last executing test programs: 13.130615252s ago: executing program 3 (id=5630): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000006400)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uid}, {@umask={'umask', 0x3d, 0x3b}}, {@longad}, {@partition={'partition', 0x3d, 0xffff}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@uid_forget}, {@unhide}]}, 0x1, 0xc54, &(0x7f00000037c0)="$eJzs3U9sHNd9B/DfGy3FldJWTJwqThoHm7ZIZcVy9S+iYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskiIlfz42+d2deW/mvZn1DE3wzQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr58+kzaYsWhfWgMAPBIXB396umzW93/AYAn1rXt/v8fAAAAAAAAAAAAAAA4KFIU8VSkmL26msar9x31K+2+O3fHhoa3rnYkVTUPVeXLr/qZs+fOf+nC4MVuXmlPv0/93faZeHX02uXGSzO3Z+cm5+cnJxpj0+0bMxOTD7yFndbf7GR1ABq3X7szcfPmfOPs8+c2rL478F7/x44PXBp89tQz3bJjQ8PDo+tF6r3law/dkI7tRngcjiJORYrnvvfT1IqIInZ+LOqP9txvdqTqxMmqE2NDw1VHptqt6YVy5Uj3QBQRjZ5Kze4x2vpcRK3vkfZhe82IxbL5ZYNPlt0bnW3Nta5PTTZGWnML7YX2zPRI6rS27E8jiriYIpYiYqX//s31RRG1SPGdY6vpen7qR3UcvlgNDN6+HcUe9vEBlO1s9EUsFY/BOTvA+qOIVyLFz94+ETfydaa61nwh4pUyfxDxZpkvRqTyg3E+4t0tPkc8nmpRxJ+X5//Sapqorgfd68qVrzW+Mn1zpqds97ryIe8P910p9un+cGRTPhoH/NpUjyJa1RV/NT38DzsAAAAAAAAAAAAAAAAA7LYjUcSnI8XL//ZH1bjiqMalH7s0+PsDv9w7ZvzpD9hOWfb5iFgsHmxM7uE8MHAkjaS0z2OJP8rqUcQf5/F/39rvxgAAAAAAAAAAAAAAAAAAAHykFfGTSPHCOyfSUvTOKd6evtW41ro+1ZkVtjv3b3fO9LW1tbVG6mQz53jOxZxLOZdzrqQ8v3C3fpHr5xzPuZhzKedyzpWccSjXz9nMOZ5zMedSzuWcKzmjluvnbOYcz7mYcynncs6VnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiSFFHELyLFt7+xmiJFRDNiPDq53L/frQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASv2piO9HisYfNO8tq0VEqv7tOFF+Ox/Nw2V+IpqDZb4Yzcs5W1XWmt/ah/azM32piB9Hiv76W/dOeD7/fZ139z4G8eY31999ptbJQ92VA+/1f+z4sUuDw597ervXaasGnLzSnr5ztzE2NDw82rO4lvf+iZ5lA3m/xe50nYiYf/2N11pTU5NzD/+i/Ag8ZPXumdzB3h/li1R7bJq6Ky+idiCasX8vonYgmrE/fd+gvh8XJ/Zcef9/N1L89jv/3r3hd+7/9filzrt7d/j4+Z+s3/9f2LyhB7z/1zbXy/f/8k6w1f3/qZ5lL+SfRvpqEfWF27N9xyPq86+/cap9u3Vr8tbk9PnTp788OPjlc6f7DkfUb7anJnte7crhAgAAAAAAAAAAAAAAAHh0UhG/GylaP15NjYi4W43XGrg0+OypZw7FoWq81YZx26+OXrvceGnm9uzc5Pz85ERjbLp9Y2Zi8kF3V6+Ge40NDe9JZz7QkT1u/5H6SzOzr8+1b/3hwpbrj9YvX59fmGvd2Hp1HIkiotm75GTV4LGh4arRU+3WdFV1ZMvB9B9eXyriPyLFjfON9Pm8LI//3zzCf8P4/8XNG9rF8f+fO7o+/u/jPUXLfaZUxM8jxW/9xdPx+aqdR+O+Y5bL/U2kOHnxs7lcHC7LddvQea5AZ2RgWfZ/IsU//GJj2e54yKfWy575UAf3MVCe/2OR4vt/9t349bxs4/Mftj7/RzdvaI+e//DJnmVHNzyvYMddJ5//U5Hixafeit+olvzf+z7/o/vEhhOdwuvP59ij8/+rPcsG8n5/c7c6DwAAAAAAAAAA8BjrS0X8baT44XAtXcjLHuTv/yY2b2iP/v7rUz3LJnZnvqIPnvYGAAAAAJ4QfamIn0SKWwtv3RtDvXH8d8/4z99ZH/85lDatrX7P9yvVcwN28/d/vQbyfsd33m0AAAAAAAAAAAAAAAAAAAA4UFIq4kKeT328Gs8/se186suR4uX/ei6XS8fLct154Aeq7/Wra9OnLk9NzdRjoXV9arIxOtu6MVnW/WSkWP3rz+a6RTW/ene++c4c7+tzsc9FiuG/65btzMXenZu8Mx94fW0t4kxZ9uOR4j//fmPZPDV1nju62u7ZsuxfRYqv/9PWZY+vlz1Xlv1upPjR1xvdskfLshfyw1A/tV72+Rszxd6cGAAAAAAAAAAAAAAAAAAAAD5S+lIRfxop/vv20r2x/Hn+/76et5U3v9kz3/8md6t5/geq+f+3e/0w8/9XzxVY3G6vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZEpRxBuRYvbqalruL9931K+0p+/cHRsa3rrakVTVPFSVL7/qZ86eO/+lC4MXu/n+9Xfbp+PV0WuXGy/N3J6dm5yfn5xojE23b8xMTD7wFnZaf7OT1QFo3H7tzsTNm/ONs8+f27D67sB7/R87PnBp8NlTz3TLjg0ND4/2lKn1PfTe75O2WX44ivjLSPHc936aftgfUcTOj8UHfHb22pGqEyerTowNDVcdmWq3phfKlSPdA1FENHoqNbvH6BGcix1pRiyWzS8bfLLs3uhsa651fWqyMdKaW2gvtGemR1KntWV/GlHExRSxFBEr/fdvri+KeC1SfOfYavrn/ohD3ePwxaujXz19dvt2FHvYxwdQtrPRF7FUPAbn7ADrjyL+MVL87O0T8S/9EbXofMUXIl4p8wcRb0bnfKfyg3E+4t0tPkc8nmpRxP+W5//Sanq7v7wedK8rV77W+Mr0zZmest3rymN/f3iUDvi1qR5F/Ki64q+mf/XfNQAAAAAAAAAAAAAAAMABUsSvRYoX3jmRqvHB98YUt6dvNa61rk91hvV1x/51x0yvra2tNVInmznHcy7mXMq5nHMlZxS5fs5mmfW1tfH8fjHnUs7lnCs541Cun7OZczznYs6lnMs5V3JGLdfP2cw5nnMx51LO5ZwrOeOAjN0DAAAAAAAAAAAAAAAAAACeLEX1T4pvf2M1rfV35pcej04umw/0iff/AQAA//+M5PG4") 12.890507321s ago: executing program 3 (id=5631): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=ANY=[], 0x2c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) writev(r1, &(0x7f00000000c0)=[{}, {&(0x7f0000000080)}], 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x36) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001b2bbd7000ffdbdf251600000000000300", @ANYRES32, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fcdbdf251900000008000300", @ANYRES32, @ANYBLOB="0c0006000200000002004000"], 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x44000081) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 12.239379744s ago: executing program 3 (id=5636): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) open(0x0, 0xc40, 0x13) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x22001, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sync() openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600200, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1d00030007"], 0xd) 10.872871945s ago: executing program 0 (id=5646): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=ANY=[], 0x2c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) writev(r1, &(0x7f00000000c0)=[{}, {&(0x7f0000000080)}], 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x36) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001b2bbd7000ffdbdf251600000000000300", @ANYRES32, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fcdbdf251900000008000300", @ANYRES32, @ANYBLOB="0c0006000200000002004000"], 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x44000081) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 10.617211566s ago: executing program 3 (id=5648): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r1) 10.432405231s ago: executing program 3 (id=5650): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 10.206654839s ago: executing program 3 (id=5653): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)=@keyring) 9.95899856s ago: executing program 0 (id=5654): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8"], 0xfe33) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 9.844837409s ago: executing program 0 (id=5655): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x74, &(0x7f0000000400)=""/116, 0x40f00, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x0, 0x1ff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x470) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mmap(&(0x7f00002a3000/0x3000)=nil, 0x3000, 0xb635773f07ebbee1, 0x10, 0xffffffffffffffff, 0x0) 8.825963601s ago: executing program 0 (id=5659): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x442, 0xdaf10de6d7e4e0a6}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite6\x00') openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r0, r1) 7.649107357s ago: executing program 0 (id=5663): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 7.474379121s ago: executing program 0 (id=5664): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=ANY=[], 0x2c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) writev(r1, &(0x7f00000000c0)=[{}, {&(0x7f0000000080)}], 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x36) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001b2bbd7000ffdbdf251600000000000300", @ANYRES32, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fcdbdf251900000008000300", @ANYRES32, @ANYBLOB="0c0006000200000002004000"], 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x44000081) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 7.325304444s ago: executing program 2 (id=5665): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8"], 0xfe33) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 7.205646143s ago: executing program 2 (id=5666): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="cdb6d1667f2c6f3c4df60ce5c47773c6", 0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000005000000000000000001000000000000000000a5b46ba285d4c0dba96bc1ae7b33c7308b5f88f51b0f7b54c05c06fb11d146afe4c79d039654ff5e9757f7e476f3556bdfd7e891ee88c704dd3d6fd7fbdbedeea7b935fdafaf2358324300a52c06845dacd688d81a2e5b1757e51ce9ebc795eda22fb0c64333db191900e7a60d28482f5b32d107ae07a187037f2c03d1"], 0x0, 0x42, 0x0, 0x1}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89b0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x35, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r5 = syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') dup3(r2, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffff38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x40000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1f, 0x0, 0xffff6c33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7c6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400, 0x1d1, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 6.703975444s ago: executing program 4 (id=5670): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.342569293s ago: executing program 2 (id=5671): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r1) 6.247526541s ago: executing program 2 (id=5672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x9000aecf, 0x0) 5.950638345s ago: executing program 2 (id=5674): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 5.851090753s ago: executing program 2 (id=5675): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 5.356319563s ago: executing program 4 (id=5679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x0, 0x3, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdf, &(0x7f0000000340)=""/223, 0x0, 0x11}, 0x90) 5.321256056s ago: executing program 4 (id=5680): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x38) unlink(&(0x7f0000000540)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x0, 0x67, 0x9, {{0x12, 0x4, 0x3, 0x20, 0x48, 0x64, 0x0, 0x1f, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x24, 0x2, [{0x7, 0x2}, {0x0, 0x9, "3c1089cb0d1f0b"}, {0x7, 0x4, '3m'}, {0x5, 0x2}, {0x0, 0xd, "61701bfdc2fd3006a4bb0d"}]}, @cipso={0x86, 0xa, 0x2, [{0x0, 0x2}, {0x5, 0x2}]}]}}}}}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102395, 0x7ffff000}], 0x1, 0x0, 0x0) 4.428998889s ago: executing program 4 (id=5684): syz_mount_image$jfs(&(0x7f0000000440), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000001240)=ANY=[], 0x1, 0x618a, &(0x7f000000c840)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0bER09FbG2vr9aLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAChNVVVVJ33MP5M+33fb7hQAMBX59b9K8vJTX//6n2/9ZZb6o1ar1Wr1FOqmarx7zSIiNpq3qd8zOBwPACfMRnzcdhdokfyL1o+IJ9ruBDDTOm13gGOxtb2+2kn5dpqvB8u77flckH35b3QeXN8xaXqQ0XNMpvX42oxePDOhPwtT6sMsyfl3R/O/tts+TOsdd/7TMin/4e6lT8XJ+fdG8x9xevLvjs2/VDn//iPl35M/AAAAAADMsPz//0stH/+dO/qmHMonHf9dnlIfAAAAAAAAAOBxO+r4fw8Y/w8AAABmVv1Zvfabp/aWTfoutnr51U7EkyPrA4VJF8sstt0PAAAAAAAAAAAAAChJf/cc3qudiEFEPLm4WFVV/dM0Wj+qo97+pCt9+6FkbT/JAwDAro+eGrmWvxMxHxFX03f9DRYXF6tqfmGxWqwW5vL72eHcfLXQ+Fybp/WyueEh3hD3h1X9y+Ybt2s66PPyQe2jv6++r2HVO0THHpNB+mtOaG4pbABIdl+NtrwinTJV9fSkNx+wj/3/FFqKpbYfV8y+th+mAAAAwPGrqqrqpK/zPpOO+Xfb7hQAMBX59X/0uMCR6u6E9ojH8/vVarVarVZ/qrqpGu9es4iIjeZt6vcMhuMHgBNmIz5uuwu0SP5F60fEc213AphpnbY7wLHY2l5f7aR8O83XgzS+ez4XZF/+G52d2+Xbj5seZPQck2k9vjajF89M6M+zU+rDLMn5d0fzv7bbPkzrHXf+0zIp/+HOJXPlyfn3RvMfcXry747Nv1Q5//4j5d+TPwAAAAAAzLD8//9Ljv/mTQYAAAAAAACAE2dre301X/eaj/9/bsx6rv88nXL+nUfNfyHNy/9Ey/l3R/L/8sh6vcb8/Tf39v9/b6+v/v7Ovz6bp4fNfy7PdNIjq5MeEZ10T51+mh5l6x62OegN63sadLq9fjrnpxq8EzfiZqzFhX3rdtPfY699ZV973dPBvvaL+9r7D7Vf2tc+SN87UC3k9nOxGj+Jm/H2TnvdNnfA9s8f0F4d0J7z73n+L1LOv9/4qfNfTO2dkWnt/ofdh/b75nTc/bxx4/O/vHD8m3Ogzeg92LamevvOttCfnb/JE8P42e21W+fuXr9z59ZKpMm+pRcjTR6znP9g52du7/n/hd32/Lzf3F/vfzh85PxnxWb0J+b/QmO+3t6Xpty3NuT8h+kn5/92ah+//5/k/Cfv/y+30B8AAAAAAAAAAAAAAAD4JFVV7Vwi+kZEXE7X/7R1bSYAMF359b9K8nK1Wq1Wq9Wnr26qxnu9WUTEX5u3qd8z/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpi213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+cWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOPPx8743Ocmjf99Nh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5P98Y77zO/8zI8OsljP86OuZ9CXL+ZxuP5zr/L42s18y/+u3M5b9x2BU3o7sv//N33vvp+dvvf/DKjfeuv7v27tqPL62sXLh0+fKVK1fOv3Pj5tqF3X+Pp9czIOefx752HmhZcv45c/mXJef/hVTLvyw5/y+mWv5lyfnn93vyL0vOP3/2kX9Zcv4vpVr+Zcn5fyXV8i/L1vb6XJ3/y6mWf1ny/v/VVMu/LDn/V1It/7Lk/M+lWv5lyfmfT/Uh8vf18KdIzj8f4bL/lyXnv5Jq+Zcl538x1fIvS87/UqrlX5ac/6upln9Zcv5fS7X8y5Lzv5xq+Zcl5//1VMu/LDn/K6mWf1ly/t9ItfzLkvP/ZqrlX5ac/2upln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT8X0+1/Muy9/3/ZsyYMZNn2n5mAgAAAAAAAAAAAABGTeN04ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzda4xcZ30/8DN7sdcOIQZCcPI3sHaMMc6SXV/iC/+6mHBLEyjNtaSX2K537Sz4Fq9dkjSSTQMlEo6KKqqmL9oCitpIFcKqeEGrlOZF1curpn1B31RUlZAaVSEKqEhtRbPVzHmexzOzs3N2veP17Dmfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACabfzw1JdqWZbV/zT+Wpdlb6p/vGZ0XeOyD1zrLQQAAACW6n8bf79+Q7rgwAJu1LTM377rH749Ozs7m3168HeHvzo7m64YzbLh1VnWuC669G8P15qXCZ7ORmoDTZ8PFKx+sOD6oYLrhwuuX1Vw/eqC60cKrp+zA+ZYk/88pnFnmxsfrst3aXZjNty4bnOHWz1dWz0wEH+W01Br3GZ2+Gg2nR3PprKJluXzZWuN5V/cWF/XXVlc10DTujbUj5AfPXUkbkMt7OPNLeu6fJ/RDz+Ujf74R08d+eOzr97caRbuhpb7y7dz66b6dn4hXJJvay1bnfZJ3M6Bpu3c0OE5GWzZzlrjdvWP27fz9QVu5+DlzVxW7c/5SDbQ+Pjlxn4aav6xXtpPG8Jl/3VrlmUXLm92+zJz1pUNZGtbLhm4/PyM5Edk/T7qh9Jbs6FFHacbF3Cc1ufk5tbjtP01EZ//jeF2Q/NsQ/PT9MPPr5rzvC/2OI3qj3q+10r7Mdjr10q/HIPxuHi58aCf6XgMbg6P/6kt8x+DHY+dDsdgetxNx+CmomNwYNVgY5vTk1Br3ObyMbi9ZfnBxppqjfnKlu7H4PjZE6fHZ5548v3TJw4fmzo2dXLn9u0TO3fv3rt37/jR6eNTE/nfV7i3+9/abCC9BjaFfRdfA+9tW7b5UJ39eu9ehyNdXofr2pbt9etwqP3B1ZbnBTn3mM5fGw/Ud/rIxYFsntdY4/nZtvTXYXrcTa/DoabXYcevKR1eh0MLeB3Wlzm9bWHfsww1/em0DVfra8G6pmOw/fuR9mOw19+P9MsxOBKOi3/ZNv/Xgg1he58ZW+z3I4NzjsH0cMN7T/2S9P3+yN7G6HRc3lK/4rpV2bmZqTO3P3747Nkz27MwlsXbmo6V9uN1bdNjyuYcrwOLPl4PTL/rmVs6XL4u7KuR99f/Gpn3uaovs+v27s9V46tb5/3ZcumOLIweW+792emreX1/pizZZX/Wl/nC+NK/F0+5tOn9d3ie99+Y+9/I15fu6unB4aH89TuY9s5wy/tx61M11HjvqjXW/fr4wt6Ph8Of5X4/vrHL+/H6tmV7/X483P7g4vtxreinHUvT/nyOhOPk+ET39+P6Mut3LPaYHOr6fnxrmLWw/98XkkLKRU3HznzHbVrX0NBweFxDcQ2tx+nOluWHQzarr+uFHVd2nG69Nb+vwfToLluu43S0bdleH6fp/Wq+47RW9NO3K9P+fI6E4+LGnd2P0/oyL+1a+nvnmvhh03vnqqJjcHhwVX2bh9NBmL/fz66Jx+Dt2ZHsVHY8m2xcu6pxPNUa6xq7Y2HH4KrwZ7nfK9d3OQa3ti3b62MwfR2b79irDc198D3Q/nyOhOPiuTu6H4P1ZT6yp7ffu24Nl6Rlmr53bf/52nw/87qlbTddzZ951bfzr/d0/9lsfZnjexebM7vvp9vCJdd12E/tr9/5XlOT2fLsp/VhO1/dO/9+qm9PfZmv7lvg8XQgy7Lzj93Z+Hlv+PeVPzv3vW+3/LtLp3/TOf/Yna9df/RvFrP9AKx8b+Rjbf61rulfphby7/8AAADAihBz/0CYifwPAAAApRFzf/xf4Yn8DwAAAKURc/9QmElF8v/6j7w6/cb5LDXzZ4N4fdoNd+fLxY7rRPh8dPay+uV3Pj/1k784v7B1D2RZ9tO7f6Pj8uvvjtuVGw3beemjrZfPveH5Ba3/0IOXl2vur38t3H98PAs9DDpVcCeyLHvxhmcb6xl9+GJjvnT3oca878IzT9eXeX1f/nm8/Stvy5f/g1D+PXD0cMvtXwn74QdhTtzTeX/E233r4vs27Hno8vri7Wqb3tx42M89kt9v/D05X3k6Xz7u5/m2/y+//MK36ss//p7O239+oPP2vxDu9/kw//ud+fLNz0H983i7L4btj+uLt7v9G9/tuP2XvpQvf/pj+XKHwozr3xo+3/yxV6eb99fjtcMtjyv7eL5cXP/E9367cX28v3j/7ds/cvBiy/5oPz5e+qf8fsbblo+Xx/VEf962/vr9NB+fcf0v/Nahlv1ctP5L973yzvr9tq//trblBttu3/4bm/7wi892XF/cngPfPN3yeA7cG17HYf3PPRKOx3D9/1x6tmW90aF7W99/4vJfW3e+5fFEd/04X/+lDx5rzH8f/cnvX/em69984d31fZdlL9+f31/R+o/90amW7f/6Tdsaz0e8Pnb029c/n7j+M58bO3lq5tz0ZNNebfzunE/k27N6ZM3a+vbeEN5b2z8/eOrso1NnRidGJ7JstLy/Qu+KfSPM1/JxYbG33/ZgeD5v+b0X1275xy/Hy//5gfzyi/fkX7feG5b7Srh8Xf78zdaWuP7nNt7UeH3XXso/b+mx98CGzf+xd0ELhsff/n1BPN5Pv/3Rxn6oX9f4uhFf10vc/u9P5vfznbBfZ8NvZt500+X1NS8ffzfCxfvz1/uS9194m4vP65+E5/uTP8jvP25XfLzfD9/HfHd96/tdPD6+c36g/f4bv8XjQng/yS7k18el4v6++PpNHTcv/h6S7MLNjc9/J93PzYt6mPOZeWJm/Pj0yXOPj5+dmjk7PvPEkwdPnDp38uzBxu/yPPiZottffn9a23h/mpzavSubWJNl2alsYhnesK7O9tc/Wtj2n37wyOSeiS2TU0cPnzt69sHTU2eOHZmZOTI1ObPl8NGjU58ruv305P7tO/bt3LNj7Nj05P69+/bt3Dc2ffJUfTPyjSqwe+KzYyfPHGzcZGb/rn3b77hj18TYiVOTU/v3TEyMnSu6feNr01j91r8+dmbq+OGz0yemxmamn5zav33f7t07Cn8b4InTR2dGx8+cOzl+bmbqzHj+WEbPNi6uf+0ruj3lNPOv+fez7Wr5L+LLPnXb7vT7Weue//y8d5Uv0vYLRF8Nv4vm799yeu9CPo+5fzjMpCL5HwAAAKog5v5VYSbyPwAAAJRGzP2rw0zkfwAAACiNmPtHwkwqkv/1//X/F9b/z6/X/69W///0Y3mvdKX3/2N/Xv+/Gq5x/3/J69f/1/8vX/9/4f35lb79+v/6/8zVb/3/mPvXZFkl8z8AAABUQcz9a8NM5H8AAAAojZj7rwszkf8BAACgNGLuf1OYSUXyv/7/gvr/O4oKV+Xv/zv/v/5/tjL7//HJ0f+vjEX37x96oOVT/f9A//+a9v/XzLN5+v/9vf36//r/tBue95pr1f+Puf/6MJOK5H8AAACogpj73xxmIv8DAABAacTcf0OYifwPAAAApRFz/7owk4rkf/1/5//X/9f/L3X/f6nn/2/aGP3/lcH5/7vT/y9wxf3/Eef/X4n9/+Hebn9/9/8LN1//n6ui387/H3P/W8JMKpL/AQAAoApi7n9rmIn8DwAAAKURc//bwkzkfwAAACiNmPtvDDOpSP7X/9f/1//X/9f/77z+4vP/5x/p//cX/f/u9P8L9Mn5//X/V+b293f/v9fn/x/+aPvt9f/ppN/6/zH3vz3MpCL5HwAAAKog5v6bwkzkfwAAACiNmPvfEWYi/wMAAEBpxNy/PsykIvlf/1//X/9f/1//v/P6i/v/Of3//qL/353+fwH9f/1//f+F9f87fPOr/08nven/Ny2yxP5/zP03h5lUJP8DAABAFcTcf0uYifwPAAAApRFz//8LM5H/AQAAoDRi7t8QZlKR/K//r/+v/1+t/v9tq/T/9f/LTf+/O/3/Avr/+v/6/ws8//9ci+n/ry66M0qjN/3/LOtV/z/m/neGmVQk/wMAAEAVxNz/rjAT+R8AAABKI+b+d4eZyP8AAABQGjH3j4aZVCT/6/+Xq///p3/13Lsz/X/9/4L1l7T/Hw8D/f+K0//vTv+/gP6//r/+/7L0/6mOfuv/x9y/McykIvkfAAAAqiDm/k1hJvI/AAAAlEbM/beGmcj/AAAAUBox928OM6lI/tf/L1f/P9L/1//vtv6S9v8T/f9q0//voOlFqv9fQP+/l/35oSzT/195/f/43a/+P73Rb/3/mPvfE2ZSkfwPAAAAVRBz/5YwE/kfAAAASiPm/veGmcj/AAAAUBox928NM6lI/tf/1//X/9f/1//vvH79/5VJ/7+7xfb/V+n/6/87/3/F+v/O/09v9Vv/P+b+94WZVCT/AwAAQBXE3L8tzET+BwAAgNKI/38z/3+v8j8AAACUUcz9Y2EmFcn/+v8L7P+HxzjfXev/t25/v/b/a/r/+v/6/6Wn/9+d8/8X0P/X/9f/1/+np/qt/x9z//vDTCqS/wEAAKAKYu6/PcxE/gcAAIDSiLl/PMxE/gcAAIDSiLl/IsykIvlf/9/5/6vU/3f+f/1//f/y0//vTv+/gP6//n/Z+v9Zpv/PNdVv/f+Y+7eHmVQk/wMAAEAVxNy/I8xE/gcAAIDSiLl/Z5iJ/A8AAAClEXP/rjCTiuR//X/9f/1//X/9/87r1/9fmfT/u9P/L6D/r/9ftv6/8/9zjfVb/z/m/jvCTCqS/wEAAKAKYu7fHWYi/wMAAEBpxNy/J8wk5P9O/68bAAAAWFli7t8bZlKRf//X/y9J//83/65l3fr/+v/d1t+b/v8a/f8w9f/7S0n7/+0viyum/19A/1//X/9f/5+e6rf+f8z9+8JMKpL/AQAAoApi7v9AmIn8DwAAAKURc///DzOR/wEAAKA0Yu7/mTCTiuR//f+S9P/b6P/r/3dbv/P/6/+XWUn7/z1Tqv7/gP6//n9/bb/+v/4/c139/n/8aGH9/5j794eZVCT/AwAAQBXE3P+zYSbyPwAAAJRGzP0fDDOR/wEAAKA0Yu4/EGZSkfyv/6//r/+v/391+v8fzNr1Y/+/fvDo/5eL/n93per/O/+//n+fbb/+v/4/c/Xb+f9j7v9QmElF8j8AAABUQcz9d4aZyP8AAABQGjH3fzjMRP4HAACA0oi5/yNhJhXJ//r/+v/6/1fW/7/QtL36/62c/78z/f/lof/fnf5/Af1//X/9f/1/eqrf+v8x9380zKQi+R8AAACqIOb+j4WZyP8AAABQGjH3fzzMRP4HAACA0oi5/64wk4rkf/1//X/9f+f/1//vvH79/5VJ/787/f8C+v/6//r/+v/0VL/1/2Pu/7kwk4rkfwAAAKiCmPvvDjOR/wEAAKA0Yu6/J8xE/gcAAIDSiLn/E2EmFcn/+v/6//r/+v/6/53Xr/+/Mun/d6f/X0D/X/9f/1//n57qt/5/zP2fDDOpSP4HAACAKoi5/+fDTOR/AAAAKI2Y+z8VZiL/AwAAQGnE3P8LYSYVyf/6//r//dX/nz3ffDv9f/3/rFf9//qN9P8rQf+/O/3/Ah36/6v1//X/9f/1/7li/db/j7n/3jCTiuR/AAAAqIKY++8LM5H/AQAAoDRi7r8/zET+BwAAgNKIuf+BMJOK5H/9/0r2/9ND7r/+v/P/6/87/7/+/9Lo/3en/1/A+f/1//X/9f/pqX7r/8fc/2CYSUXyPwAAAFRBzP0PhZnI/wAAAFAaMff/YpiJ/A8AAAClEXP/p8NMKpL/9f8r2f/v4/P/l63/P9RyfFSp/z/S9Hym41L/X/9/Gej/d6f/X0D/X/+/n/v/4WheM8/t9f/pR/3W/4+5/+Ewk4rkfwAAAKiCmPt/KcxE/gcAAIDSiLn/l8NM5H8AAAAojZj7fyXMpCL5X/9f/1//3/n/r0b/v/n5jPT/9f+Xg/5/d/r/BfT/9f/7uf9fQP+fftRv/f+Y+381zGTe4Pfafy7gYQIAAAB9JOb+R8JMKvLv/wAAAFAFMfcfDDOR/wEAAKA0Yu4/FGZSkfyv/9/e/49nVNX/1//X/19K/7/xPH6ztQ+r/6//vxx61/9/x/VZpv+v/6//r/+v/6//z1L0W/8/5v7DYSYVyf8AAABQBTH3/1qYifwPAAAApRFz/5EwE/kfAAAASiPm/skwk4rk/2vY/x/uz/6/8/9faf//p/r/+v+B/n9n+v/Lw/n/u9P/L6D/r/+v/6//T0/1W/8/5v6pMJOK5H8AAAAosfTj4Jj7j4aZyP8AAABQGjH3Hwszkf8BAACgNGLufzTMpCL53/n/9f+d//9a9P+HWpbX/8/p/+v/94L+f3f6/wX0//X/9f/1/+mpfuv/x9w/HWZSkfwPAAAAVRBz/2fCTOR/AAAAKI2Y+z8bZiL/AwAAQGnE3H88zKQi+V//X/+/6v3/WpZdcP5//f9O69f/X5n0/7vT/y+g/6//r/+v/09P9Vv/P+b+E2EmFcn/AAAAUAUx958MM5H//4+9+2iS67zuONymSYSV7W/gtVde2iv6I3jrnau8djnRtjJJ5SxROQcq55wliso550zlHKlIqQoqDs45wGAatwFMo/ve9zzP5hgowj0gh3T9jfrVCwAAAMPI3f8fcYv9DwAAAMPI3f+fcUuT/a//1/937/9Xe3n///Bfr/8/S/+v/9+GI/39tev/uotF4Rft///+H274V/2//l//P0n/r//X/3OhufX/ufv/K25psv8BAACgg9z9/x232P8AAAAwjNz9/xO32P8AAAAwjNz9N8QtTfa//l//r//X/x/q/2/X/+v/l837/9P0/xvo//X/+n/9P1s1t/4/d///xi1N9j8AAAB0kLv//+IW+x8AAACGkbv//+MW+x8AAACGkbv/HnFLk/2v/9f/6/+X0v+f8P7/Bb8f/b/+fx39/zT9/wb6f/2//l//z1bNrf/P3X/PuKXJ/gcAAIAOcvffK26x/wEAAGAYufvvHbfY/wAAADCM3P33iVua7H/9v/5f/7+U/n9H7//r//X/C3fr6tx/E/T/R+n/N9jQ/69W+v8pl9zPr//tLefrvwj9v/6fo+bW/+fuv2/c8k+r1Ykr/U0CAAAAs5K7/35xS5M//wcAAIAOcvffGLfY/wAAADCM3P03xS1N9r/+X/+v/9f/6//Xf77+f5m8/z/t+P3/3/31v/9b3/7f+//TvP+/7f7/7u8M/T/LNrf+P3f/zXFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+v/R+v+/PPTrzuv/D2oX/b/+X/+v/x+d/n+a9/83OPjP3On6of5f/+/9f/0/xzO3/j93/4Pilib7HwAAADrI3f/guMX+BwAAgGHk7n9I3GL/AwAAwDBy9z80bmmy//X/o/X/h3+d9//1/+s+X/+v/x+Z/n+a/n+DUd7/v8Lvmn3388e1769f/6//56i59f+5+x8WtzTZ/wAAANBB7v6Hxy32PwAAAAwjd/8j4hb7HwAAAIaRu/+RcUuT/a//1/8vo//PT9D/6/+vfv+f9P/LpP+fpv/fYJT+/wrtu59f+tev/9f/c9Tc+v/c/Y+KW5rsfwAAAOggd/+j4xb7HwAAAIaRu/8xcYv9DwAAAMPI3f/YuKXJ/tf/6/+X0f97/1//7/1//f+l0f9P0/9voP/X/+v/9f9s1dz6/9z9t8QtTfY/AAAAdJC7/3Fxi/0PAAAAw8jd//i4xf4HAACAYeTuf0Lc0mT/6//1//p//b/+f/3n6/+XSf8/Tf+/gf5f/6//1/+zVTPq/8/7VadWT4xbmux/AAAA6CB3/5PiFvsfAAAAhpG7/8lxi/0PAAAAw8jd/5S4pcn+1//Ppv8/yPnG6v9Pr1Yr/f+qaf9/+rx/nvV9qf/X/++A/n+a/n8D/b/+X/+v/2erZtT/H/w4d/9T45Ym+x8AAAA6yN3/tLjF/gcAAIBh5O5/etxi/wMAAMAwcvc/I25psv/1/7Pp/w+M1f97///C749O/b/3/4/S/++G/n+a/n8D/b/+X/+v/2er5tb/5+5/Ztx04ror/i0CAAAAM5O7/1lxS5M//wcAAIAOcvc/O26x/wEAAGChbjnyM7n7nxO3NNn/+v/t9v8nzvs5/b/+/8LvD/2//l//f/Xp/6fp/zfQ/+v/9f/6f7Zqbv1/7v7nxi1N9j8AAAB0kLv/1rjF/gcAAIBh5O5/Xtxi/wMAAMAwcvc/P25psv/1/97/1//r//X/6z9f/79M+v9p+v8N9P/6//32/yfP/Y/6f8ZwGf3/mTNnbrzq/X/u/hfELU32PwAAAHSQu/+FcYv9DwAAAMPI3f+iuMX+BwAAgGHk7n9x3NJk/+v/m/b/+a2+rP7/ptVK/6//1//r/6fp/6fp/zfQ/+v/vf+v/2er5vb+f+7+l8QtTfY/AAAAdJC7/6Vxi/0PAAAAw8jd/7K4xf4HAACAYeTuf3nc0mT/6/+b9v/e/9f/6/933f/ftdL/78Qi+v/TF//8uff/N+v/9f8T2vX///yPh36o/9f/c9Tc+v/c/a+IW5rsfwAAAOggd/8r4xb7HwAAAIaRu/9VcYv9DwAAAMPI3f/quOnaJvtf/6//1//r//X/6z9/x+//n1itVvr/LVhE/z9h7v3/dt7/v/Df8nP0//r/JX/9+n/9P0fNrf/P3f+auKXJ/gcAAIAOcve/Nm6x/wEAAGAYuftfF7fY/wAAADCM3P2vj1ua7H/9v/5f/6//H77/v3kR/b/3/7dE/z9tHv3/xen/9f9L/vr1//p/Lt2++v/c/W+IW5rsfwAAAOggd/8b4xb7HwAAAIaRu/9NcYv9DwAAAMPI3f/muKXJ/tf/6/8vp//Pr1P/P1b/f3J2/f+pQ//7mrz/r//fEv3/NP3/Bvp//b/+/xb9P9s0t/f/c/e/JW5psv8BAACgg9z9b41b/69b+x8AAACGkbv/bXGL/Q8AAADDyN3/9rilyf7X/+v/vf+v/9/x+/9/c9uu3//X/7ei/5+m/99A/6//1/97/5+tmlv/n7v/HXFLk/0PAAAAHeTuvy1usf8BAABgGLn73xm32P8AAAAwjNz9t8ctTfa//l//r//X/++4/7+E9/8P20X/f43+fxj6/2m76f9P6//1/9XP/0X8W6D/33f/v9L/sxdz6/9z978rbmmy/wEAAKCD3P3vjlvsfwAAABhG7v73xC32PwAAACzStWt+Lnf/e+OWJvtf/6//1//r//X/6z9f/79Me+n/85tC/+/9/9Cn///bQz9a2vv/F/7fr7H7f+//sx9z6/9z978vbmmy/wEAAKCD3P3vj1vsfwAAABhG7v4PxC32PwAAAAwjd/8H45Ym+1//r//X/+v/9f/rP1//v0ze/5+m/99A/7/X9/OX/vXr//X/HDW3/j93/4filib7HwAAADrI3f/huMX+BwAAgGHk7v9I3GL/AwAAwDAOdn/GZQ33v/5f/6//1//r/9d//nH6/9Oro/T/u6H/n6b/30D/r//X/+v/2aq59f8fPfhVp1Yfi1ua7H8AAADoIHf/x+MW+x8AAACGkbv/E3GL/Q8AAADDyN3/ybilyf7X/+v/l9H/nzlz5kb9v/7/8O/nXP9/x+z6/3X0/7uh/5+m/99A/6//1//r/9mqufX/ufs/Fbc02f8AAADQQe7+T8ct9j8AAAAMI3f/Z+IW+x8AAACGkbv/s3FLk/2v/59B/39K/+/9f/3/arD3/9fR/++G/n+a/n+DEfv/U5f+2993P39c+/769f/6f46aW/+fu/9zcUuT/Q8AAAAd5O7/fNxi/wMAAMAwcvd/IW6x/wEAAGAYufu/GLc02f/6/931/3f/vevy/v/p1fqvX/+v/9f/6/+vNv3/NP3/BiP2/5dh3/380r9+/b/+n6Pm1v/n7v9S3HJ4+F13eb9LAAAAYE5y9385bmny5/8AAADQQe7+r8Qt9j8AAAAMI3f/V+OWJvtf/z+D9/8H7P+9/7/++0P/P+v+/xr9/xj0/9P0/xvo//X/+v8t9f/53az/725u/X/u/q/FLU32PwAAAHSQu//rcYv9DwAAAMPI3f+NuMX+BwAAgGHk7r8jbjlv/69ru0eh/9f/6//1//r/9Z+v/18m/f+0S+3/T66O1/8n/b/+X//ftf/3/j9nza3/z93/zbjFn/8DAADA4lx3kZ/P3f+tuMX+BwAAgGHk7v923GL/AwAAwDBy938nbrnzmn19STul/9f/6//1//r/9Z+v/18m/f807/9voP/fRj9/vf5/jP5/tdL/c3xz6/9z9383bvHn/wAAADCM3P3fi1vsfwAAABhG7v7vxy32PwAAAAwjd/8P4pYm+1//r/8/Zv9/kGbq/8/S/5+l/19P/78b+v9p+v8N9P/e/9f/e/+frZpb/5+7/4dxS5P9DwAAAB3k7v9R3GL/AwAAwDBy9/84brH/AQAAYBi5+38StzTZ/3vr/+Nvtf5/8f2/9//1//p//f+s6P+n6f830P/r//X/+n+2am79f+7+n8YtTfY/AAAAdJC7/2dxi/0PAAAAw8jd//O4xf4HAACAYeTu/0Xc0mT/e/9f/6//1//r/9d/vv5/mfT/0/T/69U/KP2//l//r/9nq+bW/+fu/2Xc0mT/AwAAQAe5+38Vt9j/AAAAMIzc/XfGLfY/AAAADCN3/6/jlib7X/+v/9f/6//1/+s/X/+/TPr/afvs///lrzZ/rPf/997/55eg/9f/6//Zirn1/7n7fxO3NNn/AAAA0EHu/t/GLfY/AAAADCN3/+/iFvsfAAAAhpG7//dxS5P9v6H/P1l/of5/kv7/8Nev/1///aH/1//r/68+/f807/9voP/3/r/+X//PVs2t/8/d/4e4pcn+BwAAgA5y998Vt9j/AAAAMIzc/X+MW+x/AAAAGEbu/j/FLU32v/f/l9T/X6//1//r//X/+v8N9P/T9P8b6P/1//p//T9bNbf+P3f/nwMAAP//yRRTuA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)) 4.025588652s ago: executing program 4 (id=5685): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000002880)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 3.466576827s ago: executing program 4 (id=5689): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.754714565s ago: executing program 1 (id=5691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) 2.680843511s ago: executing program 1 (id=5692): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 2.680505851s ago: executing program 1 (id=5693): memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$x25(0xb, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0x4, 0x0, 0x0, 0x3031334d, [], [], 0x13a}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x1}}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRKP(r8, 0x5425, 0x7) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 1.775156695s ago: executing program 1 (id=5694): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x38) unlink(&(0x7f0000000540)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x0, 0x67, 0x9, {{0x13, 0x4, 0x3, 0x20, 0x4c, 0x64, 0x0, 0x1f, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x28, 0x2, [{0x0, 0x4, 'Z4'}, {0x7, 0x2}, {0x0, 0x9, "3c1089cb0d1f0b"}, {0x7, 0x4, '3m'}, {0x5, 0x2}, {0x0, 0xd, "61701bfdc2fd3006a4bb0d"}]}, @cipso={0x86, 0xa, 0x2, [{0x0, 0x2}, {0x5, 0x2}]}]}}}}}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102395, 0x7ffff000}], 0x1, 0x0, 0x0) 904.472026ms ago: executing program 1 (id=5695): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000b60a23e4bd81ef6272000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000016080003400000000a140000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000040)='T', 0x1}], 0xf, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=5696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[], 0x90) kernel console output (not intermixed with test programs): _CHANGE): vlan0: link becomes ready [ 753.938389][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 753.950987][T12595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.965214][T12595] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 753.985528][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.002933][T12595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.038971][T12595] usb 2-1: config 0 descriptor?? [ 754.053902][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.070332][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 754.101304][T18973] device veth0_macvtap entered promiscuous mode [ 754.183557][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.192333][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.198464][T19324] loop3: detected capacity change from 0 to 512 [ 754.202018][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 754.223293][T18973] device veth1_macvtap entered promiscuous mode [ 754.262880][T18973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.273256][T17561] udevd[17561]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 754.283388][T19324] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000079f) [ 754.296224][T17561] udevd[17561]: symlink '../../loop3' '/dev/disk/by-uuid/1DF0-B7A5.tmp-b7:3' failed: Read-only file system [ 754.317412][T18973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.330991][T12595] ath6kl: Failed to submit usb control message: -71 [ 754.339007][T12595] ath6kl: unable to send the bmi data to the device: -71 [ 754.354945][T19324] FAT-fs (loop3): Filesystem has been set read-only [ 754.366565][T12595] ath6kl: Unable to send get target info: -71 [ 754.379744][T19327] trusted_key: encrypted_key: insufficient parameters specified [ 754.388303][T12595] ath6kl: Failed to init ath6kl core: -71 [ 754.391585][T18973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.460369][T18973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.467302][T19333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.479891][T18973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.499906][T18973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.512310][T18973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.519707][T12595] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 754.535137][T18973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.560574][T12595] usb 2-1: USB disconnect, device number 27 [ 754.571387][T18973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.604232][T18973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.613908][T19334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.662324][T18973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.702751][T18973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.742558][T18973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.760599][T12598] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 754.793867][T18973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.867034][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.884852][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.918186][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.946233][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.975103][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 755.012599][T18973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.029923][T12598] usb 4-1: Using ep0 maxpacket: 16 [ 755.038173][T18973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.060245][T18973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.069007][T18973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.250467][T12598] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 755.278343][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.296037][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.370273][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.420077][T12598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.447059][T12598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.460452][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.460914][T12598] usb 4-1: Product: syz [ 755.469463][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.478758][T12598] usb 4-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 755.513875][T12598] usb 4-1: SerialNumber: syz [ 755.538874][T19343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5095'. [ 755.573101][T12035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 756.030763][T12598] cdc_ncm 4-1:1.0: bind() failure [ 756.058270][T12598] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 756.091587][T12598] cdc_ncm 4-1:1.1: bind() failure [ 756.113364][T12598] usb 4-1: USB disconnect, device number 31 [ 756.245101][ T3560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 756.256035][ T3560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 756.264016][ T3560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 756.272307][ T3560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 756.279799][ T3560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 756.288474][ T3560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 756.840790][T19353] chnl_net:caif_netlink_parms(): no params data found [ 757.023731][T19353] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.052983][T19353] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.105129][T19353] device bridge_slave_0 entered promiscuous mode [ 757.121695][T19353] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.128969][T19353] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.142208][T19353] device bridge_slave_1 entered promiscuous mode [ 757.284500][T19353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.319789][T19353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.468916][T19353] team0: Port device team_slave_0 added [ 757.502380][T19353] team0: Port device team_slave_1 added [ 757.606528][T19353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.629664][T19375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.658352][T19353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.707417][T19353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.707720][T19376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.839410][T19370] loop3: detected capacity change from 0 to 32768 [ 757.883581][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.908486][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 757.927172][T19353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.959938][T19353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.988989][T19370] XFS (loop3): Mounting V5 Filesystem [ 758.047918][T19370] XFS (loop3): Ending clean mount [ 758.098524][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 758.119187][T19353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.202591][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 758.349996][ T3560] Bluetooth: hci1: command tx timeout [ 758.384124][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.535046][T18892] XFS (loop3): Unmounting Filesystem [ 758.778486][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.803062][T19353] device hsr_slave_0 entered promiscuous mode [ 758.871895][T19353] device hsr_slave_1 entered promiscuous mode [ 758.900085][T19353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.945642][T19353] Cannot create hsr debugfs directory [ 758.972786][T19411] loop3: detected capacity change from 0 to 512 [ 759.016659][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 759.040152][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.077037][T19411] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000079f) [ 759.087888][T19411] FAT-fs (loop3): Filesystem has been set read-only [ 759.092226][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/1DF0-B7A5.tmp-b7:3' failed: Read-only file system [ 759.115894][T19411] trusted_key: encrypted_key: insufficient parameters specified [ 759.429950][T12598] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 759.689990][T12598] usb 4-1: Using ep0 maxpacket: 16 [ 759.890148][T12598] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 759.924140][T19414] loop4: detected capacity change from 0 to 32768 [ 759.953561][T19414] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5113 (19414) [ 