+fyf+XLv/v+v/9If/fnfx/D67/L/+/fvn/nu8U8v+UUdHy/7Hvf3OoSUX6fwAAAKiC2Pe/JdRE/w8AAAClEfv+t4aa6P8BAACgNGLf/7ZQk4r0//L/8v/XMv+fuyT/L//fsC75/0v1Ay3/XyXy/93J//cg/y//7/r/8v/0VdHy/7Hv/9VQk4r0/wAAAFAFse9/KNRE/w8AAAClEfv+t4ea6P8BAACgNGLf/45Qk4r0//L/8v+u/y//X+r8v+v/V478f3cDlv//xY3hdvn/nPx/sce/2vz/SNvX65L//+Fy+f+FTe2Pl/9nPRQt/x/7/neGmlSk/wcAAIAqiH3/u0JN9P8AAABQGrHvf3eoSVP/39f/eAcAAABsuNj3/1qoSUV+/y//Xx/HYnpZ/l/+v3GD/L/8v/z/wJL/727A8v+u/99G/r/Y43f9f/l/lipa/j/2/e8JNalI/w8AAABVEPv+h0NN9P8AAABQGrHvfyTURP8PAAAApRH7/veGmlSk/5f/d/1/+X/5f/n/ztuX/x9M8v/dyf/3IP8v/1+0/P9/yP8z2IqW/499/6OhJhXp/wEAAKAKYt//vlAT/T8AAACURuz7fz3URP8PAAAApRH7/veHmlSk/5f/H5T8/8SA5v+fkP9fx/z/7Tfmy8n/y/+zSP6/O/n/HuT/5f+Llv93/X8GXNHy/7Hv/0Coycr7//EVLwkAAACso5Fl74l9/2+EmlTk9/8AAABQBbHv/81QE/0/AAAAlEbs+38r1KQi/b/8/6Dk/13/P5P/d/3/tv2R/5f/72Tj8v/xzCP/L/9frPz/llXtcKtrnZ9fq2s9/urm//N3Rvl/Oila/j/2/b8dalKR/h8AAACqIPb9Hww10f8DAADAQOj0f7Lbxb7/cKiJ/h8AAABKI/b9R0JNKtL/y//L/68u/x+PiPz/uuf//3T7P3//O+86slP+X/5f/n9VNvT6//UXv+v/y/8XLP+/Ftc6P79R468tc2kw+X/X/6f/ipb/j33/0VCTivT/AAAAUAWx7/+dUBP9PwAAAJRG7PuPhZro/wEAAKA0Yt8/E2pSkf5f/l/+3/X/C5r/H+Dr/8fjIf/fqm/5/3jSlf/vaEPz/+9bzInL/682/z/W8Vb5f/n/QR6//L/8P0sVLf8f+/7ZUJOK9P8AAABQBaHvHzqe18U79P8AAABQGrHvPxFqov8HAACA0oh9/4dCTSrS/8v/y//L/8v/u/5/5+13y//XRlaU/2/ZFdf/3xjy/90VJ//fmfy//P8gj1/+X/6fpYqW/499/1yoSUX6fwAAAKiC2Pd/ONRE/w8AAAClEfv+j4Sa6P/h/9i7ky9L67uO47egm646uHDnwo3nuPRPYCFr3evChS70HI9HQQXFmcZ5RFFxVhTnABkgEEISMk+QiYTMkIQkZB7JREhyOoeq7/fbNTz33qri3r7P8/u9Xgu+Vkn1venTAT5Uv/MAAAA0I3f/z8ctnex//b/+X/+v/9f/D7/+aJ//r/9fSP+/mP5/Cf2//l//r/9npcbW/+fu/4W4pZP9DwAAAD3I3X9N3GL/AwAAQDNy918bt9j/AAAA0Izc/b8Yt3Sy//X/+v9m+/8f1v/Pe339v/6/Zfr/xfT/S+j/9f/6f/0/KzW2/j93/y/FLZ3sfwAAAOhB7v5fjlvsfwAAAGhG7v7r4hb7HwAAAJqRu//6uKWT/X+o/9+a9dn/Z8ar/2+p//f8/7mvr/9/Dv3/5fr/sbu0/f9Nz/6VT/+v/9f/B/3/sfr/c/O+Xv9Pi8bW/+fu/5W4pZP9DwAAAD3I3f+rcYv9DwAAAM3I3X9D3GL/AwAAQDNy9/9a3NLJ/l/d8/93dj8/0f6/6P/1/7uf0P/r/+f1/2cufqz/HyfP/1+sp/7/ukevvOap+77//pO8vv5f/+/5//p/Vmts/X/u/l+PWzrZ/wAAANCD3P2/EbfY/wAAANCM3P2/GbfY/wAAANCM3P2/Fbd0sv9X1/9P+vn/Rf+v/9/9hP5f/z+v//8xz/8fO/3/Yj31/6d5ff2//l//r/9ntTbd/+cPnB/n7v/tuKWT/Q8AAAA9yN3/O3GL/Q8AAADNyN1/Y9xi/wMAAEAzcvefj1s62f/6//X3/9/R/+v/4+r/9f/6//XT/y+m/19C/6//1//r/1mpTff/hz/O3X9T3NLJ/gcAAIAe5O7/3bjF/gcAAIBm5O7/vbjF/gcAAIBm5O7//bilk/2v//f8f/2//l//P/z6+v9p0v8vpv9fQv9/rH7+7Jyv/8lrrz+r/59g/x//IKX/Zx1O2P8/s+Av26ft/8/t/zh3/x/ELZ3sfwAAAOhB7v4/jFvsfwAAAGhG7v4/ilvsfwAAAGhG7v4/jls62f/6f/2//l//f+r+/+gvvV36/2H6/0tD/7/YaPr/rTODn9b/T6P/n8fz/yfa/wf9P+swtuf/5+7/k7ilk/0PAAAAPcjd/6dxy4L9f+J/mQ8AAABsVO7+P4tbfP8fAAAAJi+rs9z9fx63dLL/9f/6f/2//t/z/4dff1H/f/++96f/Hxf9/2Kj6f/n0P/r/6f8/vX/+n+OGlv/n7v/L+KWTvY/AAAA9CB3/81xi/0PAAAAzcjd/5dxi/0PAAAAzcjd/1dxSyf7f7j/v/j/1/8fj/7/4PvX/w//+lhV/58/ov5/Yf9/tef/90n/v9il7//P6f8P/vj6/zXa9PtvvP/fWfb1+n+GjK3/z91/S9zSyf4HAACAHuTu/+u4xf4HAACAZuTu/5u4xf4HAACAZuTu/9u4pZP9v+Hn/990xbz3pf/fpf/X/3v+/zif/z+75P3/Gf3/Men/F/P8/yX0//p//b/n/7NSY+v/c/ffGrd0sv8BAACgB7c+Pdvd/X83m9n/AAAAMEX7f+/A4d9QGnL3/33cYv8DAABAM3L3/0Pc0sn+33D/v67n/59d9tr6f/3//p8v/b/+f+j1x9X/e/7/cen/F9P/L6H/X0c/f6ax/v+2eV8/hv7/Rv0/I3Og/3/w4uc31f/n7v/HuKWT/Q8AAAA9yN3/T3GL/Q8AAADNyN3/z3GL/Q8AAADNyN3/L3FLJ/t/7f3/zvzXXmP/v5T+X/+//+dL/6//H3p9/f806f8X0/8vof/3/H/P/9f/s1IH+v99NtX/5+7/17ilk/0PAAAAPcjd/29xi/0PAAAAzcjdf1vcYv8DAABAM3L3/3vc0sn+b/T5/0vp//X/+3++9P/6/6HX1/9Pk/5/Mf3/Evp//b/+f3n/f/hv1EH/z5Cx9f+5+/8jbulk/wMAAEAPcvffHrfY/wAAANCM3P3/GbfY/wAAANCM3P3/Fbd0sv/1/+vt//Pz+n/9/+wk/X98gf5/j/5f/38SU+v/D//359T9+tbQ34mOmtP/P/yz53/04Gf0//r/Zvv/nbW9/276/zn0/wwZRf9/4eI/Xebu/++4pZP9DwAAAD3I3f8/cYv9DwAAAM3I3f+/cYv9DwAAAM3I3f9/ccsJ9//3rvRdXTr6f8//1/+PsP8P+v89+n/9/0lMrf8/zPP/9f/6/+m+f/2//p+jRtH/7/s4d///xy2+/w8AAADNyN3/vLjF/gcAAIBm5O6/I26x/wEAAKAZufvvjFs62f/6f/2//l//33L/v7OB/n97Nkz/f2no/xfT/y+h/9f/6//1/6zU2Pr/3P13xS2d7H8AAADoQe7+58ct9j8AAAA0I3f/C+IW+x8AAACmJNOxQbn7Xxi3dLL/9f/6f/2//r/l/t/z//sz0f6//jI41f7/8in1/3cveAND/f+Fc/p//b/+X//PKY2t/8/d/6K4pZP9DwAAAD3I3X933GL/AwAAQDNy998Tt9j/AAAA0Izc/S+OWzrZ//p//b/+X/+v/x9+ff3/NE20/y9T7f89/1//P9P/6//1/wwYW/+fu//euKWT/Q8AAAA9yN1/X9xi/wMAAEAzcve/JG6x/wEAAKAZufvvj1s62f/6f/2//l//r/8ffn39/zStr/+fba7/f/Kyk/4wc+n/l9D/6//1//p/Vmps/X/u/pfGLZ3sfwAAAOhB7v4H4hb7HwAAAJqRu/9lcYv9DwAAAM3I3f/yuKWT/a//1/9Ps/+/ZXvo/ev/9f8z/X/3PP9/Mf3/Evp//b/+X//PSo2t/8/d/4q4pZP9DwAAAD3I3f9g3GL/AwAAQDNy978ybrH/AQAAoBm5+18Vt3Sy//X/+v+D/f9sNo3+3/P/Z/r/Fvr/7Zn+f+X0/4sdr/+/Wv8/8v7/jp29j/X/x3z/l80a6v935n69/p8xGlv/n7v/1XFLJ/sfAAAAepC7/zVxi/0PAAAADdj7vTO5+18bt9j/AAAAMGZnTvIn5+5/XdzSyf6ffv9/7tAX6v9ns9ljNzT//H/9/0z/30L/Xz+r+v/V0f8v5vn/S0yk//f8/3G+f8//1/9z1Nj6/9z9r49bOtn/AAAA0IPc/W+IW+x/AAAAaEbu/jfGLfY/AAAANCN3/5vilk72//T7/8NfqP+fPafn/+v/dz+h/9f/6/8nS/+/mP5/Cf3/0n5+a84/98z0//p//T8Dxtb/5+5/c9zSyf4HAACAHuTufyhusf8BAACgGbn7H45b7H8AAABoRu7+t8Qtnex//b/+X/8/zf5/W/+v/9f/DxpL/3/VVT/yiP5f/99i/7+I/l//r//nsLH1/7n73xq3dLL/AQAAoAe5+98Wt9j/AAAA0Izc/W+PW+x/AAAAaEbu/nfELZ3s/6P9/9nZXqG6Z6j/j0ZN/7+P/v/g+9f/D//68Px//b/+f/3G0v97/v/p3r/+X/8/5fd/ov7/B45+vf6fFo2t/8/d/0jc0sn+BwAAgB7k7n9n3GL/AwAAQDNy978rbrH/AQAAoBm5+x+NWzrZ/57/r//X/+v/9f/Dr6//nyb9/2L6/yX0//p/z/+/9qcv1/+zOmPr/3P3vztu2R1+P/g9p/yPCQAAAIxI7v73xC2dfP8fAAAAepC7/71xi/0PAAAAzcjd/764pZP9r//X/+v/9f/6/+HX1/9Pk/5/Mf3/Ev30/9tDn9x0P/9cbfr9N9P/e/4/KzS2/j93//vjlk72PwAAAPQgd/8H4hb7HwAAAJqRu/+DcYv9DwAAAM3I3f9Y3NLJ/tf/6//b7/9/Sv9/6PX1//r/lun/8+/ow/T/S/TT/w/adD8/9fev/9f/c9TY+v/c/Y/HLZ3sfwAAAOhB7v4PxS32PwAAADQjd/+H4xb7HwAAAJqRu/8jcUsn+1//31f/vzXrsf/3/H/9v/6/J9Pp/28/M/RZz//X/+v/p/v+9f/6f44aW/+fu/+JrTNd7n8AAACYqh//oZ97/Lh/7hO7f9yefTRusf8BAACgGbn7Pxa32P8AAADQjNz9H49bOtn/+v+++v8+n/+v/9f/6/97Mp3+f5j+X/+v/5/u+9f/6/85amz9f+7+J+OWfcNv8H+gBwAAAJiM3P2fiFs6+f4/AAAA9CB3/yfjliP7/8Ixf1c7AAAAMDa5+z8Vt3Ty/X/9/8j7/9ma+v/48/T/e/T/+v+h19f/T1Nr/f+52aj6/wtb+n/9/wL6f/2//p/Dxtb/5+5/4N5Zl/sfAAAAGnXg3yh8eveP27PPxC32PwAAADQjd/9n4xb7HwAAAJqRu/9zcUsn+1//P/L+/1TP/9+p/8vz/zvv/2/eHnx9/b/+v2Wt9f+e/7/3ef3/Hv3/uN+//l//z1En6P93B+m6+//c/Z+PWzrZ/wAAANCD3P1fiFvsfwAAAGhG7v4vxi32PwAAADQjd/+X4pZO9r/+fwP9/y3nZrO19v/HeP6//r+P/n/O67fT/3/flecf+omfuecu/T8XXcr+P38t6P/1/xvo/++MX3/6/xG9f/2//p+jxvb8/9z9X45bOtn/AAAA0IPc/U/FLfY/AAAANCN3/1fiFvsfAAAAmpG7/6txSyf7X//f4vP/p9n/58/1Bvr/89Pr/7Mp7r3/9/x//f9Rnv+/mP5/ien0/7sfe/7/uN6//l//z1Fj6/9z938tbulk/wMAAEAPcvd/PW7J/b914n91DwAAAIxM7v5vxC2+/w8AAADNyN3/dNzSyf7X/+v/x9L/J8//v/h1nv+/R/+v/z8J/f9i+v8l9P/6f/2//p+VGlv/n7v/m3FLJ/sfAAAAepC7/5m4xf4HAACAZuTu/1bcYv8DAABAM3L3fztu6WT/6//1//p//b/+f/j19f/TpP9fTP//rCvmvwH9v/5f/6//Z6XG1v/n7v9uAAAA//9zfVXk") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 24.948088][ T6532] cgroup: Unknown subsys name 'net' [ 25.054048][ T6532] cgroup: Unknown subsys name 'cpuset' [ 25.055928][ T6532] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.202396][ T6532] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 26.318568][ T6547] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.342138][ T6560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.343860][ T6560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.345335][ T6561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.345670][ T6561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.346175][ T6561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.346370][ T6561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.346528][ T6561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.346787][ T6561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.347096][ T6561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.347694][ T6561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.347950][ T6561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.348120][ T6561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.348247][ T6561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.348419][ T6561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.350344][ T6561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.350585][ T6561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.351231][ T6562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.351408][ T6562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.351570][ T6562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.351901][ T6562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.352488][ T6561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.353984][ T6562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.354132][ T6562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.355108][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.513483][ T6546] chnl_net:caif_netlink_parms(): no params data found [ 26.554305][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 26.567899][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.567950][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.568049][ T6546] bridge_slave_0: entered allmulticast mode [ 26.568780][ T6546] bridge_slave_0: entered promiscuous mode [ 26.571994][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.572054][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.572138][ T6546] bridge_slave_1: entered allmulticast mode [ 26.574393][ T6546] bridge_slave_1: entered promiscuous mode [ 26.588578][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.589445][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.601220][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 26.609537][ T6546] team0: Port device team_slave_0 added [ 26.610323][ T6546] team0: Port device team_slave_1 added [ 26.615149][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 26.627895][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.627962][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.628017][ T6543] bridge_slave_0: entered allmulticast mode [ 26.628418][ T6543] bridge_slave_0: entered promiscuous mode [ 26.646832][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.646935][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.646988][ T6543] bridge_slave_1: entered allmulticast mode [ 26.647426][ T6543] bridge_slave_1: entered promiscuous mode [ 26.651905][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.651929][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.651956][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.671494][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.671525][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.671787][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.677956][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.678986][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.683705][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.683907][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.683961][ T6545] bridge_slave_0: entered allmulticast mode [ 26.684423][ T6545] bridge_slave_0: entered promiscuous mode [ 26.685500][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.685517][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.685584][ T6545] bridge_slave_1: entered allmulticast mode [ 26.686028][ T6545] bridge_slave_1: entered promiscuous mode [ 26.708178][ T6543] team0: Port device team_slave_0 added [ 26.717424][ T6546] hsr_slave_0: entered promiscuous mode [ 26.717784][ T6546] hsr_slave_1: entered promiscuous mode [ 26.726572][ T6543] team0: Port device team_slave_1 added [ 26.732313][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.744433][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.744504][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.744562][ T6544] bridge_slave_0: entered allmulticast mode [ 26.744978][ T6544] bridge_slave_0: entered promiscuous mode [ 26.745702][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.745720][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.745764][ T6544] bridge_slave_1: entered allmulticast mode [ 26.746179][ T6544] bridge_slave_1: entered promiscuous mode [ 26.756104][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.772025][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 26.778717][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.781683][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.787691][ T6545] team0: Port device team_slave_0 added [ 26.788722][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.788746][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.788768][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.789695][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.789709][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.789734][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.811119][ T6545] team0: Port device team_slave_1 added [ 26.818708][ T6544] team0: Port device team_slave_0 added [ 26.819624][ T6544] team0: Port device team_slave_1 added [ 26.849160][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.849191][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.849217][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.861079][ T6543] hsr_slave_0: entered promiscuous mode [ 26.861370][ T6543] hsr_slave_1: entered promiscuous mode [ 26.861542][ T6543] debugfs: 'hsr0' already exists in 'hsr' [ 26.861585][ T6543] Cannot create hsr debugfs directory [ 26.888551][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.889826][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.892703][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.893574][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.893582][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.893596][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.908200][ T6545] hsr_slave_0: entered promiscuous mode [ 26.909507][ T6545] hsr_slave_1: entered promiscuous mode [ 26.910682][ T6545] debugfs: 'hsr0' already exists in 'hsr' [ 26.911632][ T6545] Cannot create hsr debugfs directory [ 26.918334][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.919495][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.923615][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.937964][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.939349][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.940630][ T6552] bridge_slave_0: entered allmulticast mode [ 26.942220][ T6552] bridge_slave_0: entered promiscuous mode [ 26.947152][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.947815][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.947887][ T6552] bridge_slave_1: entered allmulticast mode [ 26.948322][ T6552] bridge_slave_1: entered promiscuous mode [ 26.988047][ T6544] hsr_slave_0: entered promiscuous mode [ 26.988385][ T6544] hsr_slave_1: entered promiscuous mode [ 26.988564][ T6544] debugfs: 'hsr0' already exists in 'hsr' [ 26.988574][ T6544] Cannot create hsr debugfs directory [ 26.990663][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.991718][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.007241][ T6546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.021571][ T6546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.024234][ T6546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.028113][ T6546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.034855][ T6552] team0: Port device team_slave_0 added [ 27.035766][ T6552] team0: Port device team_slave_1 added [ 27.053231][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.053255][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.053280][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.067110][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.068300][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.072200][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.108216][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.108264][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.108463][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.108489][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.115741][ T6552] hsr_slave_0: entered promiscuous mode [ 27.116026][ T6552] hsr_slave_1: entered promiscuous mode [ 27.116220][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 27.116234][ T6552] Cannot create hsr debugfs directory [ 27.138797][ T6545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.141100][ T6545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.144496][ T6545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.148011][ T6545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.178841][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.178883][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.178957][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.178984][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.188562][ T6543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.195478][ T6543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.198021][ T6543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.200579][ T6543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.221603][ T6544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.237178][ T6544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.239386][ T6544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.242279][ T6544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.257468][ T6552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.259866][ T6552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.262390][ T6552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.266101][ T6552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.271505][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.271549][ T6543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.271619][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.271657][ T6543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.287177][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.290605][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.290651][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.290728][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.290755][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.297322][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.297361][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.297437][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.297467][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.308810][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.317193][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.319081][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.322284][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.325094][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.327361][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.328894][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.331828][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.334513][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.338146][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.339824][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.349678][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.361624][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.363505][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.372217][ T6545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.372247][ T6545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.383266][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.383307][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.383632][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.383652][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.398919][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.404768][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.417505][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.427976][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.428020][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.428369][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.428385][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.429912][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.429928][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.430221][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.430242][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.431550][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.431565][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.448536][ T6544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.459741][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.459790][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.468225][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.472356][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.483095][ T6543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.484826][ T6543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.505775][ T6552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.507950][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.525994][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.526051][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.526637][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.526654][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.550283][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.568379][ T6545] veth0_vlan: entered promiscuous mode [ 27.580412][ T6545] veth1_vlan: entered promiscuous mode [ 27.600413][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.608183][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.616587][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.626720][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.637298][ T6545] veth0_macvtap: entered promiscuous mode [ 27.639701][ T6544] veth0_vlan: entered promiscuous mode [ 27.644445][ T6545] veth1_macvtap: entered promiscuous mode [ 27.647072][ T6544] veth1_vlan: entered promiscuous mode [ 27.667194][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.669989][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.680152][ T6544] veth0_macvtap: entered promiscuous mode [ 27.682475][ T6544] veth1_macvtap: entered promiscuous mode [ 27.697012][ T184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.700200][ T184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.701812][ T184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.706381][ T6543] veth0_vlan: entered promiscuous mode [ 27.710182][ T184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.715028][ T6543] veth1_vlan: entered promiscuous mode [ 27.732343][ T6546] veth0_vlan: entered promiscuous mode [ 27.739710][ T2640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.743372][ T2640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.749574][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.758056][ T6552] veth0_vlan: entered promiscuous mode [ 27.760818][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.769659][ T6546] veth1_vlan: entered promiscuous mode [ 27.771834][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.771870][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.777030][ T6552] veth1_vlan: entered promiscuous mode [ 27.786266][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.787832][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.794416][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.808980][ T6552] veth0_macvtap: entered promiscuous mode [ 27.809928][ T6552] veth1_macvtap: entered promiscuous mode [ 27.811504][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.813562][ T6543] veth0_macvtap: entered promiscuous mode [ 27.814562][ T6543] veth1_macvtap: entered promiscuous mode [ 27.825953][ T6545] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.833969][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.835961][ T6546] veth0_macvtap: entered promiscuous mode [ 27.837204][ T6546] veth1_macvtap: entered promiscuous mode [ 27.850312][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.852278][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.852342][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.852380][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.852399][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.861754][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.874595][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.889621][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.891331][ T184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.891383][ T184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.891406][ T184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.891422][ T184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.915077][ T2640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.915211][ T2640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.921055][ T6663] loop0: detected capacity change from 0 to 64 [ 27.927482][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.937172][ T2640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.937234][ T2640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.937257][ T2640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.937277][ T2640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.951532][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.951569][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.008726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.008759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.027940][ T4852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.027975][ T4852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.031847][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.032180][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.048523][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.048559][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.058595][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.058621][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.075190][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.075229][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.079186][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.079215][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.145930][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.148436][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.174563][ T6676] loop1: detected capacity change from 0 to 2048 [ 28.183221][ T6676] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 28.183257][ T6676] NILFS (loop1): too large filesystem blocksize: 2 ^ 347668480 KiB [ 28.190808][ T6672] loop4: detected capacity change from 0 to 32768 [ 28.191238][ T6672] BTRFS warning: excessive commit interval 2147483648, use with care [ 28.194739][ T6672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (6672) [ 28.204762][ T6672] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 28.204836][ T6672] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 28.253938][ T6658] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.271320][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 28.274481][ T6672] BTRFS error (device loop4): failed to load root extent [ 28.274521][ T6672] BTRFS warning (device loop4): try to load backup roots slot 1 [ 28.274894][ T4852] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 28.274995][ T6672] BTRFS warning (device loop4): couldn't read tree root [ 28.275004][ T6672] BTRFS warning (device loop4): try to load backup roots slot 2 [ 28.275129][ T4852] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 28.275148][ T6672] BTRFS warning (device loop4): couldn't read tree root [ 28.275155][ T6672] BTRFS warning (device loop4): try to load backup roots slot 3 [ 28.278508][ T6672] BTRFS info (device loop4): checking UUID tree [ 28.278663][ T6672] BTRFS info (device loop4): setting nodatasum [ 28.278670][ T6672] BTRFS info (device loop4): setting nodatacow [ 28.278676][ T6672] BTRFS info (device loop4): enabling ssd optimizations [ 28.278682][ T6672] BTRFS info (device loop4): turning on flush-on-commit [ 28.278688][ T6672] BTRFS info (device loop4): turning on async discard [ 28.278693][ T6672] BTRFS info (device loop4): enabling free space tree [ 28.278698][ T6672] BTRFS info (device loop4): enabling auto defrag [ 28.278704][ T6672] BTRFS info (device loop4): trying to use backup root at mount time [ 28.344579][ T6552] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 28.364909][ T6701] binder: 6700:6701 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 28.369649][ T6701] binder: 6700:6701 got transaction to invalid handle, 1 [ 28.371186][ T6701] binder: 6700:6701 cannot find target node [ 28.371213][ T6701] binder: 6700:6701 transaction call to 0:0 failed 3/29201/-22, code 0 size 72-24 line 3151 [ 28.374212][ T6701] binder: undelivered TRANSACTION_ERROR: 29201 [ 28.393948][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.394123][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.411108][ T6658] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 28.411153][ T6658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.411186][ T6658] usb 1-1: Product: syz [ 28.411196][ T6658] usb 1-1: Manufacturer: syz [ 28.411206][ T6658] usb 1-1: SerialNumber: syz [ 28.413405][ T52] Bluetooth: hci3: command tx timeout [ 28.413488][ T52] Bluetooth: hci0: command tx timeout [ 28.413541][ T52] Bluetooth: hci1: command tx timeout [ 28.413589][ T52] Bluetooth: hci2: command tx timeout [ 28.413717][ T6559] Bluetooth: hci4: command tx timeout [ 28.425867][ T6658] usb 1-1: config 0 descriptor?? [ 28.509553][ T6708] syzkaller0: entered promiscuous mode [ 28.510624][ T6708] syzkaller0: entered allmulticast mode [ 28.691737][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.691915][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.981382][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.983833][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.035510][ T6658] usb 1-1: Firmware version (0.0) predates our first public release. [ 29.035574][ T6658] usb 1-1: Please update to version 0.2 or newer [ 29.066507][ T6658] usb 1-1: USB disconnect, device number 2 [ 29.219652][ T6725] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.502123][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.509697][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.554727][ T6740] loop4: detected capacity change from 0 to 64 [ 29.640513][ T6747] loop0: detected capacity change from 0 to 2048 [ 29.643652][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.643817][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.657536][ T6747] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 29.657586][ T6747] NILFS (loop0): too large filesystem blocksize: 2 ^ 347668480 KiB [ 29.698805][ T6744] loop1: detected capacity change from 0 to 32768 [ 29.735784][ T6535] loop1: p9 p11 p16 [ 29.745753][ T6744] loop1: p9 p11 p16 [ 29.756753][ T6744] batadv_slave_1: entered promiscuous mode [ 29.902972][ T6767] loop0: detected capacity change from 0 to 128 [ 29.921943][ T6767] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.977352][ T6545] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.141433][ T6794] binder: 6793:6794 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 30.181270][ T6796] loop2: detected capacity change from 0 to 1024 [ 30.186437][ T6796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.208596][ T6796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.251387][ T6802] loop4: detected capacity change from 0 to 8192 [ 30.268118][ T6802] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.347313][ T6543] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.364478][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.367399][ T6737] batadv_slave_1: left promiscuous mode [ 30.420915][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.426035][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.470615][ T6826] binder: 6825:6826 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 30.492656][ T6551] Bluetooth: hci2: command tx timeout [ 30.492696][ T6551] Bluetooth: hci1: command tx timeout [ 30.492724][ T6551] Bluetooth: hci0: command tx timeout [ 30.492743][ T6551] Bluetooth: hci3: command tx timeout [ 30.496171][ T6559] Bluetooth: hci4: command tx timeout [ 30.529417][ T6833] loop4: detected capacity change from 0 to 512 [ 30.531120][ T6833] ======================================================= [ 30.531120][ T6833] WARNING: The mand mount option has been deprecated and [ 30.531120][ T6833] and is ignored by this kernel. Remove the mand [ 30.531120][ T6833] option from the mount to silence this warning. [ 30.531120][ T6833] ======================================================= [ 30.542063][ T26] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 30.542106][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.555669][ T6833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.559962][ T26] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 30.559990][ T26] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 30.560014][ T26] usb 1-1: Manufacturer: syz [ 30.564669][ T26] usb 1-1: config 0 descriptor?? [ 30.565866][ T6833] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.52: corrupted inode contents [ 30.570097][ T6833] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.52: mark_inode_dirty error [ 30.574869][ T26] Registered IR keymap rc-hauppauge [ 30.580609][ T6833] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.52: corrupted inode contents [ 30.583735][ T6833] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.52: corrupted inode contents [ 30.586238][ T6833] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.52: mark_inode_dirty error [ 30.617244][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.625488][ T26] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 30.626525][ T26] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 30.627293][ T26] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input2 [ 30.748062][ T6850] loop4: detected capacity change from 0 to 8192 [ 30.758500][ T6850] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.868390][ T6872] syz.4.58 uses obsolete (PF_INET,SOCK_PACKET) [ 30.971746][ T6885] binder: 6884:6885 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 30.981735][ C1] igorplugusb 1-1:0.0: receive overflow, at least 2 lost [ 31.008385][ T6889] loop3: detected capacity change from 0 to 512 [ 31.029721][ T6889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.050275][ T6889] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.63: corrupted inode contents [ 31.053383][ T6889] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.63: mark_inode_dirty error [ 31.053748][ T6889] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.63: corrupted inode contents [ 31.057216][ T6889] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.63: corrupted inode contents [ 31.060012][ T6889] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.63: mark_inode_dirty error [ 31.091964][ T6544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.166667][ T6903] loop4: detected capacity change from 0 to 8192 [ 31.174672][ T6903] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.183657][ T26] usb 1-1: USB disconnect, device number 3 [ 31.334070][ T6922] binder: 6921:6922 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 31.378926][ T6926] loop3: detected capacity change from 0 to 512 [ 31.396330][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.398656][ T6926] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.78: corrupted inode contents [ 31.399770][ T6926] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.78: mark_inode_dirty error [ 31.400530][ T6926] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.78: corrupted inode contents [ 31.401956][ T6926] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.78: corrupted inode contents [ 31.402181][ T6926] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.78: mark_inode_dirty error [ 31.412267][ T6544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.490523][ T6932] loop3: detected capacity change from 0 to 8192 [ 31.505932][ T6932] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.649038][ T6948] loop3: detected capacity change from 0 to 8 [ 31.652489][ T6947] binder: 6946:6947 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 31.690332][ T6950] loop1: detected capacity change from 0 to 512 [ 31.721459][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.733566][ T6950] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.89: corrupted inode contents [ 31.733901][ T6950] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.89: mark_inode_dirty error [ 31.734202][ T6950] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.89: corrupted inode contents [ 31.735085][ T6950] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.89: corrupted inode contents [ 31.735622][ T6950] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.89: mark_inode_dirty error [ 31.759954][ T6546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.919543][ T6958] loop3: detected capacity change from 0 to 65536 [ 31.919893][ T6958] xfs: Bad value for 'logbsize' [ 31.995244][ T6974] loop0: detected capacity change from 0 to 128 [ 31.997859][ T6976] binder: 6975:6976 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 32.049230][ T6982] loop0: detected capacity change from 0 to 512 [ 32.099337][ T6982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.104833][ T6982] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.104: corrupted inode contents [ 32.113924][ T6982] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.104: mark_inode_dirty error [ 32.114375][ T6982] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.104: corrupted inode contents [ 32.116986][ T6982] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.104: corrupted inode contents [ 32.117173][ T6982] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.104: mark_inode_dirty error [ 32.162659][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.164708][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.236405][ T6545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.266640][ T6992] loop1: detected capacity change from 0 to 65536 [ 32.287972][ T6992] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 32.319960][ T6992] XFS (loop1): Ending clean mount [ 32.320725][ T7002] loop4: detected capacity change from 0 to 4096 [ 32.326011][ T6992] XFS (loop1): Quotacheck needed: Please wait. [ 32.348878][ T6992] XFS (loop1): Quotacheck: Done. [ 32.419141][ T6546] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 32.491136][ T7024] binder: 7022:7024 ioctl 4018620d 0 returned -22 [ 32.497328][ T7024] binder: 7022:7024 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 32.502787][ T7024] binder: 7022:7024 got transaction to invalid handle, 1 [ 32.502821][ T7024] binder: 7022:7024 cannot find target node [ 32.502840][ T7024] binder: 7022:7024 transaction call to 0:0 failed 12/29201/-22, code 0 size 72-24 line 3151 [ 32.503087][ T7024] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.526246][ T7026] loop4: detected capacity change from 0 to 512 [ 32.555489][ T7028] loop0: detected capacity change from 0 to 4096 [ 32.556731][ T7031] loop1: detected capacity change from 0 to 512 [ 32.569284][ T7026] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.571395][ T7026] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 32.574093][ T52] Bluetooth: hci3: command tx timeout [ 32.574115][ T52] Bluetooth: hci0: command tx timeout [ 32.574128][ T52] Bluetooth: hci1: command tx timeout [ 32.574467][ T6559] Bluetooth: hci4: command tx timeout [ 32.581969][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.588179][ T7031] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.123: corrupted inode contents [ 32.588926][ T7031] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.123: mark_inode_dirty error [ 32.589337][ T7031] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.123: corrupted inode contents [ 32.591313][ T7031] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.123: corrupted inode contents [ 32.591921][ T7031] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.123: mark_inode_dirty error [ 32.600806][ T6552] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 32.612788][ T6546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.706068][ T7045] loop2: detected capacity change from 0 to 128 [ 32.709428][ T7045] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 32.738372][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.129'. [ 32.780619][ T7049] loop1: detected capacity change from 0 to 8192 [ 32.788598][ T7049] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.826814][ T7055] loop4: detected capacity change from 0 to 256 [ 32.828619][ T7055] exfat: Deprecated parameter 'utf8' [ 32.830998][ T7055] exfat: Deprecated parameter 'namecase' [ 32.841921][ T7055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 32.861322][ T7058] binder: 7057:7058 ioctl 4018620d 0 returned -22 [ 32.864875][ T7058] binder: 7057:7058 cannot find target node [ 32.864901][ T7058] binder: 7057:7058 transaction call to 0:0 failed 15/29201/-22, code 0 size 72-24 line 3151 [ 32.865861][ T7058] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.882717][ T6626] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.956247][ T7068] loop4: detected capacity change from 0 to 64 [ 32.958914][ T7068] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 32.999020][ T7072] loop1: detected capacity change from 0 to 256 [ 33.016961][ T7072] FAT-fs (loop1): Directory bread(block 64) failed [ 33.017045][ T7072] FAT-fs (loop1): Directory bread(block 65) failed [ 33.017093][ T7072] FAT-fs (loop1): Directory bread(block 66) failed [ 33.017111][ T7072] FAT-fs (loop1): Directory bread(block 67) failed [ 33.017135][ T7072] FAT-fs (loop1): Directory bread(block 68) failed [ 33.017147][ T7072] FAT-fs (loop1): Directory bread(block 69) failed [ 33.017177][ T7072] FAT-fs (loop1): Directory bread(block 70) failed [ 33.017189][ T7072] FAT-fs (loop1): Directory bread(block 71) failed [ 33.017212][ T7072] FAT-fs (loop1): Directory bread(block 72) failed [ 33.017223][ T7072] FAT-fs (loop1): Directory bread(block 73) failed [ 33.033595][ T6626] usb 1-1: Using ep0 maxpacket: 16 [ 33.035881][ T6626] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 33.035953][ T6626] usb 1-1: config 0 has no interface number 0 [ 33.037906][ T6626] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 33.037927][ T6626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.037935][ T6626] usb 1-1: Product: syz [ 33.037940][ T6626] usb 1-1: Manufacturer: syz [ 33.037946][ T6626] usb 1-1: SerialNumber: syz [ 33.039283][ T6626] usb 1-1: config 0 descriptor?? [ 33.041085][ T6626] hub 1-1:0.145: bad descriptor, ignoring hub [ 33.041100][ T6626] hub 1-1:0.145: probe with driver hub failed with error -5 [ 33.047798][ T6626] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input3 [ 33.078180][ T7074] loop4: detected capacity change from 0 to 8192 [ 33.087090][ T7074] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.198754][ T7086] binder: 7085:7086 ioctl 4018620d 0 returned -22 [ 33.201570][ T7086] binder: 7085:7086 cannot find target node [ 33.349361][ T7084] loop1: detected capacity change from 0 to 32768 [ 33.351804][ T7084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.148 (7084) [ 33.363543][ T6626] usb 1-1: USB disconnect, device number 4 [ 33.368326][ T7084] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 33.368998][ T7084] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 33.399726][ T7084] BTRFS info (device loop1): enabling ssd optimizations [ 33.399766][ T7084] BTRFS info (device loop1): enabling free space tree [ 33.399949][ T7107] hub 2-0:1.0: USB hub found [ 33.402175][ T7107] hub 2-0:1.0: 8 ports detected [ 33.460686][ T7114] loop3: detected capacity change from 0 to 8192 [ 33.464699][ T6546] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 33.471842][ T7114] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.585416][ T6543] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 33.587479][ T6543] FAT-fs (loop2): Filesystem has been set read-only [ 33.589227][ T6543] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 33.677257][ T7129] binder: BINDER_SET_CONTEXT_MGR already set [ 33.677293][ T7129] binder: 7128:7129 ioctl 4018620d 20004a80 returned -16 [ 33.723303][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.725070][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.841066][ T7137] loop4: detected capacity change from 0 to 40427 [ 33.842576][ T7137] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 33.842615][ T7137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.863786][ T7137] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 33.867078][ T7137] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.867157][ T7137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.934177][ T7135] loop3: detected capacity change from 0 to 32768 [ 33.963287][ T7135] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 33.977531][ T7135] XFS (loop3): Ending clean mount [ 33.981150][ T7135] XFS (loop3): Quotacheck needed: Please wait. [ 33.987064][ T4852] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x10 [ 33.989221][ T4852] XFS (loop3): Unmount and run xfs_repair [ 33.990313][ T4852] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 33.991751][ T4852] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 33.993354][ T4852] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 33.994757][ T4852] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 33.996143][ T4852] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 33.997666][ T4852] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 33.999063][ T4852] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 34.000484][ T4852] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 34.001976][ T4852] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 34.006925][ T4852] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x10 len 8 error 74 [ 34.009193][ T7135] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 34.022625][ T6559] Bluetooth: hci2: command tx timeout [ 34.040282][ T6544] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 34.043868][ T6544] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 34.093012][ T7156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.169'. [ 34.096735][ T7156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.169'. [ 34.105787][ T7154] loop4: detected capacity change from 0 to 8192 [ 34.119568][ T7154] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.231334][ T7166] binder: BINDER_SET_CONTEXT_MGR already set [ 34.231363][ T7166] binder: 7165:7166 ioctl 4018620d 20004a80 returned -16 [ 34.293883][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.295488][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.330506][ T7164] loop4: detected capacity change from 0 to 32768 [ 34.459751][ T7180] loop3: detected capacity change from 0 to 8192 [ 34.466793][ T7180] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.520427][ T7190] binder: BINDER_SET_CONTEXT_MGR already set [ 34.520457][ T7190] binder: 7189:7190 ioctl 4018620d 20004a80 returned -16 [ 34.575202][ T7197] capability: warning: `syz.4.190' uses deprecated v2 capabilities in a way that may be insecure [ 34.577872][ T7197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.653457][ T6551] Bluetooth: hci1: command tx timeout [ 34.655076][ T6551] Bluetooth: hci0: command tx timeout [ 34.656256][ T6551] Bluetooth: hci3: command tx timeout [ 34.657224][ T6559] Bluetooth: hci4: command tx timeout [ 34.735867][ T7209] loop3: detected capacity change from 0 to 8192 [ 34.738867][ T7209] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.742328][ T6559] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 34.835273][ T7221] binder: 7220:7221 ioctl c0306201 0 returned -14 [ 34.839752][ T7221] binder_user_error: 4 callbacks suppressed [ 34.839784][ T7221] binder: 7220:7221 got transaction to invalid handle, 1 [ 34.840509][ T7221] binder_debug: 2 callbacks suppressed [ 34.840536][ T7221] binder: 7220:7221 cannot find target node [ 34.840554][ T7221] binder: 7220:7221 transaction call to 0:0 failed 25/29201/-22, code 0 size 72-24 line 3151 [ 34.840818][ T7221] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.971647][ T7226] loop0: detected capacity change from 0 to 16 [ 34.982996][ T7226] erofs (device loop0): EXPERIMENTAL metadata compression support in use. Use at your own risk! [ 34.985496][ T7226] erofs (device loop0): bogus i_mode (0) @ nid 916717819658240 [ 35.082728][ T7219] loop3: detected capacity change from 0 to 32768 [ 35.091813][ T7219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.199 (7219) [ 35.096726][ T7219] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.096784][ T7219] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 35.113613][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.113799][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.130726][ T7219] BTRFS info (device loop3): enabling ssd optimizations [ 35.130758][ T7219] BTRFS info (device loop3): enabling free space tree [ 35.154921][ T6544] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.321767][ T7262] binder: 7261:7262 ioctl c0306201 0 returned -14 [ 35.325243][ T7262] binder: 7261:7262 got transaction to invalid handle, 1 [ 35.325266][ T7262] binder: 7261:7262 cannot find target node [ 35.325278][ T7262] binder: 7261:7262 transaction call to 0:0 failed 29/29201/-22, code 0 size 72-24 line 3151 [ 35.325406][ T7262] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.368191][ T7266] netlink: 'syz.3.213': attribute type 13 has an invalid length. [ 35.369628][ T7266] netlink: 'syz.3.213': attribute type 17 has an invalid length. [ 35.413245][ T7266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.534635][ T7277] loop1: detected capacity change from 0 to 256 [ 35.544778][ T7277] FAT-fs (loop1): Directory bread(block 64) failed [ 35.544873][ T7277] FAT-fs (loop1): Directory bread(block 65) failed [ 35.544909][ T7277] FAT-fs (loop1): Directory bread(block 66) failed [ 35.544924][ T7277] FAT-fs (loop1): Directory bread(block 67) failed [ 35.544948][ T7277] FAT-fs (loop1): Directory bread(block 68) failed [ 35.544959][ T7277] FAT-fs (loop1): Directory bread(block 69) failed [ 35.544982][ T7277] FAT-fs (loop1): Directory bread(block 70) failed [ 35.544992][ T7277] FAT-fs (loop1): Directory bread(block 71) failed [ 35.545014][ T7277] FAT-fs (loop1): Directory bread(block 72) failed [ 35.545024][ T7277] FAT-fs (loop1): Directory bread(block 73) failed [ 35.638653][ T7279] loop2: detected capacity change from 0 to 512 [ 35.658960][ T7279] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.220: iget: bad extended attribute block 1 [ 35.669821][ T7279] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.220: couldn't read orphan inode 15 (err -117) [ 35.672345][ T7279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.698110][ T6543] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.728975][ T7290] binder: 7288:7290 ioctl c0306201 0 returned -14 [ 35.735143][ T7290] binder: 7288:7290 got transaction to invalid handle, 1 [ 35.735171][ T7290] binder: 7288:7290 cannot find target node [ 35.735696][ T7290] binder: 7288:7290 transaction call to 0:0 failed 33/29201/-22, code 0 size 72-24 line 3151 [ 35.736810][ T7290] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.888478][ T7303] input: syz1 as /devices/virtual/input/input4 [ 36.033839][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.036781][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.152145][ T7316] binder: 7315:7316 got transaction to invalid handle, 1 [ 36.152174][ T7316] binder: 7315:7316 cannot find target node [ 36.347857][ T7324] dlm: no local IP address has been set [ 36.348477][ T7324] dlm: cannot start dlm midcomms -107 [ 36.367094][ T7326] loop4: detected capacity change from 0 to 1024 [ 36.367502][ T7326] EXT4-fs: Ignoring removed orlov option [ 36.377058][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.384267][ T7326] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 36.386052][ T7326] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 36.397195][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.416144][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.565935][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 36.567386][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.569067][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 36.569089][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.569107][ T10] usb 1-1: Product: syz [ 36.569118][ T10] usb 1-1: Manufacturer: syz [ 36.569123][ T10] usb 1-1: SerialNumber: syz [ 36.571231][ T10] usb 1-1: config 0 descriptor?? [ 36.586020][ T7342] binder: 7341:7342 got transaction to invalid handle, 1 [ 36.719199][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.721091][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.724584][ T7356] 9pnet_fd: Insufficient options for proto=fd [ 36.798234][ T7363] binder: 7362:7363 got transaction to invalid handle, 1 [ 36.810585][ T7365] loop1: detected capacity change from 0 to 128 [ 36.831515][ T7365] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.851273][ T6546] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.985768][ T7370] loop1: detected capacity change from 0 to 40427 [ 36.986438][ T10] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 36.986458][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 36.988515][ T7370] F2FS-fs (loop1): build fault injection rate: 14 [ 36.988527][ T7370] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 36.990359][ T7370] F2FS-fs (loop1): invalid crc value [ 36.994074][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x858/0x894 [ 36.995566][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x858/0x894 [ 37.008465][ T7370] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 37.008498][ T7370] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 37.015064][ T7370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.023291][ T7370] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 37.034218][ T6546] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x1fc/0x1820 [ 37.034259][ T6546] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 37.044936][ C1] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of bio_endio+0x858/0x894 [ 37.045035][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT [ 37.045049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 37.045054][ C1] Call trace: [ 37.045056][ C1] show_stack+0x2c/0x3c (C) [ 37.045067][ C1] __dump_stack+0x30/0x40 [ 37.045074][ C1] dump_stack_lvl+0xd8/0x12c [ 37.045081][ C1] dump_stack+0x1c/0x28 [ 37.045087][ C1] f2fs_handle_critical_error+0x34c/0x4b8 [ 37.045095][ C1] f2fs_stop_checkpoint+0x5c/0x70 [ 37.045102][ C1] f2fs_write_end_io+0x768/0xa70 [ 37.045107][ C1] bio_endio+0x858/0x894 [ 37.045112][ C1] blk_update_request+0x474/0xba8 [ 37.045118][ C1] blk_mq_end_request+0x54/0x88 [ 37.045124][ C1] blk_flush_complete_seq+0x57c/0xad4 [ 37.045129][ C1] flush_end_io+0x9e8/0xd68 [ 37.045133][ C1] __blk_mq_end_request+0x37c/0x57c [ 37.045139][ C1] blk_mq_end_request+0x68/0x88 [ 37.045145][ C1] lo_complete_rq+0x124/0x274 [ 37.045151][ C1] blk_done_softirq+0x11c/0x168 [ 37.045157][ C1] handle_softirqs+0x328/0xc88 [ 37.045164][ C1] run_ksoftirqd+0x70/0xc0 [ 37.045170][ C1] smpboot_thread_fn+0x4d8/0x9cc [ 37.045184][ C1] kthread+0x5fc/0x75c [ 37.045190][ C1] ret_from_fork+0x10/0x20 [ 37.045197][ C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 37.046358][ T6546] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint [ 37.133664][ T7376] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.185859][ T26] usb 1-1: USB disconnect, device number 5 [ 37.209555][ T7382] loop1: detected capacity change from 0 to 128 [ 37.217972][ T7382] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 37.218493][ T7382] hpfs: filesystem error: improperly stopped [ 37.218510][ T7382] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 37.218525][ T7382] hpfs: You really don't want any checks? You are crazy... [ 37.218617][ T7382] hpfs: hpfs_map_sector(): read error [ 37.218622][ T7382] hpfs: code page support is disabled [ 37.219116][ T7382] hpfs: hpfs_map_4sectors(): unaligned read [ 37.219157][ T7382] hpfs: hpfs_map_4sectors(): unaligned read [ 37.219173][ T7382] hpfs: filesystem error: unable to find root dir [ 37.320002][ T7392] binder: 7391:7392 got transaction to invalid handle, 1 [ 37.346117][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.346311][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.399037][ T7400] Zero length message leads to an empty skb [ 37.414679][ T7402] loop1: detected capacity change from 0 to 128 [ 37.417004][ T7402] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 37.421605][ T7402] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 37.442820][ T7402] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 37.481218][ T6546] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.702985][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.703382][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.841664][ T7425] binder: 7424:7425 got transaction to invalid handle, 1 [ 37.875297][ T7429] loop3: detected capacity change from 0 to 1024 [ 37.875677][ T7429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.890576][ T7429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.911397][ T6544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.986228][ T7441] netlink: 156 bytes leftover after parsing attributes in process `syz.0.288'. [ 38.076310][ T7452] binder: 7451:7452 got transaction to invalid handle, 1 [ 38.139403][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.141871][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.221944][ T7460] binder: 7459:7460 tried to acquire reference to desc 0, got 1 instead [ 38.353576][ T6556] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.435092][ T7469] loop2: detected capacity change from 0 to 40427 [ 38.437413][ T7469] F2FS-fs (loop2): invalid crc value [ 38.447349][ T7469] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 38.449447][ T7469] F2FS-fs (loop2): Start checkpoint disabled! [ 38.454422][ T7469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 38.503439][ T6556] usb 1-1: Using ep0 maxpacket: 32 [ 38.506299][ T7475] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 38.511427][ T6556] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 38.511470][ T6556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.511485][ T6556] usb 1-1: Product: syz [ 38.511497][ T6556] usb 1-1: Manufacturer: syz [ 38.511507][ T6556] usb 1-1: SerialNumber: syz [ 38.521507][ T6556] usb 1-1: config 0 descriptor?? [ 38.526610][ T6556] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 38.557146][ T7477] loop2: detected capacity change from 0 to 4096 [ 38.557996][ T7477] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 38.565543][ T7477] ntfs3(loop2): ino=19, mi_enum_attr [ 38.565669][ T7477] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 38.711129][ T7490] netlink: 3 bytes leftover after parsing attributes in process `syz.1.310'. [ 38.754286][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.756562][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.897172][ T7511] Bluetooth: MGMT ver 1.23 [ 38.899437][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.899627][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.190886][ T7514] loop2: detected capacity change from 0 to 32768 [ 39.197435][ T7514] [ 39.197435][ T7514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.197435][ T7514] [ 39.203527][ T7514] [ 39.203527][ T7514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.203527][ T7514] [ 39.203572][ T7514] [ 39.203572][ T7514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.203572][ T7514] [ 39.204650][ T7514] [ 39.204650][ T7514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.204650][ T7514] [ 39.214410][ T99] [ 39.214410][ T99] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.214410][ T99] [ 39.216527][ T6543] [ 39.216527][ T6543] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.216527][ T6543] [ 39.217696][ T6543] [ 39.217696][ T6543] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 39.217696][ T6543] [ 39.220218][ T99] ================================================================== [ 39.220230][ T99] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x630/0x94c [ 39.220246][ T99] Read of size 4 at addr ffff0000ce1df694 by task jfsCommit/99 [ 39.220252][ T99] [ 39.220256][ T99] CPU: 1 UID: 0 PID: 99 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT [ 39.220263][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 39.220267][ T99] Call trace: [ 39.220269][ T99] show_stack+0x2c/0x3c (C) [ 39.220280][ T99] __dump_stack+0x30/0x40 [ 39.220288][ T99] dump_stack_lvl+0xd8/0x12c [ 39.220294][ T99] print_address_description+0xa8/0x238 [ 39.220300][ T99] print_report+0x68/0x84 [ 39.220305][ T99] kasan_report+0xb0/0x110 [ 39.220313][ T99] __asan_report_load4_noabort+0x20/0x2c [ 39.220319][ T99] jfs_lazycommit+0x630/0x94c [ 39.220324][ T99] kthread+0x5fc/0x75c [ 39.220330][ T99] ret_from_fork+0x10/0x20 [ 39.220337][ T99] [ 39.220339][ T99] Allocated by task 7514: [ 39.220342][ T99] kasan_save_track+0x40/0x78 [ 39.220348][ T99] kasan_save_alloc_info+0x44/0x54 [ 39.220352][ T99] __kasan_kmalloc+0x9c/0xb4 [ 39.220358][ T99] __kmalloc_cache_noprof+0x2a4/0x3fc [ 39.220365][ T99] jfs_fill_super+0xb8/0xb6c [ 39.220370][ T99] get_tree_bdev_flags+0x360/0x414 [ 39.220376][ T99] get_tree_bdev+0x2c/0x3c [ 39.220380][ T99] jfs_get_tree+0x28/0x38 [ 39.220384][ T99] vfs_get_tree+0x90/0x28c [ 39.220389][ T99] do_new_mount+0x278/0x7f4 [ 39.220395][ T99] path_mount+0x5b4/0xde0 [ 39.220399][ T99] __arm64_sys_mount+0x3e8/0x468 [ 39.220405][ T99] invoke_syscall+0x98/0x254 [ 39.220411][ T99] el0_svc_common+0x130/0x23c [ 39.220416][ T99] do_el0_svc+0x48/0x58 [ 39.220420][ T99] el0_svc+0x5c/0x254 [ 39.220426][ T99] el0t_64_sync_handler+0x84/0x12c [ 39.220430][ T99] el0t_64_sync+0x198/0x19c [ 39.220435][ T99] [ 39.220436][ T99] Freed by task 6543: [ 39.220439][ T99] kasan_save_track+0x40/0x78 [ 39.220444][ T99] kasan_save_free_info+0x58/0x70 [ 39.220448][ T99] __kasan_slab_free+0x74/0x98 [ 39.220454][ T99] kfree+0x17c/0x474 [ 39.220459][ T99] jfs_put_super+0x144/0x188 [ 39.220463][ T99] generic_shutdown_super+0x12c/0x2b8 [ 39.220468][ T99] kill_block_super+0x44/0x90 [ 39.220473][ T99] deactivate_locked_super+0xc4/0x12c [ 39.220477][ T99] deactivate_super+0xe0/0x100 [ 39.220482][ T99] cleanup_mnt+0x31c/0x3ac [ 39.220487][ T99] __cleanup_mnt+0x20/0x30 [ 39.220491][ T99] task_work_run+0x1dc/0x260 [ 39.220497][ T99] exit_to_user_mode_loop+0xfc/0x168 [ 39.220504][ T99] el0_svc+0x170/0x254 [ 39.220508][ T99] el0t_64_sync_handler+0x84/0x12c [ 39.220511][ T99] el0t_64_sync+0x198/0x19c [ 39.220515][ T99] [ 39.220517][ T99] The buggy address belongs to the object at ffff0000ce1df600 [ 39.220517][ T99] which belongs to the cache kmalloc-256 of size 256 [ 39.220521][ T99] The buggy address is located 148 bytes inside of [ 39.220521][ T99] freed 256-byte region [ffff0000ce1df600, ffff0000ce1df700) [ 39.220527][ T99] [ 39.220529][ T99] The buggy address belongs to the physical page: [ 39.220533][ T99] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e1de [ 39.220538][ T99] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 39.220542][ T99] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 39.220549][ T99] page_type: f5(slab) [ 39.220555][ T99] raw: 05ffc00000000040 ffff0000c0001b40 fffffdffc3d98200 dead000000000006 [ 39.220559][ T99] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 39.220564][ T99] head: 05ffc00000000040 ffff0000c0001b40 fffffdffc3d98200 dead000000000006 [ 39.220568][ T99] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 39.220572][ T99] head: 05ffc00000000001 fffffdffc3387781 00000000ffffffff 00000000ffffffff [ 39.220576][ T99] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 39.220578][ T99] page dumped because: kasan: bad access detected [ 39.220581][ T99] [ 39.220582][ T99] Memory state around the buggy address: [ 39.220585][ T99] ffff0000ce1df580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.220589][ T99] ffff0000ce1df600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.220592][ T99] >ffff0000ce1df680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.220594][ T99] ^ [ 39.220597][ T99] ffff0000ce1df700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.220600][ T99] ffff0000ce1df780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.220603][ T99] ================================================================== [ 39.220606][ T99] Disabling lock debugging due to kernel taint [ 40.532205][ T6556] gspca_stk1135: reg_w 0x203 err -71 [ 40.534137][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.535150][ T6556] gspca_stk1135: Sensor write failed [ 40.536153][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536170][ T6556] gspca_stk1135: Sensor write failed [ 40.536187][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536195][ T6556] gspca_stk1135: Sensor read failed [ 40.536206][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536213][ T6556] gspca_stk1135: Sensor read failed [ 40.536220][ T6556] gspca_stk1135: Detected sensor type unknown (0x0) [ 40.536234][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536242][ T6556] gspca_stk1135: Sensor read failed [ 40.536253][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536260][ T6556] gspca_stk1135: Sensor read failed [ 40.536270][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536276][ T6556] gspca_stk1135: Sensor write failed [ 40.536286][ T6556] gspca_stk1135: serial bus timeout: status=0x00 [ 40.536292][ T6556] gspca_stk1135: Sensor write failed [ 40.536322][ T6556] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 40.538143][ T6556] usb 1-1: USB disconnect, device number 6