760.005197][T19414] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 760.026154][T19414] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 760.041962][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 760.057006][T19414] BTRFS info (device loop4): using free space tree [ 760.100106][T12598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 760.110213][T12598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.118713][T12598] usb 4-1: Product: syz [ 760.124566][T12598] usb 4-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 760.132445][T12598] usb 4-1: SerialNumber: syz [ 760.368554][T19414] BTRFS info (device loop4): enabling ssd optimizations [ 760.436337][ T3560] Bluetooth: hci1: command tx timeout [ 760.660827][T12598] cdc_ncm 4-1:1.0: bind() failure [ 760.674265][T12598] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 760.708149][T12598] cdc_ncm 4-1:1.1: bind() failure [ 760.726472][T12598] usb 4-1: USB disconnect, device number 32 [ 760.994542][T19353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 761.023972][T19353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 761.063744][ T11] device hsr_slave_0 left promiscuous mode [ 761.086492][ T11] device hsr_slave_1 left promiscuous mode [ 761.097919][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.106233][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.117807][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.157173][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.250469][T17394] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 761.278856][ T11] device veth1_macvtap left promiscuous mode [ 761.326082][ T11] device veth0_macvtap left promiscuous mode [ 761.359091][ T11] device veth1_vlan left promiscuous mode [ 761.375766][ T11] device veth0_vlan left promiscuous mode [ 762.267919][T19469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.370632][T19470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.492340][ T11] team0 (unregistering): Port device team_slave_1 removed [ 762.510154][ T3561] Bluetooth: hci1: command tx timeout [ 762.639673][ T11] team0 (unregistering): Port device team_slave_0 removed [ 762.701213][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.746008][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.746969][ T3558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.766898][ T3558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.778384][ T3558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.787970][ T3558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.807532][ T3558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 762.821653][ T3558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 763.171749][ T11] bond0 (unregistering): Released all slaves [ 763.194495][T19353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 763.282800][T19353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 763.575905][T19353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.613525][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 763.625268][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 763.647035][T19353] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.748184][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 763.765414][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 763.794386][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.801555][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.867021][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 763.908248][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 763.976080][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 763.988957][T19487] fuse: Bad value for 'fd' [ 764.430413][ T3561] Bluetooth: hci0: command 0x0406 tx timeout [ 764.444559][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.451716][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.476279][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 764.486104][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 764.500716][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 764.550772][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 764.580558][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 764.590152][ T3561] Bluetooth: hci1: command tx timeout [ 764.713900][T19353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 764.752257][T19353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 764.793634][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 764.813090][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 764.836549][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 764.872713][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 764.903430][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 764.912485][ T3560] Bluetooth: hci4: command tx timeout [ 764.950836][T19519] loop3: detected capacity change from 0 to 512 [ 764.951210][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 764.980467][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 764.992556][T19475] chnl_net:caif_netlink_parms(): no params data found [ 765.009941][T19463] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 765.042508][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 765.058412][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 765.163533][T19519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 765.189961][T19519] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 765.207492][T19475] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.249010][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.267454][T19475] device bridge_slave_0 entered promiscuous mode [ 765.286241][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 765.327830][T19475] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.369993][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.399089][T19475] device bridge_slave_1 entered promiscuous mode [ 765.554387][T19463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 765.578212][T19475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.653087][T19463] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 765.773936][T19475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.798779][T19463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.922376][T19463] usb 5-1: config 0 descriptor?? [ 765.986296][T19475] team0: Port device team_slave_0 added [ 766.001055][T18892] EXT4-fs (loop3): unmounting filesystem. [ 766.068523][T19475] team0: Port device team_slave_1 added [ 766.094214][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 766.102461][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.116820][T19353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.162221][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 766.162235][ T26] audit: type=1326 audit(1720011159.390:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297b775b99 code=0x7ffc0000 [ 766.208238][ T26] audit: type=1326 audit(1720011159.390:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f297b7745d0 code=0x7ffc0000 [ 766.260221][T19463] ath6kl: Failed to submit usb control message: -71 [ 766.267247][T19463] ath6kl: unable to send the bmi data to the device: -71 [ 766.274404][T19463] ath6kl: Unable to send get target info: -71 [ 766.293315][T19463] ath6kl: Failed to init ath6kl core: -71 [ 766.326815][T19463] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 766.358265][T19463] usb 5-1: USB disconnect, device number 32 [ 766.362537][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 766.364357][ T26] audit: type=1326 audit(1720011159.390:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297b775b99 code=0x7ffc0000 [ 766.388539][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 766.430302][ T26] audit: type=1326 audit(1720011159.420:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f297b775b99 code=0x7ffc0000 [ 766.450774][T19475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.459467][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.490275][ T26] audit: type=1326 audit(1720011159.420:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297b775b99 code=0x7ffc0000 [ 766.492918][T19475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.548081][T19475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.558668][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.592318][T19475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.613867][ T26] audit: type=1326 audit(1720011159.430:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19514 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297b775b99 code=0x7ffc0000 [ 766.727320][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 766.745813][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 766.767755][T19475] device hsr_slave_0 entered promiscuous mode [ 766.806705][T19475] device hsr_slave_1 entered promiscuous mode [ 766.820725][T19475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.845384][T19475] Cannot create hsr debugfs directory [ 766.866790][T19353] device veth0_vlan entered promiscuous mode [ 766.875484][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 766.886044][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 766.961933][T19353] device veth1_vlan entered promiscuous mode [ 766.989988][ T3561] Bluetooth: hci4: command tx timeout [ 767.030271][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 767.038860][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 767.102580][T19353] device veth0_macvtap entered promiscuous mode [ 767.116852][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 767.129124][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 767.159976][T19353] device veth1_macvtap entered promiscuous mode [ 767.177146][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 767.188586][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 767.963418][T19353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.990849][T19353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.003893][T19353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.014538][T19353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.024681][T19353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.035354][T19353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.046915][T19561] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.5139'. [ 768.051097][T19353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.073746][T19353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.092033][T19353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.106619][T19353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.113474][T19561] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.5139'. [ 768.120895][T19353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.136272][T19353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.155404][T19353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.230192][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 768.338857][T19353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.357887][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 768.371071][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 768.388377][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 768.408500][T19463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 768.438495][T19573] fuse: Bad value for 'fd' [ 769.110545][ T3561] Bluetooth: hci4: command tx timeout [ 769.141496][T19353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.159879][T19353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.168680][T19353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.183293][T19353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.360961][T19475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.471879][T19475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.534279][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.561472][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.615799][T19475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.655053][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 769.813878][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.869443][T19475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.889012][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.742602][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 770.788226][T19580] loop4: detected capacity change from 0 to 32768 [ 771.009964][T19580] XFS (loop4): Mounting V5 Filesystem [ 771.020512][ T3560] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 771.035568][ T3560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 771.044877][ T3560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 771.053829][ T3560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 771.062168][ T3560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 771.070341][ T3560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 771.150127][ T3561] Bluetooth: hci4: command tx timeout [ 771.161080][T19580] XFS (loop4): Ending clean mount [ 771.228747][T19475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 771.522232][T19611] fuse: Bad value for 'fd' [ 771.625910][T17561] udevd[17561]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system [ 771.908038][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system [ 772.078179][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5151'. [ 772.186135][T19617] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.5151'. [ 772.230627][T19617] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.5151'. [ 772.324614][T17394] XFS (loop4): Unmounting Filesystem [ 772.370074][T19475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 772.379540][T19475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 772.398598][T19475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 772.656073][T19632] loop3: detected capacity change from 0 to 512 [ 772.877825][T19475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.941810][T19600] chnl_net:caif_netlink_parms(): no params data found [ 773.132124][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 773.150002][ T3561] Bluetooth: hci0: command tx timeout [ 773.160403][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 773.213429][T19475] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.297934][T19629] loop1: detected capacity change from 0 to 32768 [ 773.307297][ T11] device hsr_slave_0 left promiscuous mode [ 773.334706][T19629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5154 (19629) [ 773.378317][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 773.394407][ T11] device hsr_slave_1 left promiscuous mode [ 773.401118][T19629] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 773.412000][ T11] device bridge_slave_1 left promiscuous mode [ 773.426026][T19629] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 773.435104][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.464488][T19629] BTRFS info (device loop1): setting nodatacow, compression disabled [ 773.475180][T19629] BTRFS info (device loop1): disabling tree log [ 773.483083][ T11] device bridge_slave_0 left promiscuous mode [ 773.489922][T19629] BTRFS info (device loop1): turning on sync discard [ 773.496634][T19629] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 773.500217][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.530119][T19629] BTRFS info (device loop1): force zstd compression, level 3 [ 773.537531][T19629] BTRFS info (device loop1): using free space tree [ 773.596210][ T11] device veth1_macvtap left promiscuous mode [ 773.610221][ T11] device veth0_macvtap left promiscuous mode [ 773.620283][ T11] device veth1_vlan left promiscuous mode [ 773.626120][ T11] device veth0_vlan left promiscuous mode [ 773.707309][T19629] BTRFS info (device loop1): enabling ssd optimizations [ 773.798756][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 773.969365][T19353] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 774.427192][T19671] fuse: Invalid rootmode [ 774.820128][ T3597] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 775.234943][ T3561] Bluetooth: hci0: command tx timeout [ 775.235269][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 775.250420][ T3597] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 775.259458][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.269263][ T3597] usb 2-1: config 0 descriptor?? [ 775.295347][ T11] team0 (unregistering): Port device team_slave_1 removed [ 775.336910][ T11] team0 (unregistering): Port device team_slave_0 removed [ 775.374574][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.419795][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.543016][ T26] audit: type=1326 audit(1720011168.770:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.1.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0375b99 code=0x7ffc0000 [ 775.567295][ T3597] ath6kl: Failed to submit usb control message: -71 [ 775.574170][ T3597] ath6kl: unable to send the bmi data to the device: -71 [ 775.580151][ T26] audit: type=1326 audit(1720011168.790:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.1.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da0375b99 code=0x7ffc0000 [ 775.582285][ T3597] ath6kl: Unable to send get target info: -71 [ 775.611063][ T3597] ath6kl: Failed to init ath6kl core: -71 [ 775.641795][ T3597] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 775.651996][ T3597] usb 2-1: USB disconnect, device number 28 [ 775.894441][ T11] bond0 (unregistering): Released all slaves [ 776.010220][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 776.029132][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 776.037758][T12598] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.044879][T12598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.062921][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 776.071660][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 776.080160][T12598] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.087258][T12598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.116657][T19673] device dummy0 entered promiscuous mode [ 776.132134][T19684] loop1: detected capacity change from 0 to 512 [ 776.190427][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 776.198543][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 776.246280][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.275725][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 776.288863][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.300796][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 776.309435][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.356954][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 776.390998][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 776.419749][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 776.453088][T19475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.500639][T19475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 776.531420][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 776.550294][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 776.558927][T19600] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.569923][T19600] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.577984][T19600] device bridge_slave_0 entered promiscuous mode [ 776.668413][T19600] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.688624][T19600] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.711983][T19600] device bridge_slave_1 entered promiscuous mode [ 776.812960][T19600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.862936][T19600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.016026][T19600] team0: Port device team_slave_0 added [ 777.060764][T19600] team0: Port device team_slave_1 added [ 777.152230][T19600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.169584][T19600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.211617][T19600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.264522][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.280242][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 777.303633][T19475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.310062][ T3561] Bluetooth: hci0: command tx timeout [ 777.320566][T19600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.339395][T19600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.412642][T19600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.577073][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 777.605374][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.744243][T19708] fuse: Invalid rootmode [ 778.331047][T19712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.364659][T19712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.398833][T19712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.469454][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 778.490501][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 778.492919][T19714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.514066][T19475] device veth0_vlan entered promiscuous mode [ 778.524152][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 778.532075][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 778.554567][T19600] device hsr_slave_0 entered promiscuous mode [ 778.555224][T19712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.577403][T19600] device hsr_slave_1 entered promiscuous mode [ 778.595068][T19600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.610129][T19600] Cannot create hsr debugfs directory [ 778.656465][T19475] device veth1_vlan entered promiscuous mode [ 778.744891][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 778.759916][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 778.774225][T19475] device veth0_macvtap entered promiscuous mode [ 778.803489][T19475] device veth1_macvtap entered promiscuous mode [ 778.912934][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.944867][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.965072][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.989458][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.070875][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.233517][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.397533][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.431466][ T3560] Bluetooth: hci0: command tx timeout [ 779.623696][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.724306][T19475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.749306][T19728] loop3: detected capacity change from 0 to 512 [ 779.762463][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.780927][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 779.791202][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.831227][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 779.875191][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.880199][ T3561] Bluetooth: hci5: command 0x0406 tx timeout [ 779.926100][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.972620][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.019923][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.031679][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.080008][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.122201][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.163038][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.190916][T19475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.214357][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 780.230759][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.258683][T19475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.281546][T19475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.323421][T19475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.352492][T19475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.485047][T19600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.619501][T19600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.729480][T19600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.815143][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.842452][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.892251][T19600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.918812][T19742] loop4: detected capacity change from 0 to 512 [ 780.932695][T19742] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000079f) [ 780.932720][T19742] FAT-fs (loop4): Filesystem has been set read-only [ 780.978052][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 780.986553][T19742] trusted_key: encrypted_key: insufficient parameters specified [ 780.992130][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 780.993299][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/1DF0-B7A5.tmp-b7:4' failed: Read-only file system [ 781.001741][ T3956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.001806][ T3956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.006131][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 781.017979][T17561] udevd[17561]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 781.018999][T17561] udevd[17561]: symlink '../../loop4' '/dev/disk/by-uuid/1DF0-B7A5.tmp-b7:4' failed: Read-only file system [ 781.263963][ T22] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 781.386081][T19600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 781.422324][T19600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 781.432819][T19600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 781.451370][T19600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 781.474824][T19755] netlink: 703 bytes leftover after parsing attributes in process `syz.3.5188'. [ 781.499971][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 781.608184][T19759] kvm: pic: non byte read [ 781.631298][T19600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.645071][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 781.653328][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 781.666340][T19600] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.710344][ T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 781.723600][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 781.739177][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 781.748443][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.755572][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.763390][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 781.772349][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 781.780917][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.788015][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.804464][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 781.814289][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 781.830674][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 781.839194][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 781.883004][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.902416][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.922184][ T22] usb 5-1: Product: syz [ 781.931109][ T22] usb 5-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 781.941065][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 781.945898][ T22] usb 5-1: SerialNumber: syz [ 781.962238][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 781.977045][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 781.996219][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 782.005416][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 782.026630][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 782.203946][T19600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.234511][T19600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 782.491625][ T22] cdc_ncm 5-1:1.0: bind() failure [ 782.657488][ T22] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 782.784479][ T22] cdc_ncm 5-1:1.1: bind() failure [ 782.956398][ T22] usb 5-1: USB disconnect, device number 33 [ 783.010554][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 783.019015][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.525451][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.537508][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.563598][T19600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.630724][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 783.640327][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 783.672737][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 783.685381][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 783.719736][T19600] device veth0_vlan entered promiscuous mode [ 783.728624][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 783.743804][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 783.758022][T19600] device veth1_vlan entered promiscuous mode [ 783.892751][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 783.905684][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 783.917284][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 783.942803][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 783.982032][T19600] device veth0_macvtap entered promiscuous mode [ 784.137950][T19810] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 784.150456][T19810] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 784.257795][T19600] device veth1_macvtap entered promiscuous mode [ 784.268663][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 785.011123][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 785.078988][ T11] device hsr_slave_0 left promiscuous mode [ 785.097833][ T11] device hsr_slave_1 left promiscuous mode [ 785.121769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.159883][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.177282][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.211160][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.237392][ T11] device bridge_slave_1 left promiscuous mode [ 785.253785][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.282225][ T11] device bridge_slave_0 left promiscuous mode [ 785.288433][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.367965][ T11] device veth1_macvtap left promiscuous mode [ 785.390489][ T11] device veth0_macvtap left promiscuous mode [ 785.396625][ T11] device veth1_vlan left promiscuous mode [ 785.416704][ T11] device veth0_vlan left promiscuous mode [ 786.203147][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.468722][ T11] team0 (unregistering): Port device team_slave_1 removed [ 786.517454][ T11] team0 (unregistering): Port device team_slave_0 removed [ 786.677551][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.965457][T19843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.019505][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.837593][ T11] bond0 (unregistering): Released all slaves [ 787.926419][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.937036][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.946991][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.962607][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.972666][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.983653][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.993751][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.004435][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.015975][T19600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.025544][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 788.064087][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 788.151376][T19834] device syzkaller0 entered promiscuous mode [ 788.177712][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.196208][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.219155][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.242064][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.262160][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.279908][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.297659][T19600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.308471][T19600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.321584][T19600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.477104][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 788.504936][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 790.855804][T19600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.865058][T19600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.926283][T19600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.099126][T19600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.336967][T19886] loop1: detected capacity change from 0 to 512 [ 791.551856][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 791.589936][T19886] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000079f) [ 791.641888][T19887] trusted_key: encrypted_key: insufficient parameters specified [ 791.687249][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/1DF0-B7A5.tmp-b7:1' failed: Read-only file system [ 791.723618][T19886] FAT-fs (loop1): Filesystem has been set read-only [ 791.784980][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.822433][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.860104][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.885686][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.919916][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 791.936620][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 791.960161][ T3593] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 792.209900][ T3593] usb 2-1: Using ep0 maxpacket: 16 [ 792.423513][ T3593] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.439624][T19917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.469035][ T3593] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 792.688853][ T3593] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 792.716707][ T3593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.745314][ T3593] usb 2-1: Product: syz [ 792.755524][ T3593] usb 2-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 792.772382][ T3593] usb 2-1: SerialNumber: syz [ 793.170379][T19913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.291265][ T3593] cdc_ncm 2-1:1.0: bind() failure [ 793.306971][ T3593] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 793.326821][ T3593] cdc_ncm 2-1:1.1: bind() failure [ 793.357016][ T3593] usb 2-1: USB disconnect, device number 29 [ 793.529960][ T22] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 793.903619][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 793.933891][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 793.964229][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.986568][ T22] usb 5-1: config 0 descriptor?? [ 794.264558][ T22] ath6kl: Failed to submit usb control message: -71 [ 794.274966][ T22] ath6kl: unable to send the bmi data to the device: -71 [ 794.309925][ T22] ath6kl: Unable to send get target info: -71 [ 794.334406][ T22] ath6kl: Failed to init ath6kl core: -71 [ 794.414246][ T22] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 794.458075][ T22] usb 5-1: USB disconnect, device number 34 [ 795.564467][T19984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.323116][T19980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.481027][T19988] loop1: detected capacity change from 0 to 512 [ 796.553107][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 796.567234][T19988] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000079f) [ 796.586543][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/1DF0-B7A5.tmp-b7:1' failed: Read-only file system [ 796.608003][T19988] FAT-fs (loop1): Filesystem has been set read-only [ 796.645624][T19988] trusted_key: encrypted_key: insufficient parameters specified [ 796.940117][ T3588] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 797.180466][ T3588] usb 2-1: Using ep0 maxpacket: 16 [ 797.380026][ T3588] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.404873][ T3588] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 797.599971][ T3588] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 797.617566][ T3588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.644981][ T3588] usb 2-1: Product: syz [ 797.659151][ T3588] usb 2-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ᤮ [ 797.684966][ T3588] usb 2-1: SerialNumber: syz [ 798.260109][ T3588] cdc_ncm 2-1:1.0: bind() failure [ 798.273748][ T3588] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 798.297666][ T3588] cdc_ncm 2-1:1.1: bind() failure [ 798.328530][ T3588] usb 2-1: USB disconnect, device number 30 [ 798.750671][ T1148] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 799.150303][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 799.180013][ T1148] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 799.219752][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.240523][ T1148] usb 1-1: config 0 descriptor?? [ 799.284078][T20018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.360754][T20018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.510277][ T1148] ath6kl: Failed to submit usb control message: -71 [ 799.519241][ T1148] ath6kl: unable to send the bmi data to the device: -71 [ 799.536659][ T1148] ath6kl: Unable to send get target info: -71 [ 799.562188][ T1148] ath6kl: Failed to init ath6kl core: -71 [ 799.734910][ T1148] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 799.755854][ T1148] usb 1-1: USB disconnect, device number 31 [ 799.837300][T20028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.580207][T20026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.444367][T20044] overlayfs: missing 'workdir' [ 801.791207][T20040] loop4: detected capacity change from 0 to 32768 [ 801.831313][T20040] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5282 (20040) [ 801.979184][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 801.995786][T20040] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 802.752968][T20040] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 802.780370][T20040] BTRFS info (device loop4): using free space tree [ 803.007257][T20040] BTRFS info (device loop4): enabling ssd optimizations [ 803.112065][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 803.202451][T17394] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 803.389868][ T1148] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 803.454629][T20086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.485910][T20086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.820188][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 803.842314][ T1148] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 803.871414][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.911149][ T1148] usb 1-1: config 0 descriptor?? [ 804.189945][ T1148] ath6kl: Failed to submit usb control message: -71 [ 804.197826][ T1148] ath6kl: unable to send the bmi data to the device: -71 [ 804.215980][ T1148] ath6kl: Unable to send get target info: -71 [ 804.238845][ T1148] ath6kl: Failed to init ath6kl core: -71 [ 804.292646][ T1148] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 804.322413][ T1148] usb 1-1: USB disconnect, device number 32 [ 804.585066][T20102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.264382][T20121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5302'. [ 805.342854][T20100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.505355][T20128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5305'. [ 805.910175][ T1148] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 806.103440][T20138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.208997][T20138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.302068][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.336610][ T1148] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 806.369128][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.418187][ T1148] usb 1-1: config 0 descriptor?? [ 806.783896][ T1148] ath6kl: Failed to submit usb control message: -71 [ 806.804692][ T1148] ath6kl: unable to send the bmi data to the device: -71 [ 806.830288][ T1148] ath6kl: Unable to send get target info: -71 [ 807.587219][ T1148] ath6kl: Failed to init ath6kl core: -71 [ 807.694674][ T1148] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 807.722145][ T1148] usb 1-1: USB disconnect, device number 33 [ 807.869168][T20165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.429777][T20158] loop2: detected capacity change from 0 to 32768 [ 808.431591][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.447423][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.531950][T18471] udevd[18471]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 808.636139][T20163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.693481][T18471] udevd[18471]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 809.605119][ T1148] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 810.050264][ T1148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 810.419983][ T1148] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 810.450960][ T1148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.505264][ T1148] usb 2-1: config 0 descriptor?? [ 810.780187][ T1148] ath6kl: Failed to submit usb control message: -71 [ 810.805460][ T1148] ath6kl: unable to send the bmi data to the device: -71 [ 810.869980][ T1148] ath6kl: Unable to send get target info: -71 [ 810.900165][ T1148] ath6kl: Failed to init ath6kl core: -71 [ 810.942533][ T1148] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 810.970102][ T1148] usb 2-1: USB disconnect, device number 31 [ 812.101789][T20205] loop1: detected capacity change from 0 to 32768 [ 812.139748][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 814.789909][ T3594] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 814.969966][ T41] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 815.160107][ T3594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.198255][ T3594] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 815.216730][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.227361][ T3594] usb 2-1: config 0 descriptor?? [ 815.339969][ T41] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 815.359900][ T41] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 815.379890][ T41] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 815.389997][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.420286][T20249] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 815.499942][ T3594] ath6kl: Failed to submit usb control message: -71 [ 815.508884][ T3594] ath6kl: unable to send the bmi data to the device: -71 [ 815.536704][ T3594] ath6kl: Unable to send get target info: -71 [ 815.560613][ T3594] ath6kl: Failed to init ath6kl core: -71 [ 815.762644][ T3594] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 815.784197][ T3594] usb 2-1: USB disconnect, device number 32 [ 816.473357][T12598] usb 4-1: USB disconnect, device number 33 [ 817.575019][T20287] loop4: detected capacity change from 0 to 4096 [ 817.615596][T20287] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 817.620527][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 817.713872][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:4' failed: Read-only file system [ 817.779237][ T26] audit: type=1800 audit(1720011211.000:99): pid=20287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5356" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 819.180542][ T1148] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 820.289954][ T1148] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.339629][ T1148] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 820.382924][ T1148] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.408710][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.450143][T20317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 820.468188][T20335] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.475496][T20335] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.579372][T20335] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.586651][T20335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.594816][T20335] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.601904][T20335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.739651][T20335] team0: Port device bridge0 added [ 820.886447][T20336] device bridge_slave_1 left promiscuous mode [ 820.965790][T20336] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.017944][T20336] device bridge_slave_0 left promiscuous mode [ 821.032676][T20336] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.086521][ T1148] usb 5-1: USB disconnect, device number 35 [ 821.155231][T20336] team0: Port device bridge0 removed [ 821.293764][T20339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5368'. [ 823.154622][T20384] overlayfs: failed to resolve './file0': -2 [ 823.200069][ T1148] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 823.640219][ T1148] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.712870][ T1148] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 823.736865][ T1148] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.750035][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.780366][T20380] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.404927][ T22] usb 5-1: USB disconnect, device number 36 [ 824.714921][T20419] Â: renamed from pim6reg1 [ 826.294966][T20440] loop4: detected capacity change from 0 to 164 [ 826.310931][T20440] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 826.372442][T20440] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 827.036853][T20440] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 827.103041][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system [ 827.104175][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system [ 827.429678][T20450] autofs4:pid:20450:autofs_fill_super: called with bogus options [ 828.324637][T12601] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 828.384892][T20460] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5413'. [ 828.467157][T20463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.522746][T20460] netlink: 'syz.3.5413': attribute type 2 has an invalid length. [ 828.656994][T20460] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5413'. [ 828.678752][T20461] loop3: detected capacity change from 0 to 64 [ 828.705505][T20466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.740134][T12601] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.793956][T12601] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 828.852403][T12601] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.889406][T12601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.940166][T20451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 829.488486][ T3561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 829.498818][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 829.510043][ T3561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 829.518714][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 829.527122][ T3561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 829.536305][ T22] usb 2-1: USB disconnect, device number 33 [ 829.541427][ T3561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.158746][T20470] chnl_net:caif_netlink_parms(): no params data found [ 830.502570][T20470] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.555638][T20470] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.587317][T20470] device bridge_slave_0 entered promiscuous mode [ 830.656587][T20470] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.688561][T20470] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.735979][T20470] device bridge_slave_1 entered promiscuous mode [ 830.860555][T20492] loop3: detected capacity change from 0 to 128 [ 830.950288][T20492] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 830.981582][T20470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.032579][T20470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.255781][T20470] team0: Port device team_slave_0 added [ 831.297382][T20503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.322992][T20470] team0: Port device team_slave_1 added [ 831.377015][T20470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.414493][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.476689][T20470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.497607][T20505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.521301][T20470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.542211][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.633281][ T3558] Bluetooth: hci3: command tx timeout [ 831.646109][T20470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.670030][ T3558] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 832.679163][ T3558] Bluetooth: hci2: Injecting HCI hardware error event [ 832.688601][ T3561] Bluetooth: hci2: hardware error 0x00 [ 832.833132][T20470] device hsr_slave_0 entered promiscuous mode [ 832.961316][T20470] device hsr_slave_1 entered promiscuous mode [ 832.976423][T20470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.002375][T20470] Cannot create hsr debugfs directory [ 833.114817][T20518] loop3: detected capacity change from 0 to 4096 [ 833.148113][T20518] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 833.203855][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 833.305708][ T26] audit: type=1800 audit(1720011226.530:100): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5432" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 833.348290][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system [ 833.399637][T20520] loop4: detected capacity change from 0 to 2048 [ 833.458700][T20520] UDF-fs: bad mount option "umask=00000000000000000000002dmode=00000000000000000077777" or missing value [ 833.545776][T17561] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 833.549615][T20513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.699556][T20524] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5434'. [ 833.710752][ T3558] Bluetooth: hci3: command tx timeout [ 833.824088][T20470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.842313][T20524] netlink: 'syz.3.5434': attribute type 2 has an invalid length. [ 833.853944][T20524] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5434'. [ 833.950806][ T3558] Bluetooth: hci2: unexpected event for opcode 0x040d [ 833.964964][T20524] loop3: detected capacity change from 0 to 64 [ 834.108564][T20470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.269338][T20470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.423488][T20470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.579873][ T3597] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 834.749961][ T3561] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 834.884554][T20533] loop4: detected capacity change from 0 to 256 [ 834.990054][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.019931][ T3597] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 835.062994][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.146912][ T3597] usb 2-1: config 0 descriptor?? [ 835.209038][T20470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 835.232861][T20470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 835.373480][T20470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 835.384362][T20470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 835.440616][ T3597] ath6kl: Failed to submit usb control message: -71 [ 835.455662][ T3597] ath6kl: unable to send the bmi data to the device: -71 [ 835.495097][ T3597] ath6kl: Unable to send get target info: -71 [ 835.526442][ T3597] ath6kl: Failed to init ath6kl core: -71 [ 835.597148][ T3597] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 835.641448][ T3597] usb 2-1: USB disconnect, device number 34 [ 835.769985][T20470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.790274][ T3561] Bluetooth: hci3: command tx timeout [ 835.839542][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 835.866566][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.009409][T20470] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.024806][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 836.039209][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 836.071029][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.078153][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.227197][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 836.257729][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 836.305926][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 836.340358][T12601] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.347477][T12601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.406125][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 836.490731][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.499448][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.541125][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 836.579761][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.623916][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 836.637396][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.646924][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.660198][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 836.739739][T20470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.782032][T20470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.812432][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.829605][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.089073][T20559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.202796][T16580] device hsr_slave_0 left promiscuous mode [ 837.246554][T16580] device hsr_slave_1 left promiscuous mode [ 837.378112][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.442102][T16580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.533065][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.713947][T16580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.745824][T16580] device bridge_slave_1 left promiscuous mode [ 837.756934][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.771456][T16580] device bridge_slave_0 left promiscuous mode [ 837.788798][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.868063][T16580] device veth1_macvtap left promiscuous mode [ 837.870554][ T3561] Bluetooth: hci3: command tx timeout [ 837.889940][T16580] device veth0_macvtap left promiscuous mode [ 837.916348][T16580] device veth1_vlan left promiscuous mode [ 837.931558][T16580] device veth0_vlan left promiscuous mode [ 839.960126][T16580] team0 (unregistering): Port device team_slave_1 removed [ 840.039234][T16580] team0 (unregistering): Port device team_slave_0 removed [ 840.109720][T16580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.540625][T16580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.816940][T20670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.283495][ T3558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 841.293922][ T3558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 841.301871][ T3558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 841.317014][ T3558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 841.334615][ T3558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 841.347382][ T3558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 841.476880][T16580] bond0 (unregistering): Released all slaves [ 841.941912][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 841.972792][T20687] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.5463'. [ 841.975293][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 842.000027][T20687] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.5463'. [ 842.024616][T20470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.071393][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5463'. [ 842.189092][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 842.198748][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 842.269453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 842.309635][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 842.339099][T20699] Bluetooth: MGMT ver 1.22 [ 842.359466][T20470] device veth0_vlan entered promiscuous mode [ 842.374793][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 842.386322][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 842.442692][T20675] chnl_net:caif_netlink_parms(): no params data found [ 842.483354][T20470] device veth1_vlan entered promiscuous mode [ 842.612737][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 842.634247][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 842.723857][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 842.733766][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.767029][T20675] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.776799][T20675] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.785283][T20675] device bridge_slave_0 entered promiscuous mode [ 842.799683][T20675] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.807953][T20675] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.817139][T20675] device bridge_slave_1 entered promiscuous mode [ 842.864197][T20470] device veth0_macvtap entered promiscuous mode [ 842.886320][T20675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.916013][T20675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.944332][T20470] device veth1_macvtap entered promiscuous mode [ 843.024646][T20675] team0: Port device team_slave_0 added [ 843.051764][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.079892][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.090213][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.101129][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.112865][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.124182][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.134578][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.153366][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.199394][T20470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.230842][T20675] team0: Port device team_slave_1 added [ 843.237425][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 843.259202][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 843.390077][ T3558] Bluetooth: hci4: command tx timeout [ 843.605674][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 843.723651][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 843.759203][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.794152][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.820206][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.874556][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.905278][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.939070][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.987949][T20470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.026244][T20470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.068281][T20470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.134133][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.146495][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.180447][T20470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.201373][T20470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.232487][T20470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.257380][T20470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.308420][T20675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.325196][T20719] loop1: detected capacity change from 0 to 4096 [ 844.335410][T20675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.384281][T20719] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 844.444265][T20675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.444399][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 844.472341][T20711] loop3: detected capacity change from 0 to 32768 [ 844.502387][T20711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5470 (20711) [ 844.566779][T20675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.576673][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:1' failed: Read-only file system [ 844.601256][T17561] udevd[17561]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 844.606927][T20675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.642158][T20711] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 844.670469][T20711] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 844.679186][T20711] BTRFS info (device loop3): using free space tree [ 844.758137][T20675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.015149][T20675] device hsr_slave_0 entered promiscuous mode [ 845.032895][T20598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.071113][T20675] device hsr_slave_1 entered promiscuous mode [ 845.073849][T20598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.088170][T20711] BTRFS info (device loop3): enabling ssd optimizations [ 845.110346][T20675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.135665][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 845.190654][T20675] Cannot create hsr debugfs directory [ 845.223239][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 845.241401][T20743] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.5476'. [ 845.257963][T20598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.294713][T20743] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.5476'. [ 845.306098][T20598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.355010][T18892] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 845.390971][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5476'. [ 845.403658][T12601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 845.471737][ T3558] Bluetooth: hci4: command tx timeout [ 845.976241][T20675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.172356][T20675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.323642][T20675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.470387][T20675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.934025][T20675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 847.002585][T20675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 847.032322][T20675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 847.069419][T20675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 847.234549][T20766] loop3: detected capacity change from 0 to 4096 [ 847.275265][T20766] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 847.295682][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 847.329565][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system [ 847.508817][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 847.531173][T20769] autofs4:pid:20769:autofs_fill_super: called with bogus options [ 847.549936][ T3558] Bluetooth: hci4: command tx timeout [ 847.561080][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system [ 847.602295][T20675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.725857][T20675] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.801949][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 847.810872][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 847.896296][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 847.970137][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 848.019274][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.026446][ T5625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.160737][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 848.169754][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 848.199034][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 848.230865][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.238004][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.276640][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 848.300730][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 848.350139][ T3561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 848.361935][ T3561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 848.369627][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 848.377238][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 848.384502][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 848.536932][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 848.549395][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 848.592071][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 848.672951][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 848.681368][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 848.692638][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 848.702114][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 848.711724][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 848.720554][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 848.729080][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 848.738940][T20675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 849.166538][T20774] chnl_net:caif_netlink_parms(): no params data found [ 849.630383][ T3558] Bluetooth: hci4: command tx timeout [ 849.652354][T16580] device hsr_slave_0 left promiscuous mode [ 849.664613][T16580] device hsr_slave_1 left promiscuous mode [ 849.681692][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.693734][T16580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.702981][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.711356][T16580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.725803][T16580] device bridge_slave_1 left promiscuous mode [ 849.737654][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.755407][T16580] device bridge_slave_0 left promiscuous mode [ 849.770617][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.835504][T16580] device veth1_macvtap left promiscuous mode [ 849.849353][T16580] device veth0_macvtap left promiscuous mode [ 849.875980][T16580] device veth1_vlan left promiscuous mode [ 849.902290][T16580] device veth0_vlan left promiscuous mode [ 850.369048][T20804] loop3: detected capacity change from 0 to 4096 [ 850.401014][T20804] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 850.436317][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 850.447842][ T3561] Bluetooth: hci0: command tx timeout [ 850.471965][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system [ 850.558427][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 850.698203][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system [ 850.918000][T12597] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 851.171284][T16580] team0 (unregistering): Port device team_slave_1 removed [ 851.240424][T16580] team0 (unregistering): Port device team_slave_0 removed [ 851.319885][T16580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.340062][T12597] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 851.359933][T12597] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 851.370258][T12597] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 851.380189][T12597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.409299][T16580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.420403][T20807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 851.936042][T16580] bond0 (unregistering): Released all slaves [ 852.019490][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.026717][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.035599][T20774] device bridge_slave_0 entered promiscuous mode [ 852.059176][ T3631] usb 4-1: USB disconnect, device number 34 [ 852.068060][T20675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.116198][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.131636][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.149340][T20774] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.157002][T20774] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.179046][T20774] device bridge_slave_1 entered promiscuous mode [ 852.239448][T20774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.313789][T20774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.392495][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.411497][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.510017][ T3561] Bluetooth: hci0: command tx timeout [ 852.534682][T20774] team0: Port device team_slave_0 added [ 852.548113][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.567439][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.664124][T20675] device veth0_vlan entered promiscuous mode [ 852.682679][T20774] team0: Port device team_slave_1 added [ 852.777280][T20774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.801926][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.861544][T20774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.873253][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.881842][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.904839][T20774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.912913][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.940025][T20774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.955916][T20675] device veth1_vlan entered promiscuous mode [ 853.052756][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 853.077471][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 853.127490][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.172292][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.209312][T20675] device veth0_macvtap entered promiscuous mode [ 853.249509][T20774] device hsr_slave_0 entered promiscuous mode [ 853.280878][T20774] device hsr_slave_1 entered promiscuous mode [ 853.304129][T20774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.323920][T20774] Cannot create hsr debugfs directory [ 853.409574][T20675] device veth1_macvtap entered promiscuous mode [ 853.534009][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.578965][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.621605][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.647300][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.669866][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.690541][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.710630][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.773363][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.811370][T20675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.836298][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.862917][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.902145][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.970088][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.005442][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.039078][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.088503][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.106459][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.129706][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.149496][T20675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.178718][T20675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.201238][T20675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.259912][ T3594] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 854.298231][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 854.318624][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.345325][T20675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.368852][T20675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.394592][T20675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.419729][T20675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.589974][ T3561] Bluetooth: hci0: command tx timeout [ 854.630211][ T3594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 854.654509][ T3594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 854.679955][ T3594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 854.699281][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.716159][T20774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.740178][T20855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 854.819447][ T3955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.841750][ T3955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.916048][T20774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.971235][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 855.035098][T15780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.055689][T15780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.115401][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 855.213725][T20774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.358391][T20774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.629139][T20774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 855.652236][T20774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 855.672439][T20774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 855.696431][T20774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 855.939574][T20774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.987044][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 856.000937][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.031149][T20774] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.048765][T20907] device syzkaller1 entered promiscuous mode [ 856.057945][T20907] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 856.194128][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 856.211449][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 856.237929][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.245110][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.307717][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 856.317139][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 856.344960][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 856.354560][T12597] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.361712][T12597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.407553][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 856.427739][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 856.461918][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 856.478934][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 856.501862][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 856.518178][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 856.572888][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 856.607544][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 856.629109][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 856.632992][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 856.670262][ T3561] Bluetooth: hci0: command tx timeout [ 856.694635][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 856.714782][T18606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 856.723605][T18606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 856.734282][T20774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 857.119530][ T22] usb 4-1: USB disconnect, device number 35 [ 857.278594][T20950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.327197][T20950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.510966][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 857.518416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 857.558570][T20774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.589990][T16580] device hsr_slave_0 left promiscuous mode [ 857.604270][T16580] device hsr_slave_1 left promiscuous mode [ 857.614208][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.647403][T16580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.664812][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.672889][T16580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.681047][T16580] device bridge_slave_1 left promiscuous mode [ 857.687380][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.696394][T16580] device bridge_slave_0 left promiscuous mode [ 857.709060][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.758665][T16580] device veth1_macvtap left promiscuous mode [ 857.773792][T16580] device veth0_macvtap left promiscuous mode [ 857.785215][T16580] device veth1_vlan left promiscuous mode [ 857.794125][T16580] device veth0_vlan left promiscuous mode [ 858.424001][ T14] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 858.733357][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.841752][T20990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.850056][ T14] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 858.872534][ T14] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 858.883235][T16580] team0 (unregistering): Port device team_slave_1 removed [ 858.895684][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 858.905093][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.950427][T20970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 858.957658][T12594] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 858.974866][T16580] team0 (unregistering): Port device team_slave_0 removed [ 859.025731][T16580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.118929][T16580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.361923][T12594] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 859.373807][T12594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.482106][T12594] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 859.491394][T12594] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 859.499459][T12594] usb 1-1: Manufacturer: syz [ 859.507581][T12594] usb 1-1: config 0 descriptor?? [ 859.624987][T16580] bond0 (unregistering): Released all slaves [ 859.721289][T12594] rc_core: IR keymap rc-hauppauge not found [ 859.738596][T12594] Registered IR keymap rc-empty [ 859.746308][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 859.756856][T12594] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 859.779104][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 859.786165][T12594] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 859.801062][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 859.810150][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 859.836629][T20774] device veth0_vlan entered promiscuous mode [ 859.857367][T12594] usb 1-1: USB disconnect, device number 34 [ 859.868163][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 859.876908][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 859.913400][T20774] device veth1_vlan entered promiscuous mode [ 859.942078][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 859.950962][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 859.959013][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 859.969051][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 859.979900][T20774] device veth0_macvtap entered promiscuous mode [ 860.001811][T20774] device veth1_macvtap entered promiscuous mode [ 860.032219][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.042800][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.054349][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.065778][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.075964][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.087115][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.098982][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.117241][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.139280][T20774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.147717][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 860.162652][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 860.185994][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 860.226284][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 860.265643][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.305092][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.351001][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.383898][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.424086][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.450988][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.504144][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.542410][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.575315][T20774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.612376][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 860.640748][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 860.653171][T20774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.664242][T20774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.690784][T20774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.699527][T20774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.848696][T20598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.875442][T20598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.916983][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 860.941791][T16439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.956739][T16439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.979425][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 861.337152][ T3594] usb 4-1: USB disconnect, device number 36 [ 861.499252][T21062] netlink: 'syz.4.5588': attribute type 10 has an invalid length. [ 861.534988][T21062] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.542493][T21062] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.619326][T21062] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.626513][T21062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.633977][T21062] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.641122][T21062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.695814][T21062] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 861.723255][ T3588] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 861.929906][ T3588] usb 1-1: device descriptor read/64, error -71 [ 862.199872][ T3588] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 862.202791][ T14] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 862.389908][ T3588] usb 1-1: device descriptor read/64, error -71 [ 862.482703][T21086] device syzkaller0 entered promiscuous mode [ 862.510132][ T3588] usb usb1-port1: attempt power cycle [ 862.542116][T21092] netlink: 'syz.4.5599': attribute type 1 has an invalid length. [ 862.630107][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 862.649993][ T14] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 862.679435][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 862.719290][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.781232][T21078] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 862.919899][ T3588] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 863.032520][ T3588] usb 1-1: device descriptor read/8, error -71 [ 863.335043][ T3588] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 863.430137][ T3588] usb 1-1: device descriptor read/8, error -71 [ 863.550389][ T3588] usb usb1-port1: unable to enumerate USB device [ 864.784522][T21093] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 864.796154][T21093] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 864.807133][T20598] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 864.807726][T21092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.842682][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 864.950449][T15780] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 865.111228][T12597] usb 2-1: USB disconnect, device number 35 [ 865.393652][T21132] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.400952][T21132] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.922336][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5616'. [ 865.950309][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5616'. [ 866.130225][ T14] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 866.359884][ T14] usb 2-1: device descriptor read/64, error -71 [ 866.496093][T21153] loop3: detected capacity change from 0 to 8192 [ 866.540681][T21153] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 866.562502][T21153] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 866.593324][T21153] loop3: p2 p3 p4 [ 866.599438][T21153] loop3: partition table partially beyond EOD, truncated [ 866.629431][T21153] loop3: p2 start 452985600 is beyond EOD, truncated [ 866.637051][ T14] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 866.680518][T21153] loop3: p3 size 33554432 extends beyond EOD, truncated [ 866.712202][T21153] loop3: p4 start 8388607 is beyond EOD, truncated [ 866.800682][T18471] udevd[18471]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 866.849848][ T14] usb 2-1: device descriptor read/64, error -71 [ 866.981241][ T14] usb usb2-port1: attempt power cycle [ 866.989154][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5627'. [ 867.008940][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5627'. [ 867.179196][T21184] loop3: detected capacity change from 0 to 2048 [ 867.207706][T21184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.237032][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 867.266230][T18471] udevd[18471]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 867.385147][T21188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.399875][ T14] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 867.415323][T21188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.525009][ T14] usb 2-1: device descriptor read/8, error -71 [ 867.819864][ T14] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 867.930095][ T14] usb 2-1: device descriptor read/8, error -71 [ 868.049954][ T14] usb usb2-port1: unable to enumerate USB device [ 868.658791][T21210] netlink: 'syz.0.5638': attribute type 1 has an invalid length. [ 868.758686][T21212] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 868.791957][T21212] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 868.809530][T21210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.809622][T16580] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 868.829880][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 868.946792][T21217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5640'. [ 868.984184][T21217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5640'. [ 869.049972][T20598] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 869.469824][T21234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.548083][T21234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.618758][T21237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.864327][T21244] overlayfs: filesystem on '/' not supported [ 869.881532][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.887831][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.149873][ T14] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 870.281478][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 870.300693][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 870.380002][ T14] usb 3-1: device descriptor read/64, error -71 [ 870.659927][ T14] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 870.869836][ T14] usb 3-1: device descriptor read/64, error -71 [ 870.990870][ T14] usb usb3-port1: attempt power cycle [ 871.419928][ T14] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 871.530013][ T14] usb 3-1: device descriptor read/8, error -71 [ 871.693171][T21274] loop4: detected capacity change from 0 to 4096 [ 871.704675][T21274] NILFS (loop4): invalid segment: Checksum error in segment payload [ 871.712896][T21274] NILFS (loop4): trying rollback from an earlier position [ 871.720282][T21274] NILFS (loop4): invalid segment: Checksum error in segment payload [ 871.728255][T21274] NILFS (loop4): error -22 while searching super root [ 871.782298][T18471] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 871.802173][ T14] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 871.802469][T21274] loop4: detected capacity change from 0 to 64 [ 871.895548][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 871.952389][ T14] usb 3-1: device descriptor read/8, error -71 [ 872.086854][ T14] usb usb3-port1: unable to enumerate USB device [ 872.638707][T21280] overlayfs: filesystem on '/' not supported [ 872.908282][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5665'. [ 872.929744][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5665'. [ 873.998327][T21292] loop1: detected capacity change from 0 to 32768 [ 874.078204][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 874.281011][T21305] overlayfs: filesystem on '/' not supported [ 874.419267][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 874.428617][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 875.179633][T21324] tty tty23: ldisc open failed (-12), clearing slot 22 [ 876.012228][T21329] loop1: detected capacity change from 0 to 32768 [ 876.048673][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system [ 876.095649][T21329] XFS (loop1): Mounting V5 Filesystem [ 876.096338][T21331] loop4: detected capacity change from 0 to 32768 [ 876.139061][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 876.181258][T18471] udevd[18471]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 876.214145][T21329] XFS (loop1): Ending clean mount [ 876.222300][T21329] XFS (loop1): Quotacheck needed: Please wait. [ 876.254724][T21329] XFS (loop1): Quotacheck: Done. [ 876.269343][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system [ 876.314240][T20774] XFS (loop1): Unmounting Filesystem [ 876.553233][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5687'. [ 876.562347][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5687'. [ 876.659619][T21347] overlayfs: filesystem on '/' not supported [ 876.850082][T21345] loop1: detected capacity change from 0 to 40427 [ 876.857569][T21345] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 876.865930][T21345] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 876.878100][T21345] F2FS-fs (loop1): invalid crc value [ 876.883400][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 876.903403][T21345] F2FS-fs (loop1): Found nat_bits in checkpoint [ 876.939494][T21345] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 876.946825][T21345] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 876.968064][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 877.153371][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 877.228417][ T26] audit: type=1800 audit(1720011270.450:101): pid=21345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5688" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 879.329194][T21367] loop1: detected capacity change from 0 to 2048 [ 879.349102][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 879.352369][T21367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 879.388070][T18471] udevd[18471]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 879.399796][ T26] audit: type=1804 audit(1720011272.610:102): pid=21367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5695" name="/newroot/33/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 880.207628][T20774] EXT4-fs (loop1): unmounting filesystem. [ 880.304597][T21374] ------------[ cut here ]------------ [ 880.310120][T21374] Please remove unsupported % in format string [ 880.317132][T21374] WARNING: CPU: 0 PID: 21374 at lib/vsprintf.c:2661 format_decode+0x12d2/0x1f10 [ 880.326382][T21374] Modules linked in: [ 880.330326][T21374] CPU: 0 PID: 21374 Comm: syz.1.5696 Not tainted 6.1.96-syzkaller #0 [ 880.338407][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 880.348520][T21374] RIP: 0010:format_decode+0x12d2/0x1f10 [ 880.354198][T21374] Code: da 03 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 e0 e7 07 8c e8 de 09 cd f6 <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 880.373859][T21374] RSP: 0018:ffffc9000351f680 EFLAGS: 00010246 [ 880.380099][T21374] RAX: 8a002f15c4fb6d00 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 880.388085][T21374] RDX: ffffc90003e21000 RSI: 0000000000003e62 RDI: 0000000000003e63 [ 880.396666][T21374] RBP: ffffc9000351f770 R08: ffffffff8152936e R09: ffffed1017304f1c SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 880.404686][T21374] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 880.412702][T21374] R13: ffff0000ffffff00 R14: ffffc9000351f9ac R15: 1ffff920006a3f35 [ 880.420726][T21374] FS: 00007f3d7fd7f6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 880.429677][T21374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.436302][T21374] CR2: 00007f3d7f104030 CR3: 0000000069c6d000 CR4: 00000000003506f0 [ 880.444319][T21374] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 880.452348][T21374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 880.460364][T21374] Call Trace: [ 880.463654][T21374] [ 880.466591][T21374] ? __warn+0x15a/0x520 [ 880.470791][T21374] ? format_decode+0x12d2/0x1f10 [ 880.475753][T21374] ? report_bug+0x2af/0x500 [ 880.480297][T21374] ? format_decode+0x12d2/0x1f10 [ 880.485258][T21374] ? handle_bug+0x3d/0x70 [ 880.489604][T21374] ? exc_invalid_op+0x16/0x40 [ 880.494329][T21374] ? asm_exc_invalid_op+0x16/0x20 [ 880.499390][T21374] ? __warn_printk+0x28e/0x350 [ 880.504220][T21374] ? format_decode+0x12d2/0x1f10 [ 880.509187][T21374] ? vsnprintf+0x1c70/0x1c70 [ 880.513840][T21374] ? bstr_printf+0x1b6/0x10c0 [ 880.518535][T21374] bstr_printf+0x130/0x10c0 [ 880.523100][T21374] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 880.528245][T21374] ? vbin_printf+0x1bc0/0x1bc0 [ 880.533059][T21374] ? print_irqtrace_events+0x210/0x210 [ 880.538547][T21374] ? bpf_trace_printk+0x111/0x220 [ 880.543646][T21374] bpf_trace_printk+0x19d/0x220 [ 880.548524][T21374] ? ktime_get+0x1ac/0x270 [ 880.552996][T21374] ? bpf_probe_write_user+0xd0/0xd0 [ 880.558215][T21374] ? ktime_get+0x1ac/0x270 [ 880.562688][T21374] ? ktime_get+0x242/0x270 [ 880.567123][T21374] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 880.572632][T21374] bpf_test_run+0x40f/0x8b0 [ 880.577171][T21374] ? convert___skb_to_skb+0x610/0x610 [ 880.582588][T21374] ? eth_type_trans+0x3cd/0x7a0 [ 880.587470][T21374] ? eth_get_headlen+0x240/0x240 [ 880.592457][T21374] ? convert___skb_to_skb+0x41/0x610 [ 880.597757][T21374] ? build_skb+0x112/0x250 [ 880.602229][T21374] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 880.607636][T21374] ? cpu_online+0xb0/0xb0 [ 880.612032][T21374] ? cpu_online+0xb0/0xb0 [ 880.616377][T21374] bpf_prog_test_run+0x32f/0x3a0 [ 880.621381][T21374] __sys_bpf+0x3eb/0x6c0 [ 880.625647][T21374] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 880.631115][T21374] ? print_irqtrace_events+0x210/0x210 [ 880.636601][T21374] ? print_irqtrace_events+0x210/0x210 [ 880.642117][T21374] ? syscall_enter_from_user_mode+0x2e/0x230 [ 880.648115][T21374] ? lockdep_hardirqs_on+0x94/0x130 [ 880.653376][T21374] __x64_sys_bpf+0x78/0x90 [ 880.657816][T21374] do_syscall_64+0x3b/0xb0 [ 880.662298][T21374] ? clear_bhb_loop+0x45/0xa0 [ 880.666998][T21374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.672960][T21374] RIP: 0033:0x7f3d7ef75b99 [ 880.677387][T21374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.697052][T21374] RSP: 002b:00007f3d7fd7f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.705526][T21374] RAX: ffffffffffffffda RBX: 00007f3d7f103f60 RCX: 00007f3d7ef75b99 [ 880.713560][T21374] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 880.721565][T21374] RBP: 00007f3d7efe4a7a R08: 0000000000000000 R09: 0000000000000000 [ 880.729547][T21374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.737604][T21374] R13: 000000000000000b R14: 00007f3d7f103f60 R15: 00007fff9631e798 [ 880.745646][T21374] [ 880.748675][T21374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 880.755958][T21374] CPU: 0 PID: 21374 Comm: syz.1.5696 Not tainted 6.1.96-syzkaller #0 [ 880.764033][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 880.774093][T21374] Call Trace: [ 880.777370][T21374] [ 880.780312][T21374] dump_stack_lvl+0x1e3/0x2cb [ 880.785009][T21374] ? nf_tcp_handle_invalid+0x642/0x642 [ 880.790491][T21374] ? panic+0x764/0x764 [ 880.794569][T21374] ? 0xffffffffa0001ad8 [ 880.798731][T21374] ? vscnprintf+0x59/0x80 [ 880.803069][T21374] panic+0x318/0x764 [ 880.806970][T21374] ? __warn+0x169/0x520 [ 880.811138][T21374] ? memcpy_page_flushcache+0xfc/0xfc [ 880.816533][T21374] __warn+0x348/0x520 [ 880.820522][T21374] ? format_decode+0x12d2/0x1f10 [ 880.825468][T21374] report_bug+0x2af/0x500 [ 880.829802][T21374] ? format_decode+0x12d2/0x1f10 [ 880.834746][T21374] handle_bug+0x3d/0x70 [ 880.838891][T21374] exc_invalid_op+0x16/0x40 [ 880.843378][T21374] asm_exc_invalid_op+0x16/0x20 [ 880.848254][T21374] RIP: 0010:format_decode+0x12d2/0x1f10 [ 880.853790][T21374] Code: da 03 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 e0 e7 07 8c e8 de 09 cd f6 <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 880.873391][T21374] RSP: 0018:ffffc9000351f680 EFLAGS: 00010246 [ 880.879448][T21374] RAX: 8a002f15c4fb6d00 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 880.887406][T21374] RDX: ffffc90003e21000 RSI: 0000000000003e62 RDI: 0000000000003e63 [ 880.895364][T21374] RBP: ffffc9000351f770 R08: ffffffff8152936e R09: ffffed1017304f1c [ 880.903324][T21374] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 880.911286][T21374] R13: ffff0000ffffff00 R14: ffffc9000351f9ac R15: 1ffff920006a3f35 [ 880.919251][T21374] ? __warn_printk+0x28e/0x350 [ 880.924023][T21374] ? vsnprintf+0x1c70/0x1c70 [ 880.928605][T21374] ? bstr_printf+0x1b6/0x10c0 [ 880.933274][T21374] bstr_printf+0x130/0x10c0 [ 880.937770][T21374] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 880.942875][T21374] ? vbin_printf+0x1bc0/0x1bc0 [ 880.947628][T21374] ? print_irqtrace_events+0x210/0x210 [ 880.953085][T21374] ? bpf_trace_printk+0x111/0x220 [ 880.958104][T21374] bpf_trace_printk+0x19d/0x220 [ 880.962950][T21374] ? ktime_get+0x1ac/0x270 [ 880.967354][T21374] ? bpf_probe_write_user+0xd0/0xd0 [ 880.972545][T21374] ? ktime_get+0x1ac/0x270 [ 880.976960][T21374] ? ktime_get+0x242/0x270 [ 880.981368][T21374] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 880.986815][T21374] bpf_test_run+0x40f/0x8b0 [ 880.991323][T21374] ? convert___skb_to_skb+0x610/0x610 [ 880.996686][T21374] ? eth_type_trans+0x3cd/0x7a0 [ 881.001534][T21374] ? eth_get_headlen+0x240/0x240 [ 881.006461][T21374] ? convert___skb_to_skb+0x41/0x610 [ 881.011732][T21374] ? build_skb+0x112/0x250 [ 881.016141][T21374] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 881.021518][T21374] ? cpu_online+0xb0/0xb0 [ 881.025840][T21374] ? cpu_online+0xb0/0xb0 [ 881.030157][T21374] bpf_prog_test_run+0x32f/0x3a0 [ 881.035089][T21374] __sys_bpf+0x3eb/0x6c0 [ 881.039324][T21374] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 881.044699][T21374] ? print_irqtrace_events+0x210/0x210 [ 881.050151][T21374] ? print_irqtrace_events+0x210/0x210 [ 881.055603][T21374] ? syscall_enter_from_user_mode+0x2e/0x230 [ 881.061571][T21374] ? lockdep_hardirqs_on+0x94/0x130 [ 881.066760][T21374] __x64_sys_bpf+0x78/0x90 [ 881.071169][T21374] do_syscall_64+0x3b/0xb0 [ 881.075578][T21374] ? clear_bhb_loop+0x45/0xa0 [ 881.080246][T21374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.086130][T21374] RIP: 0033:0x7f3d7ef75b99 [ 881.090536][T21374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.110136][T21374] RSP: 002b:00007f3d7fd7f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.118538][T21374] RAX: ffffffffffffffda RBX: 00007f3d7f103f60 RCX: 00007f3d7ef75b99 [ 881.126493][T21374] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 881.134451][T21374] RBP: 00007f3d7efe4a7a R08: 0000000000000000 R09: 0000000000000000 [ 881.142408][T21374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.150362][T21374] R13: 000000000000000b R14: 00007f3d7f103f60 R15: 00007fff9631e798 [ 881.158328][T21374] [ 881.161544][T21374] Kernel Offset: disabled [ 881.165854][T21374] Rebooting in 86400 seconds